CVE-2026-61348

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

CVE-2026-61346

Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-59133

Execution with unnecessary privileges in Microsoft High Performance Computing HPC Pack allows an authorized attacker to elevate privileges over a network...

CVE-2026-59130

No cwe for this issue in AMD Zen allows an authorized attacker to disclose information locally...

CVE-2026-59131

No cwe for this issue in AMD Zen allows an authorized attacker to disclose information locally...

CVE-2026-59122

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Telephony Service allows an authorized attacker to elevate privileges locally...

CVE-2026-59125

Use after free in Virtual Hard Disk VHD Miniport Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-59126

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Event Logging Service allows an authorized attacker to elevate privileges locally...

CVE-2026-59127

Integer overflow or wraparound in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-59119

Incorrect default permissions in Microsoft PowerShell allows an authorized attacker to elevate privileges locally...

CVE-2026-58641

Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally...

CVE-2026-56174

Untrusted search path in Windows Narrator Braille allows an authorized attacker to elevate privileges locally...

CVE-2026-57104

Improper neutralization of input during web page generation 'cross-site scripting' in Azure Storage Explorer allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-57104

Improper neutralization of input during web page generation 'cross-site scripting' in Azure Storage Explorer allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-50472

Heap-based buffer overflow in Windows LUAFV allows an authorized attacker to elevate privileges locally...

CVE-2026-50516

Missing authentication for critical function in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network...

UBUNTU-CVE-2026-62871

Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally...

UBUNTU-CVE-2026-62897

Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to execute code locally...

CVE-2026-48385

ColdFusion is affected by an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized write...

CVE-2026-48384

ColdFusion is affected by an Improper Input Validation vulnerability that could result in an application denial-of-service. An attacker with high privileges could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not...