262816 matches found
CVE-2026-58538
CVE-2026-58538 describes a heap-based buffer overflow in the Windows Bluetooth Service that enables an authorized, local attacker to elevate privileges. The vulnerability is evidenced in multiple sources (NVD/NCSC/CIRCL) with consistent wording: heap-based overflow in the Bluetooth service leads ...
CVE-2026-58527 Windows Runtime Elevation of Privilege Vulnerability
...
CVE-2026-58527 Windows Runtime Elevation of Privilege Vulnerability
...
CVE-2026-58527
CVE-2026-58527 affects Windows Runtime and is due to a race condition from improper synchronization, enabling local privilege escalation by an authenticated attacker. Public sources (NVD/NCSC/NVD-derived feeds and the official Microsoft entry) describe it as a Windows Runtime Elevation of Privile...
CVE-2026-58277 Microsoft SharePoint Elevation of Privilege Vulnerability
...
CVE-2026-58277
CVE-2026-58277 is a Microsoft SharePoint elevation-of-privilege vulnerability (Office SharePoint). The entry cites improper authorization that lets an authenticated attacker elevate privileges over the network. CVSS 3.1 base score 8.8 (HIGH) with NETWORK attack vector, LOW attack complexity, and ...
CVE-2026-58277 Microsoft SharePoint Elevation of Privilege Vulnerability
...
CVE-2026-57968 Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability
...
CVE-2026-57968 Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability
...
CVE-2026-57968
The CVE-2026-57968 entry describes a Buffer over-read in Windows Subsystem for Linux (WSL2) that can enable local privilege escalation for an authorized attacker. Connected sources corroborate a kernel-level issue affecting WSL2; the base CVSS vector indicates LOCAL attack, LOW complexity, with H...
CVE-2026-57096 Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability
...
CVE-2026-57096 Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability
...
CVE-2026-57096
CVE-2026-57096 affects Windows Routing and Remote Access Service (RRAS). The issue is a heap-based buffer overflow in RRAS that allows an authorized attacker to elevate privileges locally. The CVSSv3.1 base score is 7.8 (HIGH). Exploitation details are not provided beyond local privilege escalati...
CVE-2026-57093 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
...
CVE-2026-57093
CVE-2026-57093 – Windows Ancillary Function Driver for WinSock is a reported use-after-free vulnerability in the WinSock ancillary function driver that can be exploited locally to achieve privilege escalation. The issue affects the specific Windows driver handling WinSock operations; successful e...
CVE-2026-57093 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
...
CVE-2026-57088 Extensible Storage Engine (ESENT) Elevation of Privilege Vulnerability
...
CVE-2026-57088 Extensible Storage Engine (ESENT) Elevation of Privilege Vulnerability
...
CVE-2026-57088
CVE-2026-57088 is an Elevation of Privilege vulnerability in the Extensible Storage Engine (ESENT). Multiple connected sources confirm improper access control allowing an authorized local attacker to escalate privileges. CVSS 3.1 vectors indicate Local Access, Low Privilege required, with High co...