| CVE-2026-42982 | 7.8 | — | — | — | microsoft / windows 10 1607 | Improper validation of consistency within input in Windows Secure Kernel Mode allows an authorized attacker to ele | 102d ago |
| CVE-2026-50656 | 7.8 | — | — | — | microsoft / malware protection engine | Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender p | 130d ago |
| CVE-2026-50512 | 7.8 | — | — | — | microsoft / pc manager | Missing authentication for critical function in Microsoft PC Manager allows an authorized attacker to elevate priv | 137d ago |
| CVE-2026-50511 | 7.8 | — | — | — | microsoft / pc manager | Improper link resolution before file access ('link following') in Microsoft PC Manager allows an authorized attack | 137d ago |
| CVE-2026-49161 | 7.8 | — | — | — | microsoft / pc manager | Improper access control in Microsoft PC Manager allows an authorized attacker to bypass a security feature locally | 137d ago |
| CVE-2026-48583 | 7.8 | — | — | — | microsoft / windows 10 1607 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | 137d ago |
| CVE-2026-48574 | 7.8 | — | — | — | microsoft / windows 10 1607 | Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code locally. | 137d ago |
| CVE-2026-48565 | 7.8 | — | — | — | microsoft / windows narrator braille | Untrusted search path in Windows Narrator Braille allows an authorized attacker to elevate privileges locally. | 137d ago |
| CVE-2026-47292 | 7.8 | — | — | — | microsoft / visual studio code | Inclusion of functionality from untrusted control sphere in Visual Studio Code allows an unauthorized attacker to | 137d ago |
| CVE-2026-45658 | 7.8 | — | — | — | microsoft / windows 10 1607 | Improper access control in Windows BitLocker allows an authorized attacker to bypass a security feature locally. | 137d ago |
| CVE-2026-45656 | 7.8 | — | — | — | microsoft / windows 10 1607 | Protection mechanism failure in Windows UEFI allows an authorized attacker to bypass a security feature locally. | 137d ago |
| CVE-2026-45645 | 7.8 | — | — | — | microsoft / 365 apps | Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally. | 137d ago |
| CVE-2026-45643 | 7.8 | — | — | — | microsoft / 365 apps | Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally. | 137d ago |
| CVE-2026-45638 | 7.8 | — | — | — | microsoft / windows 10 1607 | Heap-based buffer overflow in Windows Ancillary Function Driver for WinSock allows an authorized attacker to eleva | 137d ago |
| CVE-2026-45637 | 7.8 | — | — | — | microsoft / windows 10 1809 | Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. | 137d ago |
| CVE-2026-45636 | 7.8 | — | — | — | microsoft / windows 10 1607 | Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally. | 137d ago |
| CVE-2026-45605 | 7.8 | — | — | — | microsoft / windows 10 1607 | Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally. | 137d ago |
| CVE-2026-45600 | 7.8 | — | — | — | microsoft / windows 11 24h2 | Access of resource using incompatible type ('type confusion') in Windows Kernel-Mode Drivers allows an authorized | 137d ago |
| CVE-2026-45593 | 7.8 | — | — | — | microsoft / windows 10 1809 | Use after free in Windows SDK allows an authorized attacker to elevate privileges locally. | 137d ago |
| CVE-2026-45592 | 7.8 | — | — | — | microsoft / windows 10 1607 | Integer overflow or wraparound in Windows Internet (wininet.dll) allows an authorized attacker to elevate privileg | 137d ago |
| CVE-2026-45586exploited | 7.8 | 0.37% | 1/3 | +31d | microsoft / windows 10 1607 | Improper link resolution before file access ('link following') in Windows Collaborative Translation Framework allo | 137d ago |
| CVE-2026-45490 | 7.8 | — | — | — | microsoft / .net | Improper authorization in .NET allows an authorized attacker to elevate privileges locally. | 137d ago |
| CVE-2026-45487 | 7.8 | — | — | — | microsoft / windows 10 21h2 | Time-of-check time-of-use (TOCTOU) race condition in Program Compatibility Assistant Service allows an authorized | 137d ago |
| CVE-2026-45486 | 7.8 | — | — | — | microsoft / 365 apps | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. | 137d ago |
| CVE-2026-45475 | 7.8 | — | — | — | microsoft / 365 apps | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. | 137d ago |
| CVE-2026-45471 | 7.8 | — | — | — | microsoft / 365 apps | Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally. | 137d ago |
| CVE-2026-45469 | 7.8 | — | — | — | microsoft / 365 apps | Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code l | 137d ago |
| CVE-2026-45457 | 7.8 | — | — | — | microsoft / 365 apps | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to execute code locally. | 137d ago |
| CVE-2026-44824 | 7.8 | — | — | — | microsoft / 365 apps | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. | 137d ago |
| CVE-2026-44823 | 7.8 | — | — | — | microsoft / 365 apps | Numeric truncation error in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 137d ago |
| CVE-2026-44820 | 7.8 | — | — | — | microsoft / 365 apps | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 137d ago |
| CVE-2026-44819 | 7.8 | — | — | — | microsoft / 365 apps | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. | 137d ago |
| CVE-2026-44817 | 7.8 | — | — | — | microsoft / 365 apps | Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized att | 137d ago |
| CVE-2026-44813 | 7.8 | — | — | — | microsoft / windows 11 26h1 | Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. | 137d ago |
| CVE-2026-44812 | 7.8 | — | — | — | microsoft / excel | Integer overflow or wraparound in Windows Win32K - GRFX allows an unauthorized attacker to execute code locally. | 137d ago |
| CVE-2026-44811 | 7.8 | — | — | — | microsoft / windows 11 26h1 | Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally | 137d ago |
| CVE-2026-44809 | 7.8 | — | — | — | microsoft / windows 11 24h2 | Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locall | 137d ago |
| CVE-2026-44808 | 7.8 | — | — | — | microsoft / windows 11 26h1 | Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally | 137d ago |
| CVE-2026-44807 | 7.8 | — | — | — | microsoft / windows 11 26h1 | Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. | 137d ago |
| CVE-2026-44804 | 7.8 | — | — | — | microsoft / windows 11 26h1 | Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. | 137d ago |
| CVE-2026-44803 | 7.8 | — | — | — | microsoft / excel | Integer overflow or wraparound in Windows Win32K - GRFX allows an unauthorized attacker to execute code locally. | 137d ago |
| CVE-2026-44802 | 7.8 | — | — | — | microsoft / windows 10 1809 | Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. | 137d ago |
| CVE-2026-42991 | 7.8 | — | — | — | microsoft / windows 10 1809 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifi | 137d ago |
| CVE-2026-42989 | 7.8 | — | — | — | microsoft / windows 10 1607 | Improper link resolution before file access ('link following') in Winlogon allows an authorized attacker to elevat | 137d ago |
| CVE-2026-42986 | 7.8 | — | — | — | microsoft / windows 10 1607 | Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally. | 137d ago |
| CVE-2026-42983 | 7.8 | — | — | — | microsoft / windows 10 1809 | Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. | 137d ago |
| CVE-2026-42980 | 7.8 | — | — | — | microsoft / windows 10 1607 | Integer underflow (wrap or wraparound) in Windows NT OS Kernel allows an authorized attacker to elevate privileges | 137d ago |
| CVE-2026-42979 | 7.8 | — | — | — | microsoft / windows 10 1809 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifi | 137d ago |
| CVE-2026-42978 | 7.8 | — | — | — | microsoft / windows 10 1809 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifi | 137d ago |
| CVE-2026-42977 | 7.8 | — | — | — | microsoft / windows 10 1809 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifi | 137d ago |
| CVE-2026-42916 | 7.8 | — | — | — | microsoft / windows 10 1607 | Integer overflow or wraparound in Windows NT OS Kernel allows an authorized attacker to elevate privileges locally | 137d ago |
| CVE-2026-42910 | 7.8 | — | — | — | microsoft / windows 11 24h2 | Out-of-bounds write in Windows Hotpatch Monitoring Service allows an authorized attacker to elevate privileges loc | 137d ago |
| CVE-2026-42905 | 7.8 | — | — | — | microsoft / windows 10 1607 | Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. | 137d ago |
| CVE-2026-42902 | 7.8 | — | — | — | microsoft / powertoys | Improper authorization in Microsoft PowerToys allows an authorized attacker to elevate privileges locally. | 137d ago |
| CVE-2026-42837 | 7.8 | — | — | — | microsoft / windows 10 1809 | Out-of-bounds read in Windows Projected File System Filter Driver allows an authorized attacker to elevate privile | 137d ago |
| CVE-2026-42829 | 7.8 | — | — | — | microsoft / windows 11 24h2 | Improper access control in Windows Administrator Protection allows an authorized attacker to bypass a security fea | 137d ago |
| CVE-2026-42828 | 7.8 | — | — | — | microsoft / windows 10 1809 | Buffer over-read in Windows Projected File System Filter Driver allows an authorized attacker to elevate privilege | 137d ago |
| CVE-2026-41092 | 7.8 | — | — | — | microsoft / windows 10 1607 | Improper access control in Microsoft Kinect allows an authorized attacker to elevate privileges locally. | 137d ago |
| CVE-2026-40409 | 7.8 | — | — | — | microsoft / windows 10 1607 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability | 137d ago |
| CVE-2026-40404 | 7.8 | — | — | — | microsoft / windows 10 1607 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability | 137d ago |
