226155 matches found
CVE-2026-56185
CVE-2026-56185 describes an information-disclosure issue in Windows Admin Center caused by improper authentication. The documented impact is that an authorized attacker can disclose information over a network, with a CVSS 3.1 base score of 6.5 (Network attack vector, Low attack complexity, Low pr...
CVE-2026-56185
Improper authentication in Windows Admin Center allows an authorized attacker to disclose information over a network...
CVE-2026-54127
Use after free in Windows Hyper-V allows an unauthorized attacker to elevate privileges locally...
CVE-2026-54127 Windows Hyper-V Elevation of Privilege Vulnerability
...
CVE-2026-50694 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
...
CVE-2026-50694
CVE-2026-50694 is a Windows SSTP use-after-free vulnerability that could allow an unauthenticated attacker to execute code remotely over the network. The issue affects Windows Secure Socket Tunneling Protocol (SSTP) and is rated high/critical in external assessments, with exploitation possible wi...
CVE-2026-50694 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
...
CVE-2026-54127 Windows Hyper-V Elevation of Privilege Vulnerability
...
CVE-2026-54127
CVE-2026-54127 describes a use-after-free vulnerability in Windows Hyper-V that enables a local elevation of privileges. The CVSS 3.1 vector indicates a local attack, high impact on confidentiality, integrity, and availability, with no user interaction required and no privileges needed. The conne...
CVE-2026-56169 Windows Admin Center Elevation of Privilege Vulnerability
...
CVE-2026-56169 Windows Admin Center Elevation of Privilege Vulnerability
...
CVE-2026-56169
CVE-2026-56169 concerns improper authentication in Windows Admin Center that can allow an attacker authenticated on the network to elevate privileges. The CVSS 3.1 base score is 8.1 (High), with network as the attack vector, low attack complexity, and low privileges required; confidentiality and ...
CVE-2026-55144 Windows Cryptography API: Next Generation (CNG) Tampering Vulnerability
...
CVE-2026-55144
The CVE-2026-55144 vulnerability concerns Windows Cryptography API: Next Generation (CNG). The issue is a missing cryptographic step in the Windows CryptoAPI that could allow an authorized, local attacker to tamper data, with impact to confidentiality and integrity (CVSSv3.1: Local attack, Low sk...
CVE-2026-55144
Missing cryptographic step in Windows CryptoAPI allows an authorized attacker to perform tampering locally...
CVE-2026-55144 Windows Cryptography API: Next Generation (CNG) Tampering Vulnerability
...
CVE-2026-54122
Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code locally...
CVE-2026-54122 Windows GDI+ Remote Code Execution Vulnerability
...