CVE-2026-62769 Windows DNS Elevation of Privilege Vulnerability

...

CVE-2026-62732 Windows Telephony Service Elevation of Privilege Vulnerability

...

CVE-2026-62734 Windows Telephony Service Elevation of Privilege Vulnerability

...

CVE-2026-62732 Windows Telephony Service Elevation of Privilege Vulnerability

...

CVE-2026-62743 Win32k Information Disclosure Vulnerability

...

CVE-2026-62726 Windows Telephony Service Elevation of Privilege Vulnerability

...

CVE-2026-62725

CVE-2026-62725 describes a use-after-free in the Windows Telephony Service that can allow a locally authenticated user to elevate privileges. The NVD/CVE records indicate an elevated-privilege, local-execution risk with a CVSS v3.1 base score of 7.0 (high) and impact on confidentiality, integrity...

CVE-2026-62709

The CVE describes an information-disclosure flaw in Windows GDI+. Affected component: Windows GDI+ (graphics rendering). Root cause: use of an uninitialized resource, enabling an authorized local attacker to disclose information. Impact: confidentiality loss with a CVSS v3.1 base score of 5.5 (Lo...

CVE-2026-62701 Windows Telephony Service Elevation of Privilege Vulnerability

...

CVE-2026-61938 Windows Installer Elevation of Privilege Vulnerability

...

CVE-2026-61359 Windows Storage Elevation of Privilege Vulnerability

...

CVE-2026-59126

The CVE refers to a race condition in Windows Event Logging Service where concurrent execution on a shared resource with improper synchronization can enable a local, authorized user to elevate privileges. Affected component: Windows Event Logging Service; root cause: race condition due to insuffi...

CVE-2026-59126 Windows Event Logging Service Elevation of Privilege Vulnerability

...

CVE-2026-59122

CVE-2026-59122 describes a race condition in Windows Telephony Service caused by concurrent access to a shared resource with improper synchronization. This allows an authorized attacker with local access and low privileges to elevate privileges (CVSS v3.1: AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H; bas...

CVE-2026-70344 Windows Installer Elevation of Privilege Vulnerability

...

CVE-2026-70330 Windows DNS Elevation of Privilege Vulnerability

...

CVE-2026-66799 Windows Key Guard Elevation of Privilege Vulnerability

...

CVE-2026-65788

CVE-2026-65788 is a use-after-free in Desktop Window Manager that enables local privilege escalation for an authorized user. Documented impact is elevation of privileges; CVSSv3.1 base score 7.0 (HIGH) with LOCAL attack, HIGH impact to confidentiality, integrity, and availability. Connected sourc...

EUVD-2026-56443

Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally...

CVE-2026-62777

CVE-2026-62777 concerns Windows License Manager. The available documents state: a missing authentication for a critical function could allow an authorized attacker to elevate privileges locally. The CVSS 3.1 vector is Local, Low attack complexity, with Privileges Required: Low and User Interactio...