Windows · Fixed build · All Windows builds
Windows build 10.0.26300.9974, released on 2026-11-10, fixes 594 CVE, deployed across 1 SKUs.
- Published on
- 2026-11-10
- SKUs covered
- 1
- CVEs fixed
- 594
- CISA KEV
- 0
39 critical · 501 high
Windows SKUs covered by this build
The SKUs below share this MSRC build number. Deploying the corresponding KB secures all of them at once.
CVEs fixed by this build
| CVE |
|---|
|
CVE-2026-96157
CRITICAL 9.8
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-96078
CRITICAL 9.8
Heap-based buffer overflow in Microsoft Color Management allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-96067
CRITICAL 9.8
Integer overflow or wraparound in Microsoft Color Management allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-95901
CRITICAL 9.8
Double free in Windows Microsoft DirectMusic allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-95882
CRITICAL 9.8
Stack-based buffer overflow in Windows Microsoft DirectMusic allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-88218
CRITICAL 9.8
Double free in Windows DNS allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-85844
CRITICAL 9.8
Authentication bypass using an alternate path or channel in Windows Kerberos allows an unauthorized attacker to elevate privileges over a network. |
|
CVE-2026-119958
CRITICAL 9.8
Out-of-bounds write in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-116928
CRITICAL 9.8
Out-of-bounds write in Microsoft Windows Search Component allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-112967
CRITICAL 9.8
Heap-based buffer overflow in Windows Xbox Live Networking Service allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-95962
HIGH 9.0
Windows Virtual Filtering Platform (VFP) Remote Code Execution Vulnerability |
|
CVE-2026-96010
HIGH 8.8
Integer underflow (wrap or wraparound) in HID Parser Library allows an authorized attacker to elevate privileges over a network. |
|
CVE-2026-95996
HIGH 8.8
Integer underflow (wrap or wraparound) in Windows Bluetooth Port Driver allows an authorized attacker to elevate privileges over a network. |
|
CVE-2026-105518
HIGH 8.8
Windows iSCSI Remote Code Execution Vulnerability |
|
CVE-2026-105542
HIGH 8.8
Windows NTFS Remote Code Execution Vulnerability |
|
CVE-2026-105581
HIGH 8.8
Desktop Window Manager Elevation of Privilege Vulnerability |
|
CVE-2026-108401
HIGH 8.8
Remote Desktop Services Remote Code Execution Vulnerability |
|
CVE-2026-108411
HIGH 8.8
Microsoft ODBC Driver Remote Code Execution Vulnerability |
|
CVE-2026-112762
HIGH 8.8
Windows Print Spooler Components Elevation of Privilege Vulnerability |
|
CVE-2026-112805
HIGH 8.8
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2026-113760
HIGH 8.8
Windows XWizard Framework Elevation of Privilege Vulnerability |
|
CVE-2026-113814
HIGH 8.8
Windows Storage Spaces Controller Remote Code Execution Vulnerability |
|
CVE-2026-113863
HIGH 8.8
Windows DHCP Client Elevation of Privilege Vulnerability |
|
CVE-2026-118141
HIGH 8.8
Windows Client for NFS Remote Code Execution Vulnerability |
|
CVE-2026-118146
CRITICAL 8.8
Windows Active Directory Domain Services Remote Code Execution Vulnerability |
|
CVE-2026-119392
HIGH 8.8
Windows Storage Spaces Controller Elevation of Privilege Vulnerability |
|
CVE-2026-119824
HIGH 8.8
Remote Desktop Client Tampering Vulnerability |
|
CVE-2026-119839
HIGH 8.8
Windows Remote Desktop Client Elevation of Privilege Vulnerability |
|
CVE-2026-119862
HIGH 8.8
Windows Input System Elevation of Privilege Vulnerability |
|
CVE-2026-119881
HIGH 8.8
Microsoft XPS Document Converter Elevation of Privilege Vulnerability |
|
CVE-2026-119908
HIGH 8.8
Windows Storage Spaces Controller Remote Code Execution Vulnerability |
|
CVE-2026-119916
HIGH 8.8
Windows Input System Elevation of Privilege Vulnerability |
|
CVE-2026-119925
HIGH 8.8
Windows Text Services Framework Elevation of Privilege Vulnerability |
|
CVE-2026-119934
HIGH 8.8
Remote Desktop Client Remote Code Execution Vulnerability |
|
CVE-2026-119950
HIGH 8.8
Windows Print Spooler Components Elevation of Privilege Vulnerability |
|
CVE-2026-119969
CRITICAL 8.8
Graphic Fonts Remote Code Execution Vulnerability |
|
CVE-2026-122171
HIGH 8.8
Microsoft XPS Document Converter Remote Code Execution Vulnerability |
|
CVE-2026-122176
HIGH 8.8
Windows SMB Remote Code Execution Vulnerability |
|
CVE-2026-122475
HIGH 8.8
Windows Storage Spaces Controller Remote Code Execution Vulnerability |
|
CVE-2026-125136
CRITICAL 8.8
Windows Network Connected Devices Auto-Setup Service Remote Code Execution Vulnerability |
|
CVE-2026-88222
HIGH 8.8
Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability |
|
CVE-2026-88229
HIGH 8.8
Windows Media Player Remote Code Execution Vulnerability |
|
CVE-2026-88249
HIGH 8.8
Windows Client for NFS Remote Code Execution Vulnerability |
|
CVE-2026-95975
HIGH 8.8
Windows Performance Counters Remote Code Execution Vulnerability |
|
CVE-2026-96164
HIGH 8.8
Windows Imaging Component Remote Code Execution Vulnerability |
|
CVE-2026-95885
HIGH 8.1
Use after free in Windows Client for NFS allows an unauthorized attacker to elevate privileges over a network. |
|
CVE-2026-102219
HIGH 8.1
Windows Modern Device Management (MDM) Remote Code Execution Vulnerability |
|
CVE-2026-109459
CRITICAL 8.1
Windows Message Queuing Queue Manager Remote Code Execution Vulnerability |
|
CVE-2026-113862
CRITICAL 8.1
Windows Network Address Translation (NAT) Remote Code Execution Vulnerability |
|
CVE-2026-116710
CRITICAL 8.1
Windows Message Queuing Remote Code Execution Vulnerability |
|
CVE-2026-118737
CRITICAL 8.1
Remote Procedure Call Runtime Remote Code Execution Vulnerability |
|
CVE-2026-119945
HIGH 8.1
Windows Modern Device Management (MDM) Remote Code Execution Vulnerability |
|
CVE-2026-119952
CRITICAL 8.1
Windows Schannel Remote Code Execution Vulnerability |
|
CVE-2026-119961
CRITICAL 8.1
Windows Internet Information Services Remote Code Execution Vulnerability |
|
CVE-2026-119962
CRITICAL 8.1
Windows CredSSP Remote Code Execution Vulnerability |
|
CVE-2026-119963
CRITICAL 8.1
Windows Message Queuing Remote Code Execution Vulnerability |
|
CVE-2026-119964
CRITICAL 8.1
Windows Message Queuing Remote Code Execution Vulnerability |
|
CVE-2026-119967
CRITICAL 8.1
Windows Message Queuing Queue Manager Remote Code Execution Vulnerability |
|
CVE-2026-95956
HIGH 8.1
Windows eSCL Scanner Remote Code Execution Vulnerability |
|
CVE-2026-96115
HIGH 8.0
Double free in Windows DHCP Client allows an authorized attacker to elevate privileges over an adjacent network. |
|
CVE-2026-88240
HIGH 8.0
Heap-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges over an adjacent network. |
|
CVE-2026-88187
HIGH 8.0
Heap-based buffer overflow in Windows Bluetooth A2DP driver allows an authorized attacker to elevate privileges over an adjacent network. |
|
CVE-2026-123387
HIGH 8.0
Improper neutralization of special elements used in a command ('command injection') in Windows Active Directory allows an authorized attacker to elevate privil… |
|
CVE-2026-122164
HIGH 8.0
Weak authentication in Windows Kerberos allows an authorized attacker to elevate privileges over a network. |
|
CVE-2026-97013
HIGH 7.8
Access of resource using incompatible type ('type confusion') in Windows Shell allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96184
HIGH 7.8
Heap-based buffer overflow in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96172
HIGH 7.8
No cwe for this issue in Desktop Window Manager allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96174
HIGH 7.8
Release of invalid pointer or reference in Desktop Window Manager allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96175
HIGH 7.8
Release of invalid pointer or reference in Desktop Window Manager allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96160
HIGH 7.8
Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96162
HIGH 7.8
Incorrect authorization in Windows Clipboard Virtual Channel Extension allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96152
HIGH 7.8
Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96126
HIGH 7.8
Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96129
HIGH 7.8
Inclusion of functionality from untrusted control sphere in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96117
HIGH 7.8
Heap-based buffer overflow in Windows LUAFV allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96122
HIGH 7.8
Untrusted pointer dereference in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96102
HIGH 7.8
Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96103
HIGH 7.8
Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96085
HIGH 7.8
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96084
HIGH 7.8
Heap-based buffer overflow in Graphic Fonts allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96074
HIGH 7.8
Heap-based buffer overflow in Windows AppX Package Manager allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96076
HIGH 7.8
Use after free in Windows DIAL Client allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96062
HIGH 7.8
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96066
HIGH 7.8
Stack-based buffer overflow in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96056
HIGH 7.8
Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96057
HIGH 7.8
Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96060
HIGH 7.8
Out-of-bounds read in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96052
HIGH 7.8
Integer underflow (wrap or wraparound) in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96053
HIGH 7.8
Improper neutralization of special elements used in a command ('command injection') in Windows Task Scheduler allows an authorized attacker to elevate privileg… |
|
CVE-2026-96055
HIGH 7.8
Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96036
HIGH 7.8
Integer overflow or wraparound in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96037
HIGH 7.8
Heap-based buffer overflow in Windows User Manager Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96038
HIGH 7.8
Inclusion of functionality from untrusted control sphere in Windows Audio Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96028
HIGH 7.8
Access of resource using incompatible type ('type confusion') in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96029
HIGH 7.8
Improper access control in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96031
HIGH 7.8
Out-of-bounds write in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96023
HIGH 7.8
Use after free in Windows Push Notification Core allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96005
HIGH 7.8
Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96016
HIGH 7.8
Heap-based buffer overflow in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95997
HIGH 7.8
Use after free in Windows Event Logging Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95999
HIGH 7.8
Out-of-bounds read in Windows USB Hub Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95988
HIGH 7.8
Incorrect authorization in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95991
HIGH 7.8
Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95983
HIGH 7.8
Untrusted pointer dereference in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95965
HIGH 7.8
Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95963
HIGH 7.8
Improper link resolution before file access ('link following') in Data Sharing Service Client allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95953
HIGH 7.8
Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95947
HIGH 7.8
An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files. The vulnerability could allow elevation of… |
|
CVE-2026-95948
HIGH 7.8
Stack-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95951
HIGH 7.8
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95934
HIGH 7.8
Double free in Windows Diagnostic Policy Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95935
HIGH 7.8
Integer overflow or wraparound in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95942
HIGH 7.8
Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95920
HIGH 7.8
Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95932
HIGH 7.8
Inclusion of functionality from untrusted control sphere in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95933
HIGH 7.8
Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95909
HIGH 7.8
Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95898
HIGH 7.8
Heap-based buffer overflow in Windows iSCSI allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95902
HIGH 7.8
Heap-based buffer overflow in Windows USB Hub Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95894
HIGH 7.8
Heap-based buffer overflow in Windows Task Scheduler allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95881
HIGH 7.8
Heap-based buffer overflow in Windows Push Notifications allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95872
HIGH 7.8
Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95874
HIGH 7.8
Heap-based buffer overflow in Xbox allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95879
HIGH 7.8
Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-94527
HIGH 7.8
Heap-based buffer overflow in Windows GDI allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-94531
HIGH 7.8
Stack-based buffer overflow in Windows COM allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88241
HIGH 7.8
Heap-based buffer overflow in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88233
HIGH 7.8
Improper authorization in Windows Task Scheduler allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88238
HIGH 7.8
Heap-based buffer overflow in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88230
HIGH 7.8
Heap-based buffer overflow in Windows LUAFV allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88232
HIGH 7.8
Use after free in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88227
HIGH 7.8
Heap-based buffer overflow in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88213
HIGH 7.8
Numeric truncation error in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85929
HIGH 7.8
Incorrect permission assignment for critical resource in Windows Brokering File System allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85942
HIGH 7.8
Heap-based buffer overflow in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85801
HIGH 7.8
Use after free in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83563
HIGH 7.8
Heap-based buffer overflow in Winlogon allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70182
HIGH 7.8
Weak authentication in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-125137
HIGH 7.8
Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-123388
HIGH 7.8
Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-122984
HIGH 7.8
Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-122183
HIGH 7.8
Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-122172
HIGH 7.8
Use after free in Microsoft Trace Data Helper allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-122165
HIGH 7.8
Heap-based buffer overflow in Windows Client for NFS allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-122166
HIGH 7.8
Stack-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-122168
HIGH 7.8
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-121673
HIGH 7.8
Use after free in Windows Filter Manager allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-118137
HIGH 7.8
Improper authorization in Windows FTP Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-113843
HIGH 7.8
Improper authentication in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-100223
HIGH 7.8
Windows NTFS Elevation of Privilege Vulnerability |
|
CVE-2026-105028
HIGH 7.8
Windows Win32k Elevation of Privilege Vulnerability |
|
CVE-2026-105501
HIGH 7.8
Windows Installer Elevation of Privilege Vulnerability |
|
CVE-2026-105503
HIGH 7.8
Windows Management Instrumentation Elevation of Privilege Vulnerability |
|
CVE-2026-105505
HIGH 7.8
Microsoft Input Method Editor (IME) Elevation of Privilege Vulnerability |
|
CVE-2026-105507
HIGH 7.8
Windows Installer Elevation of Privilege Vulnerability |
|
CVE-2026-105524
HIGH 7.8
Windows Management Instrumentation Elevation of Privilege Vulnerability |
|
CVE-2026-105528
HIGH 7.8
Desktop Window Manager Elevation of Privilege Vulnerability |
|
CVE-2026-105532
HIGH 7.8
Windows Installer Elevation of Privilege Vulnerability |
|
CVE-2026-105541
HIGH 7.8
Windows Audio Service Elevation of Privilege Vulnerability |
|
CVE-2026-105543
HIGH 7.8
Windows Installer Elevation of Privilege Vulnerability |
|
CVE-2026-105569
HIGH 7.8
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
|
CVE-2026-105575
HIGH 7.8
Windows DWM Core Library Elevation of Privilege Vulnerability |
|
CVE-2026-105580
HIGH 7.8
Windows Management Instrumentation Remote Code Execution Vulnerability |
|
CVE-2026-108403
HIGH 7.8
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2026-108405
HIGH 7.8
Windows CD-ROM Driver Elevation of Privilege Vulnerability |
|
CVE-2026-108407
HIGH 7.8
Windows GDI Elevation of Privilege Vulnerability |
|
CVE-2026-108412
HIGH 7.8
Windows Redirected Drive Buffering System Elevation of Privilege Vulnerability |
|
CVE-2026-109473
HIGH 7.8
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2026-112743
HIGH 7.8
Windows Device Association Service Elevation of Privilege Vulnerability |
|
CVE-2026-112751
HIGH 7.8
Windows Remote Assistance Elevation of Privilege Vulnerability |
|
CVE-2026-112752
HIGH 7.8
Windows Print Spooler Components Elevation of Privilege Vulnerability |
|
CVE-2026-112758
HIGH 7.8
Windows Defender Firewall Service Elevation of Privilege Vulnerability |
|
CVE-2026-112760
HIGH 7.8
Windows Overlay Filter Elevation of Privilege Vulnerability |
|
CVE-2026-112794
HIGH 7.8
Windows Smart Card Elevation of Privilege Vulnerability |
|
CVE-2026-112799
HIGH 7.8
Windows Projected File System Elevation of Privilege Vulnerability |
|
CVE-2026-112801
HIGH 7.8
Windows eSCL Scanner Elevation of Privilege Vulnerability |
|
CVE-2026-112802
HIGH 7.8
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2026-112811
HIGH 7.8
Windows Print Spooler Components Elevation of Privilege Vulnerability |
|
CVE-2026-112978
HIGH 7.8
Windows Print Spooler Components Elevation of Privilege Vulnerability |
|
CVE-2026-112981
HIGH 7.8
Windows Print Spooler Components Elevation of Privilege Vulnerability |
|
CVE-2026-113748
HIGH 7.8
Software Protection Platform (SPP) Elevation of Privilege Vulnerability |
|
CVE-2026-113758
HIGH 7.8
Windows Desktop Window Manager Elevation of Privilege Vulnerability |
|
CVE-2026-113767
HIGH 7.8
Windows COM+ Event System Service Elevation of Privilege Vulnerability |
|
CVE-2026-113847
HIGH 7.8
Windows Installer Elevation of Privilege Vulnerability |
|
CVE-2026-113848
HIGH 7.8
Windows NTFS Remote Code Execution Vulnerability |
|
CVE-2026-113856
CRITICAL 7.8
Windows Hyper-V Elevation of Privilege Vulnerability |
|
CVE-2026-113865
CRITICAL 7.8
Windows Hyper-V Elevation of Privilege Vulnerability |
|
CVE-2026-118126
HIGH 7.8
Windows Message Queuing Elevation of Privilege Vulnerability |
|
CVE-2026-118138
HIGH 7.8
Windows Client for NFS Elevation of Privilege Vulnerability |
|
CVE-2026-118142
HIGH 7.8
Windows Distributed File System (DFS) Elevation of Privilege Vulnerability |
|
CVE-2026-118220
HIGH 7.8
Windows Multiple Provider Router Elevation of Privilege Vulnerability |
|
CVE-2026-119382
CRITICAL 7.8
Windows TPM Elevation of Privilege Vulnerability |
|
CVE-2026-119390
HIGH 7.8
Remote Desktop Client Remote Code Execution Vulnerability |
|
CVE-2026-119391
HIGH 7.8
Windows Hyper-V Elevation of Privilege Vulnerability |
|
CVE-2026-119393
HIGH 7.8
Windows Credential Manager Elevation of Privilege Vulnerability |
|
CVE-2026-119816
HIGH 7.8
Windows Microsoft Account Sign-in Assistant Elevation of Privilege Vulnerability |
|
CVE-2026-119817
HIGH 7.8
Windows Shell Elevation of Privilege Vulnerability |
|
CVE-2026-119818
HIGH 7.8
Windows Text Services Framework Elevation of Privilege Vulnerability |
|
CVE-2026-119821
HIGH 7.8
Windows Network Connection Broker Elevation of Privilege Vulnerability |
|
CVE-2026-119826
HIGH 7.8
Windows Hyper-V Elevation of Privilege Vulnerability |
|
CVE-2026-119834
HIGH 7.8
Windows Subsystem for Linux Elevation of Privilege Vulnerability |
|
CVE-2026-119846
HIGH 7.8
Windows Subsystem for Linux Elevation of Privilege Vulnerability |
|
CVE-2026-119847
HIGH 7.8
Windows Kerberos Elevation of Privilege Vulnerability |
|
CVE-2026-119853
HIGH 7.8
Remote Access API Elevation of Privilege Vulnerability |
|
CVE-2026-119886
HIGH 7.8
Windows Telephony Service Elevation of Privilege Vulnerability |
|
CVE-2026-119892
HIGH 7.8
Windows Installer Elevation of Privilege Vulnerability |
|
CVE-2026-119899
HIGH 7.8
Windows Win32k Elevation of Privilege Vulnerability |
|
CVE-2026-119903
HIGH 7.8
Windows Installer Elevation of Privilege Vulnerability |
|
CVE-2026-119904
HIGH 7.8
Microsoft Windows Speech Elevation of Privilege Vulnerability |
|
CVE-2026-119907
HIGH 7.8
Windows Function Discovery Resource Publication Elevation of Privilege Vulnerability |
|
CVE-2026-119917
HIGH 7.8
Windows Distributed Transaction Coordinator Elevation of Privilege Vulnerability |
|
CVE-2026-119929
HIGH 7.8
Windows Installer Elevation of Privilege Vulnerability |
|
CVE-2026-119933
HIGH 7.8
Windows NTFS Elevation of Privilege Vulnerability |
|
CVE-2026-119939
HIGH 7.8
Windows Print Spooler Components Elevation of Privilege Vulnerability |
|
CVE-2026-119941
HIGH 7.8
Volume Shadow Copy Elevation of Privilege Vulnerability |
|
CVE-2026-119943
HIGH 7.8
Microsoft Windows Search Component Elevation of Privilege Vulnerability |
|
CVE-2026-119953
HIGH 7.8
Windows DNS Elevation of Privilege Vulnerability |
|
CVE-2026-119954
HIGH 7.8
Microsoft Windows Search Component Elevation of Privilege Vulnerability |
|
CVE-2026-95891
HIGH 7.8
Microsoft DirectMusic Remote Code Execution Vulnerability |
|
CVE-2026-95896
HIGH 7.8
Microsoft DirectMusic Remote Code Execution Vulnerability |
|
CVE-2026-97002
HIGH 7.5
Out-of-bounds read in Windows VMSwitch allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96176
HIGH 7.5
Missing release of memory after effective lifetime in Windows DNS allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-96077
HIGH 7.5
Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-88236
HIGH 7.5
Null pointer dereference in Microsoft QUIC allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-70240
HIGH 7.5
Missing release of memory after effective lifetime in Windows Kerberos allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-122177
HIGH 7.5
Improper link resolution before file access ('link following') in Windows iSCSI allows an unauthorized attacker to elevate privileges over a network. |
|
CVE-2026-122169
HIGH 7.5
Insufficient granularity of access control in Windows IKE Extension allows an authorized attacker to perform spoofing locally. |
|
CVE-2026-121680
HIGH 7.5
Exposure of sensitive information to an unauthorized actor in Windows NTLM allows an unauthorized attacker to perform spoofing over a network. |
|
CVE-2026-105512
HIGH 7.5
Microsoft QUIC Denial of Service Vulnerability |
|
CVE-2026-105515
HIGH 7.5
Windows Message Queuing Denial of Service Vulnerability |
|
CVE-2026-105551
HIGH 7.5
Windows NetBIOS Elevation of Privilege Vulnerability |
|
CVE-2026-105558
HIGH 7.5
Windows Deployment Services Remote Code Execution Vulnerability |
|
CVE-2026-105561
HIGH 7.5
Windows Secure Socket Tunneling Protocol (SSTP) Denial of Service Vulnerability |
|
CVE-2026-105578
HIGH 7.5
Microsoft JScript Remote Code Execution Vulnerability |
|
CVE-2026-112793
HIGH 7.5
Windows Event Collector Service Elevation of Privilege Vulnerability |
|
CVE-2026-112966
HIGH 7.5
Windows Security Account Manager Denial of Service Vulnerability |
|
CVE-2026-112972
HIGH 7.5
Windows SMBv3 Server Remote Code Execution Vulnerability |
|
CVE-2026-112985
HIGH 7.5
Windows JScript Remote Code Execution Vulnerability |
|
CVE-2026-113749
CRITICAL 7.5
Microsoft Windows Codecs Library Remote Code Execution Vulnerability |
|
CVE-2026-113752
CRITICAL 7.5
Windows Print Spooler Components Remote Code Execution Vulnerability |
|
CVE-2026-113768
HIGH 7.5
Windows Performance Counters Remote Code Execution Vulnerability |
|
CVE-2026-113825
CRITICAL 7.5
Windows SMB Server Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability |
|
CVE-2026-113859
CRITICAL 7.5
Windows TCP/IP Remote Code Execution Vulnerability |
|
CVE-2026-113861
CRITICAL 7.5
Windows Hyper-V Elevation of Privilege Vulnerability |
|
CVE-2026-116698
HIGH 7.5
Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability |
|
CVE-2026-116706
HIGH 7.5
Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability |
|
CVE-2026-118145
CRITICAL 7.5
Windows Function Discovery SSDP Provider Remote Code Execution Vulnerability |
|
CVE-2026-118148
CRITICAL 7.5
Active Directory Domain Services Elevation of Privilege Vulnerability |
|
CVE-2026-118735
HIGH 7.5
Active Directory Domain Services Elevation of Privilege Vulnerability |
|
CVE-2026-119837
HIGH 7.5
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability |
|
CVE-2026-119858
HIGH 7.5
Remote Desktop Client Remote Code Execution Vulnerability |
|
CVE-2026-119880
HIGH 7.5
Microsoft XPS Document Converter Remote Code Execution Vulnerability |
|
CVE-2026-119932
HIGH 7.5
Windows Remote Desktop Denial of Service Vulnerability |
|
CVE-2026-119938
HIGH 7.5
Windows Shell Remote Code Execution Vulnerability |
|
CVE-2026-119944
HIGH 7.5
Windows Mobile Device Management Elevation of Privilege Vulnerability |
|
CVE-2026-119947
CRITICAL 7.5
Windows Hyper-V Elevation of Privilege Vulnerability |
|
CVE-2026-119948
HIGH 7.5
Windows Active Directory Remote Code Execution Vulnerability |
|
CVE-2026-119960
CRITICAL 7.5
Windows Hyper-V Elevation of Privilege Vulnerability |
|
CVE-2026-119966
CRITICAL 7.5
Windows Graphics Kernel Elevation of Privilege Vulnerability |
|
CVE-2026-122163
HIGH 7.5
Windows Image Acquisition Remote Code Execution Vulnerability |
|
CVE-2026-125134
CRITICAL 7.5
Windows Function Discovery Resource Publication Remote Code Execution Vulnerability |
|
CVE-2026-88212
HIGH 7.5
Windows Network Address Translation (NAT) Remote Code Execution Vulnerability |
|
CVE-2026-88244
HIGH 7.5
Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability |
|
CVE-2026-95964
HIGH 7.5
Remote Desktop Client Remote Code Execution Vulnerability |
|
CVE-2026-96081
HIGH 7.5
Windows Rich Text Edit Control Remote Code Execution Vulnerability |
|
CVE-2026-96993
HIGH 7.5
Windows Performance Monitor Remote Code Execution Vulnerability |
|
CVE-2026-119900
HIGH 7.3
Windows NTFS Elevation of Privilege Vulnerability |
|
CVE-2026-112973
HIGH 7.1
Windows Kernel Security Feature Bypass Vulnerability |
|
CVE-2026-119988
HIGH 7.1
Windows SMB Remote Code Execution Vulnerability |
|
CVE-2026-96994
HIGH 7.0
Use after free in Winsock allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96978
HIGH 7.0
Use after free in Windows Credential User Interface allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96971
HIGH 7.0
Use after free in Windows NetBIOS allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96973
HIGH 7.0
Use after free in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96969
HIGH 7.0
Double free in Windows TCP/IP allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96171
HIGH 7.0
Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96158
HIGH 7.0
Use of uninitialized resource in Microsoft ActiveX Installer Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96168
HIGH 7.0
Untrusted pointer dereference in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96153
HIGH 7.0
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96155
HIGH 7.0
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96139
HIGH 7.0
Untrusted pointer dereference in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96124
HIGH 7.0
Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96097
HIGH 7.0
Release of invalid pointer or reference in Windows Brokering File System allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96107
HIGH 7.0
Null pointer dereference in Windows Phone Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96088
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected User Experiences and Telemetry allows an autho… |
|
CVE-2026-96075
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Feedback Hub allows an authorized attacker to elevate pr… |
|
CVE-2026-96061
HIGH 7.0
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96072
HIGH 7.0
Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96051
HIGH 7.0
Out-of-bounds read in Windows USB Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96042
HIGH 7.0
Use after free in Windows Connection Manager Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96043
HIGH 7.0
Use after free in Windows Connection Manager Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96035
HIGH 7.0
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96027
HIGH 7.0
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96019
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privi… |
|
CVE-2026-96007
HIGH 7.0
Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95987
HIGH 7.0
Use after free in Windows User Manager Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95989
HIGH 7.0
Use after free in vhdmp.sys allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95976
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Diagnostic Policy Service allows an authorized attacker … |
|
CVE-2026-95979
HIGH 7.0
Use after free in Windows Brokering File System allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95966
HIGH 7.0
Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95968
HIGH 7.0
Use after free in Windows Smart Card allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95971
HIGH 7.0
Untrusted pointer dereference in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95973
HIGH 7.0
Untrusted pointer dereference in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95974
HIGH 7.0
Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95961
HIGH 7.0
Double free in Windows USB Video Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95950
HIGH 7.0
Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95938
HIGH 7.0
Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95922
HIGH 7.0
Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95923
HIGH 7.0
Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95906
HIGH 7.0
Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95888
HIGH 7.0
Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95876
HIGH 7.0
Use after free in Windows Local Session Manager (LSM) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95871
HIGH 7.0
Heap-based buffer overflow in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-94525
HIGH 7.0
An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files. The vulnerability could allow elevation of… |
|
CVE-2026-94529
HIGH 7.0
Heap-based buffer overflow in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-94514
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileg… |
|
CVE-2026-94519
HIGH 7.0
Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-94522
HIGH 7.0
Use after free in Kernel Transaction Manager allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88242
HIGH 7.0
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88237
HIGH 7.0
Use after free in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88228
HIGH 7.0
Heap-based buffer overflow in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88221
HIGH 7.0
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85862
HIGH 7.0
Double free in Windows Error Reporting allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70120
HIGH 7.0
Use after free in Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70231
HIGH 7.0
Use after free in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-123389
HIGH 7.0
Use after free in Quality Windows Audio/Video Experience (QWAVE) service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-122182
HIGH 7.0
Improper link resolution before file access ('link following') in Windows Maps allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-122174
HIGH 7.0
Improper link resolution before file access ('link following') in Windows Task Scheduler allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-122179
HIGH 7.0
Heap-based buffer overflow in Windows Internet Connection Sharing (ICS) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-122170
HIGH 7.0
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-121670
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Overlay Filter allows an authorized attacker to elevate … |
|
CVE-2026-121671
HIGH 7.0
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-103571
HIGH 7.0
Windows CNG Key Isolation Service Elevation of Privilege Vulnerability |
|
CVE-2026-105017
HIGH 7.0
Volume Shadow Copy Elevation of Privilege Vulnerability |
|
CVE-2026-105024
HIGH 7.0
Windows Storage Spaces Controller Elevation of Privilege Vulnerability |
|
CVE-2026-105504
HIGH 7.0
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2026-105510
HIGH 7.0
Windows Secure Socket Tunneling Protocol (SSTP) Elevation of Privilege Vulnerability |
|
CVE-2026-105511
HIGH 7.0
Windows Point-to-Point Protocol over Ethernet (PPPoE) Elevation of Privilege Vulnerability |
|
CVE-2026-105513
HIGH 7.0
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2026-105522
HIGH 7.0
Winlogon Elevation of Privilege Vulnerability |
|
CVE-2026-105525
HIGH 7.0
Windows Network Connection Broker Elevation of Privilege Vulnerability |
|
CVE-2026-105526
HIGH 7.0
Winsock Elevation of Privilege Vulnerability |
|
CVE-2026-105529
HIGH 7.0
Windows Storage Elevation of Privilege Vulnerability |
|
CVE-2026-105533
HIGH 7.0
Windows COM Elevation of Privilege Vulnerability |
|
CVE-2026-105540
HIGH 7.0
Windows Error Reporting Elevation of Privilege Vulnerability |
|
CVE-2026-105546
HIGH 7.0
Windows Management Instrumentation Elevation of Privilege Vulnerability |
|
CVE-2026-105547
HIGH 7.0
Windows Setup and Deployment Elevation of Privilege Vulnerability |
|
CVE-2026-105553
HIGH 7.0
Windows Filtering Platform (WFP) Elevation of Privilege Vulnerability |
|
CVE-2026-105554
HIGH 7.0
Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability |
|
CVE-2026-105565
HIGH 7.0
Windows MIDI Service Module Elevation of Privileges Vulnerability |
|
CVE-2026-105566
HIGH 7.0
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2026-105567
HIGH 7.0
Windows Print Spooler Components Elevation of Privilege Vulnerability |
|
CVE-2026-105574
HIGH 7.0
Windows MIDI Service Module Elevation of Privileges Vulnerability |
|
CVE-2026-105582
HIGH 7.0
Windows DWM Core Library Elevation of Privilege Vulnerability |
|
CVE-2026-105583
HIGH 7.0
Windows DWM Core Library Elevation of Privilege Vulnerability |
|
CVE-2026-105586
HIGH 7.0
Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability |
|
CVE-2026-105587
HIGH 7.0
Windows OLE DB Elevation of Privilege Vulnerability |
|
CVE-2026-105589
HIGH 7.0
Windows Wireless Networking Elevation of Privilege Vulnerability |
|
CVE-2026-108406
HIGH 7.0
Windows Network Connection Broker Elevation of Privilege Vulnerability |
|
CVE-2026-108413
HIGH 7.0
Windows Telephony Service Elevation of Privilege Vulnerability |
|
CVE-2026-108414
HIGH 7.0
Windows Projected File System Filter Driver Elevation of Privilege Vulnerability |
|
CVE-2026-112756
HIGH 7.0
Windows Filtering Platform (WFP) Elevation of Privilege Vulnerability |
|
CVE-2026-112759
HIGH 7.0
Windows Task Scheduler Elevation of Privilege Vulnerability |
|
CVE-2026-112761
HIGH 7.0
Windows Broadcast DVR User Service Elevation of Privilege Vulnerability |
|
CVE-2026-112763
HIGH 7.0
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
|
CVE-2026-112764
HIGH 7.0
Windows USB Driver Elevation of Privilege Vulnerability |
|
CVE-2026-112765
HIGH 7.0
Windows Print Spooler Components Elevation of Privilege Vulnerability |
|
CVE-2026-112766
HIGH 7.0
Windows exFAT File System Elevation of Privilege Vulnerability |
|
CVE-2026-112790
HIGH 7.0
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2026-112791
HIGH 7.0
Windows Print Spooler Components Elevation of Privilege Vulnerability |
|
CVE-2026-112792
HIGH 7.0
Windows Print Spooler Components Elevation of Privilege Vulnerability |
|
CVE-2026-112796
HIGH 7.0
Windows Event Collector Service Elevation of Privilege Vulnerability |
|
CVE-2026-112797
HIGH 7.0
Windows Print Spooler Components Elevation of Privilege Vulnerability |
|
CVE-2026-112798
HIGH 7.0
Windows NetBIOS Elevation of Privilege Vulnerability |
|
CVE-2026-112800
HIGH 7.0
Windows Diagnostic Policy Service Elevation of Privilege Vulnerability |
|
CVE-2026-112804
HIGH 7.0
Windows exFAT File System Elevation of Privilege Vulnerability |
|
CVE-2026-112810
HIGH 7.0
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
|
CVE-2026-112812
HIGH 7.0
Windows SMB Client Elevation of Privilege Vulnerability |
|
CVE-2026-112968
HIGH 7.0
Windows COM Elevation of Privilege Vulnerability |
|
CVE-2026-112976
HIGH 7.0
Windows Print Spooler Components Elevation of Privilege Vulnerability |
|
CVE-2026-112986
HIGH 7.0
Windows DWM Core Library Elevation of Privilege Vulnerability |
|
CVE-2026-112987
HIGH 7.0
Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability |
|
CVE-2026-112989
HIGH 7.0
Windows Servicing Stack Updates Elevation of Privilege Vulnerability |
|
CVE-2026-113750
HIGH 7.0
Windows Device Inventory Elevation of Privilege Vulnerability |
|
CVE-2026-113751
HIGH 7.0
Windows Fast FAT Driver Elevation of Privilege Vulnerability |
|
CVE-2026-113755
HIGH 7.0
Windows Filter Manager Elevation of Privilege Vulnerability |
|
CVE-2026-113762
HIGH 7.0
Windows Broadcast DVR User Service Elevation of Privilege Vulnerability |
|
CVE-2026-113769
HIGH 7.0
Windows COM+ Event System Service Elevation of Privilege Vulnerability |
|
CVE-2026-113770
HIGH 7.0
Windows Print Spooler Components Elevation of Privilege Vulnerability |
|
CVE-2026-113819
HIGH 7.0
Desktop Window Manager Elevation of Privilege Vulnerability |
|
CVE-2026-113820
HIGH 7.0
Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability |
|
CVE-2026-113842
HIGH 7.0
Windows Security Center Elevation of Privilege Vulnerability |
|
CVE-2026-113860
CRITICAL 7.0
Windows Hyper-V Elevation of Privilege Vulnerability |
|
CVE-2026-116707
HIGH 7.0
Windows Link Layer Topology Discovery Protocol Elevation of Privilege Vulnerability |
|
CVE-2026-118123
HIGH 7.0
Windows Point-to-Point Protocol over Ethernet (PPPoE) Elevation of Privilege Vulnerability |
|
CVE-2026-118124
HIGH 7.0
Windows Internet Connection Sharing (ICS) Elevation of Privilege Vulnerability |
|
CVE-2026-118125
HIGH 7.0
Windows Message Queuing Elevation of Privilege Vulnerability |
|
CVE-2026-119386
HIGH 7.0
Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability |
|
CVE-2026-119387
HIGH 7.0
Quality Windows Audio/Video Experience (QWAVE) service Elevation of Privilege Vulnerability |
|
CVE-2026-119388
HIGH 7.0
Quality Windows Audio/Video Experience (QWAVE) service Elevation of Privilege Vulnerability |
|
CVE-2026-119389
HIGH 7.0
Windows Storage Elevation of Privilege Vulnerability |
|
CVE-2026-119397
HIGH 7.0
Windows Kernel Transaction Manager Elevation of Privilege Vulnerability |
|
CVE-2026-119398
HIGH 7.0
Windows Installer Elevation of Privilege Vulnerability |
|
CVE-2026-119399
HIGH 7.0
Windows Installer Elevation of Privilege Vulnerability |
|
CVE-2026-119401
HIGH 7.0
Windows Broadcast DVR User Service Elevation of Privilege Vulnerability |
|
CVE-2026-119402
HIGH 7.0
Windows Broadcast DVR User Service Elevation of Privilege Vulnerability |
|
CVE-2026-119403
HIGH 7.0
Windows Broadcast DVR User Service Elevation of Privilege Vulnerability |
|
CVE-2026-119405
HIGH 7.0
Windows Backup Engine Elevation of Privilege Vulnerability |
|
CVE-2026-119822
HIGH 7.0
Windows Overlay Filter Elevation of Privilege Vulnerability |
|
CVE-2026-119827
HIGH 7.0
Windows Win32k Elevation of Privilege Vulnerability |
|
CVE-2026-119831
HIGH 7.0
Windows Installer Elevation of Privilege Vulnerability |
|
CVE-2026-119833
HIGH 7.0
Windows Message Queuing Elevation of Privilege Vulnerability |
|
CVE-2026-119835
HIGH 7.0
Windows Smart Card Elevation of Privilege Vulnerability |
|
CVE-2026-119844
HIGH 7.0
Windows Device Association Service Elevation of Privilege Vulnerability |
|
CVE-2026-119849
HIGH 7.0
Virtual Hard Disk (VHD) Miniport Driver Remote Code Execution Vulnerability |
|
CVE-2026-119851
HIGH 7.0
Windows Storage Spaces Controller Elevation of Privilege Vulnerability |
|
CVE-2026-119859
HIGH 7.0
Windows Internet Connection Sharing (ICS) Elevation of Privilege Vulnerability |
|
CVE-2026-119860
HIGH 7.0
Windows Internet Connection Sharing (ICS) Elevation of Privilege Vulnerability |
|
CVE-2026-119861
HIGH 7.0
Windows Internet Connection Sharing (ICS) Elevation of Privilege Vulnerability |
|
CVE-2026-119866
HIGH 7.0
Windows Device Association Service Elevation of Privilege Vulnerability |
|
CVE-2026-119870
HIGH 7.0
Windows SMB Client Elevation of Privilege Vulnerability |
|
CVE-2026-119873
HIGH 7.0
Windows NetBIOS Elevation of Privilege Vulnerability |
|
CVE-2026-119874
HIGH 7.0
Windows Device Association Service Elevation of Privilege Vulnerability |
|
CVE-2026-119876
HIGH 7.0
Windows USB Scanner Driver Elevation of Privilege Vulnerability |
|
CVE-2026-119888
HIGH 7.0
Windows Audio Service Elevation of Privilege Vulnerability |
|
CVE-2026-119893
HIGH 7.0
Windows Audio Service Elevation of Privilege Vulnerability |
|
CVE-2026-119894
HIGH 7.0
Windows Audio Service Elevation of Privilege Vulnerability |
|
CVE-2026-119895
HIGH 7.0
Windows Audio Service Elevation of Privilege Vulnerability |
|
CVE-2026-119898
HIGH 7.0
Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability |
|
CVE-2026-119913
HIGH 7.0
Windows Print Spooler Components Elevation of Privilege Vulnerability |
|
CVE-2026-119919
HIGH 7.0
Windows Distributed Transaction Coordinator Elevation of Privilege Vulnerability |
|
CVE-2026-119921
HIGH 7.0
Windows Microsoft Account Sign-in Assistant Elevation of Privilege Vulnerability |
|
CVE-2026-119928
HIGH 7.0
Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability |
|
CVE-2026-119931
HIGH 7.0
Windows Text Services Framework Elevation of Privilege Vulnerability |
|
CVE-2026-119974
HIGH 7.0
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
|
CVE-2026-119992
HIGH 7.0
Windows HTTP.sys Elevation of Privilege Vulnerability |
|
CVE-2026-96054
HIGH 7.0
Microsoft Color Management Remote Code Execution Vulnerability |
|
CVE-2026-96982
MEDIUM 6.8
Integer overflow or wraparound in HID Parser Library allows an unauthorized attacker to elevate privileges with a physical attack. |
|
CVE-2026-96979
MEDIUM 6.8
Integer overflow or wraparound in HID Parser Library allows an unauthorized attacker to elevate privileges with a physical attack. |
|
CVE-2026-96974
MEDIUM 6.8
Integer overflow or wraparound in HID Parser Library allows an unauthorized attacker to elevate privileges with a physical attack. |
|
CVE-2026-95905
MEDIUM 6.8
Heap-based buffer overflow in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack. |
|
CVE-2026-125135
MEDIUM 6.8
Out-of-bounds read in HID Parser Library allows an unauthorized attacker to elevate privileges with a physical attack. |
|
CVE-2026-122173
MEDIUM 6.8
Heap-based buffer overflow in HID Parser Library allows an unauthorized attacker to elevate privileges with a physical attack. |
|
CVE-2026-122167
MEDIUM 6.8
Heap-based buffer overflow in Windows USB Driver allows an unauthorized attacker to elevate privileges with a physical attack. |
|
CVE-2026-108404
HIGH 6.8
Windows CD-ROM Driver Remote Code Execution Vulnerability |
|
CVE-2026-112755
HIGH 6.8
Windows RNDIS Elevation of Privilege Vulnerability |
|
CVE-2026-118143
HIGH 6.8
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2026-119823
HIGH 6.8
Windows Storport Miniport Driver Remote Code Execution Vulnerability |
|
CVE-2026-119829
HIGH 6.8
Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability |
|
CVE-2026-119830
HIGH 6.8
Windows Storport Miniport Driver Elevation of Privilege Vulnerability |
|
CVE-2026-119884
HIGH 6.8
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2026-119885
HIGH 6.8
Windows Storport Miniport Driver Elevation of Privilege Vulnerability |
|
CVE-2026-119918
HIGH 6.8
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2026-119935
HIGH 6.8
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2026-95910
MEDIUM 6.7
Improper certificate validation in Windows Hyper-V allows an authorized attacker to bypass a security feature locally. |
|
CVE-2026-112980
HIGH 6.7
Windows Print Spooler Components Elevation of Privilege Vulnerability |
|
CVE-2026-119852
HIGH 6.7
Windows Installer Elevation of Privilege Vulnerability |
|
CVE-2026-119912
HIGH 6.7
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2026-119914
HIGH 6.7
Windows Setup and Deployment Elevation of Privilege Vulnerability |
|
CVE-2026-95889
MEDIUM 6.6
Untrusted pointer dereference in Windows Storage allows an authorized attacker to elevate privileges with a physical attack. |
|
CVE-2026-105018
HIGH 6.6
Windows Partition Management Driver Elevation of Privilege Vulnerability |
|
CVE-2026-112969
HIGH 6.6
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2026-112984
HIGH 6.6
Windows USB Video Driver Elevation of Privilege Vulnerability |
|
CVE-2026-113817
HIGH 6.6
Windows Devices Human Interface Elevation of Privilege Vulnerability |
|
CVE-2026-118144
HIGH 6.6
Windows Smart Card Elevation of Privilege Vulnerability |
|
CVE-2026-119383
HIGH 6.6
Windows Smart Card Elevation of Privilege Vulnerability |
|
CVE-2026-119394
HIGH 6.6
Windows Enhanced Storage Remote Code Execution Vulnerability |
|
CVE-2026-119937
HIGH 6.6
Kernel Streaming Service Driver Elevation of Privilege Vulnerability |
|
CVE-2026-96086
MEDIUM 6.5
Out-of-bounds read in Windows WLAN Service allows an unauthorized attacker to deny service over an adjacent network. |
|
CVE-2026-96082
MEDIUM 6.5
Out-of-bounds read in Windows Kerberos allows an authorized attacker to deny service over a network. |
|
CVE-2026-96018
MEDIUM 6.5
Weak authentication in Windows AppContainer allows an authorized attacker to disclose information locally. |
|
CVE-2026-105559
HIGH 6.5
Windows Active Directory Denial of Service Vulnerability |
|
CVE-2026-105568
HIGH 6.5
Windows Active Directory Domain Services Denial of Service Vulnerability |
|
CVE-2026-108417
HIGH 6.5
Windows Remote Desktop Client Information Disclosure Vulnerability |
|
CVE-2026-108418
HIGH 6.5
Windows Remote Desktop Client Information Disclosure Vulnerability |
|
CVE-2026-108419
HIGH 6.5
Windows Remote Desktop Client Information Disclosure Vulnerability |
|
CVE-2026-108424
HIGH 6.5
Windows GDI Information Disclosure Vulnerability |
|
CVE-2026-112795
HIGH 6.5
Windows Security Account Manager Denial of Service Vulnerability |
|
CVE-2026-112807
HIGH 6.5
Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability |
|
CVE-2026-112808
HIGH 6.5
Windows Print Spooler Components Information Disclosure Vulnerability |
|
CVE-2026-116699
HIGH 6.5
Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability |
|
CVE-2026-119396
HIGH 6.5
Windows Remote Access API Tampering Vulnerability |
|
CVE-2026-119887
HIGH 6.5
Windows Installer Information Disclosure Vulnerability |
|
CVE-2026-119889
HIGH 6.5
ActiveSyncProvider Information Disclosure Vulnerability |
|
CVE-2026-119940
HIGH 6.5
Windows Kerberos Denial of Service Vulnerability |
|
CVE-2026-96992
MEDIUM 6.4
Use after free in Windows PCI Bus Driver allows an unauthorized attacker to elevate privileges with a physical attack. |
|
CVE-2026-96981
MEDIUM 6.4
Out-of-bounds write in Windows PCI Bus Driver allows an unauthorized attacker to elevate privileges with a physical attack. |
|
CVE-2026-88215
MEDIUM 6.4
Use after free in Windows Filtering Platform (WFP) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-113864
CRITICAL 6.4
Windows Hyper-V Elevation of Privilege Vulnerability |
|
CVE-2026-119871
HIGH 6.4
Windows IP Translation Configuration Service Elevation of Privilege Vulnerability |
|
CVE-2026-119872
HIGH 6.4
Windows USB Driver Elevation of Privilege Vulnerability |
|
CVE-2026-119901
HIGH 6.4
Windows MIDI Service Module Elevation of Privileges Vulnerability |
|
CVE-2026-119965
HIGH 6.4
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2026-113763
HIGH 6.3
Windows DPAPI (Data Protection Application Programming Interface) Elevation of Privilege Vulnerability |
|
CVE-2026-119840
HIGH 6.3
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability |
|
CVE-2026-112757
HIGH 6.0
Windows Secure Kernel Mode Information Disclosure Vulnerability |
|
CVE-2026-119955
HIGH 6.0
Windows Hyper-V Denial of Service Vulnerability |
|
CVE-2026-95913
MEDIUM 5.9
Use after free in Windows Hyper-V allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-122474
MEDIUM 5.9
Time-of-check time-of-use (toctou) race condition in Windows Security Account Manager allows an unauthorized attacker to bypass a security feature over a netwo… |
|
CVE-2026-119832
MEDIUM 5.9
Improper access control in Windows BitLocker allows an authorized attacker to bypass a security feature with a physical attack. |
|
CVE-2026-116697
HIGH 5.9
Reliable Multicast Transport Driver (RMCAST) Denial of Service Vulnerability |
|
CVE-2026-119404
HIGH 5.9
Windows Client for NFS Security Feature Bypass Vulnerability |
|
CVE-2026-119909
HIGH 5.9
Windows Internet Information Services Denial of Service Vulnerability |
|
CVE-2026-119936
HIGH 5.9
Windows Internet Information Services Denial of Service Vulnerability |
|
CVE-2026-119946
HIGH 5.9
HTTP.sys Information Disclosure Vulnerability |
|
CVE-2026-119972
HIGH 5.9
Remote Procedure Call Denial of Service Vulnerability |
|
CVE-2026-88231
MEDIUM 5.7
Out-of-bounds read in Windows iSCSI allows an authorized attacker to disclose information over a network. |
|
CVE-2026-88211
MEDIUM 5.7
Out-of-bounds read in Graphic Fonts allows an authorized attacker to disclose information over a network. |
|
CVE-2026-96150
MEDIUM 5.6
Use of uninitialized resource in Microsoft Windows Codecs Library allows an authorized attacker to disclose information locally. |
|
CVE-2026-96022
MEDIUM 5.6
Use of uninitialized resource in Windows Text Services Framework allows an authorized attacker to disclose information locally. |
|
CVE-2026-96989
MEDIUM 5.5
Out-of-bounds read in Secondary Logon allows an authorized attacker to disclose information locally. |
|
CVE-2026-96156
MEDIUM 5.5
Use of uninitialized resource in Windows Broker Infrastructure Service allows an authorized attacker to disclose information locally. |
|
CVE-2026-96137
MEDIUM 5.5
Exposure of sensitive system information to an unauthorized control sphere in Windows Graphics Kernel allows an authorized attacker to disclose information loc… |
|
CVE-2026-96133
MEDIUM 5.5
Improper access control in Windows Graphics Kernel allows an authorized attacker to disclose information locally. |
|
CVE-2026-96101
MEDIUM 5.5
Files or directories accessible to external parties in Windows Connected User Experiences and Telemetry allows an authorized attacker to disclose information l… |
|
CVE-2026-96110
MEDIUM 5.5
Use after free in Windows OLE allows an authorized attacker to disclose information locally. |
|
CVE-2026-96059
MEDIUM 5.5
Use after free in HID class driver allows an authorized attacker to disclose information locally. |
|
CVE-2026-96041
MEDIUM 5.5
Out-of-bounds read in Windows USB Hub Driver allows an authorized attacker to disclose information locally. |
|
CVE-2026-96001
MEDIUM 5.5
Exposure of sensitive system information to an unauthorized control sphere in Windows Bluetooth Service allows an authorized attacker to disclose information l… |
|
CVE-2026-95977
MEDIUM 5.5
Out-of-bounds read in Windows Event Viewer allows an authorized attacker to disclose information locally. |
|
CVE-2026-95944
MEDIUM 5.5
Weak authentication in Windows App Readiness Service allows an authorized attacker to perform tampering locally. |
|
CVE-2026-95946
MEDIUM 5.5
Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to disclose information locally. |
|
CVE-2026-95908
MEDIUM 5.5
Out-of-bounds read in Remote Desktop Client allows an authorized attacker to disclose information locally. |
|
CVE-2026-95893
MEDIUM 5.5
Use of uninitialized resource in Windows Win32K allows an authorized attacker to disclose information locally. |
|
CVE-2026-94517
MEDIUM 5.5
Use of uninitialized resource in Kernel Transaction Manager allows an authorized attacker to disclose information locally. |
|
CVE-2026-88247
MEDIUM 5.5
Use of uninitialized resource in Windows Program Compatibility Assistant Service allows an authorized attacker to disclose information locally. |
|
CVE-2026-88220
MEDIUM 5.5
Buffer over-read in Windows Performance Counters allows an authorized attacker to disclose information locally. |
|
CVE-2026-88217
MEDIUM 5.5
Use of uninitialized resource in Windows Graphics Kernel allows an authorized attacker to disclose information locally. |
|
CVE-2026-122297
MEDIUM 5.5
Use of uninitialized resource in Kernel Transaction Manager allows an authorized attacker to disclose information locally. |
|
CVE-2026-122162
MEDIUM 5.5
Integer underflow (wrap or wraparound) in Windows Update Stack allows an authorized attacker to disclose information locally. |
|
CVE-2026-113757
MEDIUM 5.5
Improper access control in Windows FileCrypt Driver allows an authorized attacker to disclose information locally. |
|
CVE-2026-112803
MEDIUM 5.5
Improper access control in Windows Cloud Files Mini Filter Driver allows an authorized attacker to disclose information locally. |
|
CVE-2026-105527
HIGH 5.5
Windows Encrypting File System (EFS) Denial of Service Vulnerability |
|
CVE-2026-105530
HIGH 5.5
Windows System Events Broker Information Disclosure Vulnerability |
|
CVE-2026-105531
HIGH 5.5
Windows Print Spooler Components Information Disclosure Vulnerability |
|
CVE-2026-105537
HIGH 5.5
Mailslot File System Information Disclosure Vulnerability |
|
CVE-2026-105552
HIGH 5.5
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2026-105584
HIGH 5.5
Windows Inventory Backup Information Disclosure Vulnerability |
|
CVE-2026-108408
HIGH 5.5
Windows Telephony Service Information Disclosure Vulnerability |
|
CVE-2026-108409
HIGH 5.5
Windows Overlay Filter Information Disclosure Vulnerability |
|
CVE-2026-108410
HIGH 5.5
Windows Management Instrumentation Information Disclosure Vulnerability |
|
CVE-2026-112750
HIGH 5.5
Windows Overlay Filter Information Disclosure Vulnerability |
|
CVE-2026-112754
HIGH 5.5
Microsoft Graphics Component Information Disclosure Vulnerability |
|
CVE-2026-112814
HIGH 5.5
Windows Management Instrumentation Elevation of Privilege Vulnerability |
|
CVE-2026-112965
HIGH 5.5
Windows Management Instrumentation Information Disclosure Vulnerability |
|
CVE-2026-112974
HIGH 5.5
Microsoft Account Tampering Vulnerability |
|
CVE-2026-112979
HIGH 5.5
Windows State Repository Service Tampering Vulnerability |
|
CVE-2026-112982
HIGH 5.5
Microsoft Account Tampering Vulnerability |
|
CVE-2026-112988
HIGH 5.5
Windows Desktop Window Manager Elevation of Privilege Vulnerability |
|
CVE-2026-113844
HIGH 5.5
Windows NTFS Tampering Vulnerability |
|
CVE-2026-118736
HIGH 5.5
Windows Network File System Information Disclosure Vulnerability |
|
CVE-2026-119825
HIGH 5.5
Win32k Information Disclosure Vulnerability |
|
CVE-2026-119855
HIGH 5.5
Windows COM+ Event System Service Information Disclosure Vulnerability |
|
CVE-2026-119856
HIGH 5.5
Win32k Information Disclosure Vulnerability |
|
CVE-2026-119857
HIGH 5.5
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2026-96983
MEDIUM 5.3
Use after free in Windows DNS allows an unauthorized attacker to deny service over an adjacent network. |
|
CVE-2026-96965
MEDIUM 5.3
Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally. |
|
CVE-2026-113756
MEDIUM 5.3
Improper access control in Windows FileCrypt Driver allows an authorized attacker to bypass a security feature over a network. |
|
CVE-2026-105492
HIGH 5.3
Microsoft Remote Registry Service Denial of Service Vulnerability |
|
CVE-2026-108402
HIGH 5.3
Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability |
|
CVE-2026-112975
HIGH 5.3
Windows Link-Layer Discovery Protocol (LLDP) Denial of Service Vulnerability |
|
CVE-2026-119848
HIGH 5.3
Windows Message Queuing Denial of Service Vulnerability |
|
CVE-2026-119867
HIGH 5.3
Windows Installer Security Feature Bypass Vulnerability |
|
CVE-2026-119882
HIGH 5.3
Windows Remote Desktop Services Information Disclosure Vulnerability |
|
CVE-2026-119959
HIGH 5.3
Windows Hyper-V Spoofing Vulnerability |
|
CVE-2026-105506
HIGH 5.0
Windows Shell Information Disclosure Vulnerability |
|
CVE-2026-96144
MEDIUM 4.7
Use of uninitialized resource in Windows Graphics Kernel allows an authorized attacker to disclose information locally. |
|
CVE-2026-96093
MEDIUM 4.7
Out-of-bounds read in Windows Internet (wininet.dll) allows an authorized attacker to disclose information locally. |
|
CVE-2026-96048
MEDIUM 4.7
Use of uninitialized resource in Windows Graphics Kernel allows an authorized attacker to disclose information locally. |
|
CVE-2026-113754
MEDIUM 4.7
Improper access control in Windows FileCrypt Driver allows an authorized attacker to disclose information locally. |
|
CVE-2026-102200
HIGH 4.7
Windows NTFS Tampering Vulnerability |
|
CVE-2026-105562
HIGH 4.7
Windows Container Manager Service Information Disclosure Vulnerability |
|
CVE-2026-108423
HIGH 4.7
Windows WinHTTP Information Disclosure Vulnerability |
|
CVE-2026-112789
HIGH 4.7
Windows Installer Information Disclosure Vulnerability |
|
CVE-2026-112806
HIGH 4.7
Windows Print Spooler Components Information Disclosure Vulnerability |
|
CVE-2026-112813
HIGH 4.7
Windows Overlay Filter Elevation of Privilege Vulnerability |
|
CVE-2026-112990
HIGH 4.7
Windows USB Video Driver Elevation of Privilege Vulnerability |
|
CVE-2026-113764
HIGH 4.7
Windows Projected File System Information Disclosure Vulnerability |
|
CVE-2026-113772
HIGH 4.7
Windows Redirected Drive Buffering Information Disclosure Vulnerability |
|
CVE-2026-113815
HIGH 4.7
Microsoft PowerShell Security Feature Bypass Vulnerability |
|
CVE-2026-119385
HIGH 4.7
Windows Hyper-V Denial of Service Vulnerability |
|
CVE-2026-119836
HIGH 4.7
Windows Management Services Information Disclosure Vulnerability |
|
CVE-2026-119838
HIGH 4.7
Windows Installer Information Disclosure Vulnerability |
|
CVE-2026-119841
HIGH 4.7
Windows Graphics Kernel Information Disclosure Vulnerability |
|
CVE-2026-119910
HIGH 4.7
Win32k Information Disclosure Vulnerability |
|
CVE-2026-119942
HIGH 4.7
HTTP.sys Information Disclosure Vulnerability |
|
CVE-2026-96058
MEDIUM 4.6
Out-of-bounds read in Windows Kernel allows an unauthorized attacker to disclose information with a physical attack. |
|
CVE-2026-95998
MEDIUM 4.4
Missing authentication for critical function in Windows StateRepository API allows an authorized attacker to perform tampering locally. |
|
CVE-2026-85907
MEDIUM 4.4
Improper authentication in Windows SSDP Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-105549
HIGH 4.3
Windows Smart Card Information Disclosure Vulnerability |
|
CVE-2026-113816
HIGH 4.1
Windows Link-Layer Discovery Protocol (LLDP) Elevation of Privilege Vulnerability |
|
CVE-2026-113821
HIGH 4.1
Microsoft Windows SCSI Class System File Information Disclosure Vulnerability |
|
CVE-2026-119395
HIGH 4.0
Storport.sys Driver Information Disclosure Vulnerability |
|
CVE-2026-119875
HIGH 4.0
Windows Storport Miniport Driver Information Disclosure Vulnerability |
|
CVE-2026-113766
HIGH 3.3
Windows Language Experience Service Tampering Vulnerability |
Rolling out build 10.0.26300.9974 across your fleet?
Appaloosa pushes Windows updates, apps and policies from one console.