privilege escalation

A new privilege‑escalation vulnerability in systemd’s machine-management component — tracked as CVE‑2026‑4105 — has been disclosed and patched, and it demands immediate attention from desktop Linux users and system administrators who run optional systemd packages. The bug stems from improper...

Microsoft’s March Patch Tuesday landed with a heavy hit for database administrators: a high‑severity elevation‑of‑privilege bug in Microsoft SQL Server (CVE‑2026‑21262) that Microsoft patched across supported releases from SQL Server 2016 Service Pack 3 through SQL Server 2025, alongside fixes...

A chain of flaws in the Azure Arc / Azure Connected Machine agent for Windows can let a low‑privileged local user hijack agent service communications, impersonate the machine’s cloud identity, escalate to NT AUTHORITY\SYSTEM and — in the worst case — cause the machine to register to an...

Microsoft’s security trackers recorded a new elevation‑of‑privilege problem in the Linux Azure Diagnostic extension (LAD) — tracked as CVE‑2026‑23665 — that Microsoft and multiple independent aggregators describe as a heap‑based buffer overflow in the LAD components used with Azure Linux virtual...

Microsoft has recorded CVE-2026-26132 as a Windows Kernel use‑after‑free vulnerability that can be triggered by an authorized local user to gain elevated privileges, and administrators should treat it as a high‑priority remediation item in this month’s Patch Tuesday release. (msrc.microsoft.com)...

Microsoft released a fix on March 10, 2026 that addresses CVE-2026-26131, a .NET elevation‑of‑privilege (EoP) vulnerability caused by incorrect default permissions in installed .NET components — a problem Microsoft classifies as Important (CVSS 3.1 base score 7.8). The vendor’s servicing updates...

Microsoft has cataloged CVE-2026-26128 as an elevation-of-privilege defect in the Windows SMB Server that allows an authorized (local) attacker to escalate privileges on affected systems — an urgent operational risk for any organization that does not treat local-attack vectors and SMB components...

Microsoft released a security update on March 10, 2026 addressing an authenticated, network-based elevation-of-privilege (EoP) vulnerability in System Center Operations Manager (SCOM) tracked as CVE-2026-20967 — a bug stemming from improper input validation that can allow an authorized but...

Microsoft’s vulnerability catalog now lists CVE-2026-25189, a confirmed use‑after‑free defect in the Windows Desktop Window Manager (DWM) Core Library that permits an authorized local user to escalate privileges on affected systems. The vendor‑level metadata assigns a High impact profile (CVSS...

Microsoft’s security catalog lists CVE-2026-25175 as a newly recorded elevation-of-privilege vulnerability in the Windows NTFS file system: an out-of-bounds read in the NTFS driver that, when triggered by a local, low-privileged account, can be converted into a SYSTEM-level compromise...

Microsoft and independent trackers recorded CVE-2026-25170 on March 10, 2026 — a use‑after‑free (CWE‑416) vulnerability in Windows Hyper‑V that Microsoft classifies as an elevation‑of‑privilege flaw allowing an authorized local actor with low privileges to obtain higher privileges on the host...

Microsoft’s March 10, 2026 Patch Tuesday closed a race‑condition hole in the Windows Device Association Service that could allow a local, authorized user to escalate privileges to a more powerful account on affected machines, forcing administrators to prioritize testing and deployment of the...

Microsoft pushed emergency fixes on March 10, 2026 to address CVE-2026-24293, a high-impact elevation-of-privilege vulnerability in the Windows Ancillary Function Driver for WinSock (AFD.sys) that can allow a locally authenticated low-privileged user to gain SYSTEM-level rights. The bug is...

Microsoft’s Security Response Center (MSRC) has recorded CVE-2026-24290 as an Elevation of Privilege vulnerability affecting the Windows Projected File System (ProjFS). The vendor’s entry is concise: the issue is a local, kernel-facing privilege-escalation weakness tied to the ProjFS subsystem...

Microsoft has publicly recorded CVE‑2026‑24285 as a Win32k elevation‑of‑privilege vulnerability that allows a local, authenticated user to escalate to full system privileges; Microsoft’s advisory entry and early aggregator reports indicate a use‑after‑free style bug in the Win32k kernel surface...

Microsoft released an update on March 10, 2026 addressing CVE-2026-23673, a local elevation‑of‑privilege vulnerability in the Windows Resilient File System (ReFS) that Microsoft describes as an out‑of‑bounds read which can be abused by an authorized local user to escalate privileges on affected...

Microsoft has published an advisory for CVE-2026-23671: a kernel‑level race condition in the Windows Bluetooth RFCOM Protocol Driver that can be abused by a locally authenticated, low‑privilege user to escalate to SYSTEM — and Microsoft’s update guidance indicates fixes were released on March...

Microsoft’s security tracker lists CVE-2026-23660 as an Elevation of Privilege vulnerability in “Windows Admin Center in Azure Portal,” but public technical details are extremely limited and the entry currently carries a measured confidence statement rather than a full disclosure...

Microsoft’s security entry for CVE‑2026‑26125 identifies an elevation‑of‑privilege flaw in the Payment Orchestrator Service and places special emphasis on the vendor’s confidence metric — a critical signal for defenders about how much technical detail and exploitability information is actually...

Microsoft's advisory for CVE-2026-23651 describes a local elevation-of-privilege flaw in Azure Compute Gallery caused by a permissive regular expression used during input validation; an authenticated user with access to the affected component can craft input that bypasses intended checks and...