CVE-2026-83902 Windows Direct Composition Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83902 US
Výsledky hledání
· zachyceno
· zachyceno
CVE-2026-83879 Windows Overlay Filter Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83879 US
· zachyceno
CVE-2026-83867 Windows Push Notifications Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83867 US
· zachyceno
CVE-2026-83868 Microsoft Bluetooth Driver Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83868 Microsoft US
· zachyceno
CVE-2026-83901 Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83901 US
· zachyceno
CVE-2026-83882 Windows Kernel Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83882 US
· zachyceno
CVE-2026-83866 Windows Win32k Elevation of Privilege Vulnerability
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83866 US
· zachyceno
CVE-2026-83876 Windows Shell Elevation of Privilege Vulnerability
Use after free in Windows Shell allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83876 US
· zachyceno
CVE-2026-83869 Windows Domain Name Service Remote Code Execution Vulnerability
Integer underflow (wrap or wraparound) in DNS Server allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-83869 US
· zachyceno
CVE-2026-83875 Windows Human Interface Device Information Disclosure Vulnerability
Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-83875 US
· zachyceno
CVE-2026-83872 Windows TCP/IP Local Elevation of Privilege Vulnerability
Incorrect conversion between numeric types in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83872 US
· zachyceno
CVE-2026-83865 Windows Internet (wininet.dll) Tampering Vulnerability
Relative path traversal in Windows Internet (wininet.dll) allows an authorized attacker to perform tampering locally.
EPSS < 0.01 CVE-2026-83865 US
· zachyceno
CVE-2026-83864 Windows NTFS Information Disclosure Vulnerability
Improper access control in Windows NTFS allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-83864 US
· zachyceno
CVE-2026-83862 Windows Network Load Balancing Remote Code Execution Vulnerability
Use after free in Windows Network Load Balancing allows an unauthorized attacker to execute code over a network.
EPSS < 0.01 CVE-2026-83862 US
· zachyceno
CVE-2026-83855 Windows WLAN Service Denial of Service Vulnerability
Integer underflow (wrap or wraparound) in Windows WLAN Service allows an unauthorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-83855 US
· zachyceno
CVE-2026-83854 Windows Notification Information Disclosure Vulnerability
Improper access control in Windows Notification allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-83854 US
· zachyceno
CVE-2026-83853 Windows Hello Elevation of Privilege Vulnerability
Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83853 US
· zachyceno
CVE-2026-83852 Windows Bind Filter Driver Elevation of Privilege Vulnerability
Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83852 US
· zachyceno
CVE-2026-83851 Windows Partition Management Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Partition Management Driver allows an unauthorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-83851 US
· zachyceno
CVE-2026-83848 Windows COM+ Event System Service Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83848 US
· zachyceno
CVE-2026-83846 Connected Devices Platform Service (Cdpsvc) Elevation of Privilege Vulnerability
Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83846 US
· zachyceno
CVE-2026-83847 Microsoft Account Elevation of Privilege Vulnerability
Heap-based buffer overflow in Microsoft Account allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83847 Microsoft US
· zachyceno
CVE-2026-83849 Windows Hello Information Disclosure Vulnerability
Out-of-bounds read in Windows Hello allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-83849 US
· zachyceno
CVE-2026-83844 Windows Paint Remote Code Execution Vulnerability
Out-of-bounds read in Windows Paint allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-83844 US
· zachyceno
CVE-2026-83843 Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability
Out-of-bounds read in Windows Internet Key Exchange (IKE) Protocol allows an unauthorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-83843 US
· zachyceno
CVE-2026-83842 Windows TCP/IP Elevation of Privilege Vulnerability
Double free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83842 US
· zachyceno
CVE-2026-83838 Windows Bluetooth A2DP driver Elevation of Privilege Vulnerability
Integer underflow (wrap or wraparound) in Windows Bluetooth A2DP driver allows an authorized attacker to elevate privileges over an adjacent network.
EPSS 0.01 CVE-2026-83838 US
· zachyceno
CVE-2026-83839 Windows Hyper-V Elevation of Privilege Vulnerability
Time-of-check time-of-use (toctou) race condition in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83839 US
· zachyceno
CVE-2026-83834 Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability
Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83834 US
· zachyceno
CVE-2026-83836 Windows Event Tracing Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Event Tracing allows an unauthorized attacker to execute code locally.
EPSS < 0.01 CVE-2026-83836 US
· zachyceno
CVE-2026-83833 Windows Kernel Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83833 US
· zachyceno
CVE-2026-83832 Windows Spaceport.sys Elevation of Privilege Vulnerability
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83832 US
· zachyceno
CVE-2026-83828 Windows MIDI Service Module Elevation of Privileges Vulnerability
Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83828 US
· zachyceno
CVE-2026-83827 Windows Bluetooth Port Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Bluetooth Port Driver allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83827 US
· zachyceno
CVE-2026-83826 Windows Error Reporting Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83826 US
· zachyceno
CVE-2026-83796 Windows Kernel Elevation of Privilege Vulnerability
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83796 US
· zachyceno
CVE-2026-83798 Windows Update Stack Spoofing Vulnerability
Improper verification of cryptographic signature in Windows Update Stack allows an authorized attacker to perform spoofing locally.
EPSS < 0.01 CVE-2026-83798 US
· zachyceno
CVE-2026-83793 Windows Update Orchestrator Service Elevation of Privilege Vulnerability
Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83793 US
· zachyceno
CVE-2026-83787 Windows DHCP Server Security Feature Bypass Vulnerability
Insufficient verification of data authenticity in Windows DHCP Server allows an authorized attacker to bypass a security feature locally.
EPSS < 0.01 CVE-2026-83787 US
· zachyceno
CVE-2026-83784 Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability
Absolute path traversal in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-83784 US
· zachyceno
CVE-2026-83782 Windows Shell Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-83782 US
· zachyceno
CVE-2026-83780 Windows CCFFilter Driver Remote Code Execution Vulnerability
Use after free in Windows CCFFilter Driver allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-83780 US
· zachyceno
CVE-2026-83779 Windows Installer Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83779 US
· zachyceno
CVE-2026-83776 Windows Bluetooth Driver Elevation of Privilege Vulnerability
Out-of-bounds read in Microsoft Bluetooth Driver allows an unauthorized attacker to elevate privileges with a physical attack.
EPSS 0.01 CVE-2026-83776 Microsoft US
· zachyceno
CVE-2026-83775 Windows Installer Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83775 US
· zachyceno
CVE-2026-83768 Windows Kernel Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83768 US
· zachyceno
CVE-2026-83759 Windows Encrypting File System (EFS) Remote Code Execution Vulnerability
Improper control of generation of code ('code injection') in Windows Encrypting File System (EFS) allows an authorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-83759 US
· zachyceno
CVE-2026-83758 Windows Error Reporting Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to execute code locally.
EPSS < 0.01 CVE-2026-83758 US
· zachyceno
CVE-2026-83760 Microsoft Bluetooth Driver Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Bluetooth Driver allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-83760 Microsoft US
· zachyceno
CVE-2026-83761 Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83761 US
· zachyceno
CVE-2026-83754 Microsoft OpenSSH for Windows Remote Code Execution Vulnerability
Heap-based buffer overflow in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-83754 Microsoft US
· zachyceno
CVE-2026-83753 Windows Camera Frame Server Monitor Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83753 US
· zachyceno
CVE-2026-83749 Windows Overlay Filter Elevation of Privilege Vulnerability
Use after free in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83749 US
· zachyceno
CVE-2026-83748 Windows Error Reporting Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-83748 US
· zachyceno
CVE-2026-83740 Windows Hello Elevation of Privilege Vulnerability
Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83740 US
· zachyceno
CVE-2026-83738 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83738 US
· zachyceno
CVE-2026-83733 Windows Print Spooler Components Information Disclosure Vulnerability
Out-of-bounds read in Windows Print Spooler Components allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-83733 US
· zachyceno
CVE-2026-83727 Windows Overlay Filter Elevation of Privilege Vulnerability
Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83727 US
· zachyceno
CVE-2026-83726 Windows DWM Core Library Elevation of Privilege Vulnerability
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83726 US
· zachyceno
CVE-2026-83723 Windows Event Logging Service Information Disclosure Vulnerability
Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-83723 US