- EPSS 1.12%
- Veröffentlicht 14.04.2026 16:57:24
- Zuletzt bearbeitet 20.04.2026 18:27:30
Concurrent execution using shared resource with improper synchronization ('race condition') in Function Discovery Service (fdwsd.dll) allows an authorized attacker to elevate privileges locally.
- EPSS 0.25%
- Veröffentlicht 14.04.2026 16:57:22
- Zuletzt bearbeitet 21.04.2026 15:09:42
Heap-based buffer overflow in Function Discovery Service (fdwsd.dll) allows an authorized attacker to elevate privileges locally.
- EPSS 0.2%
- Veröffentlicht 14.04.2026 16:57:21
- Zuletzt bearbeitet 21.04.2026 20:49:46
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SSDP Service allows an authorized attacker to elevate privileges locally.
- EPSS 0.2%
- Veröffentlicht 14.04.2026 16:57:20
- Zuletzt bearbeitet 21.04.2026 20:50:56
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SSDP Service allows an authorized attacker to elevate privileges locally.
- EPSS 0.27%
- Veröffentlicht 14.04.2026 16:57:19
- Zuletzt bearbeitet 21.04.2026 21:02:48
Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.
- EPSS 0.35%
- Veröffentlicht 14.04.2026 16:57:18
- Zuletzt bearbeitet 22.04.2026 17:01:04
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
- EPSS 0.19%
- Veröffentlicht 14.04.2026 16:57:16
- Zuletzt bearbeitet 22.04.2026 17:35:51
Time-of-check time-of-use (toctou) race condition in Windows LUAFV allows an authorized attacker to elevate privileges locally.
CVE-2026-27919
- EPSS 0.3%
- Veröffentlicht 14.04.2026 16:57:13
- Zuletzt bearbeitet 22.04.2026 17:54:12
Untrusted pointer dereference in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.
- EPSS 1.19%
- Veröffentlicht 14.04.2026 16:57:13
- Zuletzt bearbeitet 22.04.2026 17:52:12
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
- EPSS 0.24%
- Veröffentlicht 14.04.2026 16:57:12
- Zuletzt bearbeitet 22.04.2026 17:56:16
Use after free in Windows WFP NDIS Lightweight Filter Driver (wfplwfs.sys) allows an authorized attacker to elevate privileges locally.