CVE Intelligence
Home / CVEs

CVE Database

Published vulnerabilities with severity, known exploitation and official sources.

Severity
Clear

948 result(s)

Export this search: RSS · CSV · STIX
CVE-2026-87710 High · 7.0 CWE-362 Oct 13, 2026
Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability
Improper access control in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally.
CVE-2026-85941 High · 7.0 CWE-362 Oct 13, 2026
Windows Installer Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-85912 High · 7.0 CWE-362 Oct 13, 2026
Clipboard User Service Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.
CVE-2026-85904 High · 7.0 CWE-362 Oct 13, 2026
Windows Device Association Service Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
CVE-2026-85825 High · 7.0 CWE-362 Oct 13, 2026
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
CVE-2026-85824 High · 7.0 CWE-362 Oct 13, 2026
Windows Composite Image File System Elevation of Privilege Vulnerability
Use after free in Windows Composite Image File System allows an authorized attacker to elevate privileges locally.
CVE-2026-85357 High · 7.0 CWE-362 Oct 13, 2026
Windows Phone Service Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Phone Service allows an authorized attacker to elevate privileges locally.
CVE-2026-85333 High · 7.0 CWE-362 Oct 13, 2026
Windows Performance Monitor Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Performance Monitor allows an authorized attacker to elevate privileges locally.
CVE-2026-85329 High · 7.0 CWE-362 Oct 13, 2026
Microsoft Account Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Account allows an authorized attacker to elevate privileges locally.
CVE-2026-83899 High · 7.0 CWE-362 Oct 13, 2026
Windows Installer Elevation of Privilege Vulnerability
Improper privilege management in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-83879 High · 7.0 CWE-362 Oct 13, 2026
Windows Overlay Filter Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
CVE-2026-83868 High · 7.0 CWE-362 Oct 13, 2026
Microsoft Bluetooth Driver Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-83841 High · 7.0 CWE-362 Oct 13, 2026
Windows Win32k Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVE-2026-83738 High · 7.0 CWE-362 Oct 13, 2026
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
CVE-2026-83722 High · 7.0 CWE-362 Oct 13, 2026
Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability
Use after free in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally.
CVE-2026-83666 High · 7.0 CWE-362 Oct 13, 2026
Active Directory Certificate Services (AD CS) Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges locally.
CVE-2026-81971 High · 7.0 CWE-362 Oct 13, 2026
Windows NTFS Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVE-2026-71347 Medium · 6.4 CWE-362 Oct 13, 2026
Windows Security Center Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Security Center allows an authorized attacker to elevate privileges locally.
CVE-2026-70250 High · 8.8 CWE-362 Oct 13, 2026
Windows DHCP Client Remote Code Execution Vulnerability
Use after free in Windows DHCP Client allows an unauthorized attacker to execute code over an adjacent network.
CVE-2026-70195 Medium · 4.7 CWE-362 Oct 13, 2026
Windows Ancillary Function Driver for WinSock Information Disclosure Vulnerability
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to disclose information locally.
CVE-2026-70183 High · 7.5 CWE-362 Oct 13, 2026
ASP.NET Core Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in ASP.NET Core allows an authorized attacker to elevate privileges over a network.
CVE-2026-70169 High · 7.0 CWE-362 Oct 13, 2026
Windows Connected Devices Platform Service Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally.
CVE-2026-70097 Medium · 5.6 CWE-362 Oct 13, 2026
Windows Virtualization-Based Security (VBS) Enclave Spoofing Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to perform spoofing locally.
CVE-2026-69935 High · 7.0 CWE-362 Oct 13, 2026
Windows Storage Elevation of Privilege Vulnerability
Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.
CVE-2026-69931 High · 7.0 CWE-362 Oct 13, 2026
Windows Storage Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Storage allows an authorized attacker to elevate privileges locally.