7.0
CVSS
Double free in Windows Shell allows an authorized attacker to elevate privileges locally.
Severity: HIGH
📦
windows_11_26h1
Vendor: microsoft
Actively Exploited
1
CISA KEV List
PoC / Exploits
14
Code Available
Total RCEs
16
Remote Access
Total CVEs
685
Total Indexed
Avg. EPSS
0.65%
Exploit Prob.
Security Vulnerability Index
Page 27 / 69
7.0
CVSS
Use after free in Windows Shell allows an authorized attacker to elevate privileges locally.
Severity: HIGH
7.8
CVSS
Double free in Windows Kernel allows an authorized attacker to elevate privileges locally.
Severity: HIGH
7.8
CVSS
Access of resource using incompatible type ('type confusion') in Windows OLE allows an authorized attacker to elevate privileges locally.
Severity: HIGH
7.8
CVSS
Untrusted pointer dereference in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally.
Severity: HIGH
7.8
CVSS
Missing authentication for critical function in Windows Remote Desktop Licensing Service allows an authorized attacker to elevate privileges locally.
Severity: HIGH
7.8
CVSS
Missing authentication for critical function in Windows Remote Desktop Licensing Service allows an authorized attacker to elevate privileges locally.
Severity: HIGH
7.8
CVSS
Heap-based buffer overflow in Windows Hyper-V allows an unauthorized attacker to execute code locally.
Severity: HIGH
6.5
CVSS
Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability
Severity: MEDIUM
7.8
CVSS
Out-of-bounds read in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges locally.
Severity: HIGH