Lucene search
+L
MicrosoftWindows Server 2019*

2012 matches found

CVE
CVE
added 2026/07/14 5:7 p.m.10 views

CVE-2026-50491

The CVE-2026-50491 entry documents an out-of-bounds read in the Code Integrity DLL (ci.dll) that enables an authorized local attacker to achieve Elevation of Privileges. Affected component: Windows Code Integrity mechanism (ci.dll). Root cause: out-of-bounds read in ci.dll leading to privilege es...

7.8CVSS6AI score0.00252EPSS
CVE
CVE
added 2026/07/14 5:5 p.m.10 views

CVE-2026-58601

CVE-2026-58601 describes a heap-based buffer overflow in the Virtual Hard Disk (VHD) Miniport Driver that allows an authorized, local attacker to elevate privileges. The available description specifies a local-privelege-escalation impact, but does not provide product/version specifics, exploitati...

7.8CVSS6.1AI score0.00223EPSS
CVE
CVE
added 2026/07/14 5:5 p.m.9 views

CVE-2026-34348

CVE-2026-34348 affects the Windows Event Logging Service. The issue is a protection mechanism failure that can allow an authorized attacker to disclose information over a network. According to the available records, the exploit surface is network-based with low privileges required and no user int...

6.5CVSS6.1AI score0.00715EPSS
CVE
CVE
added 2026/07/14 5:6 p.m.9 views

CVE-2026-50331

CVE-2026-50331 is a Windows Application Model Core API elevation-of-privilege vulnerability caused by a use-after-free issue. It affects the Windows Application Model Core API component and allows an authorized attacker with local access to elevate privileges. Microsoft has issued updates to addr...

7.8CVSS6AI score0.0024EPSS
CVE
CVE
added 2026/07/14 5:6 p.m.9 views

CVE-2026-50333

CVE-2026-50333 affects Windows Spaceport.sys. The vulnerability is described as missing authentication for a critical function, enabling a locally authenticated attacker to escalate privileges. Affected component is Spaceport.sys; no specific product version, root cause detail, or remediation ver...

7.8CVSS6AI score0.00214EPSS
CVE
CVE
added 2026/07/14 5:6 p.m.9 views

CVE-2026-50357

CVE-2026-50357 affects Windows Resilient File System (ReFS). The issue is a numeric truncation error in ReFS that, per the provided documents, can enable an authorized attacker to execute code locally. The MSRC/MSVCN details list this as an elevation of privileges / local arbitrary code execution...

7.8CVSS6.1AI score0.00311EPSS
CVE
CVE
added 2026/07/14 5:6 p.m.9 views

CVE-2026-50371

CVE-2026-50371 affects Windows LUAFV (Windows LUAFV driver). The issue is a race condition due to concurrent access to a shared resource without proper synchronization, enabling an authorized local attacker to elevate privileges. Microsoft has released updates addressing this family of vulnerabil...

7CVSS6.1AI score0.00188EPSS
CVE
CVE
added 2026/07/14 5:7 p.m.9 views

CVE-2026-50383

CVE-2026-50383 is a Windows Print Spooler Information Disclosure vulnerability (buffer over-read) in Print Spooler Components. It allows a locally authenticated attacker to disclose information on the affected system. According to the provided data, the attack vector is Local, with Low privileges...

6.1CVSS6AI score0.00298EPSS
CVE
CVE
added 2026/07/14 5:6 p.m.9 views

CVE-2026-50384

CVE-2026-50384 describes a race condition in the Windows Clip Service caused by concurrent execution over a shared resource with improper synchronization. This vulnerability allows a locally authenticated attacker to elevate privileges. The CVSS 3.1 vector is LOCAL, with HIGH impact on confidenti...

7CVSS6.1AI score0.00153EPSS
CVE
CVE
added 2026/07/14 5:6 p.m.9 views

CVE-2026-50388

CVE-2026-50388 is an Windows NTFS local vulnerability described as an out-of-bounds read that allows an unauthenticated/unauthorized attacker to execute code locally. The CVE is tracked across multiple sources (NVD, MSRC, CIRCL) with a base CVSS v3.1 score of 7.8 (High) and LOCAL attack vector, r...

7.8CVSS6.1AI score0.00435EPSS
CVE
CVE
added 2026/07/14 5:6 p.m.9 views

CVE-2026-50410

CVE-2026-50410 is a Windows Runtime use-after-free vulnerability that allows an authorized attacker to elevate privileges locally. Multiple connected sources confirm the issue affecting Windows Runtime and describe local privilege escalation as the impact, with CVSS v3.1 score of 7.0 (HIGH) and L...

7CVSS6AI score0.00199EPSS
CVE
CVE
added 2026/07/14 5:7 p.m.9 views

CVE-2026-50421

CVE-2026-50421 is a Windows vulnerability in Windows Connected User Experiences and Telemetry described as a local privilege escalation via a resource access type confusion. The CVE entry is supported by multiple records: NVD/NCSC/CIRCL indicate the issue and Microsoft has released updates to add...

7.8CVSS6AI score0.00311EPSS
CVE
CVE
added 2026/07/14 5:7 p.m.9 views

CVE-2026-50494

CVE-2026-50494 is a Windows NTFS vulnerability caused by a heap-based buffer overflow in NTFS handling that can let an authorized, local attacker execute code on the host. The issue affects Windows NTFS components and is being addressed by Microsoft security updates (e.g., KB5099539, KB5099540) r...

7.8CVSS6.2AI score0.00318EPSS
CVE
CVE
added 2026/07/14 5:7 p.m.9 views

CVE-2026-50497

CVE-2026-50497 is an off-by-one error in Windows Remote Desktop Protocol that allows an unauthenticated network attacker to disclose information. Public sources in the provided documents identify the affected component as RDP and describe a network-triggered information disclosure, without detail...

7.5CVSS6.1AI score0.00887EPSS
CVE
CVE
added 2026/07/14 5:4 p.m.9 views

CVE-2026-54112

CVE-2026-54112 affects Windows Win32K. The issue is a race condition caused by concurrent execution on a shared resource due to improper synchronization, enabling a locally authenticated user to elevate privileges. The base score is 7.8 (HIGH) with LOCAL attack vector, requiring LOW privileges an...

7.8CVSS6.1AI score0.00153EPSS
CVE
CVE
added 2026/07/14 5:4 p.m.9 views

CVE-2026-54987

CVE-2026-54987 is a Windows vulnerability described as a heap-based buffer overflow in the Windows Overlay Filter, enabling a locally authenticated attacker to elevate privileges. The CVSSv3.1 score is 7.8 (HIGH) with local attack vector, low attack complexity, and requires low privileges with no...

7.8CVSS6.1AI score0.0024EPSS
CVE
CVE
added 2026/07/14 5:10 p.m.9 views

CVE-2026-58539

CVE-2026-58539 is a Windows Remote Desktop Client/RDP vulnerability described as an out-of-bounds read that could allow an unauthenticated attacker to disclose information over a network. The connected documents corroborate this as a Windows RDP/Remote Desktop Client issue with public advisories ...

7.5CVSS6.1AI score0.00868EPSS
CVE
CVE
added 2026/07/14 5:10 p.m.9 views

CVE-2026-58632

CVE-2026-58632 is a Windows Win32K use-after-free vulnerability in the Win32 Kernel Subsystem that could allow a locally authenticated attacker to escalate privileges. The CVE is described as a local elevation of privilege (no remote code execution). Public sources in the connected set consistent...

7.8CVSS6AI score0.00289EPSS
CVE
CVE
added 2026/07/14 5:5 p.m.9 views

CVE-2026-58635

CVE-2026-58635 is a Windows Narrator Braille elevation-of-privilege vulnerability caused by improper neutralization of special elements used in a command. Exploitation is local, requires low privileges, and does not require user interaction; successful exploitation yields high impact to confident...

7.8CVSS6AI score0.00216EPSS
CVE
CVE
added 2026/07/14 5:5 p.m.8 views

CVE-2026-40422

CVE-2026-40422 concerns Windows File Explorer where an uninitialized resource leads to local information disclosure. The affected component is File Explorer; the underlying issue is an uninitialized resource, enabling an authorized user with local access (low privilege, no user interaction) to di...

5.5CVSS6AI score0.00298EPSS
CVE
CVE
added 2026/07/14 5:6 p.m.8 views

CVE-2026-50307

CVE-2026-50307 (Windows TCP/IP) is a local privilege-escalation vulnerability in the Windows TCP/IP stack caused by a use-after-free condition. The issue could allow an authenticated, local attacker to elevate privileges on a vulnerable system. The CVE is documented across multiple sources, inclu...

7.8CVSS6AI score0.002EPSS
CVE
CVE
added 2026/07/14 5:6 p.m.8 views

CVE-2026-50347

CVE-2026-50347 is a Windows Data.dll vulnerability characterized by a heap-based buffer overflow that allows an unauthorized, local attacker to execute code. The affected component is Windows Data.dll; the underlying issue is a heap overflow leading to remote-code-execution-style impact via local...

7.8CVSS6.2AI score0.00435EPSS
CVE
CVE
added 2026/07/14 5:6 p.m.8 views

CVE-2026-50370

CVE-2026-50370 is a heap-based buffer overflow in the Windows DHCP Server service that could allow an unauthenticated attacker on an adjacent network to execute code. The vulnerability is listed among the July 2026 Patch Tuesday disclosures and is included in Microsoft’s security updates (KB50995...

8.8CVSS6.3AI score0.00494EPSS
CVE
CVE
added 2026/07/14 5:6 p.m.8 views

CVE-2026-50372

CVE-2026-50372 — Windows Redirected Drive Buffering : A buffer over-read vulnerability in Windows Redirected Drive Buffering could allow an authorized, local attacker to elevate privileges. The CVE is corroborated by multiple sources (NVD, MSRC, EUVD/ENISA, CIRCL sighting) with an incident descri...

7CVSS6AI score0.00246EPSS
CVE
CVE
added 2026/07/14 5:7 p.m.8 views

CVE-2026-50448

CVE-2026-50448 – Windows NTFS Heap-based Overflow (Windows NTFS): A local, heap-based buffer overflow in NTFS could allow an authenticated attacker to execute arbitrary code on the affected system. The CVE is documented as a local-execution vulnerability with a Microsoft-provided CVSS v3.1 base s...

7.8CVSS6.2AI score0.00343EPSS
CVE
CVE
added 2026/07/14 5:7 p.m.8 views

CVE-2026-50460

CVE-2026-50460 describes a race-condition in Windows Runtime due to concurrent execution using a shared resource, enabling elevation of privileges over a network. The affected software is Windows Runtime; the root cause is improper synchronization during concurrent access. Reported impact indicat...

8.1CVSS6.2AI score0.00506EPSS
CVE
CVE
added 2026/07/14 5:7 p.m.8 views

CVE-2026-50462

CVE-2026-50462 affects the Windows Ancillary Function Driver for WinSock. The disclosed issue is external control of a file name or path, enabling an authorized attacker to elevate privileges locally (local privilege escalation). CVSS v3.1 score is 7.8 (High) with Privileges: Low, User Interactio...

7.8CVSS6AI score0.00392EPSS
CVE
CVE
added 2026/07/14 5:7 p.m.8 views

CVE-2026-50477

CVE-2026-50477 is a Windows Kernel elevation-of-privilege vulnerability caused by a heap-based buffer overflow. The issue allows an authenticated local attacker to elevate privileges on affected systems. Public disclosures identify the vulnerability in the Windows Kernel, with CVSS v3.1 base scor...

8.8CVSS6.1AI score0.00318EPSS
CVE
CVE
added 2026/07/14 5:8 p.m.8 views

CVE-2026-50686

CVE-2026-50686 is a Windows OLE remote code execution vulnerability caused by a type confusion in resource access. It enables network-exposed code execution without authentication and is documented with CVSS v3.1 base score 8.1 (High). Public references identify the affected area as Windows OLE, ...

8.1CVSS6.2AI score0.00674EPSS
CVE
CVE
added 2026/07/14 5:4 p.m.8 views

CVE-2026-50696

CVE-2026-50696 is a heap-based buffer overflow in the Windows Internet Key Exchange (IKE) Protocol that allows an unauthenticated, network-based attacker to cause a denial of service. The vulnerability is documented across several sources (NVD and CVE records), with a CVSS v3.1 base score of 7.5 ...

7.5CVSS6.2AI score0.00816EPSS
CVE
CVE
added 2026/07/14 5:4 p.m.8 views

CVE-2026-54109

CVE-2026-54109 : Integer overflow or wraparound in Windows Resilient File System (ReFS) allows an authorized local attacker to execute code. The NVD entry confirms a local-execution impact with high severity (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Details in connected sources show the vulnerabilit...

7.8CVSS6.2AI score0.0024EPSS
CVE
CVE
added 2026/07/14 5:9 p.m.8 views

CVE-2026-56173

CVE-2026-56173 is a use-after-free vulnerability in Windows WebView that allows an authorized local attacker to escalate privileges. The issue is tied to the Windows WebView component and is listed with a high impact (local elevation of privileges) in the CVE entry. Connected sources corroborate ...

7CVSS6AI score0.00252EPSS
CVE
CVE
added 2026/07/14 5:9 p.m.8 views

CVE-2026-56648

CVE-2026-56648 is a Windows Network File System (NFS) server vulnerability described as a time-of-check time-of-use (TOCTOU) race condition that could allow an authorized attacker to elevate privileges over the network. Public sources identify the root cause as a TOCTOU race in NFS and classify t...

7.5CVSS6.1AI score0.00474EPSS
CVE
CVE
added 2026/07/14 5:5 p.m.8 views

CVE-2026-58526

Technical details (affected product/component/root cause/versions/exploit info) are not publicly available in the provided documents. Monitor updates from NVD/CVE records and vendor advisories for any forthcoming specifics.

7.8CVSS6AI score0.00148EPSS
CVE
CVE
added 2026/07/14 5:9 p.m.8 views

CVE-2026-58538

CVE-2026-58538 describes a heap-based buffer overflow in the Windows Bluetooth Service that enables an authorized, local attacker to elevate privileges. The vulnerability is evidenced in multiple sources (NVD/NCSC/CIRCL) with consistent wording: heap-based overflow in the Bluetooth service leads ...

7.8CVSS6.1AI score0.00311EPSS
CVE
CVE
added 2026/07/14 5:4 p.m.7 views

CVE-2026-49168

CVE-2026-49168 is an elevation-of-privilege vulnerability in Windows Storage Spaces Direct caused by an integer overflow/wraparound. The issue, exploitable with physical access, allows an unauthenticated attacker to gain high-impact effects (confidentiality, integrity, and availability). CVSSv3.1...

6.8CVSS6.1AI score0.00305EPSS
CVE
CVE
added 2026/07/14 5:5 p.m.7 views

CVE-2026-49792

CVE-2026-49792 is a Windows ReFS vulnerability due to a numeric truncation error that allows an authorized, local attacker to execute code. Affected component is Windows Resilient File System (ReFS); impact is local code execution with high confidentiality, integrity, and availability impact as p...

7.8CVSS6.1AI score0.00257EPSS
CVE
CVE
added 2026/07/14 5:6 p.m.7 views

CVE-2026-49804

CVE-2026-49804 describes a heap-based buffer overflow in the Windows USB Video Driver that can allow an unauthorized attacker to elevate privileges via a physical attack. The vulnerability is characterized by a physical attack vector with low exploit complexity and the need for user interaction, ...

6.6CVSS6.2AI score0.0036EPSS
CVE
CVE
added 2026/07/14 5:6 p.m.7 views

CVE-2026-50335

CVE-2026-50335 is a Windows Operating Systems elevation of privilege vulnerability enabled by improper access control. The entry is supported by multiple connected sources (NVD, CIRCL sighting, MSRC/KB pages) and is documented as a local, privilege-escalation issue with CVSSv3.1 base score 7.8 (H...

7.8CVSS6AI score0.00278EPSS
CVE
CVE
added 2026/07/14 5:7 p.m.7 views

CVE-2026-50346

CVE-2026-50346 is a Windows RPC Runtime-related elevation-of-privilege vulnerability (Netlogon RPC). The primary description indicates improper authorization that allows a locally authenticated attacker to escalate privileges. Public references include the NVD/NCSC entries and the Microsoft updat...

7.8CVSS6AI score0.00278EPSS
CVE
CVE
added 2026/07/14 5:6 p.m.7 views

CVE-2026-50348

CVE-2026-50348 describes a race condition in Windows Runtime where concurrent execution using a shared resource with improper synchronization can allow an unauthenticated attacker to elevate privileges over a network. The description and publicly visible details indicate the vulnerability affects...

8.1CVSS6.2AI score0.00336EPSS
CVE
CVE
added 2026/07/14 5:7 p.m.7 views

CVE-2026-50457

CVE-2026-50457 (Windows Runtime) is a local elevation of privileges vulnerability caused by a use-after-free in Windows Runtime. An authorized attacker could exploit this to gain higher privileges on the system. The entry is corroborated by multiple sources (NVD/NCSC/Circl) and Microsoft has rele...

7.8CVSS6AI score0.00188EPSS
CVE
CVE
added 2026/07/14 5:7 p.m.7 views

CVE-2026-50469

CVE-2026-50469 affects Windows Projected File System. The flaw is an improper link resolution before file access (link following) that enables an authenticated local attacker to elevate privileges. Documented impact is privilege escalation with a CVSS 3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H score...

7.8CVSS6AI score0.00271EPSS
CVE
CVE
added 2026/07/14 5:7 p.m.7 views

CVE-2026-50478

CVE-2026-50478 is a Windows Kernel use-after-free vulnerability that enables local privilege escalation by an authorized attacker. The entry cites a Windows Kernel UAF issue with a high overall impact (CVSS v3.1: 7.8, Local, Privilege Escalation, Integrity/Confidentiality/Availability: High). Con...

7.8CVSS6AI score0.00318EPSS
CVE
CVE
added 2026/07/14 5:7 p.m.7 views

CVE-2026-50479

CVE-2026-50479 affects the Windows USB Hub Driver via an untrusted pointer dereference, enabling local privilege escalation for an authenticated user. Public sources confirm this vulnerability and Microsoft has released a security update to address it (MSRC vulnerability page). The entry is corro...

7.8CVSS6AI score0.00311EPSS
CVE
CVE
added 2026/07/14 5:4 p.m.7 views

CVE-2026-54114

CVE-2026-54114 is a Windows Win32K use-after-free that enables a local privilege elevation for an authenticated user. The vulnerability affects Win32k functionality (Win32k.sys context) and is triggered by an improper handling of freed objects, allowing an attacker to escalate to SYSTEM level on ...

7.8CVSS6AI score0.01921EPSS
CVE
CVE
added 2026/07/14 5:4 p.m.7 views

CVE-2026-54993

CVE-2026-54993 describes a heap-based buffer overflow in Microsoft Windows Media Foundation that could allow a local attacker to execute code on a vulnerable system. The public descriptions in the provided documents identify the affected component as Windows Media Foundation, with the vulnerabili...

7.8CVSS6.2AI score0.00335EPSS
CVE
CVE
added 2026/07/14 5:9 p.m.7 views

CVE-2026-56650

CVE-2026-56650 is a Windows Network File System (NFS) vulnerability. A heap-based buffer overflow in NFS allows an authenticated local attacker to escalate privileges. The CVE entry is supported by multiple sources (NVD/MSRC/CIRCL/NCSC) with consistent description and references. Microsoft has re...

7.8CVSS6.1AI score0.00311EPSS
CVE
CVE
added 2026/07/14 5:9 p.m.7 views

CVE-2026-57093

CVE-2026-57093 – Windows Ancillary Function Driver for WinSock is a reported use-after-free vulnerability in the WinSock ancillary function driver that can be exploited locally to achieve privilege escalation. The issue affects the specific Windows driver handling WinSock operations; successful e...

7.8CVSS6AI score0.0026EPSS
CVE
CVE
added 2026/07/14 5:10 p.m.7 views

CVE-2026-58637

CVE-2026-58637 affects Windows Client-Side Caching (CSC) Service. Description and sources confirm a use-after-free vulnerability that enables an authorized local attacker to elevate privileges. Metrics indicate local attack vector, low privileges required, and no user interaction, with high confi...

7CVSS6AI score0.00229EPSS
Total number of security vulnerabilities2012