CVE Security

high 7.8

19/05/2026

Vulnérabilité high détectée - CVE-2026-33834

Improper access control in Windows Event Logging Service allows an authorized attacker to elevate privileges locally.

Windows

CVE-2026-33834

Lire l'article

high 7.8

19/05/2026

Vulnérabilité high détectée - CVE-2026-33835

Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

Windows

CVE-2026-33835

Lire l'article

high 7.8

19/05/2026

Vulnérabilité high détectée - CVE-2026-33837

Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

Windows

CVE-2026-33837

Lire l'article

high 7.8

19/05/2026

Vulnérabilité high détectée - CVE-2026-33838

Double free in Windows Message Queuing allows an authorized attacker to elevate privileges locally.

Windows

CVE-2026-33838

Lire l'article

high 7

19/05/2026

Vulnérabilité high détectée - CVE-2026-33839

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an authorized attacker to ...

Windows

CVE-2026-33839

Lire l'article

high 7.8

19/05/2026

Vulnérabilité high détectée - CVE-2026-33840

Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally.

Windows

CVE-2026-33840

Lire l'article

high 8.8

19/05/2026

Vulnérabilité high détectée - CVE-2026-33112

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Applications Windows

CVE-2026-33112

Lire l'article

critical 9.1

19/05/2026

Vulnérabilité critical détectée - CVE-2026-33117

Improper authentication in Azure SDK allows an unauthorized attacker to bypass a security feature over a network.

Applications Windows

CVE-2026-33117

Lire l'article

high 7.7

19/05/2026

Vulnérabilité high détectée - CVE-2026-33821

Improper privilege management in Microsoft Dynamics 365 Customer Insights allows an authorized attacker to elevate privileges over a network.

Windows

CVE-2026-33821

Lire l'article

high 8.2

19/05/2026

Vulnérabilité high détectée - CVE-2026-33833

Improper neutralization of special elements in output used by a downstream component ('injection') in Azure Machine Learning allows an unauthorized at...

Windows

CVE-2026-33833

Lire l'article

high 7.8

19/05/2026

Vulnérabilité high détectée - CVE-2026-32204

External control of file name or path in Azure Monitor Agent allows an authorized attacker to elevate privileges locally.

Windows

CVE-2026-32204

Lire l'article

medium 4.4

19/05/2026

Vulnérabilité medium détectée - CVE-2026-32209

Improper access control in Windows Filtering Platform (WFP) allows an authorized attacker to bypass a security feature locally.

Windows

CVE-2026-32209

Lire l'article