Windows Telephony Service Elevation of Privilege Vulnerability
CVE-2026-40382
Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
2026-05-13 归档
今日共收录 822 条安全情报，包含 0 个 CVE，457 篇安全通告，以及 56 篇研究论文。
← 返回归档列表Windows Kernel Elevation of Privilege Vulnerability
CVE-2026-40369
Untrusted pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally.
SQL Server Remote Code Execution Vulnerability
CVE-2026-40370
External control of file name or path in SQL Server allows an authorized attacker to execute code over a network.
Microsoft Word Remote Code Execution Vulnerability
CVE-2026-40367
Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally.
Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2026-40365
Insufficient granularity of access control in Microsoft Office SharePoint allows an authorized attacker to execute code
Microsoft Excel Remote Code Execution Vulnerability
CVE-2026-40362
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Microsoft Word Remote Code Execution Vulnerability
CVE-2026-40361
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
Microsoft Excel Remote Code Execution Vulnerability
CVE-2026-40359
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Microsoft Office Remote Code Execution Vulnerability
CVE-2026-40358
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2026-40357
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a ne
Windows Link-Layer Discovery Protocol (LLDP) Elevation of Privilege Vulnerability
CVE-2026-34341
Double free in Windows Link-Layer Discovery Protocol (LLDP) allows an authorized attacker to elevate privileges locally.
Windows Projected File System Elevation of Privilege Vulnerability
CVE-2026-34340
Use after free in Windows Projected File System allows an authorized attacker to elevate privileges locally.
Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability
CVE-2026-34339
Null pointer dereference in Windows LDAP - Lightweight Directory Access Protocol allows an authorized attacker to deny s
Windows Telephony Service Elevation of Privilege Vulnerability
CVE-2026-34338
Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
Windows DWM Core Library Information Disclosure Vulnerability
CVE-2026-34336
Buffer over-read in Windows DWM Core Library allows an authorized attacker to disclose information locally.
Windows TCP/IP Elevation of Privilege Vulnerability
CVE-2026-34334
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an
Windows Kernel-Mode Driver Remote Code Execution Vulnerability
CVE-2026-34332
Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to execute code over a network.
Windows Message Queuing (MSMQ) Elevation of Privilege Vulnerability
CVE-2026-33838
Double free in Windows Message Queuing allows an authorized attacker to elevate privileges locally.
Windows TCP/IP Local Elevation of Privilege Vulnerability
CVE-2026-33837
Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
Azure Machine Learning Notebook Spoofing Vulnerability
CVE-2026-33833
Improper neutralization of special elements in output used by a downstream component ('injection') in Azure Machine Lear