6127 matches found
CVE-2026-61925: Incorrect Authorization
Incorrect authorization in Windows Installer allows an authorized attacker to elevate privileges locally...
CVE-2026-61348: Use After Free
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...
CVE-2026-62723: Use After Free
Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally...
CVE-2026-62698: Numeric Truncation Error
Numeric truncation error in Microsoft Digest Authentication allows an authorized attacker to elevate privileges locally...
CVE-2026-50516: Missing Authentication for Critical Function
Missing authentication for critical function in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-62721: Insufficient Granularity of Access Control
Insufficient granularity of access control in User-Mode Power Service UMPS allows an authorized attacker to elevate privileges locally...
CVE-2026-61353: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Telephony Service allows an authorized attacker to elevate privileges locally...
CVE-2026-65782: Use After Free
Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally...
CVE-2026-62713: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-59127: Integer Overflow or Wraparound
Integer overflow or wraparound in Windows Installer allows an authorized attacker to elevate privileges locally...
CVE-2026-62827: Improper Authentication
Improper authentication in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...
CVE-2026-62909: Unchecked Return Value
Uncaught exception in .NET allows an authorized attacker to elevate privileges locally...
CVE-2026-62876: Out-of-bounds Read
Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally...
CVE-2026-62911: Authentication Bypass by Capture-replay
Authentication bypass by capture-replay in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...
CVE-2026-61349: Use After Free
Use after free in Windows Work Folder Service allows an authorized attacker to elevate privileges locally...
CVE-2026-65783: Use After Free
Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally...
CVE-2026-62728: Time-of-check Time-of-use (TOCTOU) Race Condition
Time-of-check time-of-use toctou race condition in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-57104: Improper Neutralization of Input During Web Page Generation
Improper neutralization of input during web page generation 'cross-site scripting' in Azure Storage Explorer allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-61365: Missing Authentication for Critical Function
Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally...