CVE-2026-62713 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
EPSS 0.02 CVE-2026-62713 US
Výsledky hledání
60
CVE-2026-62707 Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability
Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-62707 US
CVE-2026-62705 Windows Bind Filter Driver Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-62705 US
CVE-2026-62703 Windows DWM Core Library Information Disclosure Vulnerability
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.
EPSS 0.00 CVE-2026-62703 US
CVE-2026-62699 Windows Universal Disk Format File System Driver (UDFS) Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an unauthorized attacker to execute code with a physical attack.
EPSS 0.00 CVE-2026-62699 US
CVE-2026-62702 Windows Graphics Kernel Denial of Service Vulnerability
Null pointer dereference in Windows Graphics Kernel allows an unauthorized attacker to deny service over a network.
EPSS 0.01 CVSS 6.8 CVE-2026-62702 US
CVE-2026-62693 Windows MIDI Service Module Elevation of Privileges Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-62693 US
CVE-2026-62690 Windows Push Notifications Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-62690 US
CVE-2026-61939 Winlogon Elevation of Privilege Vulnerability
Use after free in Winlogon allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-61939 US
CVE-2026-61936 Windows Defender Firewall Service Security Feature Bypass Vulnerability
Missing authorization in Windows Defender Firewall Service allows an authorized attacker to bypass a security feature locally.
EPSS 0.00 CVE-2026-61936 US
CVE-2026-61934 Windows Bind Filter Driver Elevation of Privilege Vulnerability
Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-61934 US
CVE-2026-61933 Windows DWM Core Library Information Disclosure Vulnerability
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.
EPSS 0.00 CVE-2026-61933 US
CVE-2026-61932 Windows DWM Core Library Elevation of Privilege Vulnerability
Access of resource using incompatible type ('type confusion') in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-61932 US
CVE-2026-62692 Windows Remote Desktop Services Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-62692 US
CVE-2026-61937 Windows HTTP.sys Elevation of Privilege Vulnerability
Integer overflow or wraparound in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-61937 US
CVE-2026-61930 Windows Kernel Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
EPSS 0.02 CVE-2026-61930 US
CVE-2026-61928 Windows Hello Tampering Vulnerability
Cleartext storage of sensitive information in Windows Hello allows an authorized attacker to perform tampering locally.
EPSS 0.00 CVE-2026-61928 US
CVE-2026-61927 Windows Bind Filter Driver Elevation of Privilege Vulnerability
Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-61927 US
CVE-2026-61925 Windows Installer Elevation of Privilege Vulnerability
Incorrect authorization in Windows Installer allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-61925 US
CVE-2026-61924 Windows Remote Desktop Client Information Disclosure Vulnerability
Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-61924 US
CVE-2026-61368 Windows Hyper-V Information Disclosure Vulnerability
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to disclose information locally.
EPSS 0.00 CVE-2026-61368 US
CVE-2026-61366 Windows Network Connection Broker Elevation of Privilege Vulnerability
Double free in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-61366 US
CVE-2026-61923 Windows Display Enhancement Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Display Enhancement Service allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-61923 US
CVE-2026-61367 Windows Remote Desktop Services Elevation of Privilege Vulnerability
Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-61367 US
CVE-2026-61356 Windows Remote Desktop Services Elevation of Privilege Vulnerability
Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-61356 US
CVE-2026-61350 Windows NTFS Information Disclosure Vulnerability
Buffer over-read in Windows NTFS allows an unauthorized attacker to disclose information with a physical attack.
EPSS 0.00 CVE-2026-61350 US
CVE-2026-61348 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
EPSS 0.02 CVE-2026-61348 US
CVE-2026-61361 Windows DHCP Client Remote Code Execution Vulnerability
Use after free in Windows DHCP Client allows an authorized attacker to execute code locally.
EPSS 0.00 CVE-2026-61361 US
CVE-2026-61353 Windows Telephony Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-61353 US
CVE-2026-61345 Microsoft Remote Registry Service Denial of Service Vulnerability
Null pointer dereference in Microsoft Remote Registry Service allows an authorized attacker to deny service over a network.
EPSS 0.01 CVSS 6.5 CVE-2026-61345 Microsoft US
CVE-2026-59138 Microsoft Remote Registry Service Denial of Service Vulnerability
Null pointer dereference in Microsoft Remote Registry Service allows an authorized attacker to deny service over a network.
EPSS 0.01 CVSS 6.5 CVE-2026-59138 Microsoft US
CVE-2026-59137 Windows Event Logging Service Information Disclosure Vulnerability
Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose information locally.
EPSS 0.00 CVE-2026-59137 US
CVE-2026-59136 Microsoft COM for Windows Information Disclosure Vulnerability
Use of uninitialized resource in Microsoft COM for Windows allows an authorized attacker to disclose information locally.
EPSS 0.00 CVE-2026-59136 Microsoft US
CVE-2026-59134 Remote Desktop Client Remote Code Execution Vulnerability
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-59134 US
CVE-2026-59135 Microsoft Windows Search Component Information Disclosure Vulnerability
Weak authentication in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.
EPSS 0.00 CVE-2026-59135 Microsoft US
CVE-2026-59132 Windows TCP/IP Denial of Service Vulnerability
Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service over a network.
EPSS 0.02 CVSS 7.5 CVE-2026-59132 US
CVE-2026-59130 AMD Zen Information Disclosure Vulnerability
No cwe for this issue in AMD Zen allows an authorized attacker to disclose information locally.
EPSS 0.00 CVE-2026-59130 AMD US
CVE-2026-59133 Microsoft High Performance Computing (HPC) Pack Elevation of Privilege Vulnerability
Execution with unnecessary privileges in Microsoft High Performance Computing (HPC) Pack allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-59133 Microsoft US
CVE-2026-59128 Windows Encrypting File System (EFS) Information Disclosure Vulnerability
Out-of-bounds read in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information locally.
EPSS 0.00 CVE-2026-59128 US
CVE-2026-59127 Windows Installer Elevation of Privilege Vulnerability
Integer overflow or wraparound in Windows Installer allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-59127 US
CVE-2026-47285 Visual Studio Code Information Disclosure Vulnerability
Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-47285 US
CVE-2026-47299 Azure Monitor Agent Elevation of Privilege Vulnerability
Improper neutralization of special elements used in a command ('command injection') in Azure Monitor Agent allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-47299 US
CVE-2026-59113 Visual Studio Code Remote Code Execution Vulnerability
Missing authorization in Visual Studio Code allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-59113 US
CVE-2026-49179 Windows Active Directory Domain Services Remote Code Execution Vulnerability
Improper neutralization of special elements used in a command ('command injection') in Windows Active Directory allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-49179 US
CVE-2026-54984 Windows Imaging Component Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code locally.
EPSS 0.01 CVSS 7.8 CVE-2026-54984 Microsoft US 2 zdrojů
CVE-2026-54113 Remote Procedure Call Denial of Service Vulnerability
Allocation of resources without limits or throttling in Windows Kernel allows an unauthorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-54113 US
CVE-2026-40375 Microsoft Dynamics Business Central Information Disclosure Vulnerability
Missing authorization in Dynamics Business Central allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-40375 Microsoft US
CVE-2026-63516 Microsoft SharePoint Server Spoofing Vulnerability
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
EPSS 0.01 CVE-2026-63516 Microsoft US
CVE-2026-63512 Microsoft SharePoint Server Tampering Vulnerability
Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to perform tampering over a network.
EPSS 0.01 CVE-2026-63512 Microsoft US
CVE-2026-63514 Microsoft SharePoint Server Remote Code Execution Vulnerability
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
EPSS 0.02 CVE-2026-63514 Microsoft US
CVE-2026-62837 Microsoft SharePoint Server Information Disclosure Vulnerability
Relative path traversal in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-62837 Microsoft US
CVE-2026-62827 Microsoft SharePoint Server Elevation of Privilege Vulnerability
Improper authentication in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-62827 Microsoft US
CVE-2026-62829 Microsoft SharePoint Server Spoofing Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
EPSS 0.00 CVE-2026-62829 Microsoft US
CVE-2026-57105 Microsoft Office SharePoint Spoofing Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
EPSS 0.01 CVE-2026-57105 Microsoft US
CVE-2026-58650 Visual Studio Code Security Feature Bypass Vulnerability
Authorization bypass through user-controlled key in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.
EPSS 0.00 CVE-2026-58650 US
CVE-2026-56174 Windows Narrator Braille Elevation of Privilege Vulnerability
Untrusted search path in Windows Narrator Braille allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-56174 US
CVE-2026-50472 Windows LUA File Virtualization Filter Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows LUAFV allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-50472 US
CVE-2026-42976 Remote Access Management service/API (RPC server) Elevation of Privilege Vulnerability
Missing authentication for critical function in Windows RPC API allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-42976 US
CVE-2026-70348 Windows Management Services Denial of Service Vulnerability
Improper link resolution before file access ('link following') in Windows Management Services allows an authorized attacker to deny service locally.
EPSS 0.00 CVE-2026-70348 US
CVE-2026-68815 Microsoft Excel Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-68815 Microsoft US