100 matches found
CVE-2026-85851
Use after free in Windows SmartScreen allows an authorized attacker to elevate privileges locally...
CVE-2026-83504
Time-of-check time-of-use toctou race condition in Windows SmartScreen allows an authorized attacker to disclose information locally...
CVE-2026-70051
Access of resource using incompatible type 'type confusion' in Windows SmartScreen allows an authorized attacker to elevate privileges locally...
CVE-2026-62879
Missing authentication for critical function in Windows SmartScreen allows an authorized attacker to perform tampering locally...
CVE-2026-108463
Improper resolution of path equivalence in Windows SmartScreen allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-108463
A vulnerability in Windows SmartScreen allows an unauthorized attacker to bypass a security feature over a network due to the improper resolution of path equivalence (CWE-41). The impact is rated as HIGH for confidentiality, integrity, and availability. No specific exploitative code or remediatio...
CVE-2026-70051
A type confusion vulnerability in Windows SmartScreen allows an authorized attacker to achieve local privilege escalation . The root cause involves the access of resources using incompatible types, which can lead to high impact on confidentiality, integrity, and availability. The CVSS 3.1 score i...
CVE-2026-62879
A missing authentication vulnerability in Windows SmartScreen (CWE-306) allows an authorized attacker to perform tampering locally . The vulnerability impacts the integrity of the system by enabling unauthorized modifications to critical functions. No specific exploit details or in-the-wild explo...
CVE-2026-85851
A Use after free vulnerability in Windows SmartScreen allows an authorized attacker to achieve local privilege elevation . The vulnerability is classified with a CVSS v3.1 base score of 7.8 (High) . While specific component details or exploit links are not provided in the documents, an official f...
CVE-2026-83504
A Time-of-check time-of-use (TOCTOU) race condition exists in Windows SmartScreen . This vulnerability allows an authorized attacker to perform a local information disclosure . Exploitation details are not provided in the documentation, but the vulnerability is confirmed to have a MEDIUM base sev...
Windows SmartScreen Elevation of Privilege Vulnerability
Access of resource using incompatible type 'type confusion' in Windows SmartScreen allows an authorized attacker to elevate privileges locally...
Windows SmartScreen Tampering Vulnerability
Missing authentication for critical function in Windows SmartScreen allows an authorized attacker to perform tampering locally...
Windows SmartScreen Elevation of Privilege Vulnerability
Use after free in Windows SmartScreen allows an authorized attacker to elevate privileges locally...
Windows SmartScreen Security Feature Bypass Vulnerability
Improper resolution of path equivalence in Windows SmartScreen allows an unauthorized attacker to bypass a security feature over a network...
PT-2026-112812
Name of the Vulnerable Software and Affected Versions Windows SmartScreen affected versions not specified Description A use-after-free condition in Windows SmartScreen allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occurs when an...
PT-2026-112181
Name of the Vulnerable Software and Affected Versions Windows SmartScreen affected versions not specified Description A type confusion issue occurs when a resource is accessed using an incompatible type. This allows an authorized attacker to elevate privileges locally on the system. Recommendatio...
PT-2026-112025
Name of the Vulnerable Software and Affected Versions Windows SmartScreen affected versions not specified Description Improper resolution of path equivalence allows an unauthorized attacker to bypass a security feature over a network. Recommendations At the moment, there is no information about a...
PT-2026-112046
Name of the Vulnerable Software and Affected Versions Windows SmartScreen affected versions not specified Description A missing authentication for a critical function allows an authorized attacker to perform local tampering, which can affect the system. Recommendations At the moment, there is no...
CVE-2026-62879: Missing Authentication for Critical Function
Missing authentication for critical function in Windows SmartScreen allows an authorized attacker to perform tampering locally...
CVE-2026-70051: Access of Resource Using Incompatible Type
Access of resource using incompatible type 'type confusion' in Windows SmartScreen allows an authorized attacker to elevate privileges locally...