1515 matches found
CVE-2026-88235
Unintended proxy or intermediary 'confused deputy' in Servicing Stack Updates allows an authorized attacker to elevate privileges locally...
CVE-2026-112989
Untrusted pointer dereference in Servicing Stack Updates allows an authorized attacker to elevate privileges locally...
CVE-2026-112989
A vulnerability exists in Servicing Stack Updates due to an untrusted pointer dereference . This flaw allows an authorized attacker to achieve local privilege escalation . While the specific affected versions are not detailed in the provided documents, the vulnerability is addressed in the Novemb...
EUVD-2026-121912
Untrusted pointer dereference in Servicing Stack Updates allows an authorized attacker to elevate privileges locally...
CVE-2026-88235
CVE-2026-88235 identifies an Elevation of Privilege vulnerability in Servicing Stack Updates , where an unintended proxy or intermediary (commonly known as a "confused deputy" ) can be exploited by an authorized attacker to gain elevated privileges locally. While the vulnerability is confirmed to...
EUVD-2026-121605
Unintended proxy or intermediary 'confused deputy' in Servicing Stack Updates allows an authorized attacker to elevate privileges locally...
KB5131083: Servicing stack update for Windows 10, version 1607 and Windows Server 2016: November 10, 2026
KB5131083: Servicing stack update for Windows 10, version 1607 and Windows Server 2016: November 10, 2026 Applies To Windows 10 LTSB 2016 ESU Windows Server 2016, all editions Summary This servicing stack update SSU makes quality improvements to the servicing stack, which is the component that...
Servicing Stack Updates Elevation of Privilege Vulnerability
Unintended proxy or intermediary 'confused deputy' in Servicing Stack Updates allows an authorized attacker to elevate privileges locally...
Windows Servicing Stack Updates Elevation of Privilege Vulnerability
Untrusted pointer dereference in Servicing Stack Updates allows an authorized attacker to elevate privileges locally...
PT-2026-144165
Name of the Vulnerable Software and Affected Versions Servicing Stack Updates affected versions not specified Description An unintended proxy or intermediary, known as a confused deputy, in Servicing Stack Updates allows an authorized attacker to elevate privileges locally. A confused deputy is a...
PT-2026-143577
Untrusted pointer dereference in Servicing Stack Updates allows an authorized attacker to elevate privileges locally...
CVE-2026-96939
Time-of-check time-of-use toctou race condition in Servicing Stack Updates allows an authorized attacker to elevate privileges locally...
CVE-2026-85835
Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information locally...
CVE-2026-85365
Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally...
CVE-2026-85318
Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally...
CVE-2026-83863
Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally...
CVE-2026-83719
Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information locally...
CVE-2026-83506
Untrusted search path in Servicing Stack Updates allows an authorized attacker to elevate privileges locally...
CVE-2026-96939
A Time-of-check time-of-use (TOCTOU) race condition exists in Servicing Stack Updates , which allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-367 and carries a HIGH base severity score of 7.0. No specific exploit code or in-the-wild e...