528 matches found
Important: Red Hat Security Advisory: kernel security update
An update for kernel is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring Syst...
CVE-2026-83499
Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally...
CVE-2026-81969
Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally...
CVE-2026-70142
Untrusted search path in Windows Update Service allows an authorized attacker to elevate privileges locally...
CVE-2026-70139
Heap-based buffer overflow in Windows Update Service allows an authorized attacker to elevate privileges locally...
CVE-2026-70056
Use after free in Windows Update Service allows an authorized attacker to elevate privileges locally...
CVE-2026-105009
Incorrect default permissions in Windows Server Update Service allows an authorized attacker to elevate privileges locally...
CVE-2026-100203
Heap-based buffer overflow in Windows Update Service allows an authorized attacker to elevate privileges locally...
CVE-2026-100200
Use after free in Windows Update Service allows an authorized attacker to elevate privileges locally...
CVE-2026-105009
A local privilege escalation vulnerability exists in the Windows Server Update Service due to incorrect default permissions (CWE-276). An authorized attacker can exploit this flaw to elevate privileges locally. While the CVSS 3.1 score reflects a High severity (7.5), the attack requires low privi...
CVE-2026-100203
A heap-based buffer overflow exists in the Windows Update Service , which could allow an authorized attacker to achieve local privilege escalation . The vulnerability is classified as High severity with a CVSS 3.1 score of 7.0. While the root cause is identified as a heap overflow, specific file ...
CVE-2026-100200
A use after free vulnerability exists in the Windows Update Service , allowing an authorized attacker to achieve local privilege escalation . The vulnerability is categorized under CWE-416 and has a base severity score of 7.0 . While the specific root cause and affected versions are not detailed ...
CVE-2026-83499
The Windows Server Update Service is impacted by an insufficient granularity of access control vulnerability (CWE-1220). This flaw allows an authorized attacker to achieve local privilege escalation . While the technical root cause is not further detailed in the provided documents, the vulnerabil...
CVE-2026-81969
The Windows Server Update Service is affected by a vulnerability involving insufficient granularity of access control . This flaw allows an authorized attacker to perform a local privilege escalation . The vulnerability is characterized by a HIGH base severity score of 7.8 and is associated with ...
CVE-2026-70142
The Windows Update Service is affected by an Untrusted Search Path vulnerability (CWE-426 ). This flaw allows an authorized attacker to achieve local privilege escalation . The impact includes high levels of risk to confidentiality , integrity , and availability . Remediation is available via an ...
CVE-2026-70139
A heap-based buffer overflow exists in the Windows Update Service . This vulnerability allows an authorized attacker to achieve local privilege escalation . While the specific root cause component is not detailed beyond the service name, the impact includes high levels of confidentiality, integri...
CVE-2026-70056
A Use after free vulnerability exists in the Windows Update Service . This flaw allows an authorized attacker to achieve local privilege escalation . The CVSS 3.1 score is 7.0 (High) , indicating significant impact on confidentiality, integrity, and availability. No specific exploit details or re...
Windows Update Service Elevation of Privilege Vulnerability
Untrusted search path in Windows Update Service allows an authorized attacker to elevate privileges locally...