5,141 results · Feed
-
High 7.0
Windows Kernel Transaction Manager Elevation of Privilege Vulnerability
Use after free in Kernel Transaction Manager allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows GDI Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows GDI allows an authorized attacker to elevate privileges locally.
-
Medium 5.5
Windows Kernel Transaction Manager Information Disclosure Vulnerability
Use of uninitialized resource in Kernel Transaction Manager allows an authorized attacker to disclose information locally.
-
High 8.8
Windows Client for NFS Remote Code Execution Vulnerability
Use after free in Windows Client for NFS allows an unauthorized attacker to execute code over a network.
-
High 7.8
Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.
-
High 7.5
Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability
Use after free in Windows Link Layer Topology Discovery Protocol allows an unauthorized attacker to execute code over an adjacent network.
-
Medium 5.5
Windows Program Compatibility Assistant Service Information Disclosure Vulnerability
Use of uninitialized resource in Windows Program Compatibility Assistant Service allows an authorized attacker to disclose information locally.
-
High 7.8
Windows Sensor Data Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Task Scheduler Elevation of Privilege Vulnerability
Improper authorization in Windows Task Scheduler allows an authorized attacker to elevate privileges locally.
-
High 7.8CVE-2026-88235 Public exploit
Servicing Stack Updates Elevation of Privilege Vulnerability
Unintended proxy or intermediary ('confused deputy') in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.
-
Medium 5.7
Windows iSCSI Information Disclosure Vulnerability
Out-of-bounds read in Windows iSCSI allows an authorized attacker to disclose information over a network.
-
High 7.0
Windows Local Security Authority Subsystem Service (LSASS) Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows LUA File Virtualization Filter Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows LUAFV allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Broadcast DVR User Service Elevation of Privilege Vulnerability
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Local Security Authority Subsystem Service (LSASS) Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.
-
Medium 5.5
Windows Performance Counters Information Disclosure Vulnerability
Buffer over-read in Windows Performance Counters allows an authorized attacker to disclose information locally.
-
Critical 9.8
Windows DNS Remote Code Execution Vulnerability
Double free in Windows DNS allows an unauthorized attacker to execute code over a network.
-
High 7.5
Windows Kerberos Denial of Service Vulnerability
Missing release of memory after effective lifetime in Windows Kerberos allows an unauthorized attacker to deny service over a network.
-
High 7.0
Microsoft Bluetooth Driver Elevation of Privilege Vulnerability
Use after free in Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Local Security Authority Subsystem Service (LSASS) Elevation of Privilege Vulnerability
Use after free in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Error Reporting Elevation of Privilege Vulnerability
Double free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Projected File System Filter Driver Elevation of Privilege Vulnerability
Use after free in Windows Projected File System Filter Driver allows an authorized attacker to elevate privileges locally.
-
High 8.8
Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code over a network.
-
High 7.8
Windows NTFS Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when reparse points are created by sandboxed processes allowing sandbox escape. An attacker who successfully exploited the vulnerability could use the sandbox escape to elevate privileges on an affected system. T…
-
Medium 4.7
Windows NTFS Tampering Vulnerability
Time-of-check time-of-use (toctou) race condition in Windows NTFS allows an authorized attacker to perform tampering locally.
-
High 7.8
Windows Local Security Authority Subsystem Service (LSASS) Elevation of Privilege Vulnerability
Use after free in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.
-
Medium 6.5
Windows Remote Desktop Client Information Disclosure Vulnerability
Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.
-
Medium 6.5
Windows Remote Desktop Client Information Disclosure Vulnerability
Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.
-
Medium 5.3
Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability
Missing release of memory after effective lifetime in Windows Layer-2 Bridge Network Driver allows an unauthorized attacker to deny service over an adjacent network.
-
Medium 5.5
AMD Zen Information Disclosure Vulnerability
Processor optimization removal or modification of security-critical code in AMD Zen allows an authorized attacker to disclose information locally.
-
High 7.8
Windows Kernel Elevation of Privilege Vulnerability
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
-
High 8.8
Windows DNS Remote Code Execution Vulnerability
Deserialization of untrusted data in Windows DNS allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft ODBC Driver Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows ODBC Driver allows an unauthorized attacker to execute code over a network.
-
Medium 6.5
Windows GDI Information Disclosure Vulnerability
Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information over a network.
-
High 7.8
Windows Kernel Elevation of Privilege Vulnerability
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
-
Medium 6.5
Windows Remote Desktop Client Information Disclosure Vulnerability
Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.
-
Medium 5.5
Windows Overlay Filter Information Disclosure Vulnerability
Exposure of sensitive system information to an unauthorized control sphere in Windows Overlay Filter allows an authorized attacker to disclose information locally.
-
High 7.0
Windows Wireless Networking Elevation of Privilege Vulnerability
Use after free in Windows Wireless Networking allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows OLE DB Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows OLE DB allows an authorized attacker to elevate privileges locally.