Azure Monitor Agent Metrics Extension Elevation of Privilege Vulnerability
CVE-2026-42830
Untrusted search path in Azure Monitor Agent allows an authorized attacker to elevate privileges locally.
#windows
共收录 2186 条相关情报。
← 返回所有主题Azure Logic Apps Elevation of Privilege Vulnerability
CVE-2026-42823
Improper access control in Azure Logic Apps allows an authorized attacker to elevate privileges over a network.
Visual Studio Code Elevation of Privilege Vulnerability
CVE-2026-41613
Session fixation in Visual Studio Code allows an unauthorized attacker to elevate privileges over a network.
Azure Connected Machine Agent Elevation of Privilege Vulnerability
CVE-2026-40381
Improper access control in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally.
Secure Boot Security Feature Bypass Vulnerability
CVE-2026-41097
Reliance on a component that is not updateable in Windows Secure Boot allows an authorized attacker to bypass a security
Windows Admin Center in Azure Portal Elevation of Privilege Vulnerability
CVE-2026-41086
Improper access control in Windows Admin Center allows an authorized attacker to elevate privileges over a network.
Microsoft Office Click-To-Run Elevation of Privilege Vulnerability
CVE-2026-40420
Improper access control in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.
Microsoft Office Click-To-Run Elevation of Privilege Vulnerability
CVE-2026-35436
Insufficient granularity of access control in Microsoft Office Click-To-Run allows an authorized attacker to elevate pri
Microsoft Office Click-To-Run Elevation of Privilege Vulnerability
CVE-2026-40418
Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.
Windows TCP/IP Denial of Service Vulnerability
CVE-2026-40413
Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service over an adjacent network.
Windows Graphics Component Remote Code Execution Vulnerability
CVE-2026-40403
Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to execute code locally.
Windows Hyper-V Elevation of Privilege Vulnerability
CVE-2026-40402
Use after free in Windows Hyper-V allows an unauthorized attacker to elevate privileges locally.
Windows TCP/IP Denial of Service Vulnerability
CVE-2026-40401
Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service locally.
Windows Remote Desktop Services Elevation of Privilege Vulnerability
CVE-2026-40398
Heap-based buffer overflow in Windows Remote Desktop allows an authorized attacker to elevate privileges locally.
Windows Filtering Platform (WFP) Security Feature Bypass Vulnerability
CVE-2026-32209
Improper access control in Windows Filtering Platform (WFP) allows an authorized attacker to bypass a security feature l
Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2026-40397
Integer underflow (wrap or wraparound) in Windows Common Log File System Driver allows an authorized attacker to elevate
Windows Telephony Service Elevation of Privilege Vulnerability
CVE-2026-40382
Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
Windows Kernel Elevation of Privilege Vulnerability
CVE-2026-40369
Untrusted pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally.
SQL Server Remote Code Execution Vulnerability
CVE-2026-40370
External control of file name or path in SQL Server allows an authorized attacker to execute code over a network.
Microsoft Word Remote Code Execution Vulnerability
CVE-2026-40367
Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally.