474207 matches found
Microsoft Windows: CVE-2026-83930: Windows Update Orchestrator Service Elevation of Privilege Vulnerability
Use after free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-83507: Windows Update Orchestrator Service Information Disclosure Vulnerability
Improper link resolution before file access 'link following' in Windows Update Orchestrator Service allows an authorized attacker to disclose information locally...
Microsoft Windows: CVE-2026-69783: Windows Update Elevation of Privilege Vulnerability
External control of file name or path in Windows Update allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-83886: Windows Update Orchestrator Service Elevation of Privilege Vulnerability
Use after free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-83499: Windows Server Update Service Elevation of Privilege Vulnerability
Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-81969: Windows Server Update Service Elevation of Privilege Vulnerability
Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-81964: Windows Update Orchestrator Service Security Feature Bypass Vulnerability
Use of hard-coded credentials in Windows Update Orchestrator Service allows an authorized attacker to bypass a security feature locally...
Microsoft Windows: CVE-2026-69718: Windows Update Elevation of Privilege Vulnerability
Improper neutralization of special elements used in a command 'command injection' in Windows Update allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-69673: Windows Update Elevation of Privilege Vulnerability
Improper link resolution before file access 'link following' in Windows Update allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-69633: Windows Update Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Update allows an authorized attacker to elevate privileges locally...
CVE-2026-83933: Improper Link Resolution Before File Access
Improper link resolution before file access 'link following' in Windows Update Orchestrator Service allows an authorized attacker to disclose information locally...
CVE-2026-96535: Improper Neutralization of Input During Web Page Generation
Cross-Site Scripting on the YouMind portal, specifically in the avatar update endpoint, when setting a profile picture via an arbitrary URL. This occurs due to a lack of sanitisation and validation of SVG content when setting an SVG image containing embedded JavaScript code as the avatar. The fil...
CVE-2026-83886: Use After Free
Use after free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally...
CVE-2026-83499: Insufficient Granularity of Access Control
Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally...
CVE-2026-81964: Use of Hard-coded Credentials
Use of hard-coded credentials in Windows Update Orchestrator Service allows an authorized attacker to bypass a security feature locally...
CVE-2026-96323: Use After Free
Use after free in Windows Update allows an authorized attacker to elevate privileges locally...
CVE-2026-69783: External Control of File Name or Path
External control of file name or path in Windows Update allows an authorized attacker to elevate privileges locally...
CVE-2026-69733: Untrusted Search Path
Untrusted search path in Windows Update allows an authorized attacker to elevate privileges locally...
CVE-2026-69718: Improper Neutralization of Special Elements used in a Command
Improper neutralization of special elements used in a command 'command injection' in Windows Update allows an authorized attacker to elevate privileges locally...
PT-2026-112404
Name of the Vulnerable Software and Affected Versions Windows Server Update Service affected versions not specified Description Insufficient granularity of access control allows an authorized attacker to elevate privileges locally on the system. Recommendations At the moment, there is no...