Security Vulnerabilities
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Backup Engine allows an authorized attacker to elevate privileges locally.
CVSS Score
7.0
EPSS Score
0.002
Published
2026-08-11
Uncaught exception in .NET allows an authorized attacker to elevate privileges locally.
CVSS Score
7.8
EPSS Score
0.003
Published
2026-08-11
Improper control of resource identifiers ('resource injection') in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
CVSS Score
7.2
EPSS Score
0.007
Published
2026-08-11
Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
CVSS Score
7.8
EPSS Score
0.002
Published
2026-08-11
Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to execute code locally.
CVSS Score
7.0
EPSS Score
0.003
Published
2026-08-11
Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network.
CVSS Score
7.5
EPSS Score
0.011
Published
2026-08-11
Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network.
CVSS Score
9.8
EPSS Score
0.027
Published
2026-08-11
Use after free in Capability Access Management Service (camsvc) allows an authorized attacker to elevate privileges locally.
CVSS Score
7.0
EPSS Score
0.002
Published
2026-08-11
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
CVSS Score
7.8
EPSS Score
0.02
Published
2026-08-11
Double free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.
CVSS Score
8.1
EPSS Score
0.006
Published
2026-08-11