7.8
CVSS
Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally.
Severity: HIGH
📦
windows_11_26h1
Vendor: microsoft
Actively Exploited
1
CISA KEV List
PoC / Exploits
14
Code Available
Total RCEs
16
Remote Access
Total CVEs
685
Total Indexed
Avg. EPSS
0.65%
Exploit Prob.
Security Vulnerability Index
Page 16 / 69
7.0
CVSS
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
Severity: HIGH
7.8
CVSS
Double free in Windows Message Queuing allows an authorized attacker to elevate privileges locally.
Severity: HIGH
7.8
CVSS
Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
Severity: HIGH
7.8
CVSS
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
Severity: HIGH
7.8
CVSS
Improper access control in Windows Event Logging Service allows an authorized attacker to elevate privileges locally.
Severity: HIGH
4.4
CVSS
Improper access control in Windows Filtering Platform (WFP) allows an authorized attacker to bypass a security feature locally.
Severity: MEDIUM
6.7
CVSS
Double free in Windows Rich Text Edit allows an authorized attacker to elevate privileges locally.
Severity: MEDIUM
7.5
CVSS
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Native WiFi Miniport Driver allows an unauthorized attacker to execute code over an adjacent network.
Severity: HIGH
6.7
CVSS
Double free in Windows Rich Text Edit allows an authorized attacker to elevate privileges locally.
Severity: MEDIUM