CVE-2026-72965

CVE-2026-72965 is a use-after-free vulnerability in the Windows WebClient Service that allows an authorized local attacker to achieve privilege elevation . The CVSS v3.1 score is 7.8 (HIGH) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a local attack requiring low privileges an...

EUVD-2026-73889

Improper link resolution before file access 'link following' in Windows Update Stack allows an authorized attacker to elevate privileges locally...

CVE-2026-81963

Windows Update Stack is affected by an improper link resolution before file access ('link following') flaw that allows an authorized attacker with low privileges to elevate privileges locally , rated CVSS 7.8 HIGH with high impact to confidentiality, integrity, and availability. The vulnerability...

EUVD-2026-73887

Relative path traversal in Power Automate allows an authorized attacker to elevate privileges locally...

CVE-2026-77897

CVE-2026-77897 is a relative path traversal vulnerability in Microsoft Power Automate Desktop that allows an authorized attacker to escalate privileges locally . The vulnerability requires local access with low privileges and has a high attack complexity, as reflected by the CVSS 3.1 score of 7.0...

EUVD-2026-73884

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally...

CVE-2026-83940

CVE-2026-83940 is a use after free vulnerability in the Windows Device Association Service that allows an authorized local attacker to elevate privileges . The CVSS 3.1 base score is 7.0 (HIGH) with a high attack complexity , low privileges required , and high impact across confidentiality, integ...

EUVD-2026-73885

Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally...

CVE-2026-83939

Windows Secure Kernel Mode is affected by an untrusted pointer dereference vulnerability that allows an authorized attacker to perform a local privilege escalation . The CVSS 3.1 score is 8.2 (HIGH) , with a changed scope and high impact to confidentiality, integrity, and availability. The attack...

EUVD-2026-73850

Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally...

CVE-2026-81354

CVE-2026-81354 is a heap-based buffer overflow in Windows Hello that allows an authorized local attacker to elevate privileges. The vulnerability carries a CVSS 3.1 score of 8.2 (HIGH) with a changed scope, impacting confidentiality, integrity, and availability at high levels. Attack requirements...

CVE-2026-80096

CVE-2026-80096 is an out-of-bounds read vulnerability in Windows Remote Desktop Services that allows an authorized attacker to elevate privileges over a network. Microsoft rated it CVSS 3.1: 8.8 (High) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a network-exploitable flaw req...

EUVD-2026-73847

Out-of-bounds read in Windows Remote Desktop Services allows an authorized attacker to elevate privileges over a network...

CVE-2018-5354

CVE-2018-5354 ANIXIS密码重置客户端权限提升/远程代码执行 信息 供应商: ANIXIS 产品: ANIXIS密码重置客户端 受影响版本: 3.22之前版本 研究人员: Jason Juntunen 又名 @missing0x00 https://github.com/missing0x00 CVSS: 8.8 描述 ANIXIS密码重置客户端3.22之前版本中的自定义GINA/CP模块允许远程攻击者通过欺骗执行代码和提升权限。...

CVE-2026-84385

A improper access control vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.6, FortiSOAR PaaS 7.5.0 through 7.5.3, FortiSOAR PaaS 7.4 all versions, FortiSOAR PaaS 7.3 all versions, FortiSOAR on-premise 7.6.0 through 7.6.6, FortiSOAR on-premise 7.5.0 through 7.5.3, FortiSOAR on-premise 7....

CVE-2026-82533

DeepSeek Harness before 0.1.2-alpha.1 contains an authentication bypass vulnerability that grants unauthenticated access to its local HTTP agent-control API by accepting a client-supplied loopback Host header in place of validating the actual TCP connection origin. On the default configuration, a...

CVE-2026-82053

A security issue exists in MongoDB's LDAP authorization integration where pooled LDAP connections can retain stale authentication identities after user authentication under certain configurations. Subsequent authorization queries may execute under an unintended LDAP identity rather than the...

CVE-2026-66819

CVE-2026-66819 is an SQL injection vulnerability in Microsoft SQL Server , caused by improper neutralization of special elements used in SQL commands. An authorized attacker can exploit it over a network to elevate privileges , with a CVSS 3.1 score of 8.8 (HIGH) and impacts rated High for confid...

EUVD-2026-73814

Improper neutralization of special elements used in an sql command 'sql injection' in SQL Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-78464

CVE-2026-78464 is a time-of-check time-of-use (TOCTOU) race condition in the Windows MIDI Service Module that allows an authorized local attacker with low privileges to escalate privileges. The vulnerability requires local access with high attack complexity and no user interaction, resulting in a...