CVE-2026-28757

Protection mechanism failure for some IntelR Workload Services Framework software within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This result may...

CVE-2026-65777 Active Directory Security Feature Bypass Vulnerability

...

CVE-2026-61357 Application Information Services Elevation of Privilege Vulnerability

...

CVE-2026-61357

Use after free in Application Information Services allows an authorized attacker to elevate privileges locally...

CVE-2026-61357

CVE-2026-61357 is described as a use-after-free in Application Information Services that allows an authorized attacker to locally elevate privileges. The available data indicate a local attack vector with low privilege required and no user interaction, resulting in high impact to confidentiality,...

CVE-2026-61357 Application Information Services Elevation of Privilege Vulnerability

...

EUVD-2026-56619

Use after free in Application Information Services allows an authorized attacker to elevate privileges locally...

CVE-2026-61365 Windows Remote Desktop Services Elevation of Privilege Vulnerability

...

CVE-2026-61364 Windows Remote Desktop Services Elevation of Privilege Vulnerability

...

CVE-2026-61364

The CVE-2026-61364 entry concerns Windows Remote Desktop Services. A missing authentication flaw in a critical function enables a locally authenticated attacker with low privileges to elevate to higher privileges, as indicated by the CVSS 3.1 vector (L/L). Exploitation details or in-the-wild stat...

CVE-2026-61365

CVE-2026-61365: Windows Remote Desktop Services contains a missing-authentication flaw in a critical function that allows local privilege escalation by an authorized user. CVSS 3.1 baseline is 7.8 (HIGH); attack vector LOCAL, requires LOW privileges, no user interaction, and results in HIGH impac...

CVE-2026-61364 Windows Remote Desktop Services Elevation of Privilege Vulnerability

...

CVE-2026-61365 Windows Remote Desktop Services Elevation of Privilege Vulnerability

...

EUVD-2026-56601

Improper link resolution before file access 'link following' in Windows Management Services allows an authorized attacker to deny service locally...

CVE-2026-70348 Windows Management Services Denial of Service Vulnerability

...

CVE-2026-70348

CVE-2026-70348 describes an issue in Windows Management Services where improper link resolution before file access (link following) can allow an authenticated local attacker to cause a Denial of Service . The available sources state the vulnerability enables local DoS; no exploitable details or p...

CVE-2026-70348 Windows Management Services Denial of Service Vulnerability

...

EUVD-2026-56404

Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network...

CVE-2026-62893 Windows Deployment Services TFTP Server Remote Code Execution Vulnerability

...

CVE-2026-62893

CVE-2026-62893 affects Windows Deployment Services’ TFTP Server. The provided sources confirm a use-after-free defect that enables an unauthenticated, remote attacker to execute code over the network. CVSSv3.1 base score is 9.8 (CRITICAL) with network exploitation, no user interaction, and impact...