CVE-2026-88101 Microsoft Input Method Editor (IME) Elevation of Privilege Vulnerability
Weak authentication in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-88101 Microsoft US
Výsledky hledání
· zachyceno
· zachyceno
CVE-2026-88096 Windows DCOM Server Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DCOM Server allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-88096 US
· zachyceno
CVE-2026-88091 Windows Management Instrumentation Elevation of Privilege Vulnerability
Deserialization of untrusted data in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.
EPSS 0.03 CVE-2026-88091 US
· zachyceno
CVE-2026-87711 Windows Installer Elevation of Privilege Vulnerability
Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-87711 US
· zachyceno
CVE-2026-87708 Windows Installer Elevation of Privilege Vulnerability
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-87708 US
· zachyceno
CVE-2026-88080 Windows Installer Elevation of Privilege Vulnerability
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-88080 US
· zachyceno
CVE-2026-85927 Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-85927 US
· zachyceno
CVE-2026-85920 Windows BitLocker Elevation of Privilege Vulnerability
Time-of-check time-of-use (toctou) race condition in Windows BitLocker allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-85920 US
· zachyceno
CVE-2026-85918 Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability
Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-85918 US
· zachyceno
CVE-2026-85915 Windows PCI Bus Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows PCI Bus Driver allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-85915 US
· zachyceno
CVE-2026-85891 Azure HDInsight Information Disclosure Vulnerability
Exposure of sensitive information to an unauthorized actor in Azure HDInsight allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-85891 US
· zachyceno
CVE-2026-85881 Microsoft Office Graphics Elevation of Privilege Vulnerability
Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-85881 Microsoft US
· zachyceno
CVE-2026-71347 Windows Security Center Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Security Center allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-71347 US
· zachyceno
CVE-2026-85871 Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-85871 US
· zachyceno
CVE-2026-85869 Microsoft Windows Search Component Elevation of Privilege Vulnerability
Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-85869 Microsoft US
· zachyceno
CVE-2026-85870 Windows Common Log File System Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-85870 US
· zachyceno
CVE-2026-85868 Windows Common Log File System Driver Elevation of Privilege Vulnerability
Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-85868 US
· zachyceno
CVE-2026-85865 Windows DHCP Server Security Feature Bypass Vulnerability
Improper authentication in Windows DHCP Server allows an authorized attacker to bypass a security feature locally.
EPSS < 0.01 CVE-2026-85865 US
· zachyceno
CVE-2026-85864 Python Elevation of Privilege Vulnerability
Improper privilege management in Python allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-85864 Python US
· zachyceno
CVE-2026-85863 Clipboard User Service Elevation of Privilege Vulnerability
Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-85863 US
· zachyceno
CVE-2026-85861 Clipboard User Service Elevation of Privilege Vulnerability
Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-85861 US
· zachyceno
CVE-2026-85859 Windows Message Queuing Queue Manager Denial of Service Vulnerability
Null pointer dereference in Windows Message Queuing Queue Manager allows an authorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-85859 US
· zachyceno
CVE-2026-85858 Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-85858 US
· zachyceno
CVE-2026-85860 Windows Message Queuing Queue Manager Elevation of Privilege Vulnerability
Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-85860 US
· zachyceno
CVE-2026-85857 Windows Kernel-Mode Drivers Information Disclosure Vulnerability
Insertion of sensitive information into log file in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-85857 US
· zachyceno
CVE-2026-85856 Internet Connection Sharing (ICS) Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Internet Connection Sharing (ICS) allows an authorized attacker to execute code over an adjacent network.
EPSS < 0.01 CVE-2026-85856 US
· zachyceno
CVE-2026-85855 Windows DWM Core Library Elevation of Privilege Vulnerability
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-85855 US
· zachyceno
CVE-2026-85854 Windows DWM Core Library Elevation of Privilege Vulnerability
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-85854 US
· zachyceno
CVE-2026-85853 Windows DWM Core Library Elevation of Privilege Vulnerability
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-85853 US
· zachyceno
CVE-2026-85852 Windows Management Instrumentation Information Disclosure Vulnerability
Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-85852 US
· zachyceno
CVE-2026-85851 Windows SmartScreen Elevation of Privilege Vulnerability
Use after free in Windows SmartScreen allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-85851 US
· zachyceno
CVE-2026-85850 Windows Kernel Elevation of Privilege Vulnerability
Release of invalid pointer or reference in Windows Kernel allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-85850 US
· zachyceno
CVE-2026-85849 Windows AppX Deployment Service Elevation of Privilege Vulnerability
Improper link resolution before file access ('link following') in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-85849 US
· zachyceno
CVE-2026-85848 Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-85848 US
· zachyceno
CVE-2026-85847 Windows Print Spooler Components Information Disclosure Vulnerability
Out-of-bounds read in Windows Print Spooler Components allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-85847 US
· zachyceno
CVE-2026-85846 Web Account Manager Elevation of Privilege Vulnerability
Use after free in Windows Web Account Manager allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-85846 US
· zachyceno
CVE-2026-85843 Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability
Use of uninitialized resource in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-85843 US
· zachyceno
CVE-2026-85842 Windows Image Acquisition Elevation of Privilege Vulnerability
Use of externally-controlled format string in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-85842 US
· zachyceno
CVE-2026-85840 Windows Event Viewer Information Disclosure Vulnerability
Files or directories accessible to external parties in Windows Event Viewer allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-85840 US
· zachyceno
CVE-2026-85837 Windows Kernel Elevation of Privilege Vulnerability
Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-85837 US
· zachyceno
CVE-2026-85836 Windows Kernel Elevation of Privilege Vulnerability
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-85836 US
· zachyceno
CVE-2026-85835 Servicing Stack Updates Information Disclosure Vulnerability
Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-85835 US
· zachyceno
CVE-2026-85834 Windows TCP/IP Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-85834 US
· zachyceno
CVE-2026-85833 Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability
Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-85833 US
· zachyceno
CVE-2026-85832 Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-85832 US
· zachyceno
CVE-2026-85831 Windows Biometric Service Information Disclosure Vulnerability
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-85831 US
· zachyceno
CVE-2026-85830 Windows Installer Information Disclosure Vulnerability
Out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-85830 US
· zachyceno
CVE-2026-85829 Windows Wired AutoConfig Service Elevation of Privilege Vulnerability
Double free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-85829 US
· zachyceno
CVE-2026-85828 WebDAV Elevation of Privilege Vulnerability
Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-85828 US
· zachyceno
CVE-2026-85827 WebDAV Elevation of Privilege Vulnerability
Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-85827 US
· zachyceno
CVE-2026-85826 Windows Fast FAT Driver Elevation of Privilege Vulnerability
Out-of-bounds write in Windows Fast FAT Driver allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-85826 US
· zachyceno
CVE-2026-85824 Windows Composite Image File System Elevation of Privilege Vulnerability
Use after free in Windows Composite Image File System allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-85824 US
· zachyceno
CVE-2026-85823 Windows Composite Image File System Elevation of Privilege Vulnerability
Use after free in Windows Composite Image File System allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-85823 US
· zachyceno
CVE-2026-85825 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-85825 US
· zachyceno
CVE-2026-85822 Windows exFAT File System Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-85822 US
· zachyceno
CVE-2026-85821 Windows Universal Disk Format File System Driver (UDFS) Information Disclosure Vulnerability
Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally.
EPSS 0.01 CVE-2026-85821 US
· zachyceno
CVE-2026-85820 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-85820 US
· zachyceno
CVE-2026-85818 Windows Schannel Spoofing Vulnerability
Improper verification of cryptographic signature in Windows Schannel allows an unauthorized attacker to perform spoofing over a network.
EPSS < 0.01 CVE-2026-85818 US
· zachyceno
CVE-2026-85817 Microsoft PowerShell Remote Code Execution Vulnerability
Reliance on untrusted inputs in a security decision in Windows PowerShell allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-85817 Microsoft US
· zachyceno
CVE-2026-85816 Windows Wi-Fi Driver Information Disclosure Vulnerability
Out-of-bounds read in Windows Wi-Fi Driver allows an authorized attacker to disclose information over an adjacent network.
EPSS 0.01 CVE-2026-85816 US