744 matches found
CVE-2026-65778 Windows Autopilot Elevation of Privilege Vulnerability
...
CVE-2026-65779 Windows Autopilot Elevation of Privilege Vulnerability
...
CVE-2026-65774 Windows Installer Elevation of Privilege Vulnerability
...
CVE-2026-65681 Windows iSCSI Target Service Denial of Service Vulnerability
...
CVE-2026-62881
The CVE-2026-62881 entry describes a numeric truncation flaw in Windows DNS that allows an authenticated, local attacker to elevate privileges. Affected component is the Windows DNS service; root cause is a numeric truncation error. Exploitation is local with high privileges required and no user ...
CVE-2026-62881 Windows DNS Elevation of Privilege Vulnerability
...
CVE-2026-62799 Windows SMB Client Elevation of Privilege Vulnerability
...
CVE-2026-62799 Windows SMB Client Elevation of Privilege Vulnerability
...
CVE-2026-62768
CVE-2026-62768 describes a stack-based buffer overflow in Windows Installer that can allow an authorized, locally authenticated user to elevate privileges. Affected component is Windows Installer; root cause is a buffer overflow in processing certain installer data, leading to high impact on conf...
CVE-2026-62768 Windows Installer Elevation of Privilege Vulnerability
...
CVE-2026-62769 Windows DNS Elevation of Privilege Vulnerability
...
CVE-2026-62732 Windows Telephony Service Elevation of Privilege Vulnerability
...
CVE-2026-62734 Windows Telephony Service Elevation of Privilege Vulnerability
...
CVE-2026-62732 Windows Telephony Service Elevation of Privilege Vulnerability
...
CVE-2026-62743 Win32k Information Disclosure Vulnerability
...
CVE-2026-62726 Windows Telephony Service Elevation of Privilege Vulnerability
...
CVE-2026-62725
CVE-2026-62725 describes a use-after-free in the Windows Telephony Service that can allow a locally authenticated user to elevate privileges. The NVD/CVE records indicate an elevated-privilege, local-execution risk with a CVSS v3.1 base score of 7.0 (high) and impact on confidentiality, integrity...
CVE-2026-62709
The CVE describes an information-disclosure flaw in Windows GDI+. Affected component: Windows GDI+ (graphics rendering). Root cause: use of an uninitialized resource, enabling an authorized local attacker to disclose information. Impact: confidentiality loss with a CVSS v3.1 base score of 5.5 (Lo...