144060 matches found
CVE-2026-50655
CVE-2026-50655 is a Windows Media/Media Foundation heap-based buffer overflow that allows local code execution by a non-privileged attacker with user interaction. It has concrete details in multiple connected sources: exploitation status on CIRCL (exploited in the wild), and Microsoft/MSRC entrie...
CVE-2026-47295 Microsoft SQL Server Elevation of Privilege Vulnerability
...
CVE-2026-47295
CVE-2026-47295 describes an elevation-of-privilege vulnerability in Microsoft SQL Server caused by improper neutralization of special elements used in SQL commands (SQL injection). The issue can be exploited by an authenticated attacker over a network to gain elevated privileges, with impact on c...
CVE-2026-50458 Microsoft Brokering File System Elevation of Privilege Vulnerability
...
CVE-2026-50458
CVE-2026-50458 is a use-after-free vulnerability in Microsoft Brokering File System that allows an authorized local attacker to elevate privileges. Exploitation details are not provided in the public text, but the NVD/CIRCL/ENISA references confirm local privilege escalation with a CVSS v3.1 base...
CVE-2026-50458 Microsoft Brokering File System Elevation of Privilege Vulnerability
...
CVE-2026-50438 Microsoft PC Manager Elevation of Privilege Vulnerability
...
CVE-2026-50438 Microsoft PC Manager Elevation of Privilege Vulnerability
...
CVE-2026-50438
CVE-2026-50438 describes an elevation-of-privilege vulnerability in Microsoft PC Manager caused by improper link resolution before file access (link following). Reports from NVD, EUVD, CIRCL, MSRC, and CVE lists confirm the issue affects Microsoft PC Manager and enables an authorized local attack...
CVE-2026-50439 Microsoft Message Queuing Queue Manager Remote Code Execution Vulnerability
...
CVE-2026-50439
CVE-2026-50439 affects Microsoft Message Queuing Queue Manager. Description and connected records confirm a use-after-free vulnerability that allows an unauthenticated attacker to execute code remotely over a network. Impact is described as remote code execution with high-severity CVSS in public ...
CVE-2026-50439 Microsoft Message Queuing Queue Manager Remote Code Execution Vulnerability
...
CVE-2026-50466 Microsoft Brokering File System Elevation of Privilege Vulnerability
...
CVE-2026-50466 Microsoft Brokering File System Elevation of Privilege Vulnerability
...
CVE-2026-50466
CVE-2026-50466 is a local privilege escalation in the Windows Brokering File System caused by a use-after-free in the Windows Brokering File System component. Public documentation confirms that an authorized attacker could elevate privileges locally (CVSSv3.1 base score 7.8, LOCAL attack vector, ...
CVE-2026-50361 Microsoft Brokering File System Elevation of Privilege Vulnerability
...
CVE-2026-50361 Microsoft Brokering File System Elevation of Privilege Vulnerability
...
CVE-2026-50361
CVE-2026-50361 describes a double free in Microsoft Brokering File System leading to local privilege elevation for an authenticated attacker. The vulnerability affects the Brokering File System component and is triggered via improper memory management that can allow an attacker with local access ...