5232 matches found
CVE-2026-57091 Windows File History Service Elevation of Privilege Vulnerability
...
CVE-2026-56173 Windows WebView Elevation of Privilege Vulnerability
...
CVE-2026-50359 Microsoft XML Core Services Elevation of Privilege Vulnerability
...
CVE-2026-50498 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
...
CVE-2026-50478
CVE-2026-50478 is a Windows Kernel use-after-free vulnerability that enables local privilege escalation by an authorized attacker. The entry cites a Windows Kernel UAF issue with a high overall impact (CVSS v3.1: 7.8, Local, Privilege Escalation, Integrity/Confidentiality/Availability: High). Con...
CVE-2026-50458 Microsoft Brokering File System Elevation of Privilege Vulnerability
...
CVE-2026-50444 Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability
...
CVE-2026-50399
CVE-2026-50399 is a Windows Kernel elevation-of-privilege vulnerability caused by an out-of-bounds read in the Windows Kernel. The issue enables an authorized attacker to elevate privileges locally. According to the connected sources, the affected component is Windows Kernel, with a CVSS v3.1 bas...
CVE-2026-50454 Windows User Interface Core Elevation of Privilege Vulnerability
...
CVE-2026-50449 Windows Runtime Elevation of Privilege Vulnerability
...
CVE-2026-50330 Windows Remote Desktop Client Elevation of Privilege Vulnerability
...
CVE-2026-50364
Technical details (affected product/version, root cause, and fixes) are not publicly available in the provided documents. Monitor for updates.
CVE-2026-50356
CVE-2026-50356 describes a race-condition in Microsoft Windows App Store caused by concurrent execution using a shared resource with improper synchronization. This allows a locally authenticated attacker to elevate privileges. The fixed details or patch versions are not provided in the connected ...
CVE-2026-50297
CVE-2026-50297 is a Windows Win32K local privilege escalation due to improper access control. The vulnerable component is Win32K; the condition allows an authorized attacker to elevate privileges locally. Base impact is high (C, I, A) with local attack vector and no user interaction required beyo...
CVE-2026-49803
CVE-2026-49803 describes a race condition in the Windows AppX Deployment Service due to improper synchronization, enabling an authorized attacker to perform local privilege escalation. The NVD entry corroborates the description: concurrent execution on a shared resource leads to elevation of priv...
CVE-2026-50323
Technical details (affected products, versions, root cause, exploit specifics) are not provided in the connected documents. Monitor for updates to CVE-2026-50323.
CVE-2026-50311
CVE-2026-50311 concerns Windows Server where improper access control allows an authorized user to locally elevate privileges. Root cause: insufficient authorization checks in the affected Windows Server components, enabling privilege escalation with local access and no user interaction required. ...
CVE-2026-47632 Azure Monitor Agent Metrics Extension Elevation of Privilege Vulnerability
...
CVE-2026-47632
Azure Monitor Agent Metrics Extension is affected by CVE-2026-47632 due to improper certificate validation, enabling elevation of privileges for an unauthenticated attacker on an adjacent network. Exploitation details are not provided in the connected documents. CVSSv3.1 base score 8.8 (High): AV...