Windows Management Services Elevation of Privilege Vulnerability
CVE-2026-58544
Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally.
2026-07-15 归档
今日共收录 995 条安全情报，包含 81 个 CVE，528 篇安全通告，以及 87 篇研究论文。
← 返回归档列表Windows Kernel Security Feature Bypass Vulnerability
CVE-2026-58545
Improper access control in Windows Kernel allows an authorized attacker to bypass a security feature locally.
Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability
CVE-2026-58547
Heap-based buffer overflow in Universal Plug and Play (upnp.dll) allows an authorized attacker to elevate privileges loc
Windows Input Method Editor (IME) Elevation of Privilege Vulnerability
CVE-2026-58534
Heap-based buffer overflow in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges lo
Microsoft NAT Helper Components (ipnathlp.dll) Elevation of Privilege Vulnerability
CVE-2026-58537
Use after free in Microsoft NAT Helper Components (ipnathlp.dll) allows an authorized attacker to elevate privileges loc
Windows Kernel Elevation of Privilege Vulnerability
CVE-2026-58532
Integer overflow or wraparound in Windows Kernel allows an authorized attacker to elevate privileges locally.
Windows SMB Elevation of Privilege Vulnerability
CVE-2026-58531
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB allows an aut
Windows Installer Elevation of Privilege Vulnerability
CVE-2026-58540
Improper authorization in Windows Installer allows an authorized attacker to elevate privileges locally.
Windows Remote Desktop Client Information Disclosure Vulnerability
CVE-2026-58539
Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network.
Windows Remote Desktop Client Information Disclosure Vulnerability
CVE-2026-58546
Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network.
Windows Remote Desktop Client Information Disclosure Vulnerability
CVE-2026-58535
Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network.
Windows Remote Desktop Client Information Disclosure Vulnerability
CVE-2026-58533
Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network.
Windows Bluetooth Service Elevation of Privilege Vulnerability
CVE-2026-58538
Heap-based buffer overflow in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.
Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
CVE-2026-58530
Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker to execute code local
Windows USB Audio Class Driver Information Disclosure Vulnerability
CVE-2026-58528
Out-of-bounds read in Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker to disclose informat
Windows Runtime Elevation of Privilege Vulnerability
CVE-2026-58527
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an
Microsoft SharePoint Elevation of Privilege Vulnerability
CVE-2026-58277
Improper authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network
Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
CVE-2026-57982
Use of uninitialized resource in Windows RDP allows an authorized attacker to disclose information over a network.
Windows Subsystem for Linux (WSL2) Kernel Tampering Vulnerability
CVE-2026-57973
Time-of-check time-of-use (toctou) race condition in Windows Subsystem for Linux allows an authorized attacker to perfor
Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability
CVE-2026-57968
Buffer over-read in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.