CVE-2026-87699 Winlogon Elevation of Privilege Vulnerability
Heap-based buffer overflow in Winlogon allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-87699 US
Výsledky hledání
· zachyceno
· zachyceno
CVE-2026-85943 Reliable Multicast Transport Driver (RMCAST) Elevation of Privilege Vulnerability
Time-of-check time-of-use (toctou) race condition in Reliable Multicast Transport Driver (RMCAST) allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-85943 US
· zachyceno
CVE-2026-85941 Windows Installer Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-85941 US
· zachyceno
CVE-2026-85884 Windows Health and Optimized Experiences Service Elevation of Privilege Vulnerability
Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-85884 US
· zachyceno
CVE-2026-69798 Windows Wired AutoConfig Service Elevation of Privilege Vulnerability
Use after free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-69798 US
· zachyceno
CVE-2026-69789 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability
Heap-based buffer overflow in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over an adjacent network.
EPSS < 0.01 CVE-2026-69789 US
· zachyceno
CVE-2026-85879 Windows Subsystem for Linux Elevation of Privilege Vulnerability
Time-of-check time-of-use (toctou) race condition in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-85879 US
· zachyceno
CVE-2026-85874 Windows Message Queuing Queue Manager Remote Code Execution Vulnerability
Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to execute code locally.
EPSS < 0.01 CVE-2026-85874 US
· zachyceno
CVE-2026-62840 Linux Kernel Elevation of Privilege Vulnerability
Time-of-check time-of-use (toctou) race condition in Linux Kernel allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-62840 Linux US
· zachyceno
CVE-2026-83935 Microsoft XML Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft XML allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-83935 Microsoft US
· zachyceno
CVE-2026-83934 Windows GDI+ Remote Code Execution Vulnerability
Stack-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-83934 US
· zachyceno
CVE-2026-83933 Windows Update Orchestrator Service Information Disclosure Vulnerability
Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-83933 US
· zachyceno
CVE-2026-83930 Windows Update Orchestrator Service Elevation of Privilege Vulnerability
Use after free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83930 US
· zachyceno
CVE-2026-83931 Windows Hyper-V Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.
EPSS < 0.01 CVE-2026-83931 US
· zachyceno
CVE-2026-83925 Windows Kernel Information Disclosure Vulnerability
Use of uninitialized resource in Windows Kernel allows an authorized attacker to disclose information locally.
EPSS 0.01 CVE-2026-83925 US
· zachyceno
CVE-2026-83924 Windows Kernel Elevation of Privilege Vulnerability
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83924 US
· zachyceno
CVE-2026-83923 Microsoft OpenSSH for Windows Remote Code Execution Vulnerability
Relative path traversal in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-83923 Microsoft US
· zachyceno
CVE-2026-83918 Windows Kernel Elevation of Privilege Vulnerability
Integer overflow or wraparound in Windows Kernel allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83918 US
· zachyceno
CVE-2026-83915 Windows Diagnostic Policy Service Elevation of Privilege Vulnerability
Use after free in Windows Diagnostic Policy Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83915 US
· zachyceno
CVE-2026-85912 Clipboard User Service Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-85912 US
· zachyceno
CVE-2026-83913 Windows Kernel Elevation of Privilege Vulnerability
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83913 US
· zachyceno
CVE-2026-85911 Windows StateRepository API Elevation of Privilege Vulnerability
Use after free in Windows StateRepository API allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-85911 US
· zachyceno
CVE-2026-85910 Windows StateRepository API Information Disclosure Vulnerability
Buffer over-read in Windows StateRepository API allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-85910 US
· zachyceno
CVE-2026-85909 Windows Universal Disk Format File System Driver (UDFS) Information Disclosure Vulnerability
Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-85909 US
· zachyceno
CVE-2026-83910 RPC Runtime Library Remote Code Execution Vulnerability
Out-of-bounds write in RPC Runtime allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-83910 US
· zachyceno
CVE-2026-85908 Windows Graphics Component Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-85908 US
· zachyceno
CVE-2026-83908 RPC Runtime Elevation of Privilege Vulnerability
Release of invalid pointer or reference in RPC Runtime allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83908 US
· zachyceno
CVE-2026-83907 Windows Hello Information Disclosure Vulnerability
Exposure of sensitive system information to an unauthorized control sphere in Windows Hello allows an authorized attacker to disclose information locally.
EPSS 0.01 CVE-2026-83907 US
· zachyceno
CVE-2026-85906 Windows Direct Composition Elevation of Privilege Vulnerability
Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-85906 US
· zachyceno
CVE-2026-85905 Windows UI Immersive Server API Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows UI Immersive Server allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-85905 US
· zachyceno
CVE-2026-83905 Windows Shell Information Disclosure Vulnerability
Exposure of sensitive system information to an unauthorized control sphere in Windows Shell allows an authorized attacker to disclose information locally.
EPSS 0.01 CVE-2026-83905 US
· zachyceno
CVE-2026-83904 HID Parser Library Information Disclosure Vulnerability
Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-83904 US
· zachyceno
CVE-2026-85903 Windows Domain Name Service Remote Code Execution Vulnerability
Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-85903 US
· zachyceno
CVE-2026-85902 Windows Direct Composition Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-85902 US
· zachyceno
CVE-2026-85901 Windows Graphics Component Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-85901 US
· zachyceno
CVE-2026-85872 Windows Storage VSP Driver Elevation of Privilege Vulnerability
Use after free in Windows Storage VSP Driver allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-85872 US
· zachyceno
CVE-2026-83903 Windows Direct Composition Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83903 US
· zachyceno
CVE-2026-83900 Windows Bind Filter Driver Elevation of Privilege Vulnerability
Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83900 US
· zachyceno
CVE-2026-83899 Windows Installer Elevation of Privilege Vulnerability
Improper privilege management in Windows Installer allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83899 US
· zachyceno
CVE-2026-83897 Windows Win32 Kernel Subsystem Information Disclosure Vulnerability
Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
EPSS 0.01 CVE-2026-83897 US
· zachyceno
CVE-2026-83889 Windows DNS Server Remote Code Execution Vulnerability
Release of invalid pointer or reference in DNS Server allows an authorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-83889 US
· zachyceno
CVE-2026-83873 Windows Shell Elevation of Privilege Vulnerability
Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83873 US
· zachyceno
CVE-2026-83877 Windows Devices Human Interface Elevation of Privilege Vulnerability
Integer overflow or wraparound in HID Parser Library allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83877 US
· zachyceno
CVE-2026-83895 Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an unauthorized attacker to elevate privileges with a physical attack.
EPSS < 0.01 CVE-2026-83895 US
· zachyceno
CVE-2026-83870 Windows Aggregated Data Platform Service Information Disclosure Vulnerability
Out-of-bounds read in Windows Aggregated Data Platform Service allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-83870 US
· zachyceno
CVE-2026-83898 HID Parser Library Information Disclosure Vulnerability
Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-83898 US
· zachyceno
CVE-2026-83884 Windows Human Interface Device Information Disclosure Vulnerability
Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-83884 US
· zachyceno
CVE-2026-83887 HID Parser Library Information Disclosure Vulnerability
Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-83887 US
· zachyceno
CVE-2026-83881 Windows exFAT File System Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83881 US
· zachyceno
CVE-2026-83883 Windows Win32k Elevation of Privilege Vulnerability
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83883 US
· zachyceno
CVE-2026-83874 Windows Event Tracing Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Event Tracing allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-83874 US
· zachyceno
CVE-2026-83863 Servicing Stack Updates Elevation of Privilege Vulnerability
Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83863 US
· zachyceno
CVE-2026-83861 Windows Remote Desktop Protocol Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Remote Desktop Protocol allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83861 US
· zachyceno
CVE-2026-83860 Windows GDI Denial of Service Vulnerability
Stack-based buffer overflow in Windows GDI allows an unauthorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-83860 US
· zachyceno
CVE-2026-83859 Windows NTFS Elevation of Privilege Vulnerability
Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83859 US
· zachyceno
CVE-2026-83857 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83857 US
· zachyceno
CVE-2026-83856 Windows Event Logging Service Remote Code Execution Vulnerability
Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-83856 US
· zachyceno
CVE-2026-83850 Microsoft Windows Search Component Elevation of Privilege Vulnerability
Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83850 Microsoft US
· zachyceno
CVE-2026-83845 Windows Internet (wininet.dll) Spoofing Vulnerability
Improper privilege management in Windows Internet (wininet.dll) allows an authorized attacker to perform spoofing locally.
EPSS < 0.01 CVE-2026-83845 US
· zachyceno
CVE-2026-83841 Windows Win32k Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83841 US