privilege escalation

Microsoft has fixed CVE-2026-56169, a high-severity Windows Admin Center vulnerability that can let an authenticated attacker elevate privileges across a network. Administrators running any affected release earlier than Windows Admin Center 2.7.4 should treat the gateway itself as the patch...

Microsoft has patched CVE-2026-54996, an elevation-of-privilege vulnerability in the Windows USB Print Driver, through the cumulative security updates released on July 14, 2026. Administrators should treat the flaw as a local privilege-escalation risk and deploy the appropriate Windows update...

CVE-2026-54114, a use-after-free flaw in Windows Win32k, can let a locally authenticated attacker elevate privileges on affected Windows 10, Windows 11, and Windows Server systems. Microsoft released the fix on July 14, 2026, as part of its monthly security updates, making deployment of the...

CVE-2026-55004, an Important-rated elevation-of-privilege flaw in Windows Print Configuration, has been patched in Microsoft’s July 14, 2026 security updates. Windows users and administrators should treat it as a local privilege-escalation risk: an attacker who already has access to a vulnerable...

Microsoft has fixed CVE-2026-54986, an Important-rated Windows Win32k vulnerability that allows a locally authenticated attacker to elevate privileges through a heap-based buffer overflow. The correction arrived with the July 14, 2026 security updates and applies across supported Windows 10...

Microsoft has patched CVE-2026-54107, an elevation-of-privilege vulnerability in the Windows Win32k subsystem that could allow an authenticated attacker to gain higher permissions on an affected PC. The flaw carries a CVSS 3.1 base score of 8.8, making July’s cumulative Windows updates the...

Microsoft has patched CVE-2026-54132, a Windows Kernel heap-based buffer overflow that could let an attacker with physical access elevate privileges on affected Windows 10, Windows 11, and Windows Server systems. The vulnerability carries Microsoft’s “Important” rating and a CVSS 3.1 base score...

Microsoft’s July 14, 2026 security release fixes CVE-2026-54111, an Important-rated elevation-of-privilege vulnerability in the Universal Print Management Service. Windows administrators should deploy the applicable cumulative security updates, particularly on shared workstations...

Microsoft has fixed CVE-2026-54987, an Important-rated Windows Overlay Filter elevation-of-privilege vulnerability carrying a CVSS 3.1 score of 7.8. The correction arrived in the July 14, 2026 Windows security updates and should be treated as a post-compromise risk: an attacker who already has...

CVE-2026-49784, a Microsoft Windows App Store elevation-of-privilege vulnerability, has been fixed across supported Windows client and server releases in Microsoft’s July 14, 2026 security updates. The flaw carries a CVSS 3.1 score of 7.0 and could let an attacker who already has local access...

CVE-2026-49175 exposes supported Windows desktops and servers to local privilege escalation through a heap-based buffer overflow in the Windows DNS Client. Microsoft fixed the vulnerability in its July 14, 2026 security updates, rating it Important with a CVSS 3.1 score of 7.8. Detailed in...

Microsoft has fixed CVE-2026-49176, an Important-rated elevation-of-privilege vulnerability in Windows WalletService, through the July 14, 2026 security updates. The flaw creates a path for an attacker who already has authorized local access to gain additional privileges, making the cumulative...

Microsoft has fixed CVE-2026-49171, an elevation-of-privilege vulnerability in Windows Speech Runtime, through the July 14, 2026 security update release. The flaw matters because a successful attacker could move from an already authorized local account to higher privileges, potentially gaining...

CVE-2026-49170, an Important-rated elevation-of-privilege vulnerability in the Windows StateRepository API, was fixed in Microsoft’s July 14, 2026 security updates and affects supported Windows client and server releases. An authenticated local attacker who successfully exploits the flaw could...

CVE-2026-49167, a Windows Kernel elevation-of-privilege vulnerability caused by a use-after-free memory error, is fixed in Microsoft’s July 14, 2026 security updates. The flaw requires an attacker to already have authorized local access, but successful exploitation could raise that attacker’s...

CVE-2026-49162 is a Windows local privilege-escalation vulnerability in Microsoft Brokering File System that can let an authenticated attacker gain higher privileges by triggering a use-after-free memory condition. Microsoft disclosed the flaw on July 14, 2026, and included the correction in...

Microsoft published CVE-2026-42990 on July 14, 2026, identifying an elevation-of-privilege vulnerability in the Microsoft ODBC Driver for SQL Server. The immediate job for administrators is to inventory every deployed copy of the driver—not merely patch SQL Server hosts—because ODBC is a client...

Microsoft has fixed CVE-2026-42900, an 8.1-rated Windows App Store elevation-of-privilege vulnerability that could let an unauthorized attacker gain higher privileges through a network-based attack. The flaw affects supported Windows 10, Windows 11, and Windows Server releases, making July 14...

Google disclosed CVE-2026-13927 on June 30, 2026, a Chrome for Android input-validation flaw affecting versions earlier than 150.0.7871.47 that can let a local attacker escalate privileges after a user interacts with a malicious file through the browser’s interface. The vulnerability is not a...

CVE-2026-46215 is a reported Linux kernel local privilege-escalation vulnerability involving the DRM Graphics Execution Manager. The actionable bottom line is straightforward: public reporting says that, where the affected DRM_IOCTL_GEM_CHANGE_HANDLE operation is present and reachable through a...