Lucene search
+L

2780 matches found

CVE
CVE
added 2026/01/13 5:56 p.m.66 views

CVE-2026-20844

CVE-2026-20844 is a Windows Clipboard Server use-after-free vulnerability that enables local privilege escalation. The linked Nessus/NVD/CVE data confirm the affected component is Windows Clipboard Server and that successful exploitation yields elevation of privileges. The issue is being addresse...

7.4CVSS6.6AI score0.00325EPSS
Save
CVE
CVE
added 2026/01/13 5:56 p.m.66 views

CVE-2026-20858

CVE-2026-20858 is a Windows Management Services use-after-free local privilege escalation (high risk, CVSS 7.8). Connected documents confirm it affects Windows Management Services and is tracked in Microsoft’s January 2026 security updates (e.g., KB5073379/KB5073457). Remediation is via the poste...

7.8CVSS6.7AI score0.00297EPSS
Save
CVE
CVE
added 2026/02/10 5:51 p.m.66 views

CVE-2026-21255

CVE-2026-21255 is a Windows Hyper-V security feature bypass vulnerability described as improper access control that enables an authorized local attacker to bypass a security feature. Publicly available sources identify Hyper-V as the affected component, with the root cause tied to access-control ...

8.8CVSS5.5AI score0.0037EPSS
Save
CVE
CVE
added 2026/04/14 4:57 p.m.66 views

CVE-2026-27918

CVE-2026-27918 describes a race condition in the Windows Shell where concurrent execution over a shared resource allows an authorized local attacker to elevate privileges. The Red Hat and NC SC advisories reiterate the same description, confirming Windows Shell as the affected component and local...

7.8CVSS5.9AI score0.00192EPSS
Save
CVE
CVE
added 2026/07/14 5:06 p.m.66 views

CVE-2026-50318

CVE-2026-50318 affects the Windows Resilient File System (ReFS). It describes a stack-based buffer overflow that allows an authorized local attacker to elevate privileges. The CVSSv3.1 vector is LOCAL/LOW+LOW/LOW with no user interaction and implies high impact on confidentiality, integrity, and ...

7.8CVSS6.1AI score0.00333EPSS
Save
CVE
CVE
added 2026/07/14 5:06 p.m.66 views

CVE-2026-50335

CVE-2026-50335 is a Windows Operating Systems elevation of privilege vulnerability enabled by improper access control. The entry is supported by multiple connected sources (NVD, CIRCL sighting, MSRC/KB pages) and is documented as a local, privilege-escalation issue with CVSSv3.1 base score 7.8 (H...

7.8CVSS6AI score0.00298EPSS
Save
CVE
CVE
added 2026/07/14 5:06 p.m.66 views

CVE-2026-50356

CVE-2026-50356 describes a race-condition in Microsoft Windows App Store caused by concurrent execution using a shared resource with improper synchronization. This allows a locally authenticated attacker to elevate privileges. The fixed details or patch versions are not provided in the connected ...

7CVSS6.1AI score0.00202EPSS
Save
CVE
CVE
added 2026/07/14 5:07 p.m.66 views

CVE-2026-50382

CVE-2026-50382 is a Windows DirectX DirectX Graphics Kernel vulnerability caused by an untrusted pointer dereference, enabling a locally authenticated attacker to gain code execution. The issue affects the DirectX Graphics Kernel component of Windows DirectX and is listed among high-severity, loc...

8.8CVSS6.1AI score0.00333EPSS
Save
CVE
CVE
added 2026/07/14 5:07 p.m.66 views

CVE-2026-50429

CVE-2026-50429 describes an out-of-bounds read in the Windows Kernel that may allow a remote attacker to disclose information over a network. The entry is tied to Microsoft’s Windows kernel information-disclosure vulnerability with a base CVSSv3.1 score of 8.2 (Network, Low attack complexity, No ...

8.2CVSS6.1AI score0.01069EPSS
Save
CVE
CVE
added 2026/08/11 5:04 p.m.66 views

CVE-2026-62690

CVE-2026-62690 concerns Windows Push Notifications. The issue is a race condition caused by concurrent execution using a shared resource with improper synchronization, allowing an authorized attacker to elevate privileges locally. The available documents do not specify the affected product versio...

7CVSS5.4AI score0.00189EPSS
Save
CVE
CVE
added 2026/08/11 5:06 p.m.66 views

CVE-2026-62793

CVE-2026-62793 describes a buffer over-read in Windows NTFS that can allow an authorized local attacker to disclose information. Affected component: Windows NTFS filesystem handling. Root cause: memory over-read leading to confidential data exposure (C: HIGH, I: NONE, A: NONE per CVSS 3.1). Explo...

5.5CVSS5AI score0.00312EPSS
Save
CVE
CVE
added 2026/09/08 5:14 p.m.66 views

CVE-2026-68839

CVE-2026-68839 is a heap-based buffer overflow in the Windows USB Mass Storage Class Driver , allowing an unauthorized attacker to execute code over a network. Microsoft rates it CRITICAL with a CVSS 3.1 score of 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), indicating network-exploitable, no privil...

9.8CVSS6.3AI score0.00778EPSS
Save
CVE
CVE
added 2026/09/08 5:11 p.m.66 views

CVE-2026-69496

CVE-2026-69496 is a heap-based buffer overflow in Windows Compressed Folder that enables an unauthorized, unauthenticated attacker to achieve remote code execution over a network . Microsoft rates it CVSS 9.8 (Critical) with high impact to confidentiality, integrity, and availability. CISA's SSVC...

9.8CVSS8.6AI score0.00974EPSS
Save
CVE
CVE
added 2026/09/08 5:13 p.m.66 views

CVE-2026-69579

CVE-2026-69579 is a use-after-free vulnerability in Windows Message Queuing that allows an unauthorized attacker to execute code over a network . The CVSS 3.1 score is 9.8 (Critical) with a vector of AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, indicating network-exploitable, low-complexity remote code e...

9.8CVSS8.6AI score0.00975EPSS
Save
CVE
CVE
added 2026/09/08 5:18 p.m.66 views

CVE-2026-73009

This use-after-free vulnerability affects Windows Secure Socket Tunneling Protocol (SSTP) , allowing an unauthorized attacker to achieve remote code execution over a network with low attack complexity and no required privileges or user interaction . The CVSS 3.1 score is 9.8 (Critical) with high ...

9.8CVSS6.5AI score0.0089EPSS
Save
CVE
CVE
added 2025/07/08 4:57 p.m.65 views

CVE-2025-47975

Technical details about CVE-2025-47975 are not publicly provided in the connected documents. The available sources do not describe affected products/versions, root cause specifics, impact beyond the general privilege escalation claim, or fixes. Monitor for updates.

7CVSS6.6AI score0.00323EPSS
Save
CVE
CVE
added 2025/07/08 4:57 p.m.65 views

CVE-2025-48806

Technical details about CVE-2025-48806, including affected products, root cause, and remediation, are not provided in the connected documents. Monitor for official advisories and updates.

7.8CVSS7.3AI score0.00358EPSS
Save
CVE
CVE
added 2025/07/08 4:57 p.m.65 views

CVE-2025-48808

Technical details about CVE-2025-48808 are not provided in the connected documents. The materials reference Windows security updates generally but do not specify affected kernel components, versions, or fixes. Monitor official advisories for details.

5.5CVSS6AI score0.00493EPSS
Save
CVE
CVE
added 2025/07/08 4:57 p.m.65 views

CVE-2025-49685

CVE-2025-49685 is a local privilege-elevation vulnerability in the Microsoft Windows Search Component, caused by a use-after-free condition. The CVE is categorized with CVSS v3.1 base score 7.0 (HIGH), attack vector LOCAL, privilege required LOW, no user interaction, and affects Windows Search Co...

7CVSS6.9AI score0.00321EPSS
Save
CVE
CVE
added 2025/10/14 5:00 p.m.65 views

CVE-2025-50175

CVE-2025-50175 is a Windows Digital Media use-after-free that allows a local, authorized attacker to elevate privileges. The provided documents confirm the vulnerability name and impact (local elevation of privilege) and indicate Microsoft Windows components are involved, but they do not supply c...

7.8CVSS6.7AI score0.00424EPSS
Save
CVE
CVE
added 2025/08/12 5:10 p.m.65 views

CVE-2025-53145

CVE-2025-53145 is tracked as a Windows Message Queuing (MSMQ) remote code execution vulnerability. The connected data list it under Windows MSMQ with impact: Execute code (high severity, CVSS ~8.8/10) and references indicate MSMQ-related fixes were shipped in August 2025 security updates (KBs and...

8.8CVSS7.5AI score0.07599EPSS
Save
CVE
CVE
added 2025/10/14 5:00 p.m.65 views

CVE-2025-53150

CVE-2025-53150 is a Use-After-Free vulnerability in Windows Digital Media that enables a locally authenticated attacker to elevate privileges. Public documents (NVD, NCSC, EUVD, CIRCL/CVE listings) describe the issue as a local privilege-escalation bug but do not provide concrete details on affec...

7.8CVSS6.7AI score0.0032EPSS
Save
CVE
CVE
added 2025/09/09 5:01 p.m.65 views

CVE-2025-54916

CVE-2025-54916 is a Windows NTFS remote code execution vulnerability described as a stack-based overflow in NTFS. Connected sources confirm NTFS is affected and assign a high severity (CVSS ≈ 7.8). Public sources (including Krebs/NCSC) categorize this as an RCE issue for Windows NTFS, with exploi...

7.8CVSS7.3AI score0.02291EPSS
Save
CVE
CVE
added 2025/10/14 5:01 p.m.65 views

CVE-2025-59197

CVE-2025-59197 is a Windows ETL Channel vulnerability with a concrete technical detail: it arises from insertion of sensitive information into a log file, enabling an authorized attacker to disclose information locally. The connected documentation confirms this CVE is tied to the Windows ETL Chan...

5.5CVSS6.1AI score0.0045EPSS
Save
CVE
CVE
added 2025/10/14 5:00 p.m.65 views

CVE-2025-59201

CVE-2025-59201 concerns Windows Network Connection Status Indicator (NCSI). The issue is described as improper access control that could allow a locally authenticated attacker to escalate privileges on affected Windows systems. Connected Microsoft security advisories (KB5066793, KB5066835–KB50668...

7.8CVSS6.5AI score0.00444EPSS
Save
CVE
CVE
added 2026/01/13 5:56 p.m.65 views

CVE-2026-20814

CVE-2026-20814 is a local privilege-escalation in the Microsoft Graphics Kernel caused by a race condition when accessing a shared resource. An authorized local attacker could elevate privileges on affected Windows systems. The issue is documented in multiple sources (e.g., CVE lists and ENISA EU...

7CVSS6.6AI score0.00297EPSS
Save
CVE
CVE
added 2026/04/14 4:57 p.m.65 views

CVE-2026-26167

CVE-2026-26167 affects Windows Push Notification Core. The vulnerability is a race condition from improper synchronization of a shared resource, enabling a locally authenticated attacker to elevate privileges. IT guidance from the April 2026 Patch Tuesday indicates this EoP issue is among the cri...

8.8CVSS5.9AI score0.00177EPSS
Save
CVE
CVE
added 2026/04/14 4:58 p.m.65 views

CVE-2026-26176

Technical details about CVE-2026-26176 are not provided in the supplied documents. Monitor for updates from Microsoft Security Update Guide and CVE records for affected specifics, impact, and remediation.

7.8CVSS6AI score0.0023EPSS
Save
CVE
CVE
added 2026/04/14 4:58 p.m.65 views

CVE-2026-27922

CVE-2026-27922 is a vulnerability described as a use-after-free in the Windows Ancillary Function Driver for WinSock that can allow an authorized local attacker to elevate privileges. The Red Hat/NVD entries confirm the same description. The connected documents do not enumerate affected product v...

7CVSS5.7AI score0.00203EPSS
Save
CVE
CVE
added 2026/05/12 4:58 p.m.65 views

CVE-2026-33839

Technical details for CVE-2026-33839 (affected product/component, root cause, impact, remediation) are not provided in the connected documents. Monitor for updates or consult primary sources for actionable vulnerability specifics.

7CVSS5.9AI score0.0019EPSS
Save
CVE
CVE
added 2026/05/12 4:58 p.m.65 views

CVE-2026-35417

CVE-2026-35417 describes a type confusion vulnerability in Windows Win32K — ICOMP, where an attacker with local access could elevate privileges. The initial description states an authorized user can benefit locally, indicating a local privilege escalation with high impact (CVSS v3.1 base score 7....

7.8CVSS5.8AI score0.00345EPSS
Save
CVE
CVE
added 2026/06/09 5:05 p.m.65 views

CVE-2026-45601

CVE-2026-45601 concerns a use-after-free in the Windows Ancillary Function Driver for WinSock, leading to local privilege elevation. The vulnerability is triggered by an authorized attacker and enables local elevation of privileges; the CVSS v3.1 metrics indicate an overall HIGH severity (CVSS:3....

7CVSS7.1AI score0.00179EPSS
Save
CVE
CVE
added 2026/06/09 5:04 p.m.65 views

CVE-2026-45605

CVE-2026-45605 is a Windows Bluetooth Service use-after-free vulnerability that allows an authorized, locally located attacker to escalate privileges. The CVSS 3.1 base score is 7.8 (High) with local attack vector, low attack complexity, and no user interaction; impact includes confidentiality, i...

7.8CVSS5.4AI score0.00286EPSS
Save
CVE
CVE
added 2026/07/14 5:06 p.m.65 views

CVE-2026-50407

CVE-2026-50407 : A heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized local attacker to elevate privileges. The vulnerability is confirmed in multiple feeds (NVD/NCSC/MSRC) and is listed under ReFS with an impact of local privilege escalation. Microsoft has re...

7.8CVSS6.1AI score0.00333EPSS
Save
CVE
CVE
added 2026/07/14 5:07 p.m.65 views

CVE-2026-50479

CVE-2026-50479 affects the Windows USB Hub Driver via an untrusted pointer dereference, enabling local privilege escalation for an authenticated user. Public sources confirm this vulnerability and Microsoft has released a security update to address it (MSRC vulnerability page). The entry is corro...

7.8CVSS6AI score0.00333EPSS
Save
CVE
CVE
added 2026/07/14 5:04 p.m.65 views

CVE-2026-54122

CVE-2026-54122 describes a heap-based buffer overflow in Windows GDI+ that enables local code execution by an unauthenticated attacker. The vulnerability affects the Windows GDI+ component and is rated high (CVSS 3.1: AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, 8.4). The available documents confirm the ...

8.4CVSS6.2AI score0.00364EPSS
Save
CVE
CVE
added 2026/07/14 5:04 p.m.65 views

CVE-2026-55003

CVE-2026-55003 affects Windows Remote Desktop Protocol (RDP). The vulnerability arises from a use of an uninitialized resource, enabling an unauthenticated attacker to disclose information over the network. The CVSS 3.1 Base score is 6.5 (Medium); attack vector: Network, privileges required: None...

6.5CVSS6.1AI score0.00922EPSS
Save
CVE
CVE
added 2026/07/14 5:09 p.m.65 views

CVE-2026-57091

CVE-2026-57091 affects Windows File History Service. A stack-based buffer overflow in the service allows an authorized attacker to elevate privileges locally. Evidence from multiple sources confirms affected component and local privilege escalation impact; Microsoft has released updates to addres...

7.8CVSS6.1AI score0.00333EPSS
Save
CVE
CVE
added 2026/07/14 5:05 p.m.65 views

CVE-2026-58601

CVE-2026-58601 describes a heap-based buffer overflow in the Virtual Hard Disk (VHD) Miniport Driver that allows an authorized, local attacker to elevate privileges. The available description specifies a local-privelege-escalation impact, but does not provide product/version specifics, exploitati...

7.8CVSS6.1AI score0.00333EPSS
Save
CVE
CVE
added 2026/08/11 5:03 p.m.65 views

CVE-2026-61366

Affected component: Windows Network Connection Broker. Vulnerability: double free allows local privilege escalation by an authorized user. Root cause: double-free in the broker when handling network connection objects. Impact: high; local attacker with low privileges and no user interaction can e...

7CVSS5.1AI score0.00246EPSS
Save
CVE
CVE
added 2026/08/11 5:05 p.m.65 views

CVE-2026-65784

CVE-2026-65784 describes an out-of-bounds read in the Windows NTFS subsystem that allows an authorized local attacker to disclose information. The CVSS v3.1 base metrics assign a 5.5 (Medium) score with local attack vector , low attack complexity , and low privileges required , with no user inter...

5.5CVSS5AI score0.00299EPSS
Save
CVE
CVE
added 2025/07/08 4:57 p.m.64 views

CVE-2025-49687

Technical details about CVE-2025-49687 (affected products, root cause, impact, fixes) are not provided in the supplied documents. Monitor for updates and advisories.

8.8CVSS6.4AI score0.00333EPSS
Save
CVE
CVE
added 2025/08/12 5:10 p.m.64 views

CVE-2025-50177

CVE-2025-50177 affects Windows Message Queuing (MSMQ) with a use-after-free in the MSMQ path that enables remote code execution over a network. Affected: Windows MSMQ component. Impact per CVSS: high (8.1) with network access, no user interaction required. Exploitation as of the connected documen...

8.1CVSS7.9AI score0.04372EPSS
Save
CVE
CVE
added 2025/08/12 5:10 p.m.64 views

CVE-2025-53144

CVE-2025-53144 is a Windows Message Queuing (MSMQ) remote code execution vulnerability caused by a type confusion flaw in MSMQ. The issue allows an attacker to execute code over the network on a affected Windows host when MSMQ is reachable; CVSSv3.1 indicates AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H w...

8.8CVSS7.5AI score0.07599EPSS
Save
CVE
CVE
added 2025/08/12 5:10 p.m.64 views

CVE-2025-53155

CVE-2025-53155 is a Windows Hyper-V heap-based buffer overflow that enables an authenticated, local attacker to elevate privileges. The initial entry states an local privilege escalation via Hyper-V; connected materials corroborate Windows Hyper-V involvement under the Windows security ecosystem ...

7.8CVSS7.6AI score0.00461EPSS
Save
CVE
CVE
added 2025/09/09 5:00 p.m.64 views

CVE-2025-54099

CVE-2025-54099 affects the Windows Ancillary Function Driver for WinSock. The issue is a stack-based buffer overflow that can be exploited by an authorized, locally-located attacker to obtain elevated privileges. The connected NCSC advisory corroborates the CVE’s association with privilege escala...

7CVSS6.8AI score0.00375EPSS
Save
CVE
CVE
added 2025/10/14 5:01 p.m.64 views

CVE-2025-55332

CVE-2025-55332 (Windows BitLocker security feature bypass) Affects Windows BitLocker. The vulnerability is described as Improper enforcement of behavioral workflow in Windows BitLocker that could allow an unauthorized attacker to bypass a security feature via a physical attack. Connected sources ...

6.1CVSS6.1AI score0.00577EPSS
Save
CVE
CVE
added 2025/10/14 5:00 p.m.64 views

CVE-2025-55701

Technical details for CVE-2025-55701 (affected product/component/versions, root cause, exploit information, or remediation) are not publicly provided in the connected documents; monitor for updates from official sources.

7.8CVSS6.4AI score0.00408EPSS
Save
CVE
CVE
added 2025/10/14 5:00 p.m.64 views

CVE-2025-58728

CVE-2025-58728 is a Windows Bluetooth Service use-after-free elevation-of-privilege vulnerability. Connected documents corroborate a local, privilege-escalation impact (CVSS-like note: 7.8 HIGH, local access, no user interaction). The NCSC data lists CVE-2025-58728 under Windows Bluetooth Service...

7.8CVSS6.7AI score0.00424EPSS
Save
CVE
CVE
added 2025/10/14 5:00 p.m.64 views

CVE-2025-59200

CVE-2025-59200 describes a race-condition vulnerability in the Data Sharing Service Client where concurrent access to a shared resource allows an unauthorized local attacker to spoof locally. The CVE entry states a base CVSS v3.1 score of 7.7 ( HIGH ), with LOCAL attack vector, LOW confidentialit...

7.7CVSS6.6AI score0.00805EPSS
Save
Total number of security vulnerabilities2780