共收录 70327 条相关情报。
← 返回所有主题CVE-2026-83507
Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authoriz
CVE-2026-83506
Untrusted search path in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.
CVE-2026-83505
Time-of-check time-of-use (toctou) race condition in Windows Setup Files Cleanup allows an authorized attacker to elevat
CVE-2026-83504
Time-of-check time-of-use (toctou) race condition in Windows SmartScreen allows an authorized attacker to disclose infor
CVE-2026-83500
Url redirection to untrusted site ('open redirect') in Windows BitLocker allows an unauthorized attacker to bypass a sec
CVE-2026-83499
Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate pri
CVE-2026-81971
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows NTFS allows an au
CVE-2026-81969
Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate pri
CVE-2026-81964
Use of hard-coded credentials in Windows Update Orchestrator Service allows an authorized attacker to bypass a security
CVE-2026-78459
Heap-based buffer overflow in Windows Internet Information Services allows an authorized attacker to elevate privileges
CVE-2026-77496
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
CVE-2026-73027
External control of system or configuration setting in Windows Setup Files Cleanup allows an authorized attacker to elev
CVE-2026-72969
Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges lo
CVE-2026-72968
Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges lo
CVE-2026-72955
Use after free in Windows Application Compatibility Cache allows an authorized attacker to elevate privileges locally.
CVE-2026-72934
Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges lo
CVE-2026-71347
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Security Center a
CVE-2026-70580
Missing authentication for critical function in Windows Credential Guard allows an authorized attacker to perform spoofi
CVE-2026-70566
Null pointer dereference in Windows Schannel allows an authorized attacker to elevate privileges locally.
CVE-2026-70299
Improper access control in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.