CVE-2026-59125

Use after free in Virtual Hard Disk VHD Miniport Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-59125 Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability

...

CVE-2026-59125

Use-after-free in the Virtual Hard Disk (VHD) Miniport Driver can allow an authorized local attacker to elevate privileges. The vulnerability is described as a local privilege escalation with high impact to confidentiality, integrity, and availability. The CVSS vector indicates LOCAL access, user...

CVE-2026-70307 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

...

CVE-2026-68792

CVE-2026-68792 concerns a Microsoft Office command-injection vulnerability (improper neutralization of special elements used in a command) that allows an authorized, local attacker with low privileges and no user interaction to achieve local privilege elevation. Impacted aspects: confidentiality,...

CVE-2026-65787

The CVE-2026-65787 entry describes a heap-based buffer overflow in Desktop Window Manager that allows an authorized attacker to elevate privileges locally. Documented impact is local privilege escalation with a high severity (CVSS 3.1: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). The vulnerability affec...

CVE-2026-65786 Desktop Window Manager Elevation of Privilege Vulnerability

...

CVE-2026-62877 Windows Win32k Elevation of Privilege Vulnerability

...

CVE-2026-62816

CVE-2026-62816 describes a heap-based buffer overflow in the Windows Reliable Multicast Transport Driver (RMCAST). The vulnerability allows an unauthenticated attacker on an adjacent network to execute code on the affected system. Available sources state the issue and its high impact (C/H/I/A: hi...

CVE-2026-62798 Win32k Information Disclosure Vulnerability

...

EUVD-2026-56367

Untrusted pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-62737 Windows Kernel Elevation of Privilege Vulnerability

...

CVE-2026-62737

CVE-2026-62737 describes a local privilege escalation in Windows 11 kernel via untrusted pointer dereference in the ExecutionContext.sys path. Affected component: Windows kernel driver; vulnerability arises from insufficient validation of a kernel function pointer before dispatch to a worker thre...

CVE-2026-62737 Windows Kernel Elevation of Privilege Vulnerability

...

CVE-2026-62746

CVE-2026-62746 is a Windows Win32k information-disclosure vulnerability described as a buffer over-read that allows an authorized, local attacker to disclose information. Affected component: Win32k (Windows). Impact per provided metrics: confidentiality impact High; attack vector Local; attack co...

CVE-2026-62722

Heap-based buffer overflow in Windows Brokering File System allows an authorized attacker to elevate privileges locally...

CVE-2026-62713 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

...

CVE-2026-62713

CVE-2026-62713 : Heap-based buffer overflow in the Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. Available documents identify the affected component as the Windows Cloud Files Mini Filter Driver, with a local attack vector and low privileges r...

CVE-2026-62699 Windows Universal Disk Format File System Driver (UDFS) Remote Code Execution Vulnerability

...

CVE-2026-62699

The CVE-2026-62699 entry concerns the Windows Universal Disk Format File System Driver (UDFS). It describes a heap-based buffer overflow in UDFS that permits code execution by an unauthenticated attacker with physical access to the system. Affected component: UDFS in Windows. Root cause: heap-bas...