CVE-2026-49162 Microsoft Brokering File System Elevation of Privilege Vulnerability

...

CVE-2026-48571 Windows App Package Installer Elevation of Privilege Vulnerability

...

CVE-2026-48571

The CVE-2026-48571 entry concerns a use-after-free vulnerability in Windows App Installer that enables an authorized attacker to achieve local privilege escalation. Affected component: Windows App Installer (Windows App Package Installer). Root cause: use-after-free condition leading to elevated ...

CVE-2026-42990 SQL Server ODBC driver Elevation of Privilege Vulnerability

...

CVE-2026-48572 Windows App Package Installer Elevation of Privilege Vulnerability

...

CVE-2026-48572

CVE-2026-48572 describes a race condition in Windows App Installer caused by concurrent execution on a shared resource with improper synchronization. An authorized attacker could elevate privileges locally. The CVE entry cites a high-severity score (CVSS 3.1: High) with local attack vector, high ...

CVE-2026-42990 SQL Server ODBC driver Elevation of Privilege Vulnerability

...

CVE-2026-48572 Windows App Package Installer Elevation of Privilege Vulnerability

...

CVE-2026-42900 Microsoft Windows App Store Elevation of Privilege Vulnerability

...

CVE-2026-42900

The CVE-2026-42900 entry concerns a race condition caused by improper synchronization in the Windows App Store. Reported impact is privilege elevation over a network, implying an unauthorized attacker could exploit a timing-related flaw to escalate access. Documents consistently describe a concur...

CVE-2026-42900 Microsoft Windows App Store Elevation of Privilege Vulnerability

...

CVE-2026-47296 Microsoft SQL Server Elevation of Privilege Vulnerability

...

CVE-2026-47296 Microsoft SQL Server Elevation of Privilege Vulnerability

...

CVE-2026-47296

CVE-2026-47296 is an elevation-of-privilege vulnerability in Microsoft SQL Server caused by improper neutralization of special elements used in a SQL command (SQL injection). An authorized attacker operating locally with low privileges and no user interaction can escalate privileges (impacting co...

CVE-2026-42982 Windows Secure Kernel Mode Elevation of Privilege Vulnerability

...

CVE-2026-42982 Windows Secure Kernel Mode Elevation of Privilege Vulnerability

...

CVE-2026-42982

CVE-2026-42982 affects Windows Secure Kernel Mode. The issue is improper validation of input consistency within that subsystem, enabling an authorized user to escalate privileges locally. The vulnerability is described as a local, user‑level privilege escalation with high impact (confidentiality,...

CVE-2026-15429 Privilege Escalation via Improper Input Sanitization in TP-Link Archer VX1800v

A privilege escalation vulnerability exists in the HTTP authentication component in Archer VX1800v v1. Improper handling of user-controlled input may allow newline characters to be injected into internally constructed configuration data. An authenticated user with sufficient privileges may be abl...

CVE-2026-15429

CVE-2026-15429 describes a privilege escalation in the HTTP authentication component of the Archer VX1800v (v1). The vulnerability results from improper handling of user-controlled input, enabling newline character injection into internally constructed configuration data. An authenticated user wi...

CVE-2026-59841

Technical details for CVE-2026-59841 are not publicly available in the provided documents. Monitor Fortinet advisories and NVD/CVE records for updates on affected product/version, impact, and fixes.