#CVE

共收录 70327 条相关情报。

← 返回所有主题
漏洞预警2026-10-13 发布HIGH

Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.

CVE-2026-83863

Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-83852

Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Heap-based buffer overflow in Windows Partition Management Driver allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-83851

Heap-based buffer overflow in Windows Partition Management Driver allows an unauthorized attacker to elevate privileges

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

CVE-2026-83850

Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges loc

来源摘录 · NVD

漏洞预警2026-10-13 发布MEDIUM

Out-of-bounds read in Windows Hello allows an authorized attacker to disclose information locally.

CVE-2026-83849

Out-of-bounds read in Windows Hello allows an authorized attacker to disclose information locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.

CVE-2026-83848

Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges l

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Heap-based buffer overflow in Microsoft Account allows an authorized attacker to elevate privileges locally.

CVE-2026-83847

Heap-based buffer overflow in Microsoft Account allows an authorized attacker to elevate privileges locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally.

CVE-2026-83846

Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locall

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Improper privilege management in Windows Internet (wininet.dll) allows an authorized attacker to perform spoofing locally.

CVE-2026-83845

Improper privilege management in Windows Internet (wininet.dll) allows an authorized attacker to perform spoofing locall

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Out-of-bounds read in Windows Paint allows an unauthorized attacker to execute code locally.

CVE-2026-83844

Out-of-bounds read in Windows Paint allows an unauthorized attacker to execute code locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Out-of-bounds read in Windows Internet Key Exchange (IKE) Protocol allows an unauthorized attacker to deny service over a network.

CVE-2026-83843

Out-of-bounds read in Windows Internet Key Exchange (IKE) Protocol allows an unauthorized attacker to deny service over

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Double free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

CVE-2026-83842

Double free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.

CVE-2026-83793

Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authoriz

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Incorrect authorization in Windows Device Install Service allows an authorized attacker to elevate privileges locally.

CVE-2026-83792

Incorrect authorization in Windows Device Install Service allows an authorized attacker to elevate privileges locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Improper authorization in Windows Virtual Input allows an authorized attacker to elevate privileges locally.

CVE-2026-83791

Improper authorization in Windows Virtual Input allows an authorized attacker to elevate privileges locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.

CVE-2026-83790

Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布CRITICAL

Heap-based buffer overflow in Windows SMB Client allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-83789

Heap-based buffer overflow in Windows SMB Client allows an unauthorized attacker to elevate privileges over a network.

来源摘录 · NVD

漏洞预警2026-10-13 发布MEDIUM

Buffer over-read in Windows RNDIS allows an unauthorized attacker to disclose information with a physical attack.

CVE-2026-83788

Buffer over-read in Windows RNDIS allows an unauthorized attacker to disclose information with a physical attack.

来源摘录 · NVD

漏洞预警2026-10-13 发布MEDIUM

Insufficient verification of data authenticity in Windows DHCP Server allows an authorized attacker to bypass a security feature locally.

CVE-2026-83787

Insufficient verification of data authenticity in Windows DHCP Server allows an authorized attacker to bypass a security

来源摘录 · NVD

漏洞预警2026-10-13 发布MEDIUM

Generation of error message containing sensitive information in Windows NTFS allows an authorized attacker to disclose information locally.

CVE-2026-83786

Generation of error message containing sensitive information in Windows NTFS allows an authorized attacker to disclose i

来源摘录 · NVD