28400 matches found
Microsoft VOLSNAP.SYS Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows VOLSNAP.SYS allows an authorized attacker to elevate privileges locally...
Volume Manager Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Volume Manager Driver allows an authorized attacker to elevate privileges over a network...
Windows Overlay Filter Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges locally...
Windows Management Instrumentation Information Disclosure Vulnerability
Use of uninitialized resource in Windows Management Instrumentation allows an authorized attacker to disclose information over a network...
Microsoft SQL Server Denial of Service Vulnerability
Out-of-bounds read in SQL Server allows an authorized attacker to deny service over a network...
Windows NTFS Remote Code Execution Vulnerability
Buffer over-read in Windows NTFS allows an authorized attacker to execute code locally...
Microsoft SQL Server Information Disclosure Vulnerability
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...
Microsoft SQL Server Elevation of Privilege Vulnerability
Improper link resolution before file access 'link following' in SQL Server allows an authorized attacker to elevate privileges over a network...
Microsoft Windows Media Foundation Remote Code Execution Vulnerability
Out-of-bounds read in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network...
Chromium: CVE-2026-84347 Use after free in WebRTC
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Windows Print Spooler Components Elevation of Privilege Vulnerability
Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally...
Windows Bluetooth Service Elevation of Privilege Vulnerability
Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally...
Windows Kernel Information Disclosure Vulnerability
Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information over a network...
Windows Active Directory Domain Services Remote Code Execution Vulnerability
Use after free in Active Directory Domain Services allows an unauthorized attacker to execute code over a network...
Microsoft Windows Search Component Elevation of Privilege Vulnerability
Incorrect type conversion or cast in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
Windows Enterprise App Management Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Enterprise App Management allows an authorized attacker to elevate privileges over a network...
Windows Compressed Folder Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Compressed Folder allows an unauthorized attacker to execute code over a network...
Microsoft Standard XPS Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally...
Windows Registry Elevation of Privilege Vulnerability
Double free in Windows Registry allows an authorized attacker to elevate privileges over a network...
Windows Kernel Elevation of Privilege Vulnerability
Use after free in Windows Kernel allows an authorized attacker to elevate privileges over a network...
Microsoft Standard XPS Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally...
Windows Kernel Elevation of Privilege Vulnerability
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...
Skype for Business Information Disclosure Vulnerability
Generation of error message containing sensitive information in Skype for Business allows an unauthorized attacker to disclose information over a network...
Chromium: CVE-2026-84357 Improper input validation in Omnibox
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-84334 Incorrect authorization in Chromoting
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-84325 Improper input validation in DataTransfer
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Windows Spaceport.sys Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally...
Win32k Information Disclosure Vulnerability
Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally...
Windows Device Association Broker Service Elevation of Privilege Vulnerability
Use after free in Windows Device Association Broker service allows an authorized attacker to elevate privileges locally...
Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability
Heap-based buffer overflow in Microsoft Local Security Authority Server lsasrv allows an authorized attacker to elevate privileges locally...
Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability
Improper neutralization of special elements used in a command 'command injection' in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally...
Remote Desktop Services Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to execute code over a network...
Remote Desktop Services Remote Code Execution Vulnerability
Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network...
Connected Devices Platform Service (Cdpsvc) Elevation of Privilege Vulnerability
Use after free in Connected Devices Platform Service Cdpsvc allows an authorized attacker to elevate privileges locally...
Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability
Buffer over-read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally...
Windows DHCP Server Elevation of Privilege Vulnerability
Missing authentication for critical function in Windows DHCP Server allows an authorized attacker to elevate privileges over a network...
Windows Error Reporting Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
Windows Image Acquisition Elevation of Privilege Vulnerability
Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally...
Remote Desktop Gateway Service Elevation of Privilege Vulnerability
Double free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges locally...
Windows Device Association Service Elevation of Privilege Vulnerability
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges over a network...
Power Automate Elevation of Privilege Vulnerability
Server-side request forgery ssrf in Power Automate allows an authorized attacker to elevate privileges over a network...
Chromium: CVE-2026-84331 Incorrect authorization in Actor
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft Fabric Elevation of Privilege Vulnerability
Missing authorization in Microsoft Fabric allows an authorized attacker to elevate privileges over a network...
Azure AI Language Elevation of Privilege Vulnerability
Missing authentication for critical function in Azure AI Language allows an unauthorized attacker to elevate privileges over a network...
Windows Credential Providers Elevation of Privilege Vulnerability
Use after free in Windows Credential Providers allows an authorized attacker to elevate privileges locally...
Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Encrypting File System EFS allows an authorized attacker to elevate privileges locally...
Windows Accounts Control Elevation of Privilege Vulnerability
Use after free in Windows Accounts Control allows an authorized attacker to elevate privileges locally...
Active Directory Certificate Services (AD CS) Elevation of Privilege Vulnerability
Improper encoding or escaping of output in Active Directory Certificate Services AD CS allows an authorized attacker to elevate privileges locally...