225772 matches found
CVE-2026-50385
CVE-2026-50385 affects Windows Runtime. The issue is a race-condition in a shared resource during concurrent execution, enabling a locally authenticated attacker to elevate privileges. Public details in connected sources confirm the vulnerability, its local privilege-escalation impact, and the Wi...
CVE-2026-50385 Windows Runtime Elevation of Privilege Vulnerability
...
CVE-2026-50426 Windows DNS Server Remote Code Execution Vulnerability
...
CVE-2026-50469 Windows Projected File System Elevation of Privilege Vulnerability
...
CVE-2026-50454
The CVE-2026-50454 entry describes a Privilege Elevation via Relative Path Traversal in Windows User Interface Core. Affected component: Windows User Interface Core; attack requires local access (LOCAL) with LOW privileges and no user interaction per the CVSS v3.1 vector. Impact is Elevation of P...
CVE-2026-50469
CVE-2026-50469 affects Windows Projected File System. The flaw is an improper link resolution before file access (link following) that enables an authenticated local attacker to elevate privileges. Documented impact is privilege escalation with a CVSS 3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H score...
CVE-2026-50454 Windows User Interface Core Elevation of Privilege Vulnerability
...
CVE-2026-50454 Windows User Interface Core Elevation of Privilege Vulnerability
...
CVE-2026-50469 Windows Projected File System Elevation of Privilege Vulnerability
...
CVE-2026-50471 Windows NTFS Remote Code Execution Vulnerability
...
CVE-2026-50369 Windows Remote Desktop Services Elevation of Privilege Vulnerability
...
CVE-2026-50369 Windows Remote Desktop Services Elevation of Privilege Vulnerability
...
CVE-2026-50471
CVE-2026-50471 is a heap-based buffer overflow in Windows NTFS that could allow a local attacker to execute arbitrary code. The vulnerability affects Windows NTFS components as described in multiple sources (NVD/NCSC/CIRCL) and is being addressed by Microsoft with published updates (e.g., KB arti...
CVE-2026-50471 Windows NTFS Remote Code Execution Vulnerability
...
CVE-2026-50369
CVE-2026-50369 is a Windows Remote Desktop Services vulnerability identified as a use-after-free that enables an authorized attacker to elevate privileges over the network. The initial entry and multiple connected sources describe the issue consistently and confirm the affected component as Windo...
CVE-2026-50437 Windows DWM Core Library Information Disclosure Vulnerability
...
CVE-2026-50436 Windows Kernel Elevation of Privilege Vulnerability
...
CVE-2026-50437 Windows DWM Core Library Information Disclosure Vulnerability
...
CVE-2026-50436
CVE-2026-50436 is a Windows Kernel local privilege escalation caused by a use-after-free vulnerability. Updates from Microsoft (e.g., KB5095051) address the issue; the CVSS vector indicates local access, low attack complexity, low privileges required, with high impact on confidentiality, integrit...