CVE-2026-87691 Windows Management Services Elevation of Privilege Vulnerability
Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-87691 US
Výsledky hledání
· zachyceno
· zachyceno
CVE-2026-85945 Windows Kernel Elevation of Privilege Vulnerability
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-85945 US
· zachyceno
CVE-2026-85939 Windows Kernel Security Feature Bypass Vulnerability
Weak authentication in Windows Kernel allows an authorized attacker to bypass a security feature over a network.
EPSS < 0.01 CVE-2026-85939 US
· zachyceno
CVE-2026-85936 Windows Shell Remote Code Execution Vulnerability
Double free in Windows Shell allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-85936 US
· zachyceno
CVE-2026-85938 Windows Broadcast DVR User Service Information Disclosure Vulnerability
Improper access control in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-85938 US
· zachyceno
CVE-2026-85935 Windows USB Driver Information Disclosure Vulnerability
Buffer over-read in Windows USB Driver allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-85935 US
· zachyceno
CVE-2026-85934 Windows AppX Deployment Service Elevation of Privilege Vulnerability
Use after free in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-85934 US
· zachyceno
CVE-2026-85933 Windows Print Spooler Components Elevation of Privilege Vulnerability
Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-85933 US
· zachyceno
CVE-2026-85931 Windows Distributed File System (DFS) Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-85931 US
· zachyceno
CVE-2026-85930 Windows Image Acquisition Elevation of Privilege Vulnerability
Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-85930 US
· zachyceno
CVE-2026-85928 Windows Volume Manager Extension Driver Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-85928 US
· zachyceno
CVE-2026-85926 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-85926 US
· zachyceno
CVE-2026-85916 Azure Active Directory Information Disclosure Vulnerability
Exposure of private personal information to an unauthorized actor in Azure Active Directory allows an unauthorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-85916 US
· zachyceno
CVE-2026-85914 Windows Embedded Mode Service Elevation of Privilege Vulnerability
Use after free in Windows Embedded Mode Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-85914 US
· zachyceno
CVE-2026-85904 Windows Device Association Service Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-85904 US
· zachyceno
CVE-2026-85867 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-85867 US
· zachyceno
CVE-2026-85329 Microsoft Account Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Account allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-85329 Microsoft US
· zachyceno
CVE-2026-83888 Windows CD-ROM Driver Elevation of Privilege Vulnerability
Buffer over-read in Windows CD-ROM Driver allows an unauthorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-83888 US
· zachyceno
CVE-2026-83710 Windows Device Association Service Elevation of Privilege Vulnerability
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83710 US
· zachyceno
CVE-2026-83674 Active Directory Federation Services (AD FS) Spoofing Vulnerability
Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.
EPSS 0.01 CVE-2026-83674 US
· zachyceno
CVE-2026-70303 Windows Kernel Elevation of Privilege Vulnerability
Out-of-bounds write in Windows Kernel allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-70303 US
· zachyceno
CVE-2026-70277 Windows Fast FAT File System Driver Information Disclosure Vulnerability
Out-of-bounds read in Windows Fast FAT Driver allows an unauthorized attacker to disclose information locally.
EPSS 0.01 CVE-2026-70277 US
· zachyceno
CVE-2026-70270 Windows Container Isolation FS Filter Driver Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows Container Isolation FS Filter Driver allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-70270 US
· zachyceno
CVE-2026-70262 WebDAV Elevation of Privilege Vulnerability
Heap-based buffer overflow in WebDAV allows an unauthorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-70262 US
· zachyceno
CVE-2026-70244 Windows DNS Server Information Disclosure Vulnerability
Out-of-bounds read in DNS Server allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-70244 US
· zachyceno
CVE-2026-70238 Windows Storage Spaces Controller Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-70238 US
· zachyceno
CVE-2026-70216 Windows Mobile Device Management Tampering Vulnerability
Insufficient granularity of access control in Windows Mobile Device Management allows an authorized attacker to perform tampering locally.
EPSS < 0.01 CVE-2026-70216 US
· zachyceno
CVE-2026-70213 Microsoft Power Apps Remote Code Execution Vulnerability
Origin validation error in Microsoft Power Apps allows an authorized attacker to execute code over a network.
EPSS < 0.01 CVE-2026-70213 Microsoft US
· zachyceno
CVE-2026-70210 Windows OLE DB Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-70210 US
· zachyceno
CVE-2026-70187 Windows Remote Desktop Services Remote Code Execution Vulnerability
Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-70187 US
· zachyceno
CVE-2026-70185 Microsoft PowerShell Security Feature Bypass Vulnerability
Protection mechanism failure in Windows PowerShell allows an authorized attacker to bypass a security feature locally.
EPSS < 0.01 CVE-2026-70185 Microsoft US
· zachyceno
CVE-2026-70172 Windows NTFS Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-70172 US
· zachyceno
CVE-2026-70170 Windows Kernel Denial of Service Vulnerability
Untrusted pointer dereference in Windows Kernel allows an authorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-70170 US
· zachyceno
CVE-2026-70167 Windows Domain Name Service Remote Code Execution Vulnerability
Access of resource using incompatible type ('type confusion') in DNS Server allows an authorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-70167 US
· zachyceno
CVE-2026-70164 Windows TCP/IP Elevation of Privilege Vulnerability
Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-70164 US
· zachyceno
CVE-2026-70052 Microsoft PowerShell Remote Code Execution Vulnerability
Integer overflow or wraparound in Windows PowerShell allows an authorized attacker to execute code locally.
EPSS < 0.01 CVE-2026-70052 Microsoft US
· zachyceno
CVE-2026-70048 Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-70048 US
· zachyceno
CVE-2026-70041 Windows CD-ROM Driver Information Disclosure Vulnerability
Buffer over-read in Windows CD-ROM Driver allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-70041 US
· zachyceno
CVE-2026-69934 Windows Spaceport.sys Elevation of Privilege Vulnerability
Integer overflow or wraparound in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-69934 US
· zachyceno
CVE-2026-69916 Windows NTFS Elevation of Privilege Vulnerability
Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-69916 US
· zachyceno
CVE-2026-69877 Azure DevOps Information Disclosure Vulnerability
Origin validation error in Azure DevOps allows an unauthorized attacker to disclose information over a network.
EPSS < 0.01 CVE-2026-69877 US
· zachyceno
CVE-2026-69943 Microsoft Office SharePoint Remote Code Execution Vulnerability
Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-69943 Microsoft US
· zachyceno
CVE-2026-88165 Windows Active Directory Domain Services Remote Code Execution Vulnerability
Out-of-bounds write in Active Directory Domain Services allows an authorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-88165 US
· zachyceno
CVE-2026-88173 Windows Background Intelligent Transfer Service (BITS) Remote Code Execution Vulnerability
Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-88173 US
· zachyceno
CVE-2026-88162 Windows Encrypting File System (EFS) Tampering Vulnerability
Improper authorization in Windows Encrypting File System (EFS) allows an authorized attacker to perform tampering locally.
EPSS < 0.01 CVE-2026-88162 US
· zachyceno
CVE-2026-88168 Windows Bind Filter Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-88168 US
· zachyceno
CVE-2026-88159 Windows Background Intelligent Transfer Service (BITS) Remote Code Execution Vulnerability
Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-88159 US
· zachyceno
CVE-2026-88160 Microsoft Windows Search Component Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-88160 Microsoft US
· zachyceno
CVE-2026-88161 Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability
Use after free in Windows Local Security Authority (LSA) allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-88161 US
· zachyceno
CVE-2026-88158 Microsoft Digest Authentication Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Digest Authentication allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-88158 Microsoft US
· zachyceno
CVE-2026-88157 Microsoft OpenSSH for Windows Remote Code Execution Vulnerability
Heap-based buffer overflow in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-88157 Microsoft US
· zachyceno
CVE-2026-88124 Windows Installer Elevation of Privilege Vulnerability
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-88124 US
· zachyceno
CVE-2026-88101 Microsoft Input Method Editor (IME) Elevation of Privilege Vulnerability
Weak authentication in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-88101 Microsoft US
· zachyceno
CVE-2026-88096 Windows DCOM Server Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DCOM Server allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-88096 US
· zachyceno
CVE-2026-88091 Windows Management Instrumentation Elevation of Privilege Vulnerability
Deserialization of untrusted data in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.
EPSS 0.03 CVE-2026-88091 US
· zachyceno
CVE-2026-87711 Windows Installer Elevation of Privilege Vulnerability
Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-87711 US
· zachyceno
CVE-2026-87708 Windows Installer Elevation of Privilege Vulnerability
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-87708 US
· zachyceno
CVE-2026-88080 Windows Installer Elevation of Privilege Vulnerability
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-88080 US
· zachyceno
CVE-2026-85927 Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-85927 US
· zachyceno
CVE-2026-85920 Windows BitLocker Elevation of Privilege Vulnerability
Time-of-check time-of-use (toctou) race condition in Windows BitLocker allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-85920 US