221083 matches found
CVE-2026-61933 Windows DWM Core Library Information Disclosure Vulnerability
...
CVE-2026-61933 Windows DWM Core Library Information Disclosure Vulnerability
...
CVE-2026-61934
CVE-2026-61934 details (from provided documents): A use-after-free bug in the Windows Bind Filter Driver enables a locally authenticated attacker to achieve privilege escalation. The vulnerability is associated with local attack vector and requires low attack complexity with low privileges, with ...
CVE-2026-61933
CVE-2026-61933 describes an out-of-bounds read in the Windows DWM Core Library that can allow a locally authorized attacker to disclose information. The CVE entry, with a CVSSv3.1 base score of 5.5 (Medium) and local access requiring low privileges and no user interaction, indicates impact is con...
CVE-2026-61932 Windows DWM Core Library Elevation of Privilege Vulnerability
...
CVE-2026-61932 Windows DWM Core Library Elevation of Privilege Vulnerability
...
CVE-2026-61932
The CVE-2026-61932 entry describes a type confusion vulnerability in the Windows DWM Core Library that allows an authorized attacker to achieve local privilege escalation . Affected component is the Windows DWM Core Library; root cause is resource access via incompatible type. The provided docume...
EUVD-2026-56337
Access of resource using incompatible type 'type confusion' in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...
CVE-2026-62692 Windows Remote Desktop Services Elevation of Privilege Vulnerability
...
CVE-2026-61937 Windows HTTP.sys Elevation of Privilege Vulnerability
...
CVE-2026-62692
CVE-2026-62692 : Heap-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to achieve local privilege escalation . The CVSS 3.1 vector is LOCAL, LOW exploitability with NONE user interaction and impact on Confidentiality, Integrity, Availability (HIGH) ; base sco...
CVE-2026-62692 Windows Remote Desktop Services Elevation of Privilege Vulnerability
...
CVE-2026-61937 Windows HTTP.sys Elevation of Privilege Vulnerability
...
EUVD-2026-56336
Heap-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally...
EUVD-2026-56335
Integer overflow or wraparound in Windows HTTP.sys allows an authorized attacker to elevate privileges locally...
CVE-2026-61937
CVE-2026-61937 is a Windows HTTP.sys elevation-of-privilege vulnerability caused by an integer overflow/wraparound. An authenticated, local attacker could exploit this to gain elevated privileges on affected systems. The available documents identify the vulnerable component as Windows HTTP.sys an...
CVE-2026-61928 Windows Hello Tampering Vulnerability
...
EUVD-2026-56333
Cleartext storage of sensitive information in Windows Hello allows an authorized attacker to perform tampering locally...