Untrusted search path in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.
CVE-2026-83509
Untrusted search path in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.
2026-10-29 归档
今日共收录 3209 条安全情报，包含 2330 个 CVE，388 篇安全通告，以及 93 篇研究论文。
← 返回归档列表Out-of-bounds read in Windows Print Spooler Components allows an unauthorized attacker to disclose information over a network.
CVE-2026-85353
Out-of-bounds read in Windows Print Spooler Components allows an unauthorized attacker to disclose information over a ne
Time-of-check time-of-use (toctou) race condition in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.
CVE-2026-83505
Time-of-check time-of-use (toctou) race condition in Windows Setup Files Cleanup allows an authorized attacker to elevat
Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
CVE-2026-85354
Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
External control of system or configuration setting in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.
CVE-2026-73027
External control of system or configuration setting in Windows Setup Files Cleanup allows an authorized attacker to elev
Inclusion of functionality from untrusted control sphere in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-85355
Inclusion of functionality from untrusted control sphere in Windows Common Log File System Driver allows an authorized a
Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83499
Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate pri
Out-of-bounds read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-85356
Out-of-bounds read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locall
Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authorized attacker to disclose information locally.
CVE-2026-83507
Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authoriz
Use of hard-coded credentials in Windows Update Orchestrator Service allows an authorized attacker to bypass a security feature locally.
CVE-2026-81964
Use of hard-coded credentials in Windows Update Orchestrator Service allows an authorized attacker to bypass a security
Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally.
CVE-2026-81969
Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate pri
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVE-2026-83508
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVE-2026-81971
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows NTFS allows an au
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Security Center allows an authorized attacker to elevate privileges locally.
CVE-2026-71347
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Security Center a
Missing authentication for critical function in Windows Credential Guard allows an authorized attacker to perform spoofing locally.
CVE-2026-70580
Missing authentication for critical function in Windows Credential Guard allows an authorized attacker to perform spoofi
Null pointer dereference in Windows Schannel allows an authorized attacker to elevate privileges locally.
CVE-2026-70566
Null pointer dereference in Windows Schannel allows an authorized attacker to elevate privileges locally.
Improper access control in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-70299
Improper access control in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
CVE-2026-70286
Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Phone Service allows an authorized attacker to elevate privileges locally.
CVE-2026-85357
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Phone Service all
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally.
CVE-2026-70278
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges loc