264028 matches found
CVE-2026-49167 Windows Kernel Elevation of Privilege Vulnerability
...
CVE-2026-49167
CVE-2026-49167 is a Windows Kernel use-after-free vulnerability enabling local privilege escalation by an authorized attacker. Affected component: Windows Kernel. Root cause: use-after-free in kernel code leading to elevation of privileges. Impact: local elevation with high confidentiality/integr...
CVE-2026-49162 Microsoft Brokering File System Elevation of Privilege Vulnerability
...
CVE-2026-49162
CVE-2026-49162 is a use-after-free in Microsoft Brokering File System leading to local privilege escalation for an authenticated user; CVSSv3.1 indicates high impact (C/H, I/H, A/H) with local exploit required and low privileges. Public details in the connected documents do not specify affected p...
CVE-2026-48571 Windows App Package Installer Elevation of Privilege Vulnerability
...
CVE-2026-48571
The CVE-2026-48571 entry concerns a use-after-free vulnerability in Windows App Installer that enables an authorized attacker to achieve local privilege escalation. Affected component: Windows App Installer (Windows App Package Installer). Root cause: use-after-free condition leading to elevated ...
CVE-2026-48571 Windows App Package Installer Elevation of Privilege Vulnerability
...
CVE-2026-49162 Microsoft Brokering File System Elevation of Privilege Vulnerability
...
CVE-2026-48572 Windows App Package Installer Elevation of Privilege Vulnerability
...
CVE-2026-48572 Windows App Package Installer Elevation of Privilege Vulnerability
...
CVE-2026-42990 SQL Server ODBC driver Elevation of Privilege Vulnerability
...
CVE-2026-42990 SQL Server ODBC driver Elevation of Privilege Vulnerability
...
CVE-2026-48572
CVE-2026-48572 describes a race condition in Windows App Installer caused by concurrent execution on a shared resource with improper synchronization. An authorized attacker could elevate privileges locally. The CVE entry cites a high-severity score (CVSS 3.1: High) with local attack vector, high ...
CVE-2026-42900 Microsoft Windows App Store Elevation of Privilege Vulnerability
...
CVE-2026-42900
The CVE-2026-42900 entry concerns a race condition caused by improper synchronization in the Windows App Store. Reported impact is privilege elevation over a network, implying an unauthorized attacker could exploit a timing-related flaw to escalate access. Documents consistently describe a concur...
CVE-2026-42900 Microsoft Windows App Store Elevation of Privilege Vulnerability
...
CVE-2026-47296 Microsoft SQL Server Elevation of Privilege Vulnerability
...
CVE-2026-47296 Microsoft SQL Server Elevation of Privilege Vulnerability
...
CVE-2026-47296
CVE-2026-47296 is an elevation-of-privilege vulnerability in Microsoft SQL Server caused by improper neutralization of special elements used in a SQL command (SQL injection). An authorized attacker operating locally with low privileges and no user interaction can escalate privileges (impacting co...
