CVE-2026-24289
- EPSS 0.04%
- Veröffentlicht 10.03.2026 17:04:42
- Zuletzt bearbeitet 13.03.2026 19:15:45
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-24290
- EPSS 0.03%
- Veröffentlicht 10.03.2026 17:04:42
- Zuletzt bearbeitet 13.03.2026 19:14:28
Improper access control in Windows Projected File System allows an authorized attacker to elevate privileges locally.
CVE-2026-24283
- EPSS 0.02%
- Veröffentlicht 10.03.2026 17:04:39
- Zuletzt bearbeitet 13.03.2026 19:26:14
Heap-based buffer overflow in Windows File Server allows an authorized attacker to elevate privileges locally.
CVE-2026-2636
- EPSS 0.06%
- Veröffentlicht 25.02.2026 18:57:02
- Zuletzt bearbeitet 15.04.2026 00:35:42
This vulnerability is caused by a CWE‑159: "Improper Handling of Invalid Use of Special Elements" weakness, which leads to an unrecoverable inconsistency in the CLFS.sys driver. This condition forces a call to the KeBugCheckEx function, allowing an u...
CVE-2026-20929
- EPSS 0.07%
- Veröffentlicht 13.01.2026 17:57:02
- Zuletzt bearbeitet 16.01.2026 15:05:21
Improper access control in Windows HTTP.sys allows an authorized attacker to elevate privileges over a network.
CVE-2026-20920
- EPSS 0.05%
- Veröffentlicht 13.01.2026 17:56:38
- Zuletzt bearbeitet 15.01.2026 21:16:36
Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally.
CVE-2025-55332
- EPSS 0.03%
- Veröffentlicht 14.10.2025 17:01:02
- Zuletzt bearbeitet 27.10.2025 15:24:44
Improper enforcement of behavioral workflow in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.
CVE-2025-55330
- EPSS 0.03%
- Veröffentlicht 14.10.2025 17:01:00
- Zuletzt bearbeitet 27.10.2025 14:55:48
Improper enforcement of behavioral workflow in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.
CVE-2025-59185
- EPSS 0.09%
- Veröffentlicht 14.10.2025 17:00:28
- Zuletzt bearbeitet 05.11.2025 21:15:35
External control of file name or path in Windows Core Shell allows an unauthorized attacker to perform spoofing over a network.
- EPSS 0.07%
- Veröffentlicht 14.10.2025 17:00:06
- Zuletzt bearbeitet 21.10.2025 14:35:51
Use after free in Microsoft Brokering File System allows an unauthorized attacker to elevate privileges locally.