6287 matches found
CVE-2026-50486: Use After Free
Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally...
CVE-2026-50296: Use After Free
Use after free in Graphics Kernel allows an authorized attacker to elevate privileges locally...
CVE-2026-50298: Integer Overflow or Wraparound
Integer overflow or wraparound in Windows Spaceport.sys allows an unauthorized attacker to elevate privileges with a physical attack...
CVE-2026-58541: Access of Resource Using Incompatible Type
Access of resource using incompatible type 'type confusion' in Windows DWM allows an authorized attacker to elevate privileges locally...
CVE-2026-58531: Concurrent Execution using Shared Resource with Improper Synchronization
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows SMB allows an authorized attacker to elevate privileges over a network...
CVE-2026-50377: Out-of-bounds Read
Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally...
CVE-2026-50305: Use After Free
Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally...
CVE-2026-50361: Double Free
Double free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally...
CVE-2026-55009: Deserialization of Untrusted Data
Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally...
Security Updates for Microsoft SQL Server (July 2026)
The Microsoft SQL Server installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Improper neutralization of special elements used in an sql command 'sql injection' in SQL Server allows an authorized attacker to elevate privileges over...
CVE-2026-50406: Use After Free
Use after free in Windows Backup Engine allows an authorized attacker to elevate privileges locally...
CVE-2026-50360: Incorrect Implementation of Authentication Algorithm
Incorrect implementation of authentication algorithm in Windows SMB Server allows an authorized attacker to elevate privileges over a network...
PT-2026-58477
Name of the Vulnerable Software and Affected Versions Windows Runtime affected versions not specified Description An elevation-of-privilege issue exists due to a race condition, which occurs when concurrent execution using a shared resource lacks proper synchronization. This allows an authorized...
CVE-2026-50666: Use After Free
Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges over a network...
CVE-2026-56648: Time-of-check Time-of-use (TOCTOU) Race Condition
Time-of-check time-of-use toctou race condition in Windows Network File System allows an authorized attacker to elevate privileges over a network...
CVE-2026-58277: Improper Authorization
Improper authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...
PT-2026-58406
Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A use after free issue in the Content Delivery Manager allows an authorized local attacker to elevate privileges. Use after free is a memory corruption flaw that occurs when an application...
PT-2026-58435
Name of the Vulnerable Software and Affected Versions Microsoft Brokering File System affected versions not specified Description A use-after-free UAF issue exists in the bfs.sys Windows kernel minifilter driver within the Brokering File System. This flaw is caused by synchronization errors when...
CVE-2026-49806: Concurrent Execution using Shared Resource with Improper Synchronization
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows USB Print Driver allows an authorized attacker to elevate privileges locally...