263068 matches found
CVE-2026-49789
CVE-2026-49789 is a Windows NTFS elevation-of-privilege vulnerability. A stack-based buffer overflow in NTFS could allow an authorized local attacker to escalate privileges. Affected component: Windows NTFS subsystem. Root cause: stack-based overflow in an NTFS operation, leading to potential cod...
CVE-2026-49789 Windows NTFS Elevation of Privilege Vulnerability
...
CVE-2026-49183
CVE-2026-49183 describes a race condition in Windows Clipboard Server due to improper synchronization, enabling a local attacker with low privileges to elevate to higher rights. The affected component is the Windows Clipboard Server (shared resource handling) and the root cause is concurrent exec...
CVE-2026-49183 Windows Clipboard Server Elevation of Privilege Vulnerability
...
CVE-2026-49183 Windows Clipboard Server Elevation of Privilege Vulnerability
...
CVE-2026-49181 Windows DHCP Client Elevation of Privilege Vulnerability
...
CVE-2026-49181 Windows DHCP Client Elevation of Privilege Vulnerability
...
CVE-2026-49181
CVE-2026-49181 is a Windows DHCP Client vulnerability described as an integer underflow (wrap or wraparound) that allows an unauthenticated attacker to elevate privileges over a network. The CVE is corroborated by multiple sources in Connected documents, including NVD and MSRC updates, and ENISA/...
CVE-2026-48581 Surface Broker SDMA Elevation of Privilege Vulnerability
...
CVE-2026-48581
CVE-2026-48581 affects Microsoft Surface. It describes insufficient granularity of access control enabling a locally authenticated attacker to escalate privileges (Impact: high; CVSS 3.1 base 7.8, AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Connected records show the vulnerability in Surface Broker SDM...
CVE-2026-48581 Surface Broker SDMA Elevation of Privilege Vulnerability
...
CVE-2026-47632
Azure Monitor Agent Metrics Extension is affected by CVE-2026-47632 due to improper certificate validation, enabling elevation of privileges for an unauthenticated attacker on an adjacent network. Exploitation details are not provided in the connected documents. CVSSv3.1 base score 8.8 (High): AV...
CVE-2026-44800
CVE-2026-44800 concerns a race condition in Windows Push Notifications caused by improper synchronization of a shared resource. This vulnerability enables an authorized, local attacker to achieve privilege elevation. Documented impact is Local, with Confidentiality, Integrity, and Availability al...
CVE-2026-47632 Azure Monitor Agent Metrics Extension Elevation of Privilege Vulnerability
...
CVE-2026-44800 Windows Push Notifications Elevation of Privilege Vulnerability
...
CVE-2026-44800 Windows Push Notifications Elevation of Privilege Vulnerability
...
CVE-2026-47632 Azure Monitor Agent Metrics Extension Elevation of Privilege Vulnerability
...
CVE-2026-58636 Microsoft PC Manager Elevation of Privilege Vulnerability
...
CVE-2026-58636
Microsoft Windows PC Manager is affected by CVE-2026-58636 due to improper link resolution before file access ("link following"), enabling an authenticated local attacker to elevate privileges. Current records indicate a local privilege escalation with high impact, but do not specify affected ver...