CVE-2026-70161 .NET Elevation of Privilege Vulnerability
Improper limitation of a pathname to a restricted directory ('path traversal') in .NET allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-70161 US
Výsledky hledání
· zachyceno
· zachyceno
CVE-2026-70159 ASP.NET Core Denial of Service Vulnerability
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-70159 US
· zachyceno
CVE-2026-70174 .NET Remote Code Execution Vulnerability
Improperly implemented security check for standard in .NET allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-70174 US
· zachyceno
CVE-2026-70186 ASP.NET Core Denial of Service Vulnerability
Deadlock in ASP.NET Core allows an unauthorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-70186 US
· zachyceno
CVE-2026-70149 Windows Client Side Caching driver (csc.sys) Elevation of Privilege Vulnerability
Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver (csc.sys) allows an authorized attacker to disclose information locally.
EPSS 0.01 CVE-2026-70149 US
· zachyceno
CVE-2026-70116 Windows Resilient File System (ReFS) Security Feature Bypass Vulnerability
Stack-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker to bypass a security feature with a physical attack.
EPSS < 0.01 CVE-2026-70116 US
· zachyceno
CVE-2026-70147 Microsoft PostScript Printer Driver Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-70147 Microsoft US
· zachyceno
CVE-2026-70109 Microsoft PostScript Printer Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-70109 Microsoft US
· zachyceno
CVE-2026-70092 Microsoft PostScript Printer Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-70092 Microsoft US
· zachyceno
CVE-2026-70110 Microsoft PostScript Printer Driver Elevation of Privilege Vulnerability
Stack-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-70110 Microsoft US
· zachyceno
CVE-2026-70068 Windows Client-Side Caching (CSC) Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an unauthorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-70068 US
· zachyceno
CVE-2026-70131 Microsoft Windows Media Foundation Elevation of Privilege Vulnerability
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-70131 Microsoft US
· zachyceno
CVE-2026-70044 Microsoft Windows Media Foundation Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Windows Media Foundation allows an unauthorized attacker to disclose information locally.
EPSS 0.01 CVE-2026-70044 Microsoft US
· zachyceno
CVE-2026-70102 Windows Spaceport.sys Elevation of Privilege Vulnerability
Use after free in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-70102 US
· zachyceno
CVE-2026-70134 Windows Event Tracing Elevation of Privilege Vulnerability
Use after free in Windows Event Tracing allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-70134 US
· zachyceno
CVE-2026-70137 Windows Remote Access Connection Manager Information Disclosure Vulnerability
Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-70137 US
· zachyceno
CVE-2026-70045 Windows Work Folders Elevation of Privilege Vulnerability
Use after free in Windows Work Folders allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-70045 US
· zachyceno
CVE-2026-70013 Windows iSCSI Remote Code Execution Vulnerability
Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-70013 US
· zachyceno
CVE-2026-70031 Windows iSCSI Denial of Service Vulnerability
Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-70031 US
· zachyceno
CVE-2026-70038 Windows iSCSI Remote Code Execution Vulnerability
Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-70038 US
· zachyceno
CVE-2026-70011 Windows IP Over USB Service Information Disclosure Vulnerability
Out-of-bounds read in Windows IP Over USB Service allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-70011 US
· zachyceno
CVE-2026-70024 Windows Internet Information Services Remote Code Execution Vulnerability
Stack-based buffer overflow in Windows Internet Information Services allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-70024 US
· zachyceno
CVE-2026-70008 Windows IP Over USB Service Elevation of Privilege Vulnerability
Integer overflow or wraparound in Windows IP Over USB Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-70008 US
· zachyceno
CVE-2026-70113 Windows Client for NFS Elevation of Privilege Vulnerability
Integer overflow or wraparound in Windows Client for NFS allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-70113 US
· zachyceno
CVE-2026-70005 Active Directory Federation Services (AD FS) Security Feature Bypass Vulnerability
Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to bypass a security feature over a network.
EPSS 0.01 CVE-2026-70005 US
· zachyceno
CVE-2026-69982 Active Directory Federation Services (AD FS) Security Feature Bypass Vulnerability
Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to bypass a security feature over a network.
EPSS 0.01 CVE-2026-69982 US
· zachyceno
CVE-2026-69977 Quality Windows Audio/Video Experience (QWAVE) service Elevation of Privilege Vulnerability
Use after free in Quality Windows Audio/Video Experience (QWAVE) service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-69977 US
· zachyceno
CVE-2026-69955 Windows Client for NFS Information Disclosure Vulnerability
Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-69955 US
· zachyceno
CVE-2026-69949 Windows Client for NFS Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Client for NFS allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-69949 US
· zachyceno
CVE-2026-69940 Windows Client for NFS Information Disclosure Vulnerability
Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-69940 US
· zachyceno
CVE-2026-69923 Windows AI Elevation of Privilege Vulnerability
Uncontrolled search path element in Windows AI allows an authorized attacker to elevate privileges locally.
EPSS 0.01 CVE-2026-69923 US
· zachyceno
CVE-2026-88146 Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-88146 US
· zachyceno
CVE-2026-88143 Windows Storage Spaces Controller Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-88143 US
· zachyceno
CVE-2026-88140 Windows Key Storage Provider Information Disclosure Vulnerability
Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-88140 US
· zachyceno
CVE-2026-88137 WebDAV Information Disclosure Vulnerability
Files or directories accessible to external parties in WebDAV allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-88137 US
· zachyceno
CVE-2026-88136 Web Distributed Authoring and Versioning (WEBDAV) Remote Code Execution Vulnerability
Improper resolution of path equivalence in WebDAV allows an authorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-88136 US
· zachyceno
CVE-2026-88132 Azure Key Vault Information Disclosure Vulnerability
Origin validation error in Azure Key Vault allows an unauthorized attacker to disclose information over a network.
EPSS < 0.01 CVE-2026-88132 US
· zachyceno
CVE-2026-88107 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-88107 US
· zachyceno
CVE-2026-88106 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-88106 US
· zachyceno
CVE-2026-88102 Microsoft Failover Cluster Remote Code Execution Vulnerability
Use after free in Windows Failover Cluster allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-88102 Microsoft US
· zachyceno
CVE-2026-88100 Windows Storage Spaces Controller Elevation of Privilege Vulnerability
Use after free in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-88100 US
· zachyceno
CVE-2026-88099 Windows Failover Cluster Denial of Service Vulnerability
Uncaught exception in Windows Failover Cluster allows an unauthorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-88099 US
· zachyceno
CVE-2026-88098 Windows Security Support Provider Interface Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows Security Support Provider Interface allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-88098 US
· zachyceno
CVE-2026-85886 Microsoft SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
EPSS < 0.01 CVE-2026-85886 Microsoft US
· zachyceno
CVE-2026-85876 Microsoft SQL Server Elevation of Privilege Vulnerability
Use after free in SQL Server allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-85876 Microsoft US
· zachyceno
CVE-2026-83945 Microsoft SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-83945 Microsoft US
· zachyceno
CVE-2026-70189 Microsoft SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.
EPSS < 0.01 CVE-2026-70189 Microsoft US
· zachyceno
CVE-2026-68883 Microsoft SQL Server Elevation of Privilege Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-68883 Microsoft US
· zachyceno
CVE-2026-88074 Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability
Integer overflow or wraparound in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-88074 US
· zachyceno
CVE-2026-88073 Windows Graphics Kernel Elevation of Privilege Vulnerability
Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-88073 US
· zachyceno
CVE-2026-88071 Windows Hyper-V Elevation of Privilege Vulnerability
Double free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-88071 US
· zachyceno
CVE-2026-88070 Windows BitLocker Elevation of Privilege Vulnerability
Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-88070 US
· zachyceno
CVE-2026-87716 Windows Storage Spaces Controller Denial of Service Vulnerability
Heap-based buffer overflow in Windows Storage Spaces Controller allows an unauthorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-87716 US
· zachyceno
CVE-2026-87714 WebDAV Security Feature Bypass Vulnerability
Missing authorization in WebDAV allows an authorized attacker to bypass a security feature over a network.
EPSS < 0.01 CVE-2026-87714 US
· zachyceno
CVE-2026-87713 Windows Bluetooth Port Driver Remote Code Execution
Use after free in Windows Bluetooth Port Driver allows an unauthorized attacker to elevate privileges over an adjacent network.
EPSS < 0.01 CVE-2026-87713 US
· zachyceno
CVE-2026-87712 Microsoft Windows QoS Scheduler Driver Elevation of Privilege Vulnerability
Use after free in Windows Quality of Service (QoS) Packet Scheduler allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-87712 Microsoft US
· zachyceno
CVE-2026-87710 Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability
Improper access control in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-87710 Microsoft US
· zachyceno
CVE-2026-87707 Windows Fax and Scan Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Fax and Scan Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-87707 US
· zachyceno
CVE-2026-87706 Windows Storage Spaces Controller Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-87706 US
· zachyceno
CVE-2026-87697 .NET Remote Code Execution Vulnerability
Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-87697 US