29187 matches found
CVE-2026-61357 Application Information Services Elevation of Privilege Vulnerability
...
CVE-2026-61365 Windows Remote Desktop Services Elevation of Privilege Vulnerability
...
CVE-2026-61365
CVE-2026-61365: Windows Remote Desktop Services contains a missing-authentication flaw in a critical function that allows local privilege escalation by an authorized user. CVSS 3.1 baseline is 7.8 (HIGH); attack vector LOCAL, requires LOW privileges, no user interaction, and results in HIGH impac...
CVE-2026-61364 Windows Remote Desktop Services Elevation of Privilege Vulnerability
...
CVE-2026-61364
The CVE-2026-61364 entry concerns Windows Remote Desktop Services. A missing authentication flaw in a critical function enables a locally authenticated attacker with low privileges to elevate to higher privileges, as indicated by the CVSS 3.1 vector (L/L). Exploitation details or in-the-wild stat...
CVE-2026-61365 Windows Remote Desktop Services Elevation of Privilege Vulnerability
...
CVE-2026-61364 Windows Remote Desktop Services Elevation of Privilege Vulnerability
...
CVE-2026-70348 Windows Management Services Denial of Service Vulnerability
...
CVE-2026-70348
CVE-2026-70348 describes an issue in Windows Management Services where improper link resolution before file access (link following) can allow an authenticated local attacker to cause a Denial of Service . The available sources state the vulnerability enables local DoS; no exploitable details or p...
EUVD-2026-56601
Improper link resolution before file access 'link following' in Windows Management Services allows an authorized attacker to deny service locally...
CVE-2026-70348 Windows Management Services Denial of Service Vulnerability
...
EUVD-2026-56404
Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network...
CVE-2026-62893 Windows Deployment Services TFTP Server Remote Code Execution Vulnerability
...
CVE-2026-62893
CVE-2026-62893 affects Windows Deployment Services’ TFTP Server. The provided sources confirm a use-after-free defect that enables an unauthenticated, remote attacker to execute code over the network. CVSSv3.1 base score is 9.8 (CRITICAL) with network exploitation, no user interaction, and impact...
CVE-2026-62893 Windows Deployment Services TFTP Server Remote Code Execution Vulnerability
...
CVE-2026-62818
CVE-2026-62818 affects Microsoft Windows Active Directory Certificate Services (AD CS). The vulnerability is a use-after-free in AD CS that allows an authorized attacker to execute arbitrary code over a network. CVSS v3.1 base metrics indicate a HIGH severity (8.8) with Network attack vector, Low...
CVE-2026-62692
CVE-2026-62692 : Heap-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to achieve local privilege escalation . The CVSS 3.1 vector is LOCAL, LOW exploitability with NONE user interaction and impact on Confidentiality, Integrity, Availability (HIGH) ; base sco...
CVE-2026-62692 Windows Remote Desktop Services Elevation of Privilege Vulnerability
...