4155 matches found
CVE-2026-70307 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
...
CVE-2026-68792
CVE-2026-68792 concerns a Microsoft Office command-injection vulnerability (improper neutralization of special elements used in a command) that allows an authorized, local attacker with low privileges and no user interaction to achieve local privilege elevation. Impacted aspects: confidentiality,...
CVE-2026-65787
The CVE-2026-65787 entry describes a heap-based buffer overflow in Desktop Window Manager that allows an authorized attacker to elevate privileges locally. Documented impact is local privilege escalation with a high severity (CVSS 3.1: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). The vulnerability affec...
CVE-2026-65786 Desktop Window Manager Elevation of Privilege Vulnerability
...
CVE-2026-62877 Windows Win32k Elevation of Privilege Vulnerability
...
CVE-2026-62816
CVE-2026-62816 describes a heap-based buffer overflow in the Windows Reliable Multicast Transport Driver (RMCAST). The vulnerability allows an unauthenticated attacker on an adjacent network to execute code on the affected system. Available sources state the issue and its high impact (C/H/I/A: hi...
CVE-2026-62798 Win32k Information Disclosure Vulnerability
...
CVE-2026-62737 Windows Kernel Elevation of Privilege Vulnerability
...
EUVD-2026-56367
Untrusted pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally...
CVE-2026-62737
CVE-2026-62737 describes a local privilege escalation in Windows 11 kernel via untrusted pointer dereference in the ExecutionContext.sys path. Affected component: Windows kernel driver; vulnerability arises from insufficient validation of a kernel function pointer before dispatch to a worker thre...
CVE-2026-62746
CVE-2026-62746 is a Windows Win32k information-disclosure vulnerability described as a buffer over-read that allows an authorized, local attacker to disclose information. Affected component: Win32k (Windows). Impact per provided metrics: confidentiality impact High; attack vector Local; attack co...
CVE-2026-62713 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
...
CVE-2026-62713
CVE-2026-62713 : Heap-based buffer overflow in the Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. Available documents identify the affected component as the Windows Cloud Files Mini Filter Driver, with a local attack vector and low privileges r...
CVE-2026-62699
The CVE-2026-62699 entry concerns the Windows Universal Disk Format File System Driver (UDFS). It describes a heap-based buffer overflow in UDFS that permits code execution by an unauthenticated attacker with physical access to the system. Affected component: UDFS in Windows. Root cause: heap-bas...
CVE-2026-62695 Windows Storage Elevation of Privilege Vulnerability
...
CVE-2026-62695
CVE-2026-62695 is a Windows Storage vulnerability described as a heap-based buffer overflow that enables a locally authenticated attacker to elevate privileges. The linked metrics indicate a CVSSv3.1 base score of 7.8 (HIGH) with LOCAL attack vector, LOW attack complexity, and LOW privileges requ...
CVE-2026-61930 Windows Kernel Elevation of Privilege Vulnerability
...
CVE-2026-61930
CVE-2026-61930 describes a heap-based buffer overflow in the Windows kernel that allows an authorized attacker to elevate privileges locally. The available documents identify the affected component as the Windows Kernel and characterize the vulnerability as a local privilege escalation with a hig...