221044 matches found
CVE-2026-65678 Windows Win32k Elevation of Privilege Vulnerability
...
CVE-2026-65678
CVE-2026-65678: A use-after-free in Windows Win32K enables an in-local privilege elevation by an authorized attacker. Affected software is Windows with Win32K component; the vulnerability arises from improper lifecycle handling leading to use-after-free conditions. The CVSS score is 7.0 (High) wi...
EUVD-2026-56436
Heap-based buffer overflow in Windows Remote Access API allows an authorized attacker to elevate privileges locally...
CVE-2026-65662 Windows GDI Information Disclosure Vulnerability
...
CVE-2026-65662
CVE-2026-65662 describes an out-of-bounds read in Windows GDI that allows an authorized local attacker to disclose information. The vulnerability impacts Windows GDI components and is rated with a CVSS v3.1 base score of 5.5 (Medium) , with local attack vector, low attack complexity, and low priv...
EUVD-2026-56435
Heap-based buffer overflow in Windows Remote Access API allows an authorized attacker to elevate privileges locally...
CVE-2026-65662 Windows GDI Information Disclosure Vulnerability
...
EUVD-2026-56434
Out-of-bounds read in Windows GDI allows an authorized attacker to disclose information locally...
CVE-2026-65657 Microsoft Office Remote Code Execution Vulnerability
...
CVE-2026-63513 Microsoft Office Graphics Component Remote Code Execution Vulnerability
...
CVE-2026-62909 .NET Elevation of Privilege Vulnerability
...
CVE-2026-62908
CVE-2026-62908: A race condition in the Windows Backup Engine allows local privilege escalation by an authorized attacker. Documented impact: high across confidentiality, integrity, and availability (CVSS 3.1 base score 7.0; LOCAL access; HIGH likelihood of impact). Affected component is the Wind...
CVE-2026-62908 Windows Backup Engine Elevation of Privilege Vulnerability
...
CVE-2026-62908 Windows Backup Engine Elevation of Privilege Vulnerability
...
EUVD-2026-56411
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Backup Engine allows an authorized attacker to elevate privileges locally...
EUVD-2026-56404
Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network...
CVE-2026-62894 Windows DWM Core Library Elevation of Privilege Vulnerability
...
CVE-2026-62893 Windows Deployment Services TFTP Server Remote Code Execution Vulnerability
...
CVE-2026-62893
CVE-2026-62893 affects Windows Deployment Services’ TFTP Server. The provided sources confirm a use-after-free defect that enables an unauthenticated, remote attacker to execute code over the network. CVSSv3.1 base score is 9.8 (CRITICAL) with network exploitation, no user interaction, and impact...