CVE-2026-54112

CVE-2026-54112 affects Windows Win32K. The issue is a race condition caused by concurrent execution on a shared resource due to improper synchronization, enabling a locally authenticated user to elevate privileges. The base score is 7.8 (HIGH) with LOCAL attack vector, requiring LOW privileges an...

CVE-2026-55000

Use after free in Windows USB Print Driver allows an unauthorized attacker to elevate privileges with a physical attack...

CVE-2026-55000 Windows USB Print Driver Elevation of Privilege Vulnerability

...

CVE-2026-50697

The CVE-2026-50697 entry concerns a vulnerability in the Windows Common Log File System Driver that could allow an attacker with local access to elevate privileges. The issue is described as exposure of sensitive information to an unauthorized actor, enabling local privilege escalation. Public de...

CVE-2026-54987 Windows Overlay Filter Elevation of Privilege Vulnerability

...

CVE-2026-54987

CVE-2026-54987 is a Windows vulnerability described as a heap-based buffer overflow in the Windows Overlay Filter, enabling a locally authenticated attacker to elevate privileges. The CVSSv3.1 score is 7.8 (HIGH) with local attack vector, low attack complexity, and requires low privileges with no...

CVE-2026-54129

Technical details (affected product/version, root cause, exploit vector, and remediation) are not provided in the supplied documents. Monitor for updates.

CVE-2026-49166

CVE-2026-49166: Use-after-free in Microsoft Printer Drivers allows an authorized attacker to elevate privileges locally. Affected component is Microsoft Printer Drivers; root cause is a use-after-free condition. Exploitation status is not detailed in the provided documents. Base CVSS v3.1 score i...

CVE-2026-49162

CVE-2026-49162 is a use-after-free in Microsoft Brokering File System leading to local privilege escalation for an authenticated user; CVSSv3.1 indicates high impact (C/H, I/H, A/H) with local exploit required and low privileges. Public details in the connected documents do not specify affected p...

CVE-2026-42982

CVE-2026-42982 affects Windows Secure Kernel Mode. The issue is improper validation of input consistency within that subsystem, enabling an authorized user to escalate privileges locally. The vulnerability is described as a local, user‑level privilege escalation with high impact (confidentiality,...

Windows NTFS Elevation of Privilege Vulnerability

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally...

Windows Bluetooth Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally...

Windows Hyper-V Elevation of Privilege Vulnerability

Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally...

Windows USB Print Driver Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows USB Print Driver allows an authorized attacker to elevate privileges locally...

Azure Spring Apps Elevation of Privilege Vulnerability

Improper authentication in Azure Spring Apps allows an authorized attacker to elevate privileges over a network...

Windows Overlay Filter Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges locally...

Windows Network Connections Service Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Wireless Wide Area Network Service allows an authorized attacker to elevate privileges locally...

NTFS Elevation of Privilege Vulnerability

Incorrect conversion between numeric types in Windows NTFS allows an authorized attacker to elevate privileges locally...

Windows Connected User Experiences and Telemetry Elevation of Privilege Vulnerability

Access of resource using incompatible type 'type confusion' in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally...

Windows Runtime Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Runtime allows an authorized attacker to elevate privileges locally...