223443 matches found
CVE-2026-50339
CVE-2026-50339 is a Windows Push Notifications information-disclosure vulnerability. It allows a low-privilege, local attacker with no user interaction to disclose sensitive data locally. Affected software is Windows Push Notifications; CVSS v3.1 base score 5.5 (Medium). Microsoft has released up...
CVE-2026-50434 Windows Push Notification Information Disclosure Vulnerability
...
CVE-2026-50315 Windows Image Acquisition Elevation of Privilege Vulnerability
...
CVE-2026-50315 Windows Image Acquisition Elevation of Privilege Vulnerability
...
CVE-2026-50315
CVE-2026-50315 is a Windows Image Acquisition vulnerability described as a null pointer dereference that allows an authorized, local attacker to achieve privilege escalation. The entry notes a CVSSv3.1 base score of 7.8 (High), with local attack vector, low attack complexity, required privileges,...
CVE-2026-50425
CVE-2026-50425: A use-after-free in Windows Internal System User Profile leads to local privilege escalation for an authorized attacker. Affected component: Windows Internal System User Profile; root cause: use-after-free; impact: gain high privileges locally with no user interaction (CVSSv3.1: A...
CVE-2026-50425 Windows Internal System User Profile Elevation of Privilege Vulnerability
...
CVE-2026-50425 Windows Internal System User Profile Elevation of Privilege Vulnerability
...
CVE-2026-50347 Windows Data.dll Remote Code Execution Vulnerability
...
CVE-2026-50321
CVE-2026-50321 is a Windows USB Driver elevation-of-privilege vulnerability (race condition on a shared resource). An authorized, local attacker could exploit this to gain higher privileges on the affected system, per the NVD entry and cross-referenced sources. Connected advisories corroborate th...
CVE-2026-50347 Windows Data.dll Remote Code Execution Vulnerability
...
CVE-2026-50347
CVE-2026-50347 is a Windows Data.dll vulnerability characterized by a heap-based buffer overflow that allows an unauthorized, local attacker to execute code. The affected component is Windows Data.dll; the underlying issue is a heap overflow leading to remote-code-execution-style impact via local...
CVE-2026-50321 Windows USB Driver Elevation of Privilege Vulnerability
...
CVE-2026-50321 Windows USB Driver Elevation of Privilege Vulnerability
...
CVE-2026-50396 Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
...
CVE-2026-50396
CVE-2026-50396 is a Windows Kernel-Mode Driver vulnerability described as a use-after-free in kernel-mode drivers that can allow an authenticated attacker to elevate privileges locally. The issue affects Windows kernel components classified under Windows Kernel-Mode Drivers and is mapped to CVSS ...
CVE-2026-50396 Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
...
CVE-2026-50331 Windows Application Model Core API Elevation of Privilege Vulnerability
...
CVE-2026-50331
CVE-2026-50331 is a Windows Application Model Core API elevation-of-privilege vulnerability caused by a use-after-free issue. It affects the Windows Application Model Core API component and allows an authorized attacker with local access to elevate privileges. Microsoft has issued updates to addr...