284959 matches found
CVE-2026-69799
CVE-2026-69799 is a race condition vulnerability in Windows Hello , where concurrent execution using a shared resource with improper synchronization allows an authorized local attacker to elevate privileges. The CVSS 3.1 score is 7.8 (HIGH) with a changed scope, indicating the attacker crosses a ...
EUVD-2026-73633
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Hello allows an authorized attacker to elevate privileges locally...
EUVD-2026-73625
Improper limitation of a pathname to a restricted directory 'path traversal' in Windows PowerShell allows an authorized attacker to elevate privileges over a network...
CVE-2026-69807
Windows PowerShell is affected by a path traversal vulnerability (improper limitation of a pathname to a restricted directory) that allows an authorized attacker to elevate privileges over a network . The vulnerability carries a CVSS 3.1 score of 8.0 (HIGH) , with a vector of AV:N/AC:L/PR:L/UI:R/...
EUVD-2026-73624
Heap-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges over an adjacent network...
CVE-2026-69777
CVE-2026-69777 is a heap-based buffer overflow in the Windows DHCP Client that allows an authorized attacker (low privileges required) to elevate privileges over an adjacent network . The vulnerability is rated CVSS 3.1: 8.0 (HIGH) with a vector of AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating ...
EUVD-2026-73621
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
CVE-2026-69911
CVE-2026-69911 is a use-after-free vulnerability in the Microsoft Windows Search Component that allows a locally authenticated attacker to achieve local privilege escalation . The flaw requires low privileges , high attack complexity , and no user interaction , with unchanged scope and high impac...
EUVD-2026-73618
Untrusted pointer dereference in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally...
EUVD-2026-73619
Use after free in Windows Media allows an authorized attacker to elevate privileges locally...
CVE-2026-69900
CVE-2026-69900 is an untrusted pointer dereference in the Kernel Streaming WOW Thunk Service Driver (a Windows kernel-mode driver) that allows a locally authenticated attacker to escalate privileges . Microsoft rated it HIGH (CVSS 7.8) with local attack vector, low complexity, low privileges requ...
CVE-2026-69891
CVE-2026-69891 is a use-after-free vulnerability in Windows Media that allows an authorized attacker to perform a local privilege escalation . The CVSS 3.1 score is 7.0 (HIGH) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a local attack requiring low privileges and high complex...
EUVD-2026-73617
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally...
EUVD-2026-73616
Improper handling of insufficient permissions or privileges in Windows Enterprise App Management allows an authorized attacker to elevate privileges locally...
CVE-2026-69818
CVE-2026-69818 is a use-after-free vulnerability in the Windows Win32K component that allows a low-privileged, locally authenticated attacker to elevate privileges . The CVSS v3.1 score is 7.0 (HIGH) , reflecting a local attack vector with high complexity and high impact on confidentiality, integ...
CVE-2026-69907
CVE-2026-69907 affects Windows Enterprise App Management , where improper handling of insufficient permissions or privileges allows an authorized attacker to elevate privileges locally . The vulnerability is rated CVSS 3.1: 7.8 (HIGH) with a local attack vector , low complexity , low privileges r...
CVE-2026-69785
CVE-2026-69785 is an untrusted search path vulnerability in Windows Smart Card that allows an authorized attacker to elevate privileges locally. The flaw resides in how Windows Smart Card resolves file paths, permitting a local attacker with low privileges (no user interaction required) to achiev...
EUVD-2026-73615
Untrusted search path in Windows Smart Card allows an authorized attacker to elevate privileges locally...
CVE-2026-69708
CVE-2026-69708 is a use-after-free vulnerability in Windows Web Platform Storage that allows a locally authorized attacker to elevate privileges. The vulnerability is rated CVSS 3.1 7.0 (HIGH) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H , meaning exploitation requires local access, low p...