262637 matches found
CVE-2026-48571
Use after free in Windows App Installer allows an authorized attacker to elevate privileges locally...
CVE-2026-49162
Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally...
CVE-2026-48581
Insufficient granularity of access control in Microsoft Surface allows an authorized attacker to elevate privileges locally...
CVE-2026-47296
Improper neutralization of special elements used in an sql command 'sql injection' in SQL Server allows an authorized attacker to elevate privileges locally...
CVE-2026-47632
Improper certificate validation in Azure Monitor Agent allows an unauthorized attacker to elevate privileges over an adjacent network...
CVE-2026-42982
Improper validation of consistency within input in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally...
CVE-2026-44800
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Push Notifications allows an authorized attacker to elevate privileges locally...
CVE-2026-42900
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows App Store allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-15429
A privilege escalation vulnerability exists in the HTTP authentication component in Archer VX1800v v1. Improper handling of user-controlled input may allow newline characters to be injected into internally constructed configuration data. An authenticated user with sufficient privileges may be abl...
CVE-2026-58633
CVE-2026-58633 is a Desktop Window Manager (DWM) use-after-free vulnerability that enables a local attacker with low privileges to elevate privileges. Public sources collectively identify: impact as local privilege escalation; affected component is DWM; root cause described as use-after-free. Mic...
CVE-2026-58637
CVE-2026-58637 affects Windows Client-Side Caching (CSC) Service. Description and sources confirm a use-after-free vulnerability that enables an authorized local attacker to elevate privileges. Metrics indicate local attack vector, low privileges required, and no user interaction, with high confi...
CVE-2026-58637 Windows Client-Side Caching Elevation of Privilege Vulnerability
...
CVE-2026-58633 Desktop Window Manager Elevation of Privilege Vulnerability
...
CVE-2026-58634 Desktop Window Manager Elevation of Privilege Vulnerability
...
CVE-2026-58634
CVE-2026-58634 is a Windows vulnerability in the Desktop Window Manager (DWM) described as a use-after-free that enables an authorized attacker to achieve local Privilege Escalation . The CVSS 3.1 score is high (7.8) with a LOCAL attack vector, LOW attack complexity, and no user interaction requi...
CVE-2026-58633 Desktop Window Manager Elevation of Privilege Vulnerability
...
CVE-2026-58634 Desktop Window Manager Elevation of Privilege Vulnerability
...
CVE-2026-58637 Windows Client-Side Caching Elevation of Privilege Vulnerability
...
CVE-2026-58632
CVE-2026-58632 is a Windows Win32K use-after-free vulnerability in the Win32 Kernel Subsystem that could allow a locally authenticated attacker to escalate privileges. The CVE is described as a local elevation of privilege (no remote code execution). Public sources in the connected set consistent...