Api.Msrc.Microsoft

CVE-2026: Local Privilege Escalation Vulnerabilities in Microsoft Services

First seen 10 Mar 2026, 17:28 UTC • Api.Msrc.Microsoft

•57.8

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

Two separate vulnerabilities, CVE-2026, have been identified in Microsoft's Connected Devices Platform Service and Broadcast DVR. Both vulnerabilities allow authorized attackers to elevate privileges locally, posing a significant risk to affected systems.

How this analysis works

Timeline

2026-03-10

CVE-2026 published for Connected Devices Platform Service

2026-03-10

CVE-2026 published for Broadcast DVR

Attack Flow

Continue Reading

Critical Zero-Day Vulnerability CVE-2026-20182 Exploited in Cisco SD-WAN Systems Critical SonicWall SMA1000 Vulnerabilities Under Active Exploitation Critical Zero-Day Vulnerability in LiteSpeed cPanel Plugin Actively Exploited Critical Exploitation of Cisco CM and Samsung KNOX Vulnerabilities Cisco SD-WAN Zero-Day Exploited by Threat Actor Since 2023 Lazarus Group Exploits Windows Zero-Day to Target Defense Sector

CVE-2026: Local Privilege Escalation Vulnerabilities in Microsoft Services

Article Content

Timeline

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading