18005 matches found
CVE-2026-50340
Use after free in Windows Runtime allows an authorized attacker to elevate privileges over a network...
CVE-2026-50322
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Runtime allows an authorized attacker to elevate privileges locally...
K3s: ZIP Archive Path Traversal Vulnerability in etcd Snapshot Decompression
Summary A path traversal vulnerability exists in K3s's etcd snapshot decompression functionality. Zip files containing archive members with maliciously crafted names e.g., ../../../../etc/password can be written to arbitrary locations on the filesystem when an administrator restores the archive a...
MAL-2026-10606 Malicious code in base58-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba5517883cb10a7c76e95fdf21a4ffce21c13fe1ca42fafc13f5adb021599772 The package's index.js contains multiple Buffer.from... decode sites lines 7, 29, 34, 49, 50 used to reconstruct strings/payloads at runtime — the...
CVE-2026-50350
Exposure of sensitive information to an unauthorized actor in Windows Trusted Runtime Interface Driver allows an authorized attacker to disclose information locally...
CVE-2026-50323
Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally...
CVE-2026-58527
CVE-2026-58527 affects Windows Runtime and is due to a race condition from improper synchronization, enabling local privilege escalation by an authenticated attacker. Public sources (NVD/NCSC/NVD-derived feeds and the official Microsoft entry) describe it as a Windows Runtime Elevation of Privile...
CVE-2026-58527 Windows Runtime Elevation of Privilege Vulnerability
...
CVE-2026-58527 Windows Runtime Elevation of Privilege Vulnerability
...
CVE-2026-54125 Windows Runtime Elevation of Privilege Vulnerability
...
CVE-2026-54125
CVE-2026-54125 affects Windows Runtime and describes a race-condition vulnerability in concurrent execution on a shared resource that enables local privilege elevation for an authenticated attacker. The CVE is rated with CVSSv3.1 base metrics: AV Local, AC Low, PR Low, UI None, S unchanged, C/H/I...
CVE-2026-54125 Windows Runtime Elevation of Privilege Vulnerability
...
CVE-2026-50503 Windows Runtime Elevation of Privilege Vulnerability
...
CVE-2026-50503 Windows Runtime Elevation of Privilege Vulnerability
...
CVE-2026-50503
CVE-2026-50503 is a Windows Runtime elevation-of-privilege vulnerability caused by a race condition from improper synchronization on a shared resource. The issue allows an authorized, low-privilege attacker to potentially gain higher privileges locally. Exploitation status is not detailed in the ...
CVE-2026-50486 Windows Runtime Elevation of Privilege Vulnerability
...
CVE-2026-50486 Windows Runtime Elevation of Privilege Vulnerability
...
CVE-2026-50486
CVE-2026-50486 is a Windows Runtime use-after-free vulnerability that enables a local, authenticated attacker with low privileges and no user interaction to elevate privileges. The issue is described as a Windows Runtime elevation of privileges vulnerability. Public details in connected sources i...
CVE-2026-50457
CVE-2026-50457 (Windows Runtime) is a local elevation of privileges vulnerability caused by a use-after-free in Windows Runtime. An authorized attacker could exploit this to gain higher privileges on the system. The entry is corroborated by multiple sources (NVD/NCSC/Circl) and Microsoft has rele...