283954 matches found
CVE-2026-68834
A stack-based buffer overflow in Windows NTFS allows an authorized attacker to achieve privilege elevation over a network. The vulnerability is rated CVSS 8.0 (HIGH) with a vector of network access, low complexity, low privileges required, and user interaction required, resulting in high impact t...
EUVD-2026-73400
Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network...
CVE-2026-68827
CVE-2026-68827 is an integer underflow (wrap or wraparound) vulnerability in Windows GDI+ that allows an authorized attacker to achieve elevation of privileges over a network . The vulnerability is rated HIGH severity (CVSS 8.0) with a vector of AV:N/AC:L/PR:L/UI:R, meaning exploitation requires ...
EUVD-2026-73399
Integer underflow wrap or wraparound in Windows GDI+ allows an authorized attacker to elevate privileges over a network...
CVE-2026-67381
A heap-based buffer overflow in Microsoft SQL Server allows an authorized attacker to elevate privileges over a network . The CVSS 3.1 score is 8.8 (HIGH) , with an attack vector of network, low complexity, low privileges required, and no user interaction needed, resulting in high impact to confi...
EUVD-2026-73380
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network...
EUVD-2026-73377
Improper privilege management in SQL Server allows an authorized attacker to elevate privileges over a network...
EUVD-2026-73378
Improper neutralization of special elements used in an sql command 'sql injection' in SQL Server allows an authorized attacker to elevate privileges over a network...
CVE-2026-66820
CVE-2026-66820 is an SQL injection vulnerability in SQL Server caused by improper neutralization of special elements in a SQL command. An authorized attacker with low privileges can exploit it over the network without user interaction to elevate privileges , resulting in high impact to confidenti...
CVE-2026-66818
Microsoft SQL Server is affected by an improper privilege management flaw that allows an authorized attacker to escalate privileges over a network . The vulnerability is rated CVSS 3.1 8.8 (High) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, meaning low privileges and no user interaction ...
CVE-2026-66814
Microsoft SQL Server is affected by an insufficient granularity of access control flaw that allows an authorized attacker to elevate privileges over a network. The vulnerability is rated CVSS 8.8 (High) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating that low-privilege network ac...
EUVD-2026-73375
Insufficient granularity of access control in SQL Server allows an authorized attacker to elevate privileges over a network...
EUVD-2026-73374
Use after free in Windows VHD miniport driver allows an authorized attacker to elevate privileges locally...
CVE-2026-56172
CVE-2026-56172 is a use-after-free vulnerability in the Windows VHD miniport driver that allows an authorized local attacker to achieve privilege escalation . The CVSS 3.1 score is 7.8 (High) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating low attack complexity and full impact on...
EUVD-2026-73373
Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally...
CVE-2026-62697
CVE-2026-62697 is a use after free vulnerability in Windows Push Notifications that allows an authorized attacker to achieve local privilege escalation . The CVSS 3.1 score is 7.8 (HIGH) with a local attack vector, low complexity, and low privileges required, resulting in high impact to confident...
EUVD-2026-73368
Improper authorization in XBox Gaming Services allows an authorized attacker to elevate privileges locally...
CVE-2026-62810
CVE-2026-62810 is a heap-based buffer overflow in Microsoft Active Directory Certificate Services (AD CS) that allows an authorized attacker to escalate privileges locally . The CVSS 3.1 base score is 7.8 (HIGH) , reflecting a local attack vector, low complexity, low privileges required, no user ...
CVE-2026-58611
CVE-2026-58611 is an improper authorization vulnerability in Xbox Gaming Services that allows an already-authorized (low-privilege) attacker to elevate privileges locally , resulting in high impact to confidentiality, integrity, and availability. The assigned CVSS 3.1 score is 7.8 (HIGH) with a l...