6533 matches found
Arc Enabled Servers - Azure Connected Machine Agent Elevation of Privilege Vulnerability
Authentication bypass using an alternate path or channel in Azure Windows Virtual Machine Agent allows an authorized attacker to elevate privileges locally...
Windows Graphics Component Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...
PT-2026-24290
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Device Association Service allows an authorized attacker to elevate privileges locally...
CVE-2026-24289: Use After Free
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...
CVE-2026-24285: Use After Free
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally...
CVE-2026-25188: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to elevate privileges over an adjacent network...
CVE-2026-25165: NULL Pointer Dereference
Null pointer dereference in Windows Performance Counters allows an authorized attacker to elevate privileges locally...
PT-2026-24272
Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description A race condition exists in the Microsoft Graphics Component due to improper synchronization when handling concurrent execution with shared resources. This allows a local attacker to...
CVE-2026-26148: External Initialization of Trusted Variables or Data Stores
External initialization of trusted variables or data stores in Azure Entra ID allows an unauthorized attacker to elevate privileges locally...
CVE-2026-25187: Improper Link Resolution Before File Access
Improper link resolution before file access 'link following' in Winlogon allows an authorized attacker to elevate privileges locally...
CVE-2026-24291: Incorrect Permission Assignment for Critical Resource
Incorrect permission assignment for critical resource in Windows Accessibility Infrastructure ATBroker.exe allows an authorized attacker to elevate privileges locally...
CVE-2026-24283: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows File Server allows an authorized attacker to elevate privileges locally...
KB5079466: Windows 11 Version 26H1 Security Update (March 2026)
The remote Windows host is missing security update 5079466. It is, therefore, affected by multiple vulnerabilities - Use after free in Broadcast DVR allows an authorized attacker to elevate privileges locally. CVE-2026-23667 - Use after free in Windows Print Spooler Components allows an authorize...
CVE-2026-26116: Improper Neutralization of Special Elements used in an SQL Command
Improper neutralization of special elements used in an sql command 'sql injection' in SQL Server allows an authorized attacker to elevate privileges over a network...
PT-2026-24288
Name of the Vulnerable Software and Affected Versions Windows Server 2025 Description Improper authentication in the Windows SMB Server allows an authorized attacker to elevate privileges locally. This issue involves an NTLM reflection bypass, which can enable an attacker to obtain SYSTEM...
CVE-2026-26118: Server-Side Request Forgery (SSRF)
Server-side request forgery ssrf in Azure MCP Server allows an authorized attacker to elevate privileges over a network...
Azure MCP Server has Server-Side Request Forgery issue that allows authorized attacker to elevate privileges over a network
Server-Side Request Forgery SSRF in Azure MCP Server allows an authorized attacker to elevate privileges over a network...
PT-2026-24304
Name of the Vulnerable Software and Affected Versions Active Directory Domain Services affected versions not specified Description Improper restriction of names for files and other resources in Active Directory Domain Services allows an authorized attacker to elevate privileges over a network,...
PT-2026-24303
Уязвимость драйвера Windows Ancillary Function Driver for WinSock операционных систем Windows связана с недостатками разграничения доступа. Эксплуатация уязвимости может позволить нарушителю повысить свои привилегии...