CVE-2026-58527

CVE-2026-58527 affects Windows Runtime and is due to a race condition from improper synchronization, enabling local privilege escalation by an authenticated attacker. Public sources (NVD/NCSC/NVD-derived feeds and the official Microsoft entry) describe it as a Windows Runtime Elevation of Privile...

CVE-2026-58277 Microsoft SharePoint Elevation of Privilege Vulnerability

...

CVE-2026-58277

CVE-2026-58277 is a Microsoft SharePoint elevation-of-privilege vulnerability (Office SharePoint). The entry cites improper authorization that lets an authenticated attacker elevate privileges over the network. CVSS 3.1 base score 8.8 (HIGH) with NETWORK attack vector, LOW attack complexity, and ...

CVE-2026-58277 Microsoft SharePoint Elevation of Privilege Vulnerability

...

CVE-2026-57968 Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability

...

CVE-2026-57968 Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability

...

CVE-2026-57968

The CVE-2026-57968 entry describes a Buffer over-read in Windows Subsystem for Linux (WSL2) that can enable local privilege escalation for an authorized attacker. Connected sources corroborate a kernel-level issue affecting WSL2; the base CVSS vector indicates LOCAL attack, LOW complexity, with H...

CVE-2026-57096 Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability

...

CVE-2026-57096 Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability

...

CVE-2026-57096

CVE-2026-57096 affects Windows Routing and Remote Access Service (RRAS). The issue is a heap-based buffer overflow in RRAS that allows an authorized attacker to elevate privileges locally. The CVSSv3.1 base score is 7.8 (HIGH). Exploitation details are not provided beyond local privilege escalati...

CVE-2026-57093 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

...

CVE-2026-57093

CVE-2026-57093 – Windows Ancillary Function Driver for WinSock is a reported use-after-free vulnerability in the WinSock ancillary function driver that can be exploited locally to achieve privilege escalation. The issue affects the specific Windows driver handling WinSock operations; successful e...

CVE-2026-57093 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

...

CVE-2026-57088 Extensible Storage Engine (ESENT) Elevation of Privilege Vulnerability

...

CVE-2026-57088 Extensible Storage Engine (ESENT) Elevation of Privilege Vulnerability

...

CVE-2026-57088

CVE-2026-57088 is an Elevation of Privilege vulnerability in the Extensible Storage Engine (ESENT). Multiple connected sources confirm improper access control allowing an authorized local attacker to escalate privileges. CVSS 3.1 vectors indicate Local Access, Low Privilege required, with High co...

CVE-2026-57092 Microsoft Windows VMSwitch Elevation of Privilege Vulnerability

...

CVE-2026-57092 Microsoft Windows VMSwitch Elevation of Privilege Vulnerability

...

EUVD-2026-44271

Use after free in Windows VMSwitch allows an authorized attacker to elevate privileges over a network...

CVE-2026-57092

CVE-2026-57092 — Windows VMSwitch use-after-free can lead to a network-based Elevation of Privilege. The issue is triggered in the Windows VMSwitch component and, per sources, enables an authorized attacker to escalate privileges over the network. The CVE is listed as critical (CVSS v3.1: AV:N/AC...