270500 matches found
CVE-2026-62735
CVE-2026-62735 is a Windows HTTP.sys vulnerability described as a heap-based buffer overflow that enables an authorized, locally interacting attacker to elevate privileges. Evidence across sources confirms a local-exploit path with high impact (C/H/I/A), CVSS 3.1 vector: LOCAL, LOW complexity, LO...
CVE-2026-62735 Windows HTTP.sys Elevation of Privilege Vulnerability
...
CVE-2026-62735 Windows HTTP.sys Elevation of Privilege Vulnerability
...
CVE-2026-62737 Windows Kernel Elevation of Privilege Vulnerability
...
EUVD-2026-56365
Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally...
CVE-2026-62753 Windows HTTP.sys Elevation of Privilege Vulnerability
...
CVE-2026-62753 Windows HTTP.sys Elevation of Privilege Vulnerability
...
CVE-2026-62753
CVE-2026-62753 is a heap-based buffer overflow in Windows HTTP.sys that allows local privilege escalation by an authorized attacker. Affected: Windows HTTP.sys; Impact: local high-severity compromise of confidentiality, integrity, and availability. CVSS: 7.0 (3.1) with LOCAL, LOW privileges requi...
CVE-2026-62746
CVE-2026-62746 is a Windows Win32k information-disclosure vulnerability described as a buffer over-read that allows an authorized, local attacker to disclose information. Affected component: Win32k (Windows). Impact per provided metrics: confidentiality impact High; attack vector Local; attack co...
CVE-2026-62729 Windows Telephony Service Elevation of Privilege Vulnerability
...
CVE-2026-62729 Windows Telephony Service Elevation of Privilege Vulnerability
...
CVE-2026-62729
CVE-2026-62729 describes a race condition in Windows Telephony Service caused by concurrent execution on a shared resource with improper synchronization. This allows an authorized, local attacker to elevate privileges. The entry notes a local attack vector with high impact on confidentiality, int...
EUVD-2026-56362
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Telephony Service allows an authorized attacker to elevate privileges locally...
CVE-2026-62746 Win32k Information Disclosure Vulnerability
...
CVE-2026-62748 Windows Telephony Service Elevation of Privilege Vulnerability
...
EUVD-2026-56361
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Telephony Service allows an authorized attacker to elevate privileges locally...
CVE-2026-62748 Windows Telephony Service Elevation of Privilege Vulnerability
...
CVE-2026-62748
CVE-2026-62748 affects the Windows Telephony Service. The issue is a race condition due to improper synchronization on a shared resource, enabling a locally authorized attacker to elevate privileges. The weakness is exploited locally with no user interaction and results in high impact to confiden...