223469 matches found
CVE-2026-49800 Windows Web Proxy Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability
...
CVE-2026-49800
CVE-2026-49800 affects Windows Web Proxy Auto-Discovery Protocol (WPAD). Root cause is an integer overflow/wraparound in WPAD handling. Impact described as local privilege escalation for an authorized attacker, with high confidentiality, integrity, and availability impact. No specific exploit det...
CVE-2026-49798 Windows Kernel Elevation of Privilege Vulnerability
...
CVE-2026-49798
CVE-2026-49798 is a Windows Kernel use-after-free vulnerability that enables local privilege escalation. The root cause is use-after-free in kernel code, allowing an unauthenticated attacker with local access to elevate privileges. Affected component details are limited in the provided documents;...
CVE-2026-49798 Windows Kernel Elevation of Privilege Vulnerability
...
CVE-2026-49797
CVE-2026-49797 : Heap-based buffer overflow in Windows NTFS enables local code execution by an unauthenticated attacker. Affected component: NTFS. CVSSv3.1: 7.8 (HIGH). Exploitation status is not provided in the available documents; no remediation details are included.
CVE-2026-49797 Windows NTFS Remote Code Execution Vulnerability
...
CVE-2026-49797 Windows NTFS Remote Code Execution Vulnerability
...
CVE-2026-49796 Windows GDI+ Remote Code Execution Vulnerability
...
CVE-2026-49795
CVE-2026-49795 is a use-after-free in the Windows Kernel that allows an authorized local attacker to elevate privileges. Affected: Windows kernel code paths implementing kernel objects referenced after free. Root cause: use-after-free leads to arbitrary code execution with SYSTEM privileges; impa...
CVE-2026-49795 Windows Kernel Elevation of Privilege Vulnerability
...
CVE-2026-49796
CVE-2026-49796 is a heap-based buffer overflow in Windows GDI+ that can let a local attacker execute code. Affected: Windows GDI+ component; root cause is a heap buffer overflow. Impact per CVSS: local attack with user interaction required, high confidentiality, integrity, and availability impact...
CVE-2026-49795 Windows Kernel Elevation of Privilege Vulnerability
...
CVE-2026-49796 Windows GDI+ Remote Code Execution Vulnerability
...
CVE-2026-49794
CVE-2026-49794 concerns the Windows USB Audio Class driver (usbaudio.sys). The vulnerability is an out-of-bounds read in the driver that enables an unauthorized attacker to disclose information when a physical access scenario is present. Attacker class: physical access with low attack complexity ...
CVE-2026-49793 Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
...
CVE-2026-49794 Windows USB Audio Class Driver Information Disclosure Vulnerability
...
CVE-2026-49793 Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
...
CVE-2026-49793
CVE-2026-49793 is a heap-based buffer overflow in the Windows Resilient File System (ReFS) that could allow an authorized local attacker to execute code. Affected component: ReFS mechanisms handling memory allocations during I/O; root cause described as a heap-based overflow, enabling code execut...