221040 matches found
CVE-2026-59122 Windows Telephony Service Elevation of Privilege Vulnerability
...
CVE-2026-59119 PowerShell Elevation of Privilege Vulnerability
...
CVE-2026-59122
CVE-2026-59122 describes a race condition in Windows Telephony Service caused by concurrent access to a shared resource with improper synchronization. This allows an authorized attacker with local access and low privileges to elevate privileges (CVSS v3.1: AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H; bas...
CVE-2026-59122
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Telephony Service allows an authorized attacker to elevate privileges locally...
CVE-2026-59119
CVE-2026-59119 : The vulnerability is in Microsoft PowerShell, caused by incorrect default permissions that allow an authorized, local attacker to elevate privileges. The CVSS v3.1 base score is 7.3 (HIGH) with LOCAL attack vector, LOW attack complexity, LOW privileges required, and user interact...
CVE-2026-58641
CVE-2026-58641 describes an integer overflow/wraparound in .NET that allows a local attacker to elevate privileges. The public descriptions state that the vulnerability is a local privilege escalation with high impact (confidentiality, integrity, and availability). The provided documents do not s...
EUVD-2026-56603
Improper link resolution before file access 'link following' in Windows Container Isolation FS Filter Driver unionfs.sys allows an authorized attacker to perform tampering locally...
CVE-2026-72971
CVE-2026-72971 applies to the Windows Container Isolation FS Filter Driver (unionfs.sys). The issue is improper link resolution before file access ("link following"), enabling a locally authenticated attacker with low privileges to tamper with files. CVSS 3.1 Base: 5.5 (Local, Low attack complexi...
CVE-2026-72971 Windows Container Isolation FS Filter Driver (unionfs.sys) Tampering Vulnerability
...
EUVD-2026-56604
Missing authentication for critical function in Windows RPC API allows an authorized attacker to elevate privileges locally...
CVE-2026-42976
Missing authentication for critical function in Windows RPC API allows an authorized attacker to elevate privileges locally...
CVE-2026-72971 Windows Container Isolation FS Filter Driver (unionfs.sys) Tampering Vulnerability
...
EUVD-2026-56601
Improper link resolution before file access 'link following' in Windows Management Services allows an authorized attacker to deny service locally...
CVE-2026-70348 Windows Management Services Denial of Service Vulnerability
...
CVE-2026-70348
CVE-2026-70348 describes an issue in Windows Management Services where improper link resolution before file access (link following) can allow an authenticated local attacker to cause a Denial of Service . The available sources state the vulnerability enables local DoS; no exploitable details or p...
CVE-2026-70348 Windows Management Services Denial of Service Vulnerability
...
CVE-2026-70347
CVE-2026-70347 describes a heap-based buffer overflow in Windows Installer that can enable an authenticated, local attacker to elevate privileges. Affected component is Windows Installer; the vulnerability is a local, privilege-escalation flaw with high impact (C:H/I:H/A:H) and CVSSv3.1 score 7.8...
CVE-2026-70347 Windows Installer Elevation of Privilege Vulnerability
...