Windows
Windows Windows Server 2025 (Server Core installation)
Official advisoryWindows Windows Server 2025 (Server Core installation) fixes 4356 CVE, including 42 actively exploited (CISA KEV). Earlier versions remain exposed to these vulnerabilities.
- Release date
- —
- End of support
- —
- CVEs fixed
- 4356
- CISA KEV
- 42
219 critical · 3407 high
CVEs fixed
| CVE |
|---|
|
CVE-2026-33824
CRITICAL 9.8
KEV
Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network. |
|
CVE-2025-59287
Exploit
CRITICAL 9.8
KEV
Windows Server Update Service (WSUS) Remote Code Execution Vulnerability |
|
CVE-2026-96951
HIGH 8.8
KEV
Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to bypass a security featu… |
|
CVE-2026-21510
HIGH 8.8
KEV
Windows Shell Security Feature Bypass Vulnerability |
|
CVE-2026-21513
HIGH 8.8
KEV
MSHTML Framework Security Feature Bypass Vulnerability |
|
CVE-2025-33053
HIGH 8.8
KEV
Internet Shortcut Files Remote Code Execution Vulnerability |
|
CVE-2025-33073
Exploit
HIGH 8.8
KEV
Windows SMB Client Elevation of Privilege Vulnerability |
|
CVE-2024-49039
HIGH 8.8
KEV
Windows Task Scheduler Elevation of Privilege Vulnerability |
|
CVE-2026-81963
HIGH 7.8
KEV
Windows Update Stack Elevation of Privilege Vulnerability |
|
CVE-2026-56155
HIGH 7.8
KEV
Insufficient granularity of access control in Active Directory Federation Services (AD FS) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-21519
HIGH 7.8
KEV
Desktop Window Manager Elevation of Privilege Vulnerability |
|
CVE-2026-21533
HIGH 7.8
KEV
Windows Remote Desktop Services Elevation of Privilege Vulnerability |
|
CVE-2025-62221
HIGH 7.8
KEV
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2025-60710
HIGH 7.8
KEV
Improper link resolution before file access ('link following') in Host Process for Windows Tasks allows an authorized attacker to elevate privileges locally. |
|
CVE-2025-24990
HIGH 7.8
KEV
Windows Agere Modem Driver Elevation of Privilege Vulnerability |
|
CVE-2025-59230
HIGH 7.8
KEV
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability |
|
CVE-2025-30400
HIGH 7.8
KEV
Microsoft DWM Core Library Elevation of Privilege Vulnerability |
|
CVE-2025-32701
HIGH 7.8
KEV
Windows Common Log File System Driver Elevation of Privilege Vulnerability |
|
CVE-2025-32706
HIGH 7.8
KEV
Windows Common Log File System Driver Elevation of Privilege Vulnerability |
|
CVE-2025-32709
HIGH 7.8
KEV
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
|
CVE-2025-29824
HIGH 7.8
KEV
Windows Common Log File System Driver Elevation of Privilege Vulnerability |
|
CVE-2025-24993
HIGH 7.8
KEV
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally. |
|
CVE-2025-24985
HIGH 7.8
KEV
Windows Fast FAT File System Driver Remote Code Execution Vulnerability |
|
CVE-2025-21418
HIGH 7.8
KEV
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
|
CVE-2025-21335
HIGH 7.8
KEV
Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability |
|
CVE-2025-21333
Exploit
HIGH 7.8
KEV
Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability |
|
CVE-2025-21334
HIGH 7.8
KEV
Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability |
|
CVE-2024-49138
Exploit
HIGH 7.8
KEV
Windows Common Log File System Driver Elevation of Privilege Vulnerability |
|
CVE-2025-30397
Exploit
HIGH 7.5
KEV
Scripting Engine Memory Corruption Vulnerability |
|
CVE-2025-21391
HIGH 7.1
KEV
Windows Storage Elevation of Privilege Vulnerability |
|
CVE-2026-68820
HIGH 7.0
KEV
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
|
CVE-2025-62215
HIGH 7.0
KEV
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2025-26633
Exploit
HIGH 7.0
KEV
Improper neutralization in Microsoft Management Console allows an unauthorized attacker to bypass a security feature locally. |
|
CVE-2025-24054
Exploit
HIGH 6.5
KEV
NTLM Hash Disclosure Spoofing Vulnerability |
|
CVE-2024-43451
HIGH 6.5
KEV
NTLM Hash Disclosure Spoofing Vulnerability |
|
CVE-2026-21525
MEDIUM 6.2
KEV
Windows Remote Access Connection Manager Denial of Service Vulnerability |
|
CVE-2026-20805
MEDIUM 5.5
KEV
Exposure of sensitive information to an unauthorized actor in Desktop Windows Manager allows an authorized attacker to disclose information locally. |
|
CVE-2025-24991
HIGH 5.5
KEV
Windows NTFS Information Disclosure Vulnerability |
|
CVE-2013-3900
MEDIUM 5.5
KEV
Why is Microsoft republishing a CVE from 2013? We are republishing CVE-2013-3900 in the Security Update Guide to update the Security Updates table and to infor… |
|
CVE-2025-47827
HIGH 4.6
KEV
MITRE CVE-2025-47827: Secure Boot bypass in IGEL OS before 11 |
|
CVE-2025-24984
HIGH 4.6
KEV
Windows NTFS Information Disclosure Vulnerability |
|
CVE-2026-32202
Exploit
MEDIUM 4.3
KEV
Protection mechanism failure in Windows Shell allows an unauthorized attacker to perform spoofing over a network. |
|
CVE-2026-57092
CRITICAL 9.9
Use after free in Windows VMSwitch allows an authorized attacker to elevate privileges over a network. |
|
CVE-2025-49708
CRITICAL 9.9
Microsoft Graphics Component Elevation of Privilege Vulnerability |
|
CVE-2026-96157
CRITICAL 9.8
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-96078
CRITICAL 9.8
Heap-based buffer overflow in Microsoft Color Management allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-96067
CRITICAL 9.8
Integer overflow or wraparound in Microsoft Color Management allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-95901
CRITICAL 9.8
Double free in Windows Microsoft DirectMusic allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-95882
CRITICAL 9.8
Stack-based buffer overflow in Windows Microsoft DirectMusic allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-88243
CRITICAL 9.8
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-88234
CRITICAL 9.8
Release of invalid pointer or reference in Windows iSCSI allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-88218
CRITICAL 9.8
Double free in Windows DNS allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-85844
CRITICAL 9.8
Authentication bypass using an alternate path or channel in Windows Kerberos allows an unauthorized attacker to elevate privileges over a network. |
|
CVE-2026-119958
CRITICAL 9.8
Out-of-bounds write in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-116928
CRITICAL 9.8
Out-of-bounds write in Microsoft Windows Search Component allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-97816
CRITICAL 9.8
Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-97814
CRITICAL 9.8
Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-97815
CRITICAL 9.8
Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-97805
CRITICAL 9.8
Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-96934
CRITICAL 9.8
Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-96924
CRITICAL 9.8
Untrusted pointer dereference in Windows OLE allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-96909
CRITICAL 9.8
Heap-based buffer overflow in Windows BitLocker allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-96864
CRITICAL 9.8
Double free in Microsoft Failover Cluster Virtual Driver allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-96320
CRITICAL 9.8
Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-96219
CRITICAL 9.8
Out-of-bounds write in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-96096
CRITICAL 9.8
Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-96113
CRITICAL 9.8
Heap-based buffer overflow in DNS Server allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-88102
CRITICAL 9.8
Use after free in Windows Failover Cluster allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-85928
CRITICAL 9.8
Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-85809
CRITICAL 9.8
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine |
|
CVE-2026-85814
CRITICAL 9.8
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-85806
CRITICAL 9.8
Integer underflow (wrap or wraparound) in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-85792
CRITICAL 9.8
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine |
|
CVE-2026-84015
CRITICAL 9.8
Heap-based buffer overflow in Remote Access Point-to-Point Protocol (PPP) EAP-TLS allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-83935
CRITICAL 9.8
Heap-based buffer overflow in Microsoft XML allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-83910
CRITICAL 9.8
Out-of-bounds write in RPC Runtime allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-83869
CRITICAL 9.8
Integer underflow (wrap or wraparound) in DNS Server allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-83782
CRITICAL 9.8
Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-83780
CRITICAL 9.8
Use after free in Windows CCFFilter Driver allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-83770
CRITICAL 9.8
Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-83748
CRITICAL 9.8
Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-83693
CRITICAL 9.8
Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-83578
CRITICAL 9.8
Integer underflow (wrap or wraparound) in Windows PowerShell allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-83517
CRITICAL 9.8
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-83519
CRITICAL 9.8
Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-70157
CRITICAL 9.8
Heap-based buffer overflow in Windows System Information Console allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-70153
CRITICAL 9.8
Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-70147
CRITICAL 9.8
Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-70096
CRITICAL 9.8
Heap-based buffer overflow in Windows Rich Text Edit Control allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-70024
CRITICAL 9.8
Stack-based buffer overflow in Windows Internet Information Services allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-69883
CRITICAL 9.8
Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-69886
CRITICAL 9.8
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-69705
CRITICAL 9.8
Out-of-bounds write in Windows iSCSI allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-69634
CRITICAL 9.8
Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-69639
CRITICAL 9.8
Heap-based buffer overflow in Windows Libarchive allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-105010
CRITICAL 9.8
Use after free in Microsoft Windows Search Component allows an unauthorized attacker to elevate privileges over a network. |
|
CVE-2026-105016
CRITICAL 9.8
Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-102210
CRITICAL 9.8
Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-100219
CRITICAL 9.8
Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-100222
CRITICAL 9.8
Heap-based buffer overflow in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-100202
CRITICAL 9.8
Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-78445
CRITICAL 9.8
Use after free in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-77493
CRITICAL 9.8
Double free in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-73025
CRITICAL 9.8
Weak authentication in Windows iSCSI allows an unauthorized attacker to bypass a security feature over a network. |
|
CVE-2026-73009
CRITICAL 9.8
Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-73010
CRITICAL 9.8
Use after free in Windows Failover Cluster allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-72983
CRITICAL 9.8
Use after free in Windows Internet Connection Sharing (ICS) allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-72979
CRITICAL 9.8
Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-72982
CRITICAL 9.8
Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-70296
CRITICAL 9.8
Out-of-bounds write in Windows Imaging Component allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-69910
CRITICAL 9.8
Stack-based buffer overflow in Windows Hyper-V allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-69845
CRITICAL 9.8
Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-69824
CRITICAL 9.8
Integer underflow (wrap or wraparound) in Microsoft Standard XPS allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-69829
CRITICAL 9.8
Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-69819
CRITICAL 9.8
Out-of-bounds write in RPC Runtime allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-69769
CRITICAL 9.8
Heap-based buffer overflow in Windows HTTP Print Provider allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-69768
CRITICAL 9.8
Heap-based buffer overflow in Windows RNDIS allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-69730
CRITICAL 9.8
Use after free in Windows DNS allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-69715
CRITICAL 9.8
Out-of-bounds read in Windows Direct Show allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-69595
CRITICAL 9.8
Use after free in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-69590
CRITICAL 9.8
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine |
|
CVE-2026-69586
CRITICAL 9.8
Integer overflow or wraparound in Microsoft Windows PDF allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-69579
CRITICAL 9.8
Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-69525
CRITICAL 9.8
Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-69496
CRITICAL 9.8
Heap-based buffer overflow in Windows Compressed Folder allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-69491
CRITICAL 9.8
Heap-based buffer overflow in Windows Microsoft DirectMusic allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-69493
CRITICAL 9.8
Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-69463
CRITICAL 9.8
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-69431
CRITICAL 9.8
Heap-based buffer overflow in Telnet Client allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-69408
CRITICAL 9.8
Integer overflow or wraparound in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-69276
CRITICAL 9.8
Integer underflow (wrap or wraparound) in Microsoft UxTheme Library (uxtheme.dll) allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-68839
CRITICAL 9.8
Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-65791
CRITICAL 9.8
Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-62893
CRITICAL 9.8
Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-62878
CRITICAL 9.8
Stack-based buffer overflow in Windows DNS allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-62815
CRITICAL 9.8
Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-56190
CRITICAL 9.8
Use of uninitialized resource in Windows RDP allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-56188
CRITICAL 9.8
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Server Network driver allows an unauthorized attacker to… |
|
CVE-2026-56159
CRITICAL 9.8
Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-50518
CRITICAL 9.8
Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-50447
CRITICAL 9.8
Heap-based buffer overflow in Windows Message Queuing allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-54990
CRITICAL 9.8
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-49172
CRITICAL 9.8
Heap-based buffer overflow in Windows FTP Service allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-42990
CRITICAL 9.8
Heap-based buffer overflow in SQL Server ODBC driver allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-47291
CRITICAL 9.8
Integer overflow or wraparound in Windows HTTP.sys allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-45657
CRITICAL 9.8
Use after free in Windows Kernel allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-41089
CRITICAL 9.8
Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-41096
CRITICAL 9.8
Windows DNS Client Remote Code Execution Vulnerability |
|
CVE-2025-60724
CRITICAL 9.8
Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network. |
|
CVE-2025-54957
CRITICAL 9.8
An issue was discovered in Dolby UDC 4.5 through 4.13. A crash of the DD+ decoder process can occur when a malformed DD+ bitstream is processed. When Evolution… |
|
CVE-2025-53766
CRITICAL 9.8
Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network. |
|
CVE-2025-50165
CRITICAL 9.8
Windows Graphics Component Remote Code Execution Vulnerability |
|
CVE-2025-47981
CRITICAL 9.8
SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability |
|
CVE-2025-21298
CRITICAL 9.8
Windows OLE Remote Code Execution Vulnerability |
|
CVE-2025-21307
CRITICAL 9.8
Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability |
|
CVE-2025-21311
CRITICAL 9.8
Windows NTLM V1 Elevation of Privilege Vulnerability |
|
CVE-2024-49112
CRITICAL 9.8
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability |
|
CVE-2024-43639
CRITICAL 9.8
Windows KDC Proxy Remote Code Execution Vulnerability |
|
CVE-2016-9535
CRITICAL 9.8
tif_predict.h and tif_predict.c in libtiff 4.0.6 have assertions that can lead to assertion failures in debug mode, or buffer overflows in release mode, when d… |
|
CVE-2026-50380
CRITICAL 9.6
Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-42904
CRITICAL 9.6
Heap-based buffer overflow in Windows TCP/IP allows an unauthorized attacker to elevate privileges over an adjacent network. |
|
CVE-2026-49798
CRITICAL 9.3
Use after free in Windows Kernel allows an unauthorized attacker to elevate privileges locally. |
|
CVE-2026-96252
CRITICAL 9.1
Improper verification of cryptographic signature in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a net… |
|
CVE-2026-45602
CRITICAL 9.1
No cwe for this issue in Windows DHCP Server allows an unauthorized attacker to perform tampering over a network. |
|
CVE-2025-50171
HIGH 9.1
Remote Desktop Spoofing Vulnerability |
|
CVE-2026-95962
HIGH 9.0
Windows Virtual Filtering Platform (VFP) Remote Code Execution Vulnerability |
|
CVE-2026-85818
CRITICAL 9.0
Improper verification of cryptographic signature in Windows Schannel allows an unauthorized attacker to perform spoofing over a network. |
|
CVE-2026-105008
CRITICAL 9.0
No cwe for this issue in Windows Schannel allows an unauthorized attacker to perform spoofing over a network. |
|
CVE-2026-96010
HIGH 8.8
Integer underflow (wrap or wraparound) in HID Parser Library allows an authorized attacker to elevate privileges over a network. |
|
CVE-2026-95996
HIGH 8.8
Integer underflow (wrap or wraparound) in Windows Bluetooth Port Driver allows an authorized attacker to elevate privileges over a network. |
|
CVE-2026-95960
HIGH 8.8
Access of resource using incompatible type ('type confusion') in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges lo… |
|
CVE-2026-124226
HIGH 8.8
Execution with unnecessary privileges in Windows PowerShell allows an authorized attacker to bypass a security feature locally. |
|
CVE-2026-105020
HIGH 8.8
Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability |
|
CVE-2026-105021
HIGH 8.8
Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability |
|
CVE-2026-105023
HIGH 8.8
Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability |
|
CVE-2026-105026
HIGH 8.8
Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability |
|
CVE-2026-105490
HIGH 8.8
Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability |
|
CVE-2026-105491
HIGH 8.8
Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability |
|
CVE-2026-105493
HIGH 8.8
Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability |
|
CVE-2026-105495
HIGH 8.8
Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability |
|
CVE-2026-105496
HIGH 8.8
Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability |
|
CVE-2026-105497
HIGH 8.8
Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability |
|
CVE-2026-105498
HIGH 8.8
Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability |
|
CVE-2026-105499
HIGH 8.8
Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability |
|
CVE-2026-105518
HIGH 8.8
Windows iSCSI Remote Code Execution Vulnerability |
|
CVE-2026-105534
HIGH 8.8
Windows Storage Remote Code Execution Vulnerability |
|
CVE-2026-105542
HIGH 8.8
Windows NTFS Remote Code Execution Vulnerability |
|
CVE-2026-105581
HIGH 8.8
Desktop Window Manager Elevation of Privilege Vulnerability |
|
CVE-2026-108401
HIGH 8.8
Remote Desktop Services Remote Code Execution Vulnerability |
|
CVE-2026-108411
HIGH 8.8
Microsoft ODBC Driver Remote Code Execution Vulnerability |
|
CVE-2026-109463
HIGH 8.8
Windows DNS Remote Code Execution Vulnerability |
|
CVE-2026-112727
HIGH 8.8
Windows Domain Name Service Remote Code Execution Vulnerability |
|
CVE-2026-112762
HIGH 8.8
Windows Print Spooler Components Elevation of Privilege Vulnerability |
|
CVE-2026-113760
HIGH 8.8
Windows XWizard Framework Elevation of Privilege Vulnerability |
|
CVE-2026-113814
HIGH 8.8
Windows Storage Spaces Controller Remote Code Execution Vulnerability |
|
CVE-2026-118141
HIGH 8.8
Windows Client for NFS Remote Code Execution Vulnerability |
|
CVE-2026-118146
CRITICAL 8.8
Windows Active Directory Domain Services Remote Code Execution Vulnerability |
|
CVE-2026-118216
HIGH 8.8
Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability |
|
CVE-2026-118217
HIGH 8.8
Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability |
|
CVE-2026-118218
HIGH 8.8
Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability |
|
CVE-2026-118219
HIGH 8.8
Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability |
|
CVE-2026-118221
HIGH 8.8
Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability |
|
CVE-2026-118225
HIGH 8.8
Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability |
|
CVE-2026-118226
HIGH 8.8
Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability |
|
CVE-2026-118227
HIGH 8.8
Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability |
|
CVE-2026-118228
HIGH 8.8
Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability |
|
CVE-2026-118229
HIGH 8.8
Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability |
|
CVE-2026-118232
HIGH 8.8
Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability |
|
CVE-2026-118277
HIGH 8.8
Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability |
|
CVE-2026-118278
HIGH 8.8
Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability |
|
CVE-2026-118279
HIGH 8.8
Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability |
|
CVE-2026-118283
HIGH 8.8
Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability |
|
CVE-2026-119392
HIGH 8.8
Windows Storage Spaces Controller Elevation of Privilege Vulnerability |
|
CVE-2026-119824
HIGH 8.8
Remote Desktop Client Tampering Vulnerability |
|
CVE-2026-119839
HIGH 8.8
Windows Remote Desktop Client Elevation of Privilege Vulnerability |
|
CVE-2026-119862
HIGH 8.8
Windows Input System Elevation of Privilege Vulnerability |
|
CVE-2026-119881
HIGH 8.8
Microsoft XPS Document Converter Elevation of Privilege Vulnerability |
|
CVE-2026-119908
HIGH 8.8
Windows Storage Spaces Controller Remote Code Execution Vulnerability |
|
CVE-2026-119916
HIGH 8.8
Windows Input System Elevation of Privilege Vulnerability |
|
CVE-2026-119925
HIGH 8.8
Windows Text Services Framework Elevation of Privilege Vulnerability |
|
CVE-2026-119934
HIGH 8.8
Remote Desktop Client Remote Code Execution Vulnerability |
|
CVE-2026-119950
HIGH 8.8
Windows Print Spooler Components Elevation of Privilege Vulnerability |
|
CVE-2026-119969
CRITICAL 8.8
Graphic Fonts Remote Code Execution Vulnerability |
|
CVE-2026-122171
HIGH 8.8
Microsoft XPS Document Converter Remote Code Execution Vulnerability |
|
CVE-2026-122176
HIGH 8.8
Windows SMB Remote Code Execution Vulnerability |
|
CVE-2026-122475
HIGH 8.8
Windows Storage Spaces Controller Remote Code Execution Vulnerability |
|
CVE-2026-85838
HIGH 8.8
Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability |
|
CVE-2026-85839
HIGH 8.8
Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability |
|
CVE-2026-88222
HIGH 8.8
Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability |
|
CVE-2026-88229
HIGH 8.8
Windows Media Player Remote Code Execution Vulnerability |
|
CVE-2026-88249
HIGH 8.8
Windows Client for NFS Remote Code Execution Vulnerability |
|
CVE-2026-95975
HIGH 8.8
Windows Performance Counters Remote Code Execution Vulnerability |
|
CVE-2026-96002
HIGH 8.8
Windows Domain Name Service Remote Code Execution Vulnerability |
|
CVE-2026-96020
HIGH 8.8
Windows Domain Name Service Remote Code Execution Vulnerability |
|
CVE-2026-96064
HIGH 8.8
Windows Domain Name Service Remote Code Execution Vulnerability |
|
CVE-2026-96164
HIGH 8.8
Windows Imaging Component Remote Code Execution Vulnerability |
|
CVE-2026-96952
HIGH 8.8
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-96913
HIGH 8.8
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96914
HIGH 8.8
Integer overflow or wraparound in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96917
HIGH 8.8
Heap-based buffer overflow in Windows PCI Bus Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88219
HIGH 8.8
Untrusted pointer dereference in RPC Runtime allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-88165
HIGH 8.8
Out-of-bounds write in Active Directory Domain Services allows an authorized attacker to execute code over a network. |
|
CVE-2026-88159
HIGH 8.8
Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-88157
HIGH 8.8
Heap-based buffer overflow in OpenSSH for Windows allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-88136
HIGH 8.8
Improper resolution of path equivalence in WebDAV allows an authorized attacker to execute code over a network. |
|
CVE-2026-88142
HIGH 8.8
Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-88112
HIGH 8.8
Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-88114
HIGH 8.8
Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-88115
HIGH 8.8
Out-of-bounds read in Windows Server for NFS allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-88116
HIGH 8.8
Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-88073
HIGH 8.8
Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85936
HIGH 8.8
Double free in Windows Shell allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-85931
HIGH 8.8
Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network. |
|
CVE-2026-85903
HIGH 8.8
Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-85905
HIGH 8.8
Heap-based buffer overflow in Windows UI Immersive Server allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85817
HIGH 8.8
Reliance on untrusted inputs in a security decision in Windows PowerShell allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-85339
HIGH 8.8
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine |
|
CVE-2026-83934
HIGH 8.8
Stack-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-83928
HIGH 8.8
Out-of-bounds write in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-83929
HIGH 8.8
Out-of-bounds write in Windows GDI allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-83923
HIGH 8.8
Relative path traversal in OpenSSH for Windows allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-83889
HIGH 8.8
Release of invalid pointer or reference in DNS Server allows an authorized attacker to execute code over a network. |
|
CVE-2026-83874
HIGH 8.8
Heap-based buffer overflow in Windows Event Tracing allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-83862
HIGH 8.8
Use after free in Windows Network Load Balancing allows an unauthorized attacker to execute code over an adjacent network. |
|
CVE-2026-83851
HIGH 8.8
Heap-based buffer overflow in Windows Partition Management Driver allows an unauthorized attacker to elevate privileges over a network. |
|
CVE-2026-83797
HIGH 8.8
Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-83789
HIGH 8.8
Heap-based buffer overflow in Windows SMB Client allows an unauthorized attacker to elevate privileges over a network. |
|
CVE-2026-83784
HIGH 8.8
Absolute path traversal in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges over a network. |
|
CVE-2026-83777
HIGH 8.8
Heap-based buffer overflow in Windows Bluetooth Service allows an unauthorized attacker to elevate privileges over an adjacent network. |
|
CVE-2026-83778
HIGH 8.8
Heap-based buffer overflow in Microsoft Internet Messaging API allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-83771
HIGH 8.8
Use after free in Windows Camera Frame Server Monitor allows an unauthorized attacker to elevate privileges over an adjacent network. |
|
CVE-2026-83759
HIGH 8.8
Improper control of generation of code ('code injection') in Windows Encrypting File System (EFS) allows an authorized attacker to execute code over a network. |
|
CVE-2026-83728
HIGH 8.8
Improper validation of syntactic correctness of input in Windows Hyper-V allows an authorized attacker to perform spoofing locally. |
|
CVE-2026-83725
HIGH 8.8
Heap-based buffer overflow in Microsoft Windows Search Component allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-83716
HIGH 8.8
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally. |
|
CVE-2026-83688
HIGH 8.8
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-83643
HIGH 8.8
Stack-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-83642
HIGH 8.8
Access of resource using incompatible type ('type confusion') in DNS Server allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-83523
HIGH 8.8
Heap-based buffer overflow in Windows Image Acquisition allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-77496
HIGH 8.8
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-70580
HIGH 8.8
Missing authentication for critical function in Windows Credential Guard allows an authorized attacker to perform spoofing locally. |
|
CVE-2026-70299
HIGH 8.8
Improper access control in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70275
HIGH 8.8
Untrusted pointer dereference in Windows CD-ROM Driver allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-70258
HIGH 8.8
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-70262
HIGH 8.8
Heap-based buffer overflow in WebDAV allows an unauthorized attacker to elevate privileges over a network. |
|
CVE-2026-70250
HIGH 8.8
Use after free in Windows DHCP Client allows an unauthorized attacker to execute code over an adjacent network. |
|
CVE-2026-70210
HIGH 8.8
Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to elevate privileges over a network. |
|
CVE-2026-70185
HIGH 8.8
Protection mechanism failure in Windows PowerShell allows an authorized attacker to bypass a security feature locally. |
|
CVE-2026-70167
HIGH 8.8
Access of resource using incompatible type ('type confusion') in DNS Server allows an authorized attacker to execute code over a network. |
|
CVE-2026-70158
HIGH 8.8
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine |
|
CVE-2026-70149
HIGH 8.8
Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver (csc.sys) allows an authorized attacker to disclose informatio… |
|
CVE-2026-70089
HIGH 8.8
Heap-based buffer overflow in Windows GDI allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-70068
HIGH 8.8
Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an unauthorized attacker to elevate privileges over a network. |
|
CVE-2026-70069
HIGH 8.8
Stack-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over a network. |
|
CVE-2026-69985
HIGH 8.8
Heap-based buffer overflow in Windows Libarchive allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-69945
HIGH 8.8
Missing authorization in Windows AppX Deployment Extensions allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69918
HIGH 8.8
Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69765
HIGH 8.8
Use after free in Windows Storport Miniport Driver allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-69521
HIGH 8.8
Integer overflow or wraparound in Windows iSCSI allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-69326
HIGH 8.8
Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-108467
HIGH 8.8
Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an authorized attacker to execute code over a network. |
|
CVE-2026-108458
HIGH 8.8
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-105733
HIGH 8.8
Improper access control in Windows Hyper-V allows an authorized attacker to execute code locally. |
|
CVE-2026-105007
HIGH 8.8
An elevation of privilege vulnerability exists in the Network Driver Interface Specification (NDIS) when ndis.sys fails to check the length of a buffer prior t… |
|
CVE-2026-103575
HIGH 8.8
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-102225
HIGH 8.8
Out-of-bounds read in Windows Text Shaping allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-102217
HIGH 8.8
Improper resolution of path equivalence in WebDAV allows an authorized attacker to elevate privileges over a network. |
|
CVE-2026-102214
HIGH 8.8
Use after free in Windows Hyper-V allows an authorized attacker to execute code locally. |
|
CVE-2026-102203
HIGH 8.8
Access of resource using incompatible type ('type confusion') in RPC Runtime allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-100220
HIGH 8.8
Heap-based buffer overflow in Windows Media Video Decoder allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-83996
HIGH 8.8
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83998
HIGH 8.8
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-83992
HIGH 8.8
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-81955
HIGH 8.8
Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-80096
HIGH 8.8
Out-of-bounds read in Windows Remote Desktop Services allows an authorized attacker to elevate privileges over a network. |
|
CVE-2026-80083
HIGH 8.8
Untrusted pointer dereference in Windows Hyper-V allows an authorized attacker to execute code locally. |
|
CVE-2026-77504
HIGH 8.8
Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-77495
HIGH 8.8
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-73023
HIGH 8.8
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-73018
HIGH 8.8
Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-73012
HIGH 8.8
Heap-based buffer overflow in Windows Management Services allows an authorized attacker to elevate privileges over a network. |
|
CVE-2026-73013
HIGH 8.8
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-73016
HIGH 8.8
Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-73006
HIGH 8.8
Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-72986
HIGH 8.8
Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-72959
HIGH 8.8
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine |
|
CVE-2026-72960
HIGH 8.8
Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-72950
HIGH 8.8
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine |
|
CVE-2026-72940
HIGH 8.8
Heap-based buffer overflow in Windows Schannel allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-72933
HIGH 8.8
Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-71352
HIGH 8.8
Integer underflow (wrap or wraparound) in Windows Remote Access Connection Manager allows an authorized attacker to execute code over a network. |
|
CVE-2026-71336
HIGH 8.8
Integer overflow or wraparound in Windows Work Folder Service allows an authorized attacker to execute code over a network. |
|
CVE-2026-70586
HIGH 8.8
Heap-based buffer overflow in Windows Paint allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-70203
HIGH 8.8
Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-69860
HIGH 8.8
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-69772
HIGH 8.8
Heap-based buffer overflow in Windows Network File System allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-69729
HIGH 8.8
Heap-based buffer overflow in Windows Credential Providers allows an authorized attacker to execute code over a network. |
|
CVE-2026-69712
HIGH 8.8
Use after free in Windows Key Distribution Center allows an authorized attacker to execute code over a network. |
|
CVE-2026-69676
HIGH 8.8
Authentication bypass by capture-replay in Windows Kerberos allows an authorized attacker to execute code over a network. |
|
CVE-2026-69669
HIGH 8.8
Heap-based buffer overflow in Windows Kernel allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-69628
HIGH 8.8
Heap-based buffer overflow in Windows iSCSI allows an authorized attacker to execute code over a network. |
|
CVE-2026-69603
HIGH 8.8
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally. |
|
CVE-2026-69598
HIGH 8.8
Incorrect calculation of buffer size in Windows iSCSI allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-69601
HIGH 8.8
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-69547
HIGH 8.8
Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over a network. |
|
CVE-2026-69551
HIGH 8.8
Use after free in Windows DNS allows an authorized attacker to execute code over a network. |
|
CVE-2026-69518
HIGH 8.8
Heap-based buffer overflow in Windows Remote Desktop allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-69511
HIGH 8.8
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-69495
HIGH 8.8
Heap-based buffer overflow in Windows Event Logging Service allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-69499
HIGH 8.8
Integer overflow or wraparound in Windows Imaging Component allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-69494
HIGH 8.8
Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-69485
HIGH 8.8
Use of uninitialized resource in Remote Desktop Client allows an authorized attacker to execute code over a network. |
|
CVE-2026-69461
HIGH 8.8
Stack-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-69434
HIGH 8.8
Heap-based buffer overflow in Windows URL Moniker allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-69386
HIGH 8.8
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-69360
HIGH 8.8
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-69334
HIGH 8.8
Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-69291
HIGH 8.8
Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-69266
HIGH 8.8
Integer overflow or wraparound in Windows DHCP Server allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-68828
HIGH 8.8
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-62744
HIGH 8.8
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-62706
HIGH 8.8
Out-of-bounds read in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-62822
HIGH 8.8
Integer overflow or wraparound in Windows GDI+ allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-62823
HIGH 8.8
Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over an adjacent network. |
|
CVE-2026-62816
HIGH 8.8
Heap-based buffer overflow in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over an adjacent network. |
|
CVE-2026-62817
HIGH 8.8
Out-of-bounds write in Windows DNS allows an unauthorized attacker to execute code over an adjacent network. |
|
CVE-2026-62818
HIGH 8.8
Use after free in Active Directory Certificate Services (AD CS) allows an authorized attacker to execute code over a network. |
|
CVE-2026-62800
HIGH 8.8
Heap-based buffer overflow in Windows SMB Server allows an authorized attacker to execute code over a network. |
|
CVE-2026-62795
HIGH 8.8
Use after free in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-62785
HIGH 8.8
Heap-based buffer overflow in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-62790
HIGH 8.8
Heap-based buffer overflow in Windows SMB Server allows an authorized attacker to execute code over a network. |
|
CVE-2026-62784
HIGH 8.8
Heap-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to execute code over a network. |
|
CVE-2026-49179
HIGH 8.8
Improper neutralization of special elements used in a command ('command injection') in Windows Active Directory allows an unauthorized attacker to execute code… |
|
CVE-2026-58626
HIGH 8.8
Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network. |
|
CVE-2026-58594
HIGH 8.8
Integer overflow or wraparound in Windows RDP allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-58534
HIGH 8.8
Heap-based buffer overflow in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-57094
HIGH 8.8
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-57090
HIGH 8.8
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-57087
HIGH 8.8
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-56647
HIGH 8.8
Integer overflow or wraparound in Windows Remote Access Service Infrastructure allows an authorized attacker to elevate privileges over a network. |
|
CVE-2026-56194
HIGH 8.8
Heap-based buffer overflow in Windows Network File System allows an authorized attacker to elevate privileges over a network. |
|
CVE-2026-54121
HIGH 8.8
Improper authorization in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges over a network. |
|
CVE-2026-50692
HIGH 8.8
Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-50687
HIGH 8.8
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-50670
HIGH 8.8
Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-50666
HIGH 8.8
Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges over a network. |
|
CVE-2026-50489
HIGH 8.8
Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-50474
HIGH 8.8
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-50477
HIGH 8.8
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-50444
HIGH 8.8
Missing authentication for critical function in Windows Server Update Service allows an authorized attacker to elevate privileges over a network. |
|
CVE-2026-50413
HIGH 8.8
Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-50398
HIGH 8.8
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Media allows an authorized attacker to elevate privilege… |
|
CVE-2026-50385
HIGH 8.8
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an authorized attacker to elevate privile… |
|
CVE-2026-50382
HIGH 8.8
Untrusted pointer dereference in Windows DirectX allows an authorized attacker to execute code locally. |
|
CVE-2026-50369
HIGH 8.8
Use after free in Windows Remote Desktop Services allows an authorized attacker to elevate privileges over a network. |
|
CVE-2026-50370
HIGH 8.8
Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over an adjacent network. |
|
CVE-2026-50360
HIGH 8.8
Incorrect implementation of authentication algorithm in Windows SMB Server allows an authorized attacker to elevate privileges over a network. |
|
CVE-2026-58608
HIGH 8.8
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Print Spooler Components allows an authorized attacker t… |
|
CVE-2026-54999
HIGH 8.8
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an unauthorized attacker to execute code o… |
|
CVE-2026-54982
HIGH 8.8
Integer underflow (wrap or wraparound) in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over an adjacent network. |
|
CVE-2026-54107
HIGH 8.8
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K allows an authorized attacker to elevate privileg… |
|
CVE-2026-49795
HIGH 8.8
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-49178
HIGH 8.8
Heap-based buffer overflow in Active Directory Domain Services allows an authorized attacker to execute code over a network. |
|
CVE-2026-48564
HIGH 8.8
Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over a network. |
|
CVE-2026-47653
HIGH 8.8
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-47289
HIGH 8.8
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-45648
HIGH 8.8
Stack-based buffer overflow in Active Directory Domain Services allows an authorized attacker to execute code over a network. |
|
CVE-2026-44815
HIGH 8.8
Stack-based buffer overflow in Windows DHCP Client allows an unauthorized attacker to elevate privileges over an adjacent network. |
|
CVE-2026-42985
HIGH 8.8
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-34329
HIGH 8.8
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability |
|
CVE-2026-40403
CRITICAL 8.8
Windows Graphics Component Remote Code Execution Vulnerability |
|
CVE-2026-32225
HIGH 8.8
Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to bypass a security featu… |
|
CVE-2026-32157
HIGH 8.8
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-26178
HIGH 8.8
Integer size truncation in Windows Advanced Rasterization Platform (WARP) allows an unauthorized attacker to elevate privileges locally. |
|
CVE-2026-26167
HIGH 8.8
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elev… |
|
CVE-2026-23669
HIGH 8.8
RPC Runtime Library Remote Code Execution Vulnerability |
|
CVE-2026-24283
HIGH 8.8
Multiple UNC Provider Kernel Driver Elevation of Privilege Vulnerability |
|
CVE-2026-25177
HIGH 8.8
Active Directory Domain Services Elevation of Privilege Vulnerability |
|
CVE-2026-25188
HIGH 8.8
Windows Telephony Service Elevation of Privilege Vulnerability |
|
CVE-2026-21255
HIGH 8.8
Windows Hyper-V Security Feature Bypass Vulnerability |
|
CVE-2026-20868
HIGH 8.8
Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network. |
|
CVE-2025-62549
HIGH 8.8
Untrusted pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network. |
|
CVE-2025-62456
HIGH 8.8
Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to execute code over a network. |
|
CVE-2025-64678
HIGH 8.8
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2025-58715
HIGH 8.8
Windows Speech Runtime Elevation of Privilege Vulnerability |
|
CVE-2025-58716
HIGH 8.8
Windows Speech Runtime Elevation of Privilege Vulnerability |
|
CVE-2025-58718
HIGH 8.8
Remote Desktop Client Remote Code Execution Vulnerability |
|
CVE-2025-59295
HIGH 8.8
Windows URL Parsing Remote Code Execution Vulnerability |
|
CVE-2025-54106
HIGH 8.8
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2025-54110
HIGH 8.8
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2025-54113
HIGH 8.8
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2025-54918
CRITICAL 8.8
Windows NTLM Elevation of Privilege Vulnerability |
|
CVE-2025-55234
HIGH 8.8
Windows SMB Elevation of Privilege Vulnerability |
|
CVE-2025-49757
HIGH 8.8
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2025-50163
HIGH 8.8
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2025-53131
HIGH 8.8
Windows Media Remote Code Execution Vulnerability |
|
CVE-2025-53143
HIGH 8.8
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability |
|
CVE-2025-53144
HIGH 8.8
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability |
|
CVE-2025-53145
HIGH 8.8
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability |
|
CVE-2025-53778
CRITICAL 8.8
Windows NTLM Elevation of Privilege Vulnerability |
|
CVE-2025-47986
HIGH 8.8
Universal Print Management Service Elevation of Privilege Vulnerability |
|
CVE-2025-47998
HIGH 8.8
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2025-48817
HIGH 8.8
Remote Desktop Client Remote Code Execution Vulnerability |
|
CVE-2025-48824
HIGH 8.8
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2025-49657
HIGH 8.8
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2025-49663
HIGH 8.8
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2025-49668
HIGH 8.8
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2025-49669
HIGH 8.8
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2025-49672
HIGH 8.8
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2025-49673
HIGH 8.8
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2025-49674
HIGH 8.8
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2025-49676
HIGH 8.8
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2025-49687
HIGH 8.8
Windows Input Method Editor (IME) Elevation of Privilege Vulnerability |
|
CVE-2025-49688
HIGH 8.8
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2025-49723
HIGH 8.8
Windows StateRepository API Server file Tampering Vulnerability |
|
CVE-2025-49724
HIGH 8.8
Windows Connected Devices Platform Service Remote Code Execution Vulnerability |
|
CVE-2025-49729
HIGH 8.8
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2025-49740
HIGH 8.8
Windows SmartScreen Security Feature Bypass Vulnerability |
|
CVE-2025-49753
HIGH 8.8
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2025-33064
HIGH 8.8
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2025-33066
HIGH 8.8
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2025-29962
HIGH 8.8
Windows Media Remote Code Execution Vulnerability |
|
CVE-2025-29963
HIGH 8.8
Windows Media Remote Code Execution Vulnerability |
|
CVE-2025-29964
HIGH 8.8
Windows Media Remote Code Execution Vulnerability |
|
CVE-2025-29966
CRITICAL 8.8
Remote Desktop Client Remote Code Execution Vulnerability |
|
CVE-2025-29967
CRITICAL 8.8
Remote Desktop Client Remote Code Execution Vulnerability |
|
CVE-2025-21205
HIGH 8.8
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2025-21221
HIGH 8.8
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2025-21222
HIGH 8.8
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2025-26647
HIGH 8.8
Windows Kerberos Elevation of Privilege Vulnerability |
|
CVE-2025-26669
HIGH 8.8
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability |
|
CVE-2025-27477
HIGH 8.8
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2025-27481
HIGH 8.8
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2025-27740
HIGH 8.8
Active Directory Certificate Services Elevation of Privilege Vulnerability |
|
CVE-2025-24051
HIGH 8.8
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2025-24056
HIGH 8.8
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2025-26645
CRITICAL 8.8
Remote Desktop Client Remote Code Execution Vulnerability |
|
CVE-2025-21190
HIGH 8.8
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2025-21200
HIGH 8.8
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2025-21201
HIGH 8.8
Windows Telephony Server Remote Code Execution Vulnerability |
|
CVE-2025-21208
HIGH 8.8
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2025-21368
HIGH 8.8
Microsoft Digest Authentication Remote Code Execution Vulnerability |
|
CVE-2025-21369
HIGH 8.8
Microsoft Digest Authentication Remote Code Execution Vulnerability |
|
CVE-2025-21371
HIGH 8.8
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2025-21406
HIGH 8.8
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2025-21407
HIGH 8.8
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2025-21410
HIGH 8.8
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2025-21223
HIGH 8.8
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2025-21233
HIGH 8.8
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2025-21236
HIGH 8.8
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2025-21237
HIGH 8.8
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2025-21238
HIGH 8.8
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2025-21239
HIGH 8.8
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2025-21240
HIGH 8.8
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2025-21241
HIGH 8.8
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2025-21243
HIGH 8.8
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2025-21244
HIGH 8.8
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2025-21245
HIGH 8.8
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2025-21246
HIGH 8.8
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2025-21248
HIGH 8.8
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2025-21250
HIGH 8.8
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2025-21252
HIGH 8.8
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2025-21266
HIGH 8.8
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2025-21273
HIGH 8.8
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2025-21282
HIGH 8.8
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2025-21286
HIGH 8.8
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2025-21292
HIGH 8.8
Windows Search Service Elevation of Privilege Vulnerability |
|
CVE-2025-21293
HIGH 8.8
Active Directory Domain Services Elevation of Privilege Vulnerability |
|
CVE-2025-21302
HIGH 8.8
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2025-21303
HIGH 8.8
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2025-21305
HIGH 8.8
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2025-21306
HIGH 8.8
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2025-21339
HIGH 8.8
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2025-21409
HIGH 8.8
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2025-21411
HIGH 8.8
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2025-21413
HIGH 8.8
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2025-21417
HIGH 8.8
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2024-49080
HIGH 8.8
Windows IP Routing Management Snapin Remote Code Execution Vulnerability |
|
CVE-2024-49085
HIGH 8.8
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2024-49086
HIGH 8.8
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2024-49093
HIGH 8.8
Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability |
|
CVE-2024-49102
HIGH 8.8
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2024-49104
HIGH 8.8
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2024-49117
CRITICAL 8.8
Windows Hyper-V Remote Code Execution Vulnerability |
|
CVE-2024-49125
HIGH 8.8
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2024-43620
HIGH 8.8
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2024-43621
HIGH 8.8
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2024-43622
HIGH 8.8
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2024-43624
HIGH 8.8
Windows Hyper-V Shared Virtual Disk Elevation of Privilege Vulnerability |
|
CVE-2024-43627
HIGH 8.8
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2024-43628
HIGH 8.8
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2024-43635
HIGH 8.8
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2026-27928
HIGH 8.7
Improper input validation in Windows Hello allows an unauthorized attacker to bypass a security feature over a network. |
|
CVE-2025-48822
CRITICAL 8.6
Windows Hyper-V Discrete Device Assignment (DDA) Remote Code Execution Vulnerability |
|
CVE-2025-27737
HIGH 8.6
Windows Security Zone Mapping Security Feature Bypass Vulnerability |
|
CVE-2026-50340
HIGH 8.5
Use after free in Windows Runtime allows an authorized attacker to elevate privileges over a network. |
|
CVE-2026-83845
HIGH 8.4
Improper privilege management in Windows Internet (wininet.dll) allows an authorized attacker to perform spoofing locally. |
|
CVE-2026-77503
HIGH 8.4
Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally. |
|
CVE-2026-69638
HIGH 8.4
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally. |
|
CVE-2026-69479
HIGH 8.4
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally. |
|
CVE-2026-54128
HIGH 8.4
Use after free in Windows DHCP Client allows an unauthorized attacker to execute code locally. |
|
CVE-2026-54992
HIGH 8.4
Heap-based buffer overflow in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code locally. |
|
CVE-2026-54122
HIGH 8.4
Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code locally. |
|
CVE-2026-49184
HIGH 8.4
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally. |
|
CVE-2026-45641
HIGH 8.4
Access of resource using incompatible type ('type confusion') in Windows Hyper-V allows an unauthorized attacker to execute code locally. |
|
CVE-2026-45607
HIGH 8.4
Out-of-bounds read in Windows Hyper-V allows an unauthorized attacker to execute code locally. |
|
CVE-2026-44810
HIGH 8.4
Improper authentication in Windows Cryptographic Services allows an unauthorized attacker to elevate privileges locally. |
|
CVE-2026-32221
HIGH 8.4
Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code locally. |
|
CVE-2026-32162
HIGH 8.4
Acceptance of extraneous untrusted data with trusted data in Windows COM allows an unauthorized attacker to elevate privileges locally. |
|
CVE-2026-32091
HIGH 8.4
Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Brokering File System allows an unauthorized attacker … |
|
CVE-2025-33067
HIGH 8.4
Windows Task Scheduler Elevation of Privilege Vulnerability |
|
CVE-2025-26678
HIGH 8.4
Windows Defender Application Control Security Feature Bypass Vulnerability |
|
CVE-2025-24084
CRITICAL 8.4
Windows Subsystem for Linux (WSL2) Kernel Remote Code Execution Vulnerability |
|
CVE-2024-49105
CRITICAL 8.4
Remote Desktop Client Remote Code Execution Vulnerability |
|
CVE-2026-56179
HIGH 8.3
Origin validation error in Windows Network Address Translation (NAT) allows an unauthorized attacker to perform spoofing over an adjacent network. |
|
CVE-2026-56181
HIGH 8.3
Origin validation error in Windows Network Address Translation (NAT) allows an unauthorized attacker to perform spoofing over an adjacent network. |
|
CVE-2026-85369
HIGH 8.2
Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-72962
HIGH 8.2
Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-72958
HIGH 8.2
Double free in Windows Credential Guard allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-72961
HIGH 8.2
Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69906
HIGH 8.2
Heap-based buffer overflow in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69874
HIGH 8.2
Untrusted pointer dereference in Windows ALPC allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69846
HIGH 8.2
Integer overflow or wraparound in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-50680
HIGH 8.2
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-50429
HIGH 8.2
Out-of-bounds read in Windows Kernel allows an unauthorized attacker to disclose information over a network. |
|
CVE-2026-47652
HIGH 8.2
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally. |
|
CVE-2026-95885
HIGH 8.1
Use after free in Windows Client for NFS allows an unauthorized attacker to elevate privileges over a network. |
|
CVE-2026-102219
HIGH 8.1
Windows Modern Device Management (MDM) Remote Code Execution Vulnerability |
|
CVE-2026-109459
CRITICAL 8.1
Windows Message Queuing Queue Manager Remote Code Execution Vulnerability |
|
CVE-2026-113862
CRITICAL 8.1
Windows Network Address Translation (NAT) Remote Code Execution Vulnerability |
|
CVE-2026-116710
CRITICAL 8.1
Windows Message Queuing Remote Code Execution Vulnerability |
|
CVE-2026-118737
CRITICAL 8.1
Remote Procedure Call Runtime Remote Code Execution Vulnerability |
|
CVE-2026-119945
HIGH 8.1
Windows Modern Device Management (MDM) Remote Code Execution Vulnerability |
|
CVE-2026-119951
CRITICAL 8.1
Windows Deployment Services Remote Code Execution Vulnerability |
|
CVE-2026-119952
CRITICAL 8.1
Windows Schannel Remote Code Execution Vulnerability |
|
CVE-2026-119961
CRITICAL 8.1
Windows Internet Information Services Remote Code Execution Vulnerability |
|
CVE-2026-119962
CRITICAL 8.1
Windows CredSSP Remote Code Execution Vulnerability |
|
CVE-2026-119963
CRITICAL 8.1
Windows Message Queuing Remote Code Execution Vulnerability |
|
CVE-2026-119964
CRITICAL 8.1
Windows Message Queuing Remote Code Execution Vulnerability |
|
CVE-2026-119967
CRITICAL 8.1
Windows Message Queuing Queue Manager Remote Code Execution Vulnerability |
|
CVE-2026-72998
HIGH 8.1
Windows DHCP Server Remote Code Execution Vulnerability |
|
CVE-2026-81384
HIGH 8.1
Windows DNS Server Remote Code Execution Vulnerability |
|
CVE-2026-95956
HIGH 8.1
Windows eSCL Scanner Remote Code Execution Vulnerability |
|
CVE-2026-96092
HIGH 8.1
Windows Domain Name Service Remote Code Execution Vulnerability |
|
CVE-2026-96177
HIGH 8.1
Windows Domain Name Service Remote Code Execution Vulnerability |
|
CVE-2026-88174
HIGH 8.1
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Deployment Services allows an unauthorized attacker to e… |
|
CVE-2026-88171
HIGH 8.1
Double free in Windows DHCP Server allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-88173
HIGH 8.1
Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-88117
HIGH 8.1
Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-88119
HIGH 8.1
Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-88120
HIGH 8.1
Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-85926
HIGH 8.1
Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-85799
HIGH 8.1
Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-85371
HIGH 8.1
Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-84012
HIGH 8.1
Double free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-83914
HIGH 8.1
Use after free in Microsoft XML allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-83674
HIGH 8.1
Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network. |
|
CVE-2026-83522
HIGH 8.1
Reliance on untrusted inputs in a security decision in Windows IKE Extension allows an unauthorized attacker to perform spoofing over a network. |
|
CVE-2026-70229
HIGH 8.1
Incorrect authorization in Active Directory Domain Services allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-70127
HIGH 8.1
Use after free in DNS Server allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-70111
HIGH 8.1
Untrusted pointer dereference in Windows Kernel allows an unauthorized attacker to elevate privileges over a network. |
|
CVE-2026-70062
HIGH 8.1
Double free in Windows Libarchive allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-70038
HIGH 8.1
Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-70013
HIGH 8.1
Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-69913
HIGH 8.1
Use after free in Windows TCP/IP allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-69802
HIGH 8.1
Weak authentication in Network Device Enrollment Service (NDES) allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-69830
HIGH 8.1
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DHCP Server allows an unauthorized attacker to execute c… |
|
CVE-2026-108457
HIGH 8.1
Out-of-bounds write in Microsoft Windows PDF allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-108460
HIGH 8.1
Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-100218
HIGH 8.1
Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-70187
CRITICAL 8.1
Windows Remote Desktop Services Remote Code Execution Vulnerability |
|
CVE-2026-83997
HIGH 8.1
Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-78450
HIGH 8.1
Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-78444
HIGH 8.1
Untrusted pointer dereference in Windows Failover Cluster allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-78449
HIGH 8.1
Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-77505
HIGH 8.1
Use after free in DNS Server allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-72987
HIGH 8.1
Use after free in Windows DNS allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-72981
HIGH 8.1
Use after free in IP Helper allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-72936
HIGH 8.1
Use after free in Windows SMB Client allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-70563
HIGH 8.1
Improper link resolution before file access ('link following') in Windows Shell allows an unauthorized attacker to perform spoofing over a network. |
|
CVE-2026-70342
HIGH 8.1
Use after free in Windows Ancillary Function Driver for WinSock allows an unauthorized attacker to elevate privileges over a network. |
|
CVE-2026-69989
HIGH 8.1
Use after free in DNS Server allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-69858
HIGH 8.1
Use after free in Windows DNS allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-69827
HIGH 8.1
Concurrent execution using shared resource with improper synchronization ('race condition') in DNS Server allows an unauthorized attacker to execute code over … |
|
CVE-2026-69813
HIGH 8.1
Use after free in Windows DNS allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-69786
HIGH 8.1
Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-69782
HIGH 8.1
Concurrent execution using shared resource with improper synchronization ('race condition') in DNS Server allows an unauthorized attacker to execute code over … |
|
CVE-2026-69732
HIGH 8.1
Heap-based buffer overflow in Windows Link Layer Topology Discovery Protocol allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-69680
HIGH 8.1
Origin validation error in Windows DNS allows an unauthorized attacker to perform spoofing over a network. |
|
CVE-2026-69620
HIGH 8.1
Stack-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-69546
HIGH 8.1
Use after free in Active Directory Domain Services allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-69530
HIGH 8.1
Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-69524
HIGH 8.1
Use after free in Active Directory Domain Services allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-69510
HIGH 8.1
Stack-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-69438
HIGH 8.1
Incorrect conversion between numeric types in Microsoft JScript allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-69325
HIGH 8.1
Heap-based buffer overflow in Microsoft JScript allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-71331
HIGH 8.1
Integer overflow or wraparound in Windows Device Health Attestation (DHA) allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-66802
HIGH 8.1
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Device Health Attestation (DHA) allows an unauthorized a… |
|
CVE-2026-65796
HIGH 8.1
Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-65789
HIGH 8.1
Use after free in Windows DNS allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-65679
HIGH 8.1
Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-62889
HIGH 8.1
Double free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-62820
HIGH 8.1
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DNS allows an unauthorized attacker to execute code over… |
|
CVE-2026-62819
HIGH 8.1
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine |
|
CVE-2026-62792
HIGH 8.1
Stack-based buffer overflow in Windows TCP/IP allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-62781
HIGH 8.1
Heap-based buffer overflow in RPC Runtime allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-62778
HIGH 8.1
Use after free in Windows DNS allows an unauthorized attacker to elevate privileges over a network. |
|
CVE-2026-56186
HIGH 8.1
Out-of-bounds read in Windows Schannel allows an authorized attacker to disclose information over a network. |
|
CVE-2026-50686
HIGH 8.1
Access of resource using incompatible type ('type confusion') in Windows OLE allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-50487
HIGH 8.1
Use after free in Microsoft Windows DNS allows an unauthorized attacker to elevate privileges over a network. |
|
CVE-2026-50460
HIGH 8.1
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an unauthorized attacker to elevate privi… |
|
CVE-2026-50439
HIGH 8.1
Use after free in Microsoft Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-54995
HIGH 8.1
Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-50694
HIGH 8.1
Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-49164
HIGH 8.1
Heap-based buffer overflow in Active Directory Domain Services allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-42900
HIGH 8.1
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows App Store allows an unauthorized attacker to elevate pri… |
|
CVE-2026-45635
HIGH 8.1
Access of resource using incompatible type ('type confusion') in Universal Plug and Play (upnp.dll) allows an unauthorized attacker to execute code over a netw… |
|
CVE-2026-45599
HIGH 8.1
Use after free in Universal Plug and Play (upnp.dll) allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-42981
HIGH 8.1
Integer underflow (wrap or wraparound) in Windows Performance Monitor allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-42987
HIGH 8.1
Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-42974
HIGH 8.1
Integer overflow or wraparound in Windows Performance Monitor allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-40415
HIGH 8.1
Windows TCP/IP Remote Code Execution Vulnerability |
|
CVE-2026-33827
HIGH 8.1
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an unauthorized attacker to execute code o… |
|
CVE-2026-20856
HIGH 8.1
Improper input validation in Windows Server Update Service allows an unauthorized attacker to execute code over a network. |
|
CVE-2025-50177
CRITICAL 8.1
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability |
|
CVE-2025-33054
HIGH 8.1
Remote Desktop Spoofing Vulnerability |
|
CVE-2025-49735
CRITICAL 8.1
Windows KDC Proxy Service (KPSSVC) Remote Code Execution Vulnerability |
|
CVE-2025-29828
CRITICAL 8.1
Windows Schannel Remote Code Execution Vulnerability |
|
CVE-2025-32710
CRITICAL 8.1
Windows Remote Desktop Services Remote Code Execution Vulnerability |
|
CVE-2025-33070
CRITICAL 8.1
Windows Netlogon Elevation of Privilege Vulnerability |
|
CVE-2025-33071
CRITICAL 8.1
Windows KDC Proxy Service (KPSSVC) Remote Code Execution Vulnerability |
|
CVE-2025-26663
CRITICAL 8.1
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability |
|
CVE-2025-26670
CRITICAL 8.1
Lightweight Directory Access Protocol (LDAP) Client Remote Code Execution Vulnerability |
|
CVE-2025-26671
HIGH 8.1
Windows Remote Desktop Services Remote Code Execution Vulnerability |
|
CVE-2025-27480
CRITICAL 8.1
Windows Remote Desktop Services Remote Code Execution Vulnerability |
|
CVE-2025-27482
CRITICAL 8.1
Windows Remote Desktop Services Remote Code Execution Vulnerability |
|
CVE-2025-24035
CRITICAL 8.1
Windows Remote Desktop Services Remote Code Execution Vulnerability |
|
CVE-2025-24045
CRITICAL 8.1
Windows Remote Desktop Services Remote Code Execution Vulnerability |
|
CVE-2025-24064
CRITICAL 8.1
Windows Domain Name Service Remote Code Execution Vulnerability |
|
CVE-2025-21376
CRITICAL 8.1
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability |
|
CVE-2025-21224
HIGH 8.1
Windows Line Printer Daemon (LPD) Service Remote Code Execution Vulnerability |
|
CVE-2025-21294
CRITICAL 8.1
Microsoft Digest Authentication Remote Code Execution Vulnerability |
|
CVE-2025-21295
CRITICAL 8.1
SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability |
|
CVE-2025-21297
CRITICAL 8.1
Windows Remote Desktop Services Remote Code Execution Vulnerability |
|
CVE-2025-21309
CRITICAL 8.1
Windows Remote Desktop Services Remote Code Execution Vulnerability |
|
CVE-2024-49106
CRITICAL 8.1
Windows Remote Desktop Services Remote Code Execution Vulnerability |
|
CVE-2024-49108
CRITICAL 8.1
Windows Remote Desktop Services Remote Code Execution Vulnerability |
|
CVE-2024-49115
CRITICAL 8.1
Windows Remote Desktop Services Remote Code Execution Vulnerability |
|
CVE-2024-49116
CRITICAL 8.1
Windows Remote Desktop Services Remote Code Execution Vulnerability |
|
CVE-2024-49118
CRITICAL 8.1
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability |
|
CVE-2024-49119
CRITICAL 8.1
Windows Remote Desktop Services Remote Code Execution Vulnerability |
|
CVE-2024-49120
CRITICAL 8.1
Windows Remote Desktop Services Remote Code Execution Vulnerability |
|
CVE-2024-49122
CRITICAL 8.1
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability |
|
CVE-2024-49123
CRITICAL 8.1
Windows Remote Desktop Services Remote Code Execution Vulnerability |
|
CVE-2024-49124
CRITICAL 8.1
Lightweight Directory Access Protocol (LDAP) Client Remote Code Execution Vulnerability |
|
CVE-2024-49126
CRITICAL 8.1
Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability |
|
CVE-2024-49127
CRITICAL 8.1
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability |
|
CVE-2024-49128
CRITICAL 8.1
Windows Remote Desktop Services Remote Code Execution Vulnerability |
|
CVE-2024-49132
CRITICAL 8.1
Windows Remote Desktop Services Remote Code Execution Vulnerability |
|
CVE-2024-43625
CRITICAL 8.1
Microsoft Windows VMSwitch Elevation of Privilege Vulnerability |
|
CVE-2026-96115
HIGH 8.0
Double free in Windows DHCP Client allows an authorized attacker to elevate privileges over an adjacent network. |
|
CVE-2026-123387
HIGH 8.0
Improper neutralization of special elements used in a command ('command injection') in Windows Active Directory allows an authorized attacker to elevate privil… |
|
CVE-2026-122164
HIGH 8.0
Windows Kerberos Elevation of Privilege Vulnerability |
|
CVE-2026-88187
HIGH 8.0
Windows Bluetooth A2DP driver Elevation of Privilege Vulnerability |
|
CVE-2026-88240
HIGH 8.0
Windows DHCP Client Elevation of Privilege Vulnerability |
|
CVE-2026-96844
HIGH 8.0
Integer underflow (wrap or wraparound) in Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges over an adjacent network. |
|
CVE-2026-88121
HIGH 8.0
Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-83838
HIGH 8.0
Integer underflow (wrap or wraparound) in Windows Bluetooth A2DP driver allows an authorized attacker to elevate privileges over an adjacent network. |
|
CVE-2026-69363
HIGH 8.0
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over a network. |
|
CVE-2026-69875
HIGH 8.0
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network. |
|
CVE-2026-69876
HIGH 8.0
Use after free in Windows DHCP Server allows an authorized attacker to execute code over an adjacent network. |
|
CVE-2026-69847
HIGH 8.0
Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over an adjacent network. |
|
CVE-2026-69826
HIGH 8.0
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges over a network. |
|
CVE-2026-69807
HIGH 8.0
Improper link resolution before file access ('link following') in Windows PowerShell allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69773
HIGH 8.0
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges over a network. |
|
CVE-2026-69762
HIGH 8.0
Stack-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network. |
|
CVE-2026-69727
HIGH 8.0
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges over a network. |
|
CVE-2026-69714
HIGH 8.0
Stack-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges over a network. |
|
CVE-2026-69717
HIGH 8.0
Untrusted pointer dereference in Windows Group Policy allows an authorized attacker to elevate privileges over a network. |
|
CVE-2026-69689
HIGH 8.0
Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges over a network. |
|
CVE-2026-69681
HIGH 8.0
Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges over a network. |
|
CVE-2026-69643
HIGH 8.0
Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privileges over a network. |
|
CVE-2026-69623
HIGH 8.0
Heap-based buffer overflow in Windows HTTP Print Provider allows an authorized attacker to execute code over a network. |
|
CVE-2026-69625
HIGH 8.0
Heap-based buffer overflow in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges over a network. |
|
CVE-2026-69619
HIGH 8.0
Out-of-bounds read in Windows exFAT File System allows an authorized attacker to elevate privileges over a network. |
|
CVE-2026-69512
HIGH 8.0
Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privileges over a network. |
|
CVE-2026-69503
HIGH 8.0
Stack-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges over a network. |
|
CVE-2026-69505
HIGH 8.0
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges over a network. |
|
CVE-2026-69481
HIGH 8.0
Heap-based buffer overflow in Windows Enterprise App Management allows an authorized attacker to elevate privileges over a network. |
|
CVE-2026-69462
HIGH 8.0
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over a network. |
|
CVE-2026-69458
HIGH 8.0
Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privileges over a network. |
|
CVE-2026-69427
HIGH 8.0
Out-of-bounds read in Windows VOLSNAP.SYS allows an authorized attacker to elevate privileges over a network. |
|
CVE-2026-69423
HIGH 8.0
Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges over a network. |
|
CVE-2026-69418
HIGH 8.0
Heap-based buffer overflow in Volume Manager Driver allows an authorized attacker to elevate privileges over a network. |
|
CVE-2026-69412
HIGH 8.0
Stack-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over an adjacent network. |
|
CVE-2026-69371
HIGH 8.0
Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges over a network. |
|
CVE-2026-69365
HIGH 8.0
Out-of-bounds read in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges over a network. |
|
CVE-2026-69346
HIGH 8.0
Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges over a network. |
|
CVE-2026-69332
HIGH 8.0
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges over a network. |
|
CVE-2026-69322
HIGH 8.0
Double free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a network. |
|
CVE-2026-69301
HIGH 8.0
Stack-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network. |
|
CVE-2026-69271
HIGH 8.0
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network. |
|
CVE-2026-68894
HIGH 8.0
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over a network. |
|
CVE-2026-68878
HIGH 8.0
Stack-based buffer overflow in Windows Fast FAT Driver allows an authorized attacker to elevate privileges over a network. |
|
CVE-2026-68880
HIGH 8.0
Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network. |
|
CVE-2026-68876
HIGH 8.0
Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges over a network. |
|
CVE-2026-68838
HIGH 8.0
Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network. |
|
CVE-2026-68834
HIGH 8.0
Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network. |
|
CVE-2026-68827
HIGH 8.0
Integer underflow (wrap or wraparound) in Windows GDI+ allows an authorized attacker to elevate privileges over a network. |
|
CVE-2026-50683
HIGH 8.0
Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to elevate privileges over an adjacent network. |
|
CVE-2026-50502
HIGH 8.0
Insufficient granularity of access control in Windows Event Logging Service allows an authorized attacker to execute code over a network. |
|
CVE-2026-50365
HIGH 8.0
Improper authentication in Windows RPC API allows an unauthorized attacker to elevate privileges over an adjacent network. |
|
CVE-2026-49169
HIGH 8.0
Use after free in DNS Server allows an authorized attacker to execute code over a network. |
|
CVE-2026-42975
HIGH 8.0
Heap-based buffer overflow in Windows Bluetooth Port Driver allows an unauthorized attacker to execute code over an adjacent network. |
|
CVE-2026-40400
HIGH 8.0
Relative path traversal in Windows PowerShell allows an authorized attacker to execute code over a network. |
|
CVE-2026-34332
HIGH 8.0
Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to execute code over a network. |
|
CVE-2026-33826
HIGH 8.0
Improper input validation in Windows Active Directory allows an authorized attacker to execute code over an adjacent network. |
|
CVE-2026-27912
HIGH 8.0
Improper authorization in Windows Kerberos allows an authorized attacker to elevate privileges over an adjacent network. |
|
CVE-2026-25172
HIGH 8.0
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2026-25173
HIGH 8.0
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2026-26111
HIGH 8.0
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2026-20931
HIGH 8.0
External control of file name or path in Windows Telephony Service allows an authorized attacker to elevate privileges over an adjacent network. |
|
CVE-2025-60715
HIGH 8.0
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2025-62452
HIGH 8.0
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2025-50160
HIGH 8.0
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2025-50162
HIGH 8.0
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2025-50164
HIGH 8.0
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2025-53720
HIGH 8.0
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2025-47972
HIGH 8.0
Windows Input Method Editor (IME) Elevation of Privilege Vulnerability |
|
CVE-2025-49691
HIGH 8.0
Windows Miracast Wireless Display Remote Code Execution Vulnerability |
|
CVE-2025-27487
HIGH 8.0
Remote Desktop Client Remote Code Execution Vulnerability |
|
CVE-2026-6726
HIGH 7.9
An information leakage vulnerability was reported in the TCG TPM 2.0 reference code that could allow a local attacker with elevated privileges to obtain a cred… |
|
CVE-2026-48575
HIGH 7.9
Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally. |
|
CVE-2026-48576
HIGH 7.9
No cwe for this issue in Windows Secure Boot allows an authorized attacker to bypass a security feature locally. |
|
CVE-2026-48578
HIGH 7.9
Improper access control in Windows Secure Boot allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-48568
HIGH 7.9
Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally. |
|
CVE-2026-48570
HIGH 7.9
Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally. |
|
CVE-2026-48573
HIGH 7.9
No cwe for this issue in Windows Secure Boot allows an authorized attacker to bypass a security feature locally. |
|
CVE-2026-47656
HIGH 7.9
Protection mechanism failure in Windows Boot Manager allows an authorized attacker to bypass a security feature locally. |
|
CVE-2026-45654
HIGH 7.9
Improper access control in Windows Secure Boot allows an authorized attacker to bypass a security feature locally. |
|
CVE-2026-45588
HIGH 7.9
Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally. |
|
CVE-2026-97013
HIGH 7.8
Access of resource using incompatible type ('type confusion') in Windows Shell allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96184
HIGH 7.8
Heap-based buffer overflow in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96845
HIGH 7.8
Improper authorization in Windows Task Scheduler allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96172
HIGH 7.8
No cwe for this issue in Desktop Window Manager allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96174
HIGH 7.8
Release of invalid pointer or reference in Desktop Window Manager allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96175
HIGH 7.8
Release of invalid pointer or reference in Desktop Window Manager allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96160
HIGH 7.8
Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96162
HIGH 7.8
Incorrect authorization in Windows Clipboard Virtual Channel Extension allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96152
HIGH 7.8
Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96126
HIGH 7.8
Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96127
HIGH 7.8
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96117
HIGH 7.8
Heap-based buffer overflow in Windows LUAFV allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96122
HIGH 7.8
Untrusted pointer dereference in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96102
HIGH 7.8
Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96103
HIGH 7.8
Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96085
HIGH 7.8
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96084
HIGH 7.8
Heap-based buffer overflow in Graphic Fonts allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96074
HIGH 7.8
Heap-based buffer overflow in Windows AppX Package Manager allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96076
HIGH 7.8
Use after free in Windows DIAL Client allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96062
HIGH 7.8
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96066
HIGH 7.8
Stack-based buffer overflow in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96056
HIGH 7.8
Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96057
HIGH 7.8
Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96060
HIGH 7.8
Out-of-bounds read in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96052
HIGH 7.8
Integer underflow (wrap or wraparound) in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96053
HIGH 7.8
Improper neutralization of special elements used in a command ('command injection') in Windows Task Scheduler allows an authorized attacker to elevate privileg… |
|
CVE-2026-96055
HIGH 7.8
Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96036
HIGH 7.8
Integer overflow or wraparound in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96037
HIGH 7.8
Heap-based buffer overflow in Windows User Manager Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96038
HIGH 7.8
Inclusion of functionality from untrusted control sphere in Windows Audio Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96028
HIGH 7.8
Access of resource using incompatible type ('type confusion') in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96029
HIGH 7.8
Improper access control in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96031
HIGH 7.8
Out-of-bounds write in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96023
HIGH 7.8
Use after free in Windows Push Notification Core allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96005
HIGH 7.8
Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96016
HIGH 7.8
Heap-based buffer overflow in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95997
HIGH 7.8
Use after free in Windows Event Logging Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95999
HIGH 7.8
Out-of-bounds read in Windows USB Hub Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95991
HIGH 7.8
Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95983
HIGH 7.8
Untrusted pointer dereference in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95965
HIGH 7.8
Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95963
HIGH 7.8
Improper link resolution before file access ('link following') in Data Sharing Service Client allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95953
HIGH 7.8
Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95947
HIGH 7.8
An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files. The vulnerability could allow elevation of… |
|
CVE-2026-95948
HIGH 7.8
Stack-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95951
HIGH 7.8
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95934
HIGH 7.8
Double free in Windows Diagnostic Policy Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95935
HIGH 7.8
Integer overflow or wraparound in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95942
HIGH 7.8
Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95920
HIGH 7.8
Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95932
HIGH 7.8
Inclusion of functionality from untrusted control sphere in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95933
HIGH 7.8
Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95909
HIGH 7.8
Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95898
HIGH 7.8
Heap-based buffer overflow in Windows iSCSI allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95902
HIGH 7.8
Heap-based buffer overflow in Windows USB Hub Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95894
HIGH 7.8
Heap-based buffer overflow in Windows Task Scheduler allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95895
HIGH 7.8
Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95881
HIGH 7.8
Heap-based buffer overflow in Windows Push Notifications allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95872
HIGH 7.8
Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95874
HIGH 7.8
Heap-based buffer overflow in Xbox allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95877
HIGH 7.8
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95879
HIGH 7.8
Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-94527
HIGH 7.8
Heap-based buffer overflow in Windows GDI allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-94531
HIGH 7.8
Stack-based buffer overflow in Windows COM allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-94515
HIGH 7.8
Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-94507
HIGH 7.8
Heap-based buffer overflow in Windows DirectX allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88245
HIGH 7.8
Missing authentication for critical function in Windows Brokering File System allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88239
HIGH 7.8
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88241
HIGH 7.8
Heap-based buffer overflow in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88233
HIGH 7.8
Improper authorization in Windows Task Scheduler allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88238
HIGH 7.8
Heap-based buffer overflow in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88230
HIGH 7.8
Heap-based buffer overflow in Windows LUAFV allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88232
HIGH 7.8
Use after free in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88227
HIGH 7.8
Heap-based buffer overflow in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88213
HIGH 7.8
Numeric truncation error in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85929
HIGH 7.8
Incorrect permission assignment for critical resource in Windows Brokering File System allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85942
HIGH 7.8
Heap-based buffer overflow in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85801
HIGH 7.8
Use after free in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83563
HIGH 7.8
Heap-based buffer overflow in Winlogon allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-125137
HIGH 7.8
Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-123388
HIGH 7.8
Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-122984
HIGH 7.8
Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-122183
HIGH 7.8
Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-122172
HIGH 7.8
Use after free in Microsoft Trace Data Helper allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-122165
HIGH 7.8
Heap-based buffer overflow in Windows Client for NFS allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-122166
HIGH 7.8
Stack-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-122168
HIGH 7.8
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-121681
HIGH 7.8
Heap-based buffer overflow in Microsoft Trace Data Helper allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-121673
HIGH 7.8
Use after free in Windows Filter Manager allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-100223
HIGH 7.8
Windows NTFS Elevation of Privilege Vulnerability |
|
CVE-2026-105022
HIGH 7.8
Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability |
|
CVE-2026-105025
HIGH 7.8
Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability |
|
CVE-2026-105028
HIGH 7.8
Windows Win32k Elevation of Privilege Vulnerability |
|
CVE-2026-105501
HIGH 7.8
Windows Installer Elevation of Privilege Vulnerability |
|
CVE-2026-105503
HIGH 7.8
Windows Management Instrumentation Elevation of Privilege Vulnerability |
|
CVE-2026-105505
HIGH 7.8
Microsoft Input Method Editor (IME) Elevation of Privilege Vulnerability |
|
CVE-2026-105507
HIGH 7.8
Windows Installer Elevation of Privilege Vulnerability |
|
CVE-2026-105524
HIGH 7.8
Windows Management Instrumentation Elevation of Privilege Vulnerability |
|
CVE-2026-105528
HIGH 7.8
Desktop Window Manager Elevation of Privilege Vulnerability |
|
CVE-2026-105532
HIGH 7.8
Windows Installer Elevation of Privilege Vulnerability |
|
CVE-2026-105541
HIGH 7.8
Windows Audio Service Elevation of Privilege Vulnerability |
|
CVE-2026-105543
HIGH 7.8
Windows Installer Elevation of Privilege Vulnerability |
|
CVE-2026-105569
HIGH 7.8
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
|
CVE-2026-105575
HIGH 7.8
Windows DWM Core Library Elevation of Privilege Vulnerability |
|
CVE-2026-105580
HIGH 7.8
Windows Management Instrumentation Remote Code Execution Vulnerability |
|
CVE-2026-108403
HIGH 7.8
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2026-108405
HIGH 7.8
Windows CD-ROM Driver Elevation of Privilege Vulnerability |
|
CVE-2026-108407
HIGH 7.8
Windows GDI Elevation of Privilege Vulnerability |
|
CVE-2026-108412
HIGH 7.8
Windows Redirected Drive Buffering System Elevation of Privilege Vulnerability |
|
CVE-2026-109473
HIGH 7.8
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2026-112743
HIGH 7.8
Windows Device Association Service Elevation of Privilege Vulnerability |
|
CVE-2026-112751
HIGH 7.8
Windows Remote Assistance Elevation of Privilege Vulnerability |
|
CVE-2026-112752
HIGH 7.8
Windows Print Spooler Components Elevation of Privilege Vulnerability |
|
CVE-2026-112758
HIGH 7.8
Windows Defender Firewall Service Elevation of Privilege Vulnerability |
|
CVE-2026-112760
HIGH 7.8
Windows Overlay Filter Elevation of Privilege Vulnerability |
|
CVE-2026-112794
HIGH 7.8
Windows Smart Card Elevation of Privilege Vulnerability |
|
CVE-2026-112799
HIGH 7.8
Windows Projected File System Elevation of Privilege Vulnerability |
|
CVE-2026-112801
HIGH 7.8
Windows eSCL Scanner Elevation of Privilege Vulnerability |
|
CVE-2026-112802
HIGH 7.8
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2026-112811
HIGH 7.8
Windows Print Spooler Components Elevation of Privilege Vulnerability |
|
CVE-2026-112978
HIGH 7.8
Windows Print Spooler Components Elevation of Privilege Vulnerability |
|
CVE-2026-112981
HIGH 7.8
Windows Print Spooler Components Elevation of Privilege Vulnerability |
|
CVE-2026-113748
HIGH 7.8
Software Protection Platform (SPP) Elevation of Privilege Vulnerability |
|
CVE-2026-113758
HIGH 7.8
Windows Desktop Window Manager Elevation of Privilege Vulnerability |
|
CVE-2026-113765
HIGH 7.8
Windows File Server Resource Management Service Elevation of Privilege Vulnerability |
|
CVE-2026-113767
HIGH 7.8
Windows COM+ Event System Service Elevation of Privilege Vulnerability |
|
CVE-2026-113843
HIGH 7.8
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability |
|
CVE-2026-113847
HIGH 7.8
Windows Installer Elevation of Privilege Vulnerability |
|
CVE-2026-113848
HIGH 7.8
Windows NTFS Remote Code Execution Vulnerability |
|
CVE-2026-113856
CRITICAL 7.8
Windows Hyper-V Elevation of Privilege Vulnerability |
|
CVE-2026-113865
CRITICAL 7.8
Windows Hyper-V Elevation of Privilege Vulnerability |
|
CVE-2026-114170
HIGH 7.8
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2026-118126
HIGH 7.8
Windows Message Queuing Elevation of Privilege Vulnerability |
|
CVE-2026-118137
HIGH 7.8
Windows FTP Service Elevation of Privilege Vulnerability |
|
CVE-2026-118138
HIGH 7.8
Windows Client for NFS Elevation of Privilege Vulnerability |
|
CVE-2026-118142
HIGH 7.8
Windows Distributed File System (DFS) Elevation of Privilege Vulnerability |
|
CVE-2026-118215
HIGH 7.8
Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability |
|
CVE-2026-118220
HIGH 7.8
Windows Multiple Provider Router Elevation of Privilege Vulnerability |
|
CVE-2026-118222
HIGH 7.8
Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability |
|
CVE-2026-118223
HIGH 7.8
Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability |
|
CVE-2026-118224
HIGH 7.8
Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability |
|
CVE-2026-118280
HIGH 7.8
Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability |
|
CVE-2026-119382
CRITICAL 7.8
Windows TPM Elevation of Privilege Vulnerability |
|
CVE-2026-119390
HIGH 7.8
Remote Desktop Client Remote Code Execution Vulnerability |
|
CVE-2026-119391
HIGH 7.8
Windows Hyper-V Elevation of Privilege Vulnerability |
|
CVE-2026-119393
HIGH 7.8
Windows Credential Manager Elevation of Privilege Vulnerability |
|
CVE-2026-119816
HIGH 7.8
Windows Microsoft Account Sign-in Assistant Elevation of Privilege Vulnerability |
|
CVE-2026-119817
HIGH 7.8
Windows Shell Elevation of Privilege Vulnerability |
|
CVE-2026-119818
HIGH 7.8
Windows Text Services Framework Elevation of Privilege Vulnerability |
|
CVE-2026-119821
HIGH 7.8
Windows Network Connection Broker Elevation of Privilege Vulnerability |
|
CVE-2026-119826
HIGH 7.8
Windows Hyper-V Elevation of Privilege Vulnerability |
|
CVE-2026-119834
HIGH 7.8
Windows Subsystem for Linux Elevation of Privilege Vulnerability |
|
CVE-2026-119846
HIGH 7.8
Windows Subsystem for Linux Elevation of Privilege Vulnerability |
|
CVE-2026-119847
HIGH 7.8
Windows Kerberos Elevation of Privilege Vulnerability |
|
CVE-2026-119853
HIGH 7.8
Remote Access API Elevation of Privilege Vulnerability |
|
CVE-2026-119886
HIGH 7.8
Windows Telephony Service Elevation of Privilege Vulnerability |
|
CVE-2026-119892
HIGH 7.8
Windows Installer Elevation of Privilege Vulnerability |
|
CVE-2026-119899
HIGH 7.8
Windows Win32k Elevation of Privilege Vulnerability |
|
CVE-2026-119903
HIGH 7.8
Windows Installer Elevation of Privilege Vulnerability |
|
CVE-2026-119904
HIGH 7.8
Microsoft Windows Speech Elevation of Privilege Vulnerability |
|
CVE-2026-119907
HIGH 7.8
Windows Function Discovery Resource Publication Elevation of Privilege Vulnerability |
|
CVE-2026-119917
HIGH 7.8
Windows Distributed Transaction Coordinator Elevation of Privilege Vulnerability |
|
CVE-2026-119929
HIGH 7.8
Windows Installer Elevation of Privilege Vulnerability |
|
CVE-2026-119933
HIGH 7.8
Windows NTFS Elevation of Privilege Vulnerability |
|
CVE-2026-119939
HIGH 7.8
Windows Print Spooler Components Elevation of Privilege Vulnerability |
|
CVE-2026-119941
HIGH 7.8
Volume Shadow Copy Elevation of Privilege Vulnerability |
|
CVE-2026-119943
HIGH 7.8
Microsoft Windows Search Component Elevation of Privilege Vulnerability |
|
CVE-2026-119953
HIGH 7.8
Windows DNS Elevation of Privilege Vulnerability |
|
CVE-2026-119954
HIGH 7.8
Microsoft Windows Search Component Elevation of Privilege Vulnerability |
|
CVE-2026-119957
CRITICAL 7.8
Windows Remote Desktop Services Elevation of Privilege Vulnerability |
|
CVE-2026-119987
HIGH 7.8
Microsoft Windows App Store Elevation of Privilege Vulnerability |
|
CVE-2026-124225
HIGH 7.8
Windows PowerShell Remote Code Execution Vulnerability |
|
CVE-2026-95891
HIGH 7.8
Microsoft DirectMusic Remote Code Execution Vulnerability |
|
CVE-2026-95896
HIGH 7.8
Microsoft DirectMusic Remote Code Execution Vulnerability |
|
CVE-2026-97811
HIGH 7.8
Double free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-97804
HIGH 7.8
Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-97792
HIGH 7.8
Improper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-97794
HIGH 7.8
Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-97798
HIGH 7.8
Improper neutralization of argument delimiters in a command ('argument injection') in Windows Error Reporting allows an authorized attacker to elevate privileg… |
|
CVE-2026-96953
HIGH 7.8
Null pointer dereference in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to execute code locally. |
|
CVE-2026-96947
HIGH 7.8
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96950
HIGH 7.8
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96946
HIGH 7.8
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96931
HIGH 7.8
Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96933
HIGH 7.8
Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96928
HIGH 7.8
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96929
HIGH 7.8
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96918
HIGH 7.8
Improper access control in Windows NTFS allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96920
HIGH 7.8
Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96912
HIGH 7.8
Use after free in Windows Client License Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96915
HIGH 7.8
Integer overflow or wraparound in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96916
HIGH 7.8
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96867
HIGH 7.8
Out-of-bounds read in Windows NTFS allows an authorized attacker to execute code locally. |
|
CVE-2026-96911
HIGH 7.8
Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locall… |
|
CVE-2026-96862
HIGH 7.8
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96856
HIGH 7.8
Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96843
HIGH 7.8
Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96847
HIGH 7.8
Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96324
HIGH 7.8
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96317
HIGH 7.8
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96318
HIGH 7.8
Heap-based buffer overflow in Windows Resume allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96308
HIGH 7.8
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96309
HIGH 7.8
Use after free in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96312
HIGH 7.8
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96249
HIGH 7.8
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96243
HIGH 7.8
Improper link resolution before file access ('link following') in Windows WalletService allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96244
HIGH 7.8
Use after free in Windows Internal System User Profile allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96223
HIGH 7.8
Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96217
HIGH 7.8
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96186
HIGH 7.8
Deserialization of untrusted data in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96108
HIGH 7.8
Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96118
HIGH 7.8
Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88189
HIGH 7.8
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88191
HIGH 7.8
Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locall… |
|
CVE-2026-88193
HIGH 7.8
Heap-based buffer overflow in Microsoft Scripting Engine allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88194
HIGH 7.8
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88182
HIGH 7.8
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88188
HIGH 7.8
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88177
HIGH 7.8
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88179
HIGH 7.8
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88180
HIGH 7.8
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88181
HIGH 7.8
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88168
HIGH 7.8
Heap-based buffer overflow in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88152
HIGH 7.8
Use after free in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88147
HIGH 7.8
Heap-based buffer overflow in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88133
HIGH 7.8
Improper authorization in Windows Portable Device Enumerator Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88134
HIGH 7.8
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88135
HIGH 7.8
Improper access control in WebDAV allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88126
HIGH 7.8
Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88128
HIGH 7.8
Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88118
HIGH 7.8
Integer overflow or wraparound in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88101
HIGH 7.8
Weak authentication in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88093
HIGH 7.8
Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88100
HIGH 7.8
Use after free in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88080
HIGH 7.8
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88091
HIGH 7.8
Deserialization of untrusted data in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88070
HIGH 7.8
Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88071
HIGH 7.8
Double free in Windows Hyper-V allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88072
HIGH 7.8
Improper access control in Windows Host Guardian Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-87711
HIGH 7.8
Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-87712
HIGH 7.8
Use after free in Windows Quality of Service (QoS) Packet Scheduler allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-87702
HIGH 7.8
Integer overflow or wraparound in Windows Resource Management (MRM) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-87706
HIGH 7.8
Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-87707
HIGH 7.8
Heap-based buffer overflow in Windows Fax and Scan Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-87699
HIGH 7.8
Heap-based buffer overflow in Winlogon allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-87700
HIGH 7.8
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85945
HIGH 7.8
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-87691
HIGH 7.8
Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-87694
HIGH 7.8
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85933
HIGH 7.8
Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85927
HIGH 7.8
Heap-based buffer overflow in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85911
HIGH 7.8
Use after free in Windows StateRepository API allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85915
HIGH 7.8
Heap-based buffer overflow in Windows PCI Bus Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85906
HIGH 7.8
Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85908
HIGH 7.8
Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85901
HIGH 7.8
Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85902
HIGH 7.8
Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85869
HIGH 7.8
Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85871
HIGH 7.8
Heap-based buffer overflow in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85872
HIGH 7.8
Use after free in Windows Storage VSP Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85874
HIGH 7.8
Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to execute code locally. |
|
CVE-2026-85863
HIGH 7.8
Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85864
HIGH 7.8
Improper privilege management in Python allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85867
HIGH 7.8
Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85858
HIGH 7.8
Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85860
HIGH 7.8
Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85861
HIGH 7.8
Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85849
HIGH 7.8
Improper link resolution before file access ('link following') in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85851
HIGH 7.8
Use after free in Windows SmartScreen allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85842
HIGH 7.8
Use of externally-controlled format string in Windows Image Acquisition allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85843
HIGH 7.8
Use of uninitialized resource in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85848
HIGH 7.8
Heap-based buffer overflow in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85833
HIGH 7.8
Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85836
HIGH 7.8
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85837
HIGH 7.8
Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85829
HIGH 7.8
Double free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85832
HIGH 7.8
Heap-based buffer overflow in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85822
HIGH 7.8
Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85820
HIGH 7.8
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85804
HIGH 7.8
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85807
HIGH 7.8
Integer overflow or wraparound in Windows USB Video Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85795
HIGH 7.8
Use after free in Windows Text Services Framework allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85796
HIGH 7.8
Numeric truncation error in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85800
HIGH 7.8
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85373
HIGH 7.8
Heap-based buffer overflow in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85375
HIGH 7.8
Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85376
HIGH 7.8
Weak authentication in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85377
HIGH 7.8
Access of resource using incompatible type ('type confusion') in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85368
HIGH 7.8
Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85366
HIGH 7.8
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85356
HIGH 7.8
Out-of-bounds read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85358
HIGH 7.8
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85359
HIGH 7.8
Improper control of generation of code ('code injection') in Windows Performance Monitor allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85341
HIGH 7.8
Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85343
HIGH 7.8
Improper link resolution before file access ('link following') in Windows Hyper-V allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85338
HIGH 7.8
Out-of-bounds read in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85332
HIGH 7.8
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85327
HIGH 7.8
Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85318
HIGH 7.8
Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-84013
HIGH 7.8
Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-84016
HIGH 7.8
Out-of-bounds write in Windows EAPHost Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83927
HIGH 7.8
Improper link resolution before file access ('link following') in Windows Registry allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83931
HIGH 7.8
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally. |
|
CVE-2026-83932
HIGH 7.8
Heap-based buffer overflow in Windows Group Policy allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83922
HIGH 7.8
Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83918
HIGH 7.8
Integer overflow or wraparound in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83919
HIGH 7.8
Heap-based buffer overflow in Microsoft Internet Messaging API allows an authorized attacker to execute code locally. |
|
CVE-2026-83920
HIGH 7.8
Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83912
HIGH 7.8
Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83913
HIGH 7.8
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83902
HIGH 7.8
Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83903
HIGH 7.8
Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83896
HIGH 7.8
Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83876
HIGH 7.8
Use after free in Windows Shell allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83877
HIGH 7.8
Integer overflow or wraparound in HID Parser Library allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83881
HIGH 7.8
Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83882
HIGH 7.8
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83883
HIGH 7.8
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83872
HIGH 7.8
Incorrect conversion between numeric types in Windows TCP/IP allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83873
HIGH 7.8
Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83867
HIGH 7.8
Heap-based buffer overflow in Windows Push Notifications allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83861
HIGH 7.8
Heap-based buffer overflow in Windows Remote Desktop Protocol allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83863
HIGH 7.8
Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83857
HIGH 7.8
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83859
HIGH 7.8
Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83847
HIGH 7.8
Heap-based buffer overflow in Microsoft Account allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83848
HIGH 7.8
Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83850
HIGH 7.8
Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83840
HIGH 7.8
Weak authentication in Windows Error Reporting allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83833
HIGH 7.8
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83836
HIGH 7.8
Heap-based buffer overflow in Windows Event Tracing allows an unauthorized attacker to execute code locally. |
|
CVE-2026-83837
HIGH 7.8
Improper access control in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83826
HIGH 7.8
Untrusted pointer dereference in Windows Error Reporting allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83829
HIGH 7.8
Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83830
HIGH 7.8
Heap-based buffer overflow in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83832
HIGH 7.8
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83792
HIGH 7.8
Incorrect authorization in Windows Device Install Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83796
HIGH 7.8
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83781
HIGH 7.8
Improper null termination in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83783
HIGH 7.8
Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83779
HIGH 7.8
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83768
HIGH 7.8
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83769
HIGH 7.8
Use after free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83767
HIGH 7.8
Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83763
HIGH 7.8
Access of resource using incompatible type ('type confusion') in Windows Input System allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83757
HIGH 7.8
Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83758
HIGH 7.8
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to execute code locally. |
|
CVE-2026-83761
HIGH 7.8
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83762
HIGH 7.8
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83753
HIGH 7.8
Heap-based buffer overflow in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83756
HIGH 7.8
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83741
HIGH 7.8
Use after free in Internet Explorer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83727
HIGH 7.8
Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83732
HIGH 7.8
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83735
HIGH 7.8
Release of invalid pointer or reference in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83721
HIGH 7.8
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83726
HIGH 7.8
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83709
HIGH 7.8
Heap-based buffer overflow in Windows NTLM allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83712
HIGH 7.8
Out-of-bounds write in Windows NTFS allows an authorized attacker to execute code locally. |
|
CVE-2026-83704
HIGH 7.8
Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locall… |
|
CVE-2026-83698
HIGH 7.8
Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83699
HIGH 7.8
Stack-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83700
HIGH 7.8
Use after free in Windows Now Playing Session Manager allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83691
HIGH 7.8
Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83692
HIGH 7.8
Heap-based buffer overflow in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83690
HIGH 7.8
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83679
HIGH 7.8
Use after free in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83678
HIGH 7.8
Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83669
HIGH 7.8
Use of uninitialized resource in Windows Error Reporting allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83659
HIGH 7.8
Improper link resolution before file access ('link following') in Windows User Profile Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83650
HIGH 7.8
Heap-based buffer overflow in Windows Media allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83652
HIGH 7.8
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83654
HIGH 7.8
Missing authentication for critical function in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83638
HIGH 7.8
Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83639
HIGH 7.8
Heap-based buffer overflow in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83640
HIGH 7.8
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally. |
|
CVE-2026-83641
HIGH 7.8
Heap-based buffer overflow in Windows Media allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83587
HIGH 7.8
Untrusted pointer dereference in Windows Core Messaging allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83588
HIGH 7.8
Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83634
HIGH 7.8
Double free in Windows BitLocker allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83637
HIGH 7.8
Out-of-bounds read in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83583
HIGH 7.8
Improper access control in Windows Geotag Broker allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83585
HIGH 7.8
Use of externally-controlled format string in Windows NTFS allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83586
HIGH 7.8
Weak authentication in Windows Resilient File System (ReFS) Deduplication Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83579
HIGH 7.8
Heap-based buffer overflow in Windows Smart Card allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83567
HIGH 7.8
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83568
HIGH 7.8
Improper access control in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83569
HIGH 7.8
Heap-based buffer overflow in HID Parser Library allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83570
HIGH 7.8
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83513
HIGH 7.8
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83514
HIGH 7.8
Heap-based buffer overflow in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83499
HIGH 7.8
Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83506
HIGH 7.8
Untrusted search path in Servicing Stack Updates allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83508
HIGH 7.8
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-78459
HIGH 7.8
Heap-based buffer overflow in Windows Internet Information Services allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-81969
HIGH 7.8
Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-73027
HIGH 7.8
External control of system or configuration setting in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70303
HIGH 7.8
Out-of-bounds write in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70566
HIGH 7.8
Null pointer dereference in Windows Schannel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70285
HIGH 7.8
Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70286
HIGH 7.8
Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70278
HIGH 7.8
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70274
HIGH 7.8
Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70255
HIGH 7.8
Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70245
HIGH 7.8
Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privile… |
|
CVE-2026-70247
HIGH 7.8
Out-of-bounds read in Windows HTTP.sys allows an authorized attacker to execute code locally. |
|
CVE-2026-70238
HIGH 7.8
Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70228
HIGH 7.8
Out-of-bounds read in Desktop Window Manager allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70233
HIGH 7.8
Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70225
HIGH 7.8
Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privile… |
|
CVE-2026-70222
HIGH 7.8
Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70172
HIGH 7.8
Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70177
HIGH 7.8
Numeric truncation error in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70151
HIGH 7.8
Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70142
HIGH 7.8
Untrusted search path in Windows Update Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70143
HIGH 7.8
Heap-based buffer overflow in Windows Network File System allows an authorized attacker to execute code locally. |
|
CVE-2026-70138
HIGH 7.8
Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70139
HIGH 7.8
Heap-based buffer overflow in Windows Update Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70131
HIGH 7.8
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to elevate privileges locally. |
|
CVE-2026-70132
HIGH 7.8
Heap-based buffer overflow in Windows Portable Device File System Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70121
HIGH 7.8
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70123
HIGH 7.8
Numeric truncation error in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70112
HIGH 7.8
Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to execute code locally. |
|
CVE-2026-70113
HIGH 7.8
Integer overflow or wraparound in Windows Client for NFS allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70114
HIGH 7.8
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70117
HIGH 7.8
Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70104
HIGH 7.8
Untrusted pointer dereference in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70106
HIGH 7.8
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70108
HIGH 7.8
Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70109
HIGH 7.8
Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally. |
|
CVE-2026-70110
HIGH 7.8
Stack-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally. |
|
CVE-2026-70093
HIGH 7.8
Heap-based buffer overflow in Windows Rich Text Edit Control allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70102
HIGH 7.8
Use after free in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70103
HIGH 7.8
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70092
HIGH 7.8
Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally. |
|
CVE-2026-70060
HIGH 7.8
Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70064
HIGH 7.8
Integer underflow (wrap or wraparound) in Windows Kerberos allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70054
HIGH 7.8
Heap-based buffer overflow in Windows NetBIOS allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70059
HIGH 7.8
Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70048
HIGH 7.8
Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70051
HIGH 7.8
Access of resource using incompatible type ('type confusion') in Windows SmartScreen allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70052
HIGH 7.8
Integer overflow or wraparound in Windows PowerShell allows an authorized attacker to execute code locally. |
|
CVE-2026-70027
HIGH 7.8
Heap-based buffer overflow in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70023
HIGH 7.8
Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70010
HIGH 7.8
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70015
HIGH 7.8
Use after free in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70008
HIGH 7.8
Integer overflow or wraparound in Windows IP Over USB Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69957
HIGH 7.8
Integer overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69959
HIGH 7.8
Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to execute code locally. |
|
CVE-2026-69963
HIGH 7.8
Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69966
HIGH 7.8
Integer overflow or wraparound in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69950
HIGH 7.8
Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69952
HIGH 7.8
Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69953
HIGH 7.8
Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69942
HIGH 7.8
Buffer over-read in Windows Overlay Filter allows an authorized attacker to execute code locally. |
|
CVE-2026-69949
HIGH 7.8
Heap-based buffer overflow in Windows Client for NFS allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69923
HIGH 7.8
Uncontrolled search path element in Windows AI allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69926
HIGH 7.8
Access of resource using incompatible type ('type confusion') in Desktop Window Manager allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69934
HIGH 7.8
Integer overflow or wraparound in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69909
HIGH 7.8
Heap-based buffer overflow in Microsoft COM for Windows allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69916
HIGH 7.8
Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69882
HIGH 7.8
Untrusted search path in Windows Update allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69884
HIGH 7.8
Buffer over-read in Windows GDI allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69898
HIGH 7.8
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69850
HIGH 7.8
Untrusted pointer dereference in Windows Certificates allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69867
HIGH 7.8
Out-of-bounds read in SQLite allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69880
HIGH 7.8
Access of resource using incompatible type ('type confusion') in Desktop Window Manager allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69783
HIGH 7.8
External control of file name or path in Windows Update allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69798
HIGH 7.8
Use after free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69733
HIGH 7.8
Untrusted search path in Windows Update allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69650
HIGH 7.8
Improper verification of cryptographic signature in Windows Key Distribution Center allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69673
HIGH 7.8
Improper link resolution before file access ('link following') in Windows Update allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69718
HIGH 7.8
Improper neutralization of special elements used in a command ('command injection') in Windows Update allows an authorized attacker to elevate privileges local… |
|
CVE-2026-69633
HIGH 7.8
Heap-based buffer overflow in Windows Update allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69471
HIGH 7.8
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69354
HIGH 7.8
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-68836
HIGH 7.8
Heap-based buffer overflow in Windows kernel32.dll allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-49785
HIGH 7.8
Improper resource shutdown or release in Windows UEFI allows an authorized attacker to bypass a security feature locally. |
|
CVE-2026-108136
HIGH 7.8
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-108130
HIGH 7.8
Heap-based buffer overflow in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-105003
HIGH 7.8
Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-105004
HIGH 7.8
Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-103568
HIGH 7.8
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Credential Providers allows an authorized attacker to el… |
|
CVE-2026-103553
HIGH 7.8
Out-of-bounds read in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-102227
HIGH 7.8
Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally. |
|
CVE-2026-102215
HIGH 7.8
Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-102216
HIGH 7.8
Access of resource using incompatible type ('type confusion') in Windows StateRepository API allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-102218
HIGH 7.8
Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-102220
HIGH 7.8
Use after free in Windows VHD miniport driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-102202
HIGH 7.8
Improper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-102205
HIGH 7.8
Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-100215
HIGH 7.8
Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code locally. |
|
CVE-2026-100217
HIGH 7.8
Improper privilege management in Windows Group Policy allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83995
HIGH 7.8
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-84000
HIGH 7.8
Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to execute code locally. |
|
CVE-2026-83987
HIGH 7.8
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83988
HIGH 7.8
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83990
HIGH 7.8
Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83979
HIGH 7.8
Use after free in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83980
HIGH 7.8
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83981
HIGH 7.8
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83982
HIGH 7.8
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83983
HIGH 7.8
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83985
HIGH 7.8
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83974
HIGH 7.8
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83976
HIGH 7.8
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83977
HIGH 7.8
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83978
HIGH 7.8
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83968
HIGH 7.8
Use after free in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83969
HIGH 7.8
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83970
HIGH 7.8
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83971
HIGH 7.8
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83972
HIGH 7.8
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83973
HIGH 7.8
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83952
HIGH 7.8
Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83954
HIGH 7.8
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83955
HIGH 7.8
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83967
HIGH 7.8
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83498
HIGH 7.8
Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83942
HIGH 7.8
Missing authorization in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-80075
HIGH 7.8
Heap-based buffer overflow in Windows Work Folders allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-78448
HIGH 7.8
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-77904
HIGH 7.8
Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-77489
HIGH 7.8
Null pointer dereference in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-73024
HIGH 7.8
Heap-based buffer overflow in Windows Services for NFS ONCRPC XDR Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-73026
HIGH 7.8
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-73020
HIGH 7.8
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-73021
HIGH 7.8
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-73011
HIGH 7.8
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-73014
HIGH 7.8
Missing authorization in Data Sharing Service Client allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-73015
HIGH 7.8
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-73007
HIGH 7.8
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-72997
HIGH 7.8
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-73000
HIGH 7.8
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-73001
HIGH 7.8
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-73002
HIGH 7.8
Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-72992
HIGH 7.8
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-72993
HIGH 7.8
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-72994
HIGH 7.8
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-72995
HIGH 7.8
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-72996
HIGH 7.8
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-72990
HIGH 7.8
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-72991
HIGH 7.8
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-72988
HIGH 7.8
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-72965
HIGH 7.8
Use after free in Windows WebClient Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-72967
HIGH 7.8
Heap-based buffer overflow in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-72957
HIGH 7.8
Heap-based buffer overflow in Windows Deployment Services allows an authorized attacker to execute code locally. |
|
CVE-2026-72953
HIGH 7.8
Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-72941
HIGH 7.8
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-72944
HIGH 7.8
Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-72946
HIGH 7.8
Heap-based buffer overflow in Storage Port Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-72929
HIGH 7.8
Improper validation of integrity check value in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-71343
HIGH 7.8
Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to execute code locally. |
|
CVE-2026-71345
HIGH 7.8
Out-of-bounds write in Windows Spaceport.sys allows an authorized attacker to execute code locally. |
|
CVE-2026-71334
HIGH 7.8
Heap-based buffer overflow in Windows NFS Portmapper allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-71337
HIGH 7.8
Stack-based buffer overflow in Windows Storage Management Provider allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70583
HIGH 7.8
Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70584
HIGH 7.8
Access of resource using incompatible type ('type confusion') in Windows Core Messaging allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70574
HIGH 7.8
Out-of-bounds read in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70581
HIGH 7.8
Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70569
HIGH 7.8
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70572
HIGH 7.8
Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70564
HIGH 7.8
Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70289
HIGH 7.8
Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69921
HIGH 7.8
Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69907
HIGH 7.8
Improper handling of insufficient permissions or privileges in Windows Enterprise App Management allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69900
HIGH 7.8
Untrusted pointer dereference in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69841
HIGH 7.8
Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69844
HIGH 7.8
Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69821
HIGH 7.8
Improper encoding or escaping of output in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69801
HIGH 7.8
Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69787
HIGH 7.8
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69790
HIGH 7.8
Heap-based buffer overflow in Windows Credential Providers allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69785
HIGH 7.8
Untrusted search path in Windows Smart Card allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69758
HIGH 7.8
Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69731
HIGH 7.8
Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69738
HIGH 7.8
Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69707
HIGH 7.8
Integer overflow or wraparound in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69709
HIGH 7.8
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally. |
|
CVE-2026-69691
HIGH 7.8
Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69685
HIGH 7.8
Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69687
HIGH 7.8
Integer underflow (wrap or wraparound) in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69612
HIGH 7.8
Absolute path traversal in Windows Error Reporting allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69604
HIGH 7.8
Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69608
HIGH 7.8
Integer overflow or wraparound in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69589
HIGH 7.8
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69592
HIGH 7.8
Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69593
HIGH 7.8
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69594
HIGH 7.8
Heap-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69583
HIGH 7.8
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69584
HIGH 7.8
Integer overflow or wraparound in Windows USB Video Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69585
HIGH 7.8
Incorrect type conversion or cast in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69576
HIGH 7.8
Use after free in Graphic Fonts allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69580
HIGH 7.8
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69582
HIGH 7.8
Buffer over-read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69571
HIGH 7.8
Heap-based buffer overflow in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69561
HIGH 7.8
Out-of-bounds read in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69541
HIGH 7.8
Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69542
HIGH 7.8
Heap-based buffer overflow in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69532
HIGH 7.8
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69534
HIGH 7.8
Improper neutralization of special elements used in a command ('command injection') in Windows Program Compatibility Assistant Service allows an authorized att… |
|
CVE-2026-69535
HIGH 7.8
Numeric truncation error in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69538
HIGH 7.8
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to execute code locally. |
|
CVE-2026-69528
HIGH 7.8
Missing authentication for critical function in Windows Shell allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69509
HIGH 7.8
Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69513
HIGH 7.8
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69489
HIGH 7.8
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69475
HIGH 7.8
Untrusted pointer dereference in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69476
HIGH 7.8
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69478
HIGH 7.8
Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69480
HIGH 7.8
Heap-based buffer overflow in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69455
HIGH 7.8
Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69456
HIGH 7.8
Heap-based buffer overflow in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69459
HIGH 7.8
Heap-based buffer overflow in Windows Power Dependency Coordinator allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69447
HIGH 7.8
Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69450
HIGH 7.8
Out-of-bounds read in Windows Error Reporting allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69444
HIGH 7.8
Heap-based buffer overflow in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69445
HIGH 7.8
Improper limitation of a pathname to a restricted directory ('path traversal') in Windows Compressed Folder allows an authorized attacker to elevate privileges… |
|
CVE-2026-69432
HIGH 7.8
Heap-based buffer overflow in Volume Manager Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69433
HIGH 7.8
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69436
HIGH 7.8
Heap-based buffer overflow in Windows State Repository Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69426
HIGH 7.8
Heap-based buffer overflow in Windows VOLSNAP.SYS allows an authorized attacker to execute code locally. |
|
CVE-2026-69420
HIGH 7.8
Heap-based buffer overflow in Windows VOLSNAP.SYS allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69421
HIGH 7.8
Integer underflow (wrap or wraparound) in Windows Kernel Mode Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69424
HIGH 7.8
Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69407
HIGH 7.8
Integer overflow or wraparound in Volume Manager Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69391
HIGH 7.8
Stack-based buffer overflow in Windows Broker Infrastructure Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69392
HIGH 7.8
Use after free in Windows Shell allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69389
HIGH 7.8
Heap-based buffer overflow in Windows Storage Management Provider allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69377
HIGH 7.8
Missing authorization in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69368
HIGH 7.8
Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69359
HIGH 7.8
Heap-based buffer overflow in Active Directory Domain Services allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69352
HIGH 7.8
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69348
HIGH 7.8
Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69324
HIGH 7.8
Access of resource using incompatible type ('type confusion') in Windows Performance Monitor allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69328
HIGH 7.8
Untrusted search path in Windows Storage allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69323
HIGH 7.8
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69312
HIGH 7.8
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69307
HIGH 7.8
Heap-based buffer overflow in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69298
HIGH 7.8
Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69290
HIGH 7.8
Stack-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69293
HIGH 7.8
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69295
HIGH 7.8
Out-of-bounds read in Windows USB Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69284
HIGH 7.8
Heap-based buffer overflow in Windows DCOM Server allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69289
HIGH 7.8
Improper link resolution before file access ('link following') in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69283
HIGH 7.8
Heap-based buffer overflow in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69277
HIGH 7.8
Stack-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69269
HIGH 7.8
Integer underflow (wrap or wraparound) in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69270
HIGH 7.8
Heap-based buffer overflow in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-68896
HIGH 7.8
Absolute path traversal in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69265
HIGH 7.8
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-68892
HIGH 7.8
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-68888
HIGH 7.8
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-68890
HIGH 7.8
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-68885
HIGH 7.8
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-68875
HIGH 7.8
Buffer over-read in Windows NTFS allows an authorized attacker to execute code locally. |
|
CVE-2026-68877
HIGH 7.8
Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to execute code locally. |
|
CVE-2026-68848
HIGH 7.8
Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-68850
HIGH 7.8
Heap-based buffer overflow in Microsoft Account allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-68844
HIGH 7.8
Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to execute code locally. |
|
CVE-2026-68845
HIGH 7.8
Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-68841
HIGH 7.8
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-68832
HIGH 7.8
Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-62810
HIGH 7.8
Heap-based buffer overflow in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-62697
HIGH 7.8
Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-56172
HIGH 7.8
Use after free in Windows VHD miniport driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-56177
HIGH 7.8
Use after free in Windows Server allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-56198
HIGH 7.8
Out-of-bounds read in Microsoft Trace Data Helper allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-78447
HIGH 7.8
Windows Biometric Service Elevation of Privilege Vulnerability |
|
CVE-2026-83975
HIGH 7.8
Windows Biometric Service Elevation of Privilege Vulnerability |
|
CVE-2026-83986
HIGH 7.8
Windows Biometric Service Elevation of Privilege Vulnerability |
|
CVE-2026-70346
HIGH 7.8
Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70347
HIGH 7.8
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70344
HIGH 7.8
Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70345
HIGH 7.8
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-66799
HIGH 7.8
Heap-based buffer overflow in Windows Key Guard allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-65814
HIGH 7.8
Heap-based buffer overflow in Windows Storage Port Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-65786
HIGH 7.8
Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-65787
HIGH 7.8
Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-65790
HIGH 7.8
Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-65773
HIGH 7.8
Improper access control in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-65774
HIGH 7.8
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-65775
HIGH 7.8
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-65671
HIGH 7.8
Heap-based buffer overflow in Windows Remote Access API allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-65672
HIGH 7.8
Heap-based buffer overflow in Windows Remote Access API allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-62894
HIGH 7.8
Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-62888
HIGH 7.8
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-62890
HIGH 7.8
Heap-based buffer overflow in Windows GDI+ allows an authorized attacker to execute code locally. |
|
CVE-2026-62885
HIGH 7.8
Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-62876
HIGH 7.8
Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-62877
HIGH 7.8
Stack-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-62880
HIGH 7.8
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-62832
HIGH 7.8
Improper link resolution before file access ('link following') in Windows User Profile Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-62812
HIGH 7.8
Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-62803
HIGH 7.8
Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-62807
HIGH 7.8
Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-62811
HIGH 7.8
Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-62797
HIGH 7.8
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-62779
HIGH 7.8
Use after free in Windows Schannel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-62783
HIGH 7.8
Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-62776
HIGH 7.8
Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-62777
HIGH 7.8
Missing authentication for critical function in Windows License Manager allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-62768
HIGH 7.8
Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-62770
HIGH 7.8
Heap-based buffer overflow in Windows Shell allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-62771
HIGH 7.8
Heap-based buffer overflow in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-62754
HIGH 7.8
Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-62755
HIGH 7.8
Stack-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-62758
HIGH 7.8
Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-62761
HIGH 7.8
Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-62751
HIGH 7.8
Integer overflow or wraparound in Windows Projected File System allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-62752
HIGH 7.8
Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-62741
HIGH 7.8
Integer underflow (wrap or wraparound) in Windows HTTP.sys allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-62747
HIGH 7.8
Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-62735
HIGH 7.8
Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-62736
HIGH 7.8
Heap-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-62737
HIGH 7.8
Untrusted pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-62739
HIGH 7.8
Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-62732
HIGH 7.8
Heap-based buffer overflow in Windows Telephony Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-62733
HIGH 7.8
Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-62722
HIGH 7.8
Heap-based buffer overflow in Windows Brokering File System allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-62717
HIGH 7.8
Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-62719
HIGH 7.8
Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-62721
HIGH 7.8
Insufficient granularity of access control in User-Mode Power Service (UMPS) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-62711
HIGH 7.8
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-62712
HIGH 7.8
Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-62713
HIGH 7.8
Heap-based buffer overflow in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-62707
HIGH 7.8
Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-62710
HIGH 7.8
Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-62696
HIGH 7.8
Integer underflow (wrap or wraparound) in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-62698
HIGH 7.8
Numeric truncation error in Microsoft Digest Authentication allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-62700
HIGH 7.8
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-62701
HIGH 7.8
Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-62692
HIGH 7.8
Heap-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-62695
HIGH 7.8
Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-61937
HIGH 7.8
Integer overflow or wraparound in Windows HTTP.sys allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-61934
HIGH 7.8
Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-61925
HIGH 7.8
Incorrect authorization in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-61926
HIGH 7.8
Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-61930
HIGH 7.8
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-61923
HIGH 7.8
Heap-based buffer overflow in Windows Display Enhancement Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-61367
HIGH 7.8
Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-61364
HIGH 7.8
Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-61365
HIGH 7.8
Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-61355
HIGH 7.8
Heap-based buffer overflow in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-61356
HIGH 7.8
Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-61357
HIGH 7.8
Use after free in Application Information Services allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-61358
HIGH 7.8
Improper link resolution before file access ('link following') in Windows Accessibility Infrastructure (ATBroker.exe) allows an authorized attacker to elevate … |
|
CVE-2026-61359
HIGH 7.8
Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-61349
HIGH 7.8
Use after free in Windows Work Folder Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-61353
HIGH 7.8
Heap-based buffer overflow in Windows Telephony Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-59127
HIGH 7.8
Integer overflow or wraparound in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-56174
HIGH 7.8
Untrusted search path in Windows Narrator Braille allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-54984
HIGH 7.8
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code locally. |
|
CVE-2026-42976
HIGH 7.8
Missing authentication for critical function in Windows RPC API allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-58632
HIGH 7.8
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-58613
HIGH 7.8
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-58628
HIGH 7.8
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Wireless Networking allows an authorized attacker to ele… |
|
CVE-2026-58542
HIGH 7.8
Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code locally. |
|
CVE-2026-58538
HIGH 7.8
Heap-based buffer overflow in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-58540
HIGH 7.8
Improper authorization in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-58541
HIGH 7.8
Access of resource using incompatible type ('type confusion') in Windows DWM allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-58532
HIGH 7.8
Integer overflow or wraparound in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-58536
HIGH 7.8
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-58537
HIGH 7.8
Use after free in Microsoft NAT Helper Components (ipnathlp.dll) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-58527
HIGH 7.8
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an authorized attacker to elevate privile… |
|
CVE-2026-58530
HIGH 7.8
Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker to execute code locally. |
|
CVE-2026-57096
HIGH 7.8
Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-57088
HIGH 7.8
Improper access control in Extensible Storage Engine (ESENT) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-57091
HIGH 7.8
Stack-based buffer overflow in Windows File History Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-56650
HIGH 7.8
Heap-based buffer overflow in Windows Network File System allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-56643
HIGH 7.8
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-56644
HIGH 7.8
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-56189
HIGH 7.8
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code locally. |
|
CVE-2026-56182
HIGH 7.8
Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-56175
HIGH 7.8
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-56176
HIGH 7.8
Out-of-bounds read in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-54124
HIGH 7.8
Integer overflow or wraparound in Windows Terminal allows an unauthorized attacker to execute code locally. |
|
CVE-2026-54125
HIGH 7.8
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an authorized attacker to elevate privile… |
|
CVE-2026-54115
HIGH 7.8
Integer overflow or wraparound in Windows Active Directory allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-50689
HIGH 7.8
Use after free in Windows Clipboard Server allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-50688
HIGH 7.8
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-50679
HIGH 7.8
Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-50673
HIGH 7.8
Null pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-50667
HIGH 7.8
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows NTFS allows an authorized attacker to elevate privileges… |
|
CVE-2026-50655
HIGH 7.8
Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code locally. |
|
CVE-2026-50509
HIGH 7.8
Deserialization of untrusted data in Windows Wireless Wide Area Network Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-50501
HIGH 7.8
Stack-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker to execute code locally. |
|
CVE-2026-50498
HIGH 7.8
Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an unauthorized attacker to elevate privileges locally. |
|
CVE-2026-50499
HIGH 7.8
Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-50493
HIGH 7.8
Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-50494
HIGH 7.8
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally. |
|
CVE-2026-50484
HIGH 7.8
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-50486
HIGH 7.8
Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-50488
HIGH 7.8
Improper neutralization of special elements used in a command ('command injection') in Windows Clipboard User Service allows an authorized attacker to elevate … |
|
CVE-2026-50476
HIGH 7.8
Use after free in Microsoft Windows allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-50478
HIGH 7.8
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-50479
HIGH 7.8
Untrusted pointer dereference in Windows USB Hub Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-50469
HIGH 7.8
Improper link resolution before file access ('link following') in Windows Projected File System allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-50471
HIGH 7.8
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally. |
|
CVE-2026-50461
HIGH 7.8
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally. |
|
CVE-2026-50462
HIGH 7.8
External control of file name or path in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-50466
HIGH 7.8
Use after free in Windows Brokering File System allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-50454
HIGH 7.8
Relative path traversal in Windows User Interface Core allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-50457
HIGH 7.8
Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-50458
HIGH 7.8
Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-50448
HIGH 7.8
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally. |
|
CVE-2026-50450
HIGH 7.8
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Wireless Wide Area Network Service allows an authorized … |
|
CVE-2026-50441
HIGH 7.8
Untrusted pointer dereference in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-50433
HIGH 7.8
Use after free in Windows Media allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-50435
HIGH 7.8
Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-50436
HIGH 7.8
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-50427
HIGH 7.8
Use after free in Content Delivery Manager allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-50421
HIGH 7.8
Access of resource using incompatible type ('type confusion') in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate priv… |
|
CVE-2026-50422
HIGH 7.8
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-50423
HIGH 7.8
Improper access control in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-50425
HIGH 7.8
Use after free in Windows Internal System User Profile allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-50412
HIGH 7.8
Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-50417
HIGH 7.8
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally. |
|
CVE-2026-50405
HIGH 7.8
Insufficient granularity of access control in Windows Filtering Platform (WFP) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-50407
HIGH 7.8
Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-50399
HIGH 7.8
Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-50400
HIGH 7.8
Stack-based buffer overflow in Windows App Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-50402
HIGH 7.8
Incorrect conversion between numeric types in Windows NTFS allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-50391
HIGH 7.8
Improper privilege management in Windows Group Policy allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-50386
HIGH 7.8
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally. |
|
CVE-2026-50387
HIGH 7.8
Stack-based buffer overflow in Windows GDI allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-50388
HIGH 7.8
Out-of-bounds read in Windows NTFS allows an unauthorized attacker to execute code locally. |
|
CVE-2026-50378
HIGH 7.8
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Key Guard allows an authorized attacker to elevate privi… |
|
CVE-2026-50373
HIGH 7.8
Improper access control in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-50367
HIGH 7.8
Incorrect access of indexable resource ('range error') in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-50361
HIGH 7.8
Double free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-50362
HIGH 7.8
Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker to execute code locally. |
|
CVE-2026-50363
HIGH 7.8
Heap-based buffer overflow in Windows Push Notifications allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-50353
HIGH 7.8
Use after free in Windows DirectX allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-50357
HIGH 7.8
Numeric truncation error in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally. |
|
CVE-2026-50344
HIGH 7.8
Improper authorization in Windows OLE allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-50346
HIGH 7.8
Improper authorization in RPC Runtime allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-50347
HIGH 7.8
Heap-based buffer overflow in Windows Data dll allows an unauthorized attacker to execute code locally. |
|
CVE-2026-50337
HIGH 7.8
Incorrect type conversion or cast in Windows Notification allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-50343
HIGH 7.8
Improper privilege management in Microsoft Install Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-50331
HIGH 7.8
Use after free in Windows Application Model allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-50332
HIGH 7.8
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-50335
HIGH 7.8
Improper access control in Windows Operating Systems allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-50326
HIGH 7.8
Use after free in Windows Unified Consent System allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-50327
HIGH 7.8
Heap-based buffer overflow in Windows Media allows an authorized attacker to execute code locally. |
|
CVE-2026-50329
HIGH 7.8
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-50315
HIGH 7.8
Null pointer dereference in Windows Image Acquisition allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-50317
HIGH 7.8
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Operating Systems allows an authorized attacker to eleva… |
|
CVE-2026-50321
HIGH 7.8
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Driver allows an authorized attacker to elevate priv… |
|
CVE-2026-50309
HIGH 7.8
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally. |
|
CVE-2026-50313
HIGH 7.8
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally. |
|
CVE-2026-50305
HIGH 7.8
Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-50306
HIGH 7.8
Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-58609
HIGH 7.8
Out-of-bounds read in Microsoft Graphics Component allows an unauthorized attacker to execute code locally. |
|
CVE-2026-58610
HIGH 7.8
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code locally. |
|
CVE-2026-58635
HIGH 7.8
Improper neutralization of special elements used in a command ('command injection') in Windows Narrator Braille allows an authorized attacker to elevate privil… |
|
CVE-2026-58601
HIGH 7.8
Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-58602
HIGH 7.8
Use after free in Windows Kernel Mode Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-55004
HIGH 7.8
Double free in Microsoft Printer Drivers allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-54993
HIGH 7.8
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code locally. |
|
CVE-2026-55001
HIGH 7.8
Improper certificate validation in Windows Active Directory allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-54986
HIGH 7.8
Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-54987
HIGH 7.8
Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-54991
HIGH 7.8
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Print Driver allows an authorized attacker to elevat… |
|
CVE-2026-54112
HIGH 7.8
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K allows an authorized attacker to elevate privileg… |
|
CVE-2026-54114
HIGH 7.8
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-54109
HIGH 7.8
Integer overflow or wraparound in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally. |
|
CVE-2026-50697
HIGH 7.8
Exposure of sensitive information to an unauthorized actor in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-50351
HIGH 7.8
Improper access control in Windows Audio Compression Manager (ACM) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-50311
HIGH 7.8
Improper access control in Windows Server allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-50318
HIGH 7.8
Stack-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-50333
HIGH 7.8
Missing authentication for critical function in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-50308
HIGH 7.8
Integer underflow (wrap or wraparound) in Windows NTFS allows an unauthorized attacker to execute code locally. |
|
CVE-2026-49808
HIGH 7.8
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileg… |
|
CVE-2026-50293
HIGH 7.8
Use after free in Windows Internal Task Bar allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-49800
HIGH 7.8
Integer overflow or wraparound in Windows Web Proxy Auto-Discovery Protocol (WPAD) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-49793
HIGH 7.8
Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally. |
|
CVE-2026-49796
HIGH 7.8
Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code locally. |
|
CVE-2026-49797
HIGH 7.8
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally. |
|
CVE-2026-49792
HIGH 7.8
Numeric truncation error in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally. |
|
CVE-2026-49783
HIGH 7.8
Improperly implemented security check for standard in Windows Secure Boot allows an authorized attacker to bypass a security feature locally. |
|
CVE-2026-49175
HIGH 7.8
Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-49176
HIGH 7.8
Improper privilege management in Windows WalletService allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-49166
HIGH 7.8
Use after free in Microsoft Printer Drivers allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-49170
HIGH 7.8
Insufficient granularity of access control in Windows StateRepository API allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-42982
HIGH 7.8
Improper validation of consistency within input in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-44800
HIGH 7.8
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elev… |
|
CVE-2026-8863
HIGH 7.8
Multiple Microsoft-sigend UEFI SHIM bootloaders are vulnerable to SecureBoot bypass. An attacker with administrative privileges or the ability to modify the bo… |
|
CVE-2026-48574
HIGH 7.8
Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code locally. |
|
CVE-2026-48583
HIGH 7.8
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-45658
HIGH 7.8
Improper access control in Windows BitLocker allows an authorized attacker to bypass a security feature locally. |
|
CVE-2026-45656
HIGH 7.8
Protection mechanism failure in Windows UEFI allows an authorized attacker to bypass a security feature locally. |
|
CVE-2026-45636
HIGH 7.8
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally. |
|
CVE-2026-45637
HIGH 7.8
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-45638
HIGH 7.8
Heap-based buffer overflow in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-45605
HIGH 7.8
Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-45600
HIGH 7.8
Access of resource using incompatible type ('type confusion') in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-45592
HIGH 7.8
Integer overflow or wraparound in Windows Internet (wininet.dll) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-45593
HIGH 7.8
Use after free in Windows SDK allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-45586
HIGH 7.8
Improper link resolution before file access ('link following') in Windows Collaborative Translation Framework allows an authorized attacker to elevate privileg… |
|
CVE-2026-45487
HIGH 7.8
Time-of-check time-of-use (TOCTOU) race condition in Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-44812
HIGH 7.8
Integer overflow or wraparound in Windows Win32K - GRFX allows an unauthorized attacker to execute code locally. |
|
CVE-2026-44802
HIGH 7.8
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-44803
HIGH 7.8
Integer overflow or wraparound in Windows Win32K - GRFX allows an unauthorized attacker to execute code locally. |
|
CVE-2026-44809
HIGH 7.8
Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-42989
HIGH 7.8
Improper link resolution before file access ('link following') in Winlogon allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-42991
HIGH 7.8
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elev… |
|
CVE-2026-42983
HIGH 7.8
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-42986
HIGH 7.8
Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-42977
HIGH 7.8
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elev… |
|
CVE-2026-42978
HIGH 7.8
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elev… |
|
CVE-2026-42979
HIGH 7.8
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elev… |
|
CVE-2026-42980
HIGH 7.8
Integer underflow (wrap or wraparound) in Windows NT OS Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-42916
HIGH 7.8
Integer overflow or wraparound in Windows NT OS Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-42905
HIGH 7.8
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-42910
HIGH 7.8
Out-of-bounds write in Windows Hotpatch Monitoring Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-42837
HIGH 7.8
Out-of-bounds read in Windows Projected File System Filter Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-42828
HIGH 7.8
Buffer over-read in Windows Projected File System Filter Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-40404
HIGH 7.8
Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-40409
HIGH 7.8
Numeric truncation error in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-41092
HIGH 7.8
Improper access control in Microsoft Kinect allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-33828
HIGH 7.8
Trust boundary violation in Windows Attestation allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-41095
HIGH 7.8
Use after free in Data Deduplication allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-41088
HIGH 7.8
Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privile… |
|
CVE-2026-40397
HIGH 7.8
Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-40399
HIGH 7.8
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an authorized attacker to elevate privileg… |
|
CVE-2026-40369
HIGH 7.8
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-35417
HIGH 7.8
Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-35420
HIGH 7.8
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-34336
HIGH 7.8
Integer overflow or wraparound in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-33840
HIGH 7.8
Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-33841
HIGH 7.8
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-34330
HIGH 7.8
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an authorized attacker to elevate p… |
|
CVE-2026-33834
HIGH 7.8
Windows Event Logging Service Elevation of Privilege Vulnerability |
|
CVE-2026-33835
HIGH 7.8
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
|
CVE-2026-33837
HIGH 7.8
Windows TCP/IP Local Elevation of Privilege Vulnerability |
|
CVE-2026-33838
HIGH 7.8
Windows Message Queuing (MSMQ) Elevation of Privilege Vulnerability |
|
CVE-2026-34333
HIGH 7.8
Windows Win32k Elevation of Privilege Vulnerability |
|
CVE-2026-34334
HIGH 7.8
Windows TCP/IP Elevation of Privilege Vulnerability |
|
CVE-2026-34337
HIGH 7.8
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
|
CVE-2026-34338
HIGH 7.8
Windows Telephony Service Elevation of Privilege Vulnerability |
|
CVE-2026-34343
HIGH 7.8
Windows Application Identity (AppID) Subsystem Elevation of Privilege Vulnerability |
|
CVE-2026-34344
HIGH 7.8
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
|
CVE-2026-34351
HIGH 7.8
Windows TCP/IP Elevation of Privilege Vulnerability |
|
CVE-2026-35415
HIGH 7.8
Windows Storage Spaces Controller Elevation of Privilege Vulnerability |
|
CVE-2026-35418
HIGH 7.8
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
|
CVE-2026-35421
CRITICAL 7.8
Windows GDI Remote Code Execution Vulnerability |
|
CVE-2026-40377
HIGH 7.8
Microsoft Cryptographic Services Elevation of Privilege Vulnerability |
|
CVE-2026-40382
HIGH 7.8
Windows Telephony Service Elevation of Privilege Vulnerability |
|
CVE-2026-40398
HIGH 7.8
Windows Remote Desktop Services Elevation of Privilege Vulnerability |
|
CVE-2026-40407
HIGH 7.8
Windows Common Log File System Driver Elevation of Privilege Vulnerability |
|
CVE-2026-40408
HIGH 7.8
Windows WAN ARP Driver Elevation of Privilege Vulnerability |
|
CVE-2026-42896
HIGH 7.8
Windows DWM Core Library Elevation of Privilege Vulnerability |
|
CVE-2026-33101
HIGH 7.8
Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-33098
HIGH 7.8
Use after free in Windows Container Isolation FS Filter Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-32222
HIGH 7.8
Untrusted pointer dereference in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-32183
HIGH 7.8
Improper neutralization of special elements used in a command ('command injection') in Windows Snipping Tool allows an unauthorized attacker to execute code lo… |
|
CVE-2026-32165
HIGH 7.8
Use after free in Windows User Interface Core allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-32163
HIGH 7.8
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows User Interface Core allows an authorized attacker to ele… |
|
CVE-2026-32164
HIGH 7.8
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows User Interface Core allows an authorized attacker to ele… |
|
CVE-2026-32158
HIGH 7.8
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elev… |
|
CVE-2026-32159
HIGH 7.8
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elev… |
|
CVE-2026-32160
HIGH 7.8
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elev… |
|
CVE-2026-32154
HIGH 7.8
Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-32155
HIGH 7.8
Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-32152
HIGH 7.8
Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-32089
HIGH 7.8
Use after free in Windows Speech Brokered Api allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-32090
HIGH 7.8
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Speech Brokered Api allows an authorized attacker to ele… |
|
CVE-2026-32078
HIGH 7.8
Use after free in Windows Projected File System allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-32076
HIGH 7.8
Out-of-bounds read in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-32077
HIGH 7.8
Untrusted pointer dereference in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-32074
HIGH 7.8
Double free in Windows Projected File System allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-32069
HIGH 7.8
Double free in Windows Projected File System allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-27927
HIGH 7.8
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Projected File System allows an authorized attacker to e… |
|
CVE-2026-27923
HIGH 7.8
Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-27919
HIGH 7.8
Untrusted pointer dereference in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-27920
HIGH 7.8
Untrusted pointer dereference in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-27918
HIGH 7.8
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Shell allows an authorized attacker to elevate privilege… |
|
CVE-2026-27914
HIGH 7.8
Improper access control in Microsoft Management Console allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-27915
HIGH 7.8
Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-27916
HIGH 7.8
Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-27911
HIGH 7.8
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows User Interface Core allows an authorized attacker to ele… |
|
CVE-2026-27907
HIGH 7.8
Integer underflow (wrap or wraparound) in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-27909
HIGH 7.8
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-27910
HIGH 7.8
Improper handling of insufficient permissions or privileges in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-26183
HIGH 7.8
Improper access control in Windows RPC API allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-26184
HIGH 7.8
Buffer over-read in Windows Projected File System allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-26179
HIGH 7.8
Double free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-26180
HIGH 7.8
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-26181
HIGH 7.8
Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-26176
HIGH 7.8
Heap-based buffer overflow in Windows Client Side Caching driver (csc.sys) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-26170
HIGH 7.8
Improper input validation in Microsoft PowerShell allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-26172
HIGH 7.8
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elev… |
|
CVE-2026-26168
HIGH 7.8
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows an authoriz… |
|
CVE-2026-26162
HIGH 7.8
Access of resource using incompatible type ('type confusion') in Windows OLE allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-26163
HIGH 7.8
Double free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-26159
HIGH 7.8
Missing authentication for critical function in Windows Remote Desktop Licensing Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-26160
HIGH 7.8
Missing authentication for critical function in Windows Remote Desktop Licensing Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-26161
HIGH 7.8
Untrusted pointer dereference in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-26156
HIGH 7.8
Heap-based buffer overflow in Windows Hyper-V allows an unauthorized attacker to execute code locally. |
|
CVE-2026-26153
HIGH 7.8
Out-of-bounds read in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-20930
HIGH 7.8
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Services allows an authorized attacker to ele… |
|
CVE-2026-24293
HIGH 7.8
Null pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-24294
HIGH 7.8
Improper authentication in Windows SMB Server allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-24289
HIGH 7.8
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-23672
HIGH 7.8
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability |
|
CVE-2026-23673
HIGH 7.8
Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability |
|
CVE-2026-24287
HIGH 7.8
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2026-24290
HIGH 7.8
Windows Projected File System Elevation of Privilege Vulnerability |
|
CVE-2026-24291
HIGH 7.8
Windows Accessibility Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability |
|
CVE-2026-24292
HIGH 7.8
Windows Connected Devices Platform Service Elevation of Privilege Vulnerability |
|
CVE-2026-25165
HIGH 7.8
Performance Counters for Windows Elevation of Privilege Vulnerability |
|
CVE-2026-25174
HIGH 7.8
Windows Extensible File Allocation Table Elevation of Privilege Vulnerability |
|
CVE-2026-25176
HIGH 7.8
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
|
CVE-2026-25187
HIGH 7.8
Winlogon Elevation of Privilege Vulnerability |
|
CVE-2026-25190
HIGH 7.8
Windows GDI Remote Code Execution Vulnerability |
|
CVE-2026-26128
HIGH 7.8
Windows SMB Server Elevation of Privilege Vulnerability |
|
CVE-2026-26132
HIGH 7.8
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2026-21231
HIGH 7.8
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2026-21232
HIGH 7.8
Windows HTTP.sys Elevation of Privilege Vulnerability |
|
CVE-2026-21236
HIGH 7.8
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
|
CVE-2026-21238
HIGH 7.8
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
|
CVE-2026-21239
HIGH 7.8
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2026-21240
HIGH 7.8
Windows HTTP.sys Elevation of Privilege Vulnerability |
|
CVE-2026-21245
HIGH 7.8
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2026-21246
HIGH 7.8
Windows Graphics Component Elevation of Privilege Vulnerability |
|
CVE-2026-21250
Exploit
HIGH 7.8
Windows HTTP.sys Elevation of Privilege Vulnerability |
|
CVE-2026-21251
HIGH 7.8
Cluster Client Failover (CCF) Elevation of Privilege Vulnerability |
|
CVE-2026-20941
HIGH 7.8
Improper link resolution before file access ('link following') in Host Process for Windows Tasks allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-20924
HIGH 7.8
Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-20922
HIGH 7.8
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally. |
|
CVE-2026-20923
HIGH 7.8
Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-20873
HIGH 7.8
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Services allows an authorized attacker to ele… |
|
CVE-2026-20874
HIGH 7.8
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Services allows an authorized attacker to ele… |
|
CVE-2026-20877
HIGH 7.8
Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-20918
HIGH 7.8
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Services allows an authorized attacker to ele… |
|
CVE-2026-20867
HIGH 7.8
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Services allows an authorized attacker to ele… |
|
CVE-2026-20870
HIGH 7.8
Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-20871
HIGH 7.8
Use after free in Desktop Windows Manager allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-20861
HIGH 7.8
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Services allows an authorized attacker to ele… |
|
CVE-2026-20864
HIGH 7.8
Heap-based buffer overflow in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-20865
HIGH 7.8
Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-20866
HIGH 7.8
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Services allows an authorized attacker to ele… |
|
CVE-2026-20857
HIGH 7.8
Untrusted pointer dereference in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-20858
HIGH 7.8
Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-20859
HIGH 7.8
Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-20860
HIGH 7.8
Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privile… |
|
CVE-2026-20840
HIGH 7.8
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally. |
|
CVE-2026-20843
HIGH 7.8
Improper access control in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-20832
HIGH 7.8
Windows Remote Procedure Call Interface Definition Language (IDL) Elevation of Privilege Vulnerability |
|
CVE-2026-20837
HIGH 7.8
Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code locally. |
|
CVE-2026-20826
HIGH 7.8
Concurrent execution using shared resource with improper synchronization ('race condition') in Tablet Windows User Interface (TWINUI) Subsystem allows an autho… |
|
CVE-2026-20831
HIGH 7.8
Time-of-check time-of-use (toctou) race condition in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-20820
HIGH 7.8
Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-20822
HIGH 7.8
Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-20816
HIGH 7.8
Time-of-check time-of-use (toctou) race condition in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-20817
HIGH 7.8
Improper handling of insufficient permissions or privileges in Windows Error Reporting allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-20809
HIGH 7.8
Time-of-check time-of-use (toctou) race condition in Windows Kernel Memory allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-20811
HIGH 7.8
Access of resource using incompatible type ('type confusion') in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally. |
|
CVE-2023-31096
HIGH 7.8
MITRE: CVE-2023-31096 Windows Agere Soft Modem Driver Elevation of Privilege Vulnerability |
|
CVE-2024-55414
HIGH 7.8
Windows Motorola Soft Modem Driver Elevation of Privilege Vulnerability |
|
CVE-2025-64661
HIGH 7.8
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Shell allows an authorized attacker to elevate privilege… |
|
CVE-2025-62572
HIGH 7.8
Out-of-bounds read in Application Information Services allows an authorized attacker to elevate privileges locally. |
|
CVE-2025-62470
HIGH 7.8
Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2025-62472
HIGH 7.8
Use of uninitialized resource in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally. |
|
CVE-2025-62474
HIGH 7.8
Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally. |
|
CVE-2025-62464
HIGH 7.8
Buffer over-read in Windows Projected File System allows an authorized attacker to elevate privileges locally. |
|
CVE-2025-62466
HIGH 7.8
Null pointer dereference in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2025-62467
HIGH 7.8
Integer overflow or wraparound in Windows Projected File System allows an authorized attacker to elevate privileges locally. |
|
CVE-2025-62457
HIGH 7.8
Out-of-bounds read in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2025-62461
HIGH 7.8
Buffer over-read in Windows Projected File System Filter Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2025-62462
HIGH 7.8
Buffer over-read in Windows Projected File System allows an authorized attacker to elevate privileges locally. |
|
CVE-2025-55233
HIGH 7.8
Out-of-bounds read in Windows Projected File System allows an authorized attacker to elevate privileges locally. |
|
CVE-2025-59516
HIGH 7.8
Missing authentication for critical function in Windows Storage VSP Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2025-59517
HIGH 7.8
Improper access control in Windows Storage VSP Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2025-54100
HIGH 7.8
Improper neutralization of special elements used in a command ('command injection') in Windows PowerShell allows an unauthorized attacker to execute code local… |
|
CVE-2025-62454
HIGH 7.8
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
|
CVE-2025-62571
HIGH 7.8
Windows Installer Elevation of Privilege Vulnerability |
|
CVE-2025-64673
HIGH 7.8
Windows Storage VSP Driver Elevation of Privilege Vulnerability |
|
CVE-2025-64679
HIGH 7.8
Windows DWM Core Library Elevation of Privilege Vulnerability |
|
CVE-2025-64680
HIGH 7.8
Windows DWM Core Library Elevation of Privilege Vulnerability |
|
CVE-2025-59505
HIGH 7.8
Windows Smart Card Reader Elevation of Privilege Vulnerability |
|
CVE-2025-59511
HIGH 7.8
Windows WLAN Service Elevation of Privilege Vulnerability |
|
CVE-2025-59512
HIGH 7.8
Customer Experience Improvement Program (CEIP) Elevation of Privilege Vulnerability |
|
CVE-2025-59514
HIGH 7.8
Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability |
|
CVE-2025-60703
HIGH 7.8
Windows Remote Desktop Services Elevation of Privilege Vulnerability |
|
CVE-2025-60705
HIGH 7.8
Windows Client-Side Caching Elevation of Privilege Vulnerability |
|
CVE-2025-60707
HIGH 7.8
Multimedia Class Scheduler Service (MMCSS) Driver Elevation of Privilege Vulnerability |
|
CVE-2025-60709
HIGH 7.8
Windows Common Log File System Driver Elevation of Privilege Vulnerability |
|
CVE-2025-60713
HIGH 7.8
Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability |
|
CVE-2025-60720
HIGH 7.8
Windows Transport Driver Interface (TDI) Translation Driver Elevation of Privilege Vulnerability |
|
CVE-2025-55697
HIGH 7.8
Heap-based buffer overflow in Azure Local allows an authorized attacker to elevate privileges locally. |
|
CVE-2025-55694
HIGH 7.8
Improper access control in Windows Error Reporting allows an authorized attacker to elevate privileges locally. |
|
CVE-2025-55677
HIGH 7.8
Untrusted pointer dereference in Windows Device Association Broker service allows an authorized attacker to elevate privileges locally. |
|
CVE-2025-24052
HIGH 7.8
Windows Agere Modem Driver Elevation of Privilege Vulnerability |
|
CVE-2025-50152
HIGH 7.8
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2025-50175
HIGH 7.8
Windows Digital Media Elevation of Privilege Vulnerability |
|
CVE-2025-53150
HIGH 7.8
Windows Digital Media Elevation of Privilege Vulnerability |
|
CVE-2025-55328
HIGH 7.8
Windows Hyper-V Elevation of Privilege Vulnerability |
|
CVE-2025-55339
HIGH 7.8
Windows Network Driver Interface Specification (NDIS) Driver Elevation of Privilege Vulnerability |
|
CVE-2025-55680
HIGH 7.8
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
|
CVE-2025-55692
HIGH 7.8
Windows Error Reporting Service Elevation of Privilege Vulnerability |
|
CVE-2025-55696
HIGH 7.8
NtQueryInformation Token function (ntifs.h) Elevation of Privilege Vulnerability |
|
CVE-2025-55701
HIGH 7.8
Windows Authentication Elevation of Privilege Vulnerability |
|
CVE-2025-58714
HIGH 7.8
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
|
CVE-2025-58720
HIGH 7.8
Windows Cryptographic Services Information Disclosure Vulnerability |
|
CVE-2025-58722
HIGH 7.8
Microsoft DWM Core Library Elevation of Privilege Vulnerability |
|
CVE-2025-58728
HIGH 7.8
Windows Bluetooth Service Elevation of Privilege Vulnerability |
|
CVE-2025-59187
HIGH 7.8
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2025-59191
HIGH 7.8
Windows Connected Devices Platform Service Elevation of Privilege Vulnerability |
|
CVE-2025-59192
HIGH 7.8
Storport.sys Driver Elevation of Privilege Vulnerability |
|
CVE-2025-59199
HIGH 7.8
Software Protection Platform (SPP) Elevation of Privilege Vulnerability |
|
CVE-2025-59201
HIGH 7.8
Network Connection Status Indicator (NCSI) Elevation of Privilege Vulnerability |
|
CVE-2025-59207
HIGH 7.8
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2025-59242
HIGH 7.8
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
|
CVE-2025-59254
Exploit
HIGH 7.8
Microsoft DWM Core Library Elevation of Privilege Vulnerability |
|
CVE-2025-59255
HIGH 7.8
Windows DWM Core Library Elevation of Privilege Vulnerability |
|
CVE-2025-59275
HIGH 7.8
Windows Authentication Elevation of Privilege Vulnerability |
|
CVE-2025-59277
HIGH 7.8
Windows Authentication Elevation of Privilege Vulnerability |
|
CVE-2025-59278
HIGH 7.8
Windows Authentication Elevation of Privilege Vulnerability |
|
CVE-2025-59290
HIGH 7.8
Windows Bluetooth Service Elevation of Privilege Vulnerability |
|
CVE-2025-53800
CRITICAL 7.8
Windows Graphics Component Elevation of Privilege Vulnerability |
|
CVE-2025-54091
HIGH 7.8
Windows Hyper-V Elevation of Privilege Vulnerability |
|
CVE-2025-54092
HIGH 7.8
Windows Hyper-V Elevation of Privilege Vulnerability |
|
CVE-2025-54098
HIGH 7.8
Windows Hyper-V Elevation of Privilege Vulnerability |
|
CVE-2025-54102
HIGH 7.8
Windows Connected Devices Platform Service Elevation of Privilege Vulnerability |
|
CVE-2025-54111
HIGH 7.8
Windows UI XAML Phone DatePickerFlyout Elevation of Privilege Vulnerability |
|
CVE-2025-54894
HIGH 7.8
Local Security Authority Subsystem Service Elevation of Privilege Vulnerability |
|
CVE-2025-54895
HIGH 7.8
SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Elevation of Privilege Vulnerability |
|
CVE-2025-54912
HIGH 7.8
Windows BitLocker Elevation of Privilege Vulnerability |
|
CVE-2025-54913
HIGH 7.8
Windows UI XAML Maps MapControlSettings Elevation of Privilege Vulnerability |
|
CVE-2025-54916
HIGH 7.8
Windows NTFS Remote Code Execution Vulnerability |
|
CVE-2025-55224
CRITICAL 7.8
Windows Hyper-V Remote Code Execution Vulnerability |
|
CVE-2025-55228
CRITICAL 7.8
Windows Graphics Component Remote Code Execution Vulnerability |
|
CVE-2025-49761
HIGH 7.8
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2025-50155
HIGH 7.8
Windows Push Notifications Apps Elevation of Privilege Vulnerability |
|
CVE-2025-50168
HIGH 7.8
Win32k Elevation of Privilege Vulnerability |
|
CVE-2025-50170
HIGH 7.8
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
|
CVE-2025-50173
HIGH 7.8
Windows Installer Elevation of Privilege Vulnerability |
|
CVE-2025-50176
CRITICAL 7.8
DirectX Graphics Kernel Remote Code Execution Vulnerability |
|
CVE-2025-53132
HIGH 7.8
Win32k Elevation of Privilege Vulnerability |
|
CVE-2025-53133
HIGH 7.8
Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability |
|
CVE-2025-53141
HIGH 7.8
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
|
CVE-2025-53149
HIGH 7.8
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability |
|
CVE-2025-53151
HIGH 7.8
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2025-53154
HIGH 7.8
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
|
CVE-2025-53155
HIGH 7.8
Windows Hyper-V Elevation of Privilege Vulnerability |
|
CVE-2025-53723
HIGH 7.8
Windows Hyper-V Elevation of Privilege Vulnerability |
|
CVE-2025-53724
HIGH 7.8
Windows Push Notifications Apps Elevation of Privilege Vulnerability |
|
CVE-2025-53725
HIGH 7.8
Windows Push Notifications Apps Elevation of Privilege Vulnerability |
|
CVE-2025-53726
HIGH 7.8
Windows Push Notifications Apps Elevation of Privilege Vulnerability |
|
CVE-2025-53789
HIGH 7.8
Windows StateRepository API Server file Elevation of Privilege Vulnerability |
|
CVE-2025-55230
HIGH 7.8
Windows MBT Transport Driver Elevation of Privilege Vulnerability |
|
CVE-2025-47159
HIGH 7.8
Windows Virtualization-Based Security (VBS) Elevation of Privilege Vulnerability |
|
CVE-2025-47971
HIGH 7.8
Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability |
|
CVE-2025-47973
HIGH 7.8
Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability |
|
CVE-2025-47976
HIGH 7.8
Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability |
|
CVE-2025-47982
HIGH 7.8
Windows Storage VSP Driver Elevation of Privilege Vulnerability |
|
CVE-2025-47985
HIGH 7.8
Windows Event Tracing Elevation of Privilege Vulnerability |
|
CVE-2025-47987
Exploit
HIGH 7.8
Credential Security Support Provider Protocol (CredSSP) Elevation of Privilege Vulnerability |
|
CVE-2025-47991
HIGH 7.8
Windows Input Method Editor (IME) Elevation of Privilege Vulnerability |
|
CVE-2025-47993
HIGH 7.8
Microsoft PC Manager Elevation of Privilege Vulnerability |
|
CVE-2025-47996
HIGH 7.8
Windows MBT Transport Driver Elevation of Privilege Vulnerability |
|
CVE-2025-48000
HIGH 7.8
Windows Connected Devices Platform Service Elevation of Privilege Vulnerability |
|
CVE-2025-48799
HIGH 7.8
Windows Update Service Elevation of Privilege Vulnerability |
|
CVE-2025-48805
HIGH 7.8
Microsoft MPEG-2 Video Extension Remote Code Execution Vulnerability |
|
CVE-2025-48806
HIGH 7.8
Microsoft MPEG-2 Video Extension Remote Code Execution Vulnerability |
|
CVE-2025-48815
HIGH 7.8
Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability |
|
CVE-2025-48816
HIGH 7.8
HID Class Driver Elevation of Privilege Vulnerability |
|
CVE-2025-48820
HIGH 7.8
Windows AppX Deployment Service Elevation of Privilege Vulnerability |
|
CVE-2025-49659
HIGH 7.8
Windows Transport Driver Interface (TDI) Translation Driver Elevation of Privilege Vulnerability |
|
CVE-2025-49660
HIGH 7.8
Windows Event Tracing Elevation of Privilege Vulnerability |
|
CVE-2025-49661
HIGH 7.8
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
|
CVE-2025-49665
HIGH 7.8
Workspace Broker Elevation of Privilege Vulnerability |
|
CVE-2025-49667
HIGH 7.8
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability |
|
CVE-2025-49675
HIGH 7.8
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability |
|
CVE-2025-49679
HIGH 7.8
Windows Shell Elevation of Privilege Vulnerability |
|
CVE-2025-49683
Exploit
HIGH 7.8
Microsoft Virtual Hard Disk Remote Code Execution Vulnerability |
|
CVE-2025-49686
HIGH 7.8
Windows TCP/IP Driver Elevation of Privilege Vulnerability |
|
CVE-2025-49689
HIGH 7.8
Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability |
|
CVE-2025-49693
HIGH 7.8
Microsoft Brokering File System Elevation of Privilege Vulnerability |
|
CVE-2025-49694
HIGH 7.8
Microsoft Brokering File System Elevation of Privilege Vulnerability |
|
CVE-2025-49721
HIGH 7.8
Windows Fast FAT File System Driver Elevation of Privilege Vulnerability |
|
CVE-2025-49725
HIGH 7.8
Windows Notification Elevation of Privilege Vulnerability |
|
CVE-2025-49726
HIGH 7.8
Windows Notification Elevation of Privilege Vulnerability |
|
CVE-2025-49730
Exploit
HIGH 7.8
Microsoft Windows QoS Scheduler Driver Elevation of Privilege Vulnerability |
|
CVE-2025-49732
HIGH 7.8
Windows Graphics Component Elevation of Privilege Vulnerability |
|
CVE-2025-49733
HIGH 7.8
Win32k Elevation of Privilege Vulnerability |
|
CVE-2025-49742
HIGH 7.8
Windows Graphics Component Remote Code Execution Vulnerability |
|
CVE-2025-32712
HIGH 7.8
Win32k Elevation of Privilege Vulnerability |
|
CVE-2025-32713
HIGH 7.8
Windows Common Log File System Driver Elevation of Privilege Vulnerability |
|
CVE-2025-32714
HIGH 7.8
Windows Installer Elevation of Privilege Vulnerability |
|
CVE-2025-32718
HIGH 7.8
Windows SMB Client Elevation of Privilege Vulnerability |
|
CVE-2025-33075
HIGH 7.8
Windows Installer Elevation of Privilege Vulnerability |
|
CVE-2025-47955
HIGH 7.8
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability |
|
CVE-2025-30388
HIGH 7.8
Heap-based buffer overflow in Windows Win32K - GRFX allows an unauthorized attacker to execute code locally. |
|
CVE-2025-24063
HIGH 7.8
Kernel Streaming Service Driver Elevation of Privilege Vulnerability |
|
CVE-2025-29970
HIGH 7.8
Microsoft Brokering File System Elevation of Privilege Vulnerability |
|
CVE-2025-30385
HIGH 7.8
Windows Common Log File System Driver Elevation of Privilege Vulnerability |
|
CVE-2025-21204
HIGH 7.8
Windows Process Activation Elevation of Privilege Vulnerability |
|
CVE-2025-24058
HIGH 7.8
Windows DWM Core Library Elevation of Privilege Vulnerability |
|
CVE-2025-24060
HIGH 7.8
Microsoft DWM Core Library Elevation of Privilege Vulnerability |
|
CVE-2025-24062
HIGH 7.8
Microsoft DWM Core Library Elevation of Privilege Vulnerability |
|
CVE-2025-24073
HIGH 7.8
Microsoft DWM Core Library Elevation of Privilege Vulnerability |
|
CVE-2025-24074
HIGH 7.8
Microsoft DWM Core Library Elevation of Privilege Vulnerability |
|
CVE-2025-26639
HIGH 7.8
Windows USB Print Driver Elevation of Privilege Vulnerability |
|
CVE-2025-26648
HIGH 7.8
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2025-26666
HIGH 7.8
Windows Media Remote Code Execution Vulnerability |
|
CVE-2025-26674
HIGH 7.8
Windows Media Remote Code Execution Vulnerability |
|
CVE-2025-26675
HIGH 7.8
Windows Subsystem for Linux Elevation of Privilege Vulnerability |
|
CVE-2025-26679
HIGH 7.8
RPC Endpoint Mapper Service Elevation of Privilege Vulnerability |
|
CVE-2025-26688
HIGH 7.8
Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability |
|
CVE-2025-27476
HIGH 7.8
Windows Digital Media Elevation of Privilege Vulnerability |
|
CVE-2025-27490
HIGH 7.8
Windows Bluetooth Service Elevation of Privilege Vulnerability |
|
CVE-2025-27727
HIGH 7.8
Windows Installer Elevation of Privilege Vulnerability |
|
CVE-2025-27728
HIGH 7.8
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability |
|
CVE-2025-27729
HIGH 7.8
Windows Shell Remote Code Execution Vulnerability |
|
CVE-2025-27730
HIGH 7.8
Windows Digital Media Elevation of Privilege Vulnerability |
|
CVE-2025-27731
HIGH 7.8
Microsoft OpenSSH for Windows Elevation of Privilege Vulnerability |
|
CVE-2025-27739
HIGH 7.8
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2025-29811
HIGH 7.8
Windows Mobile Broadband Driver Elevation of Privilege Vulnerability |
|
CVE-2025-29812
HIGH 7.8
DirectX Graphics Kernel Elevation of Privilege Vulnerability |
|
CVE-2025-21180
HIGH 7.8
Windows exFAT File System Remote Code Execution Vulnerability |
|
CVE-2025-24044
HIGH 7.8
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability |
|
CVE-2025-24046
HIGH 7.8
Kernel Streaming Service Driver Elevation of Privilege Vulnerability |
|
CVE-2025-24048
HIGH 7.8
Windows Hyper-V Elevation of Privilege Vulnerability |
|
CVE-2025-24050
HIGH 7.8
Windows Hyper-V Elevation of Privilege Vulnerability |
|
CVE-2025-24059
HIGH 7.8
Windows Common Log File System Driver Elevation of Privilege Vulnerability |
|
CVE-2025-24061
HIGH 7.8
Windows Mark of the Web Security Feature Bypass Vulnerability |
|
CVE-2025-24066
HIGH 7.8
Kernel Streaming Service Driver Elevation of Privilege Vulnerability |
|
CVE-2025-24067
HIGH 7.8
Kernel Streaming Service Driver Elevation of Privilege Vulnerability |
|
CVE-2025-24072
HIGH 7.8
Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability |
|
CVE-2025-24995
HIGH 7.8
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability |
|
CVE-2025-21358
HIGH 7.8
Windows Core Messaging Elevation of Privileges Vulnerability |
|
CVE-2025-21359
HIGH 7.8
Windows Kernel Security Feature Bypass Vulnerability |
|
CVE-2025-21367
HIGH 7.8
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability |
|
CVE-2025-21373
HIGH 7.8
Windows Installer Elevation of Privilege Vulnerability |
|
CVE-2025-21375
HIGH 7.8
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability |
|
CVE-2025-21420
HIGH 7.8
Windows Disk Cleanup Tool Elevation of Privilege Vulnerability |
|
CVE-2025-21338
HIGH 7.8
GDI+ Remote Code Execution Vulnerability |
|
CVE-2025-21234
HIGH 7.8
Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability |
|
CVE-2025-21235
HIGH 7.8
Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability |
|
CVE-2025-21275
HIGH 7.8
Windows App Package Installer Elevation of Privilege Vulnerability |
|
CVE-2025-21281
HIGH 7.8
Microsoft COM for Windows Elevation of Privilege Vulnerability |
|
CVE-2025-21287
HIGH 7.8
Windows Installer Elevation of Privilege Vulnerability |
|
CVE-2025-21315
HIGH 7.8
Microsoft Brokering File System Elevation of Privilege Vulnerability |
|
CVE-2025-21325
HIGH 7.8
Windows Secure Kernel Mode Elevation of Privilege Vulnerability |
|
CVE-2025-21326
HIGH 7.8
Internet Explorer Remote Code Execution Vulnerability |
|
CVE-2025-21372
HIGH 7.8
Microsoft Brokering File System Elevation of Privilege Vulnerability |
|
CVE-2025-21378
HIGH 7.8
Windows CSC Service Elevation of Privilege Vulnerability |
|
CVE-2025-21382
HIGH 7.8
Windows Graphics Component Elevation of Privilege Vulnerability |
|
CVE-2024-49114
HIGH 7.8
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
|
CVE-2024-49072
HIGH 7.8
Windows Task Scheduler Elevation of Privilege Vulnerability |
|
CVE-2024-49076
HIGH 7.8
Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability |
|
CVE-2024-49079
HIGH 7.8
Input Method Editor (IME) Remote Code Execution Vulnerability |
|
CVE-2024-49088
HIGH 7.8
Windows Common Log File System Driver Elevation of Privilege Vulnerability |
|
CVE-2024-49090
HIGH 7.8
Windows Common Log File System Driver Elevation of Privilege Vulnerability |
|
CVE-2024-49019
HIGH 7.8
Active Directory Certificate Services Elevation of Privilege Vulnerability |
|
CVE-2024-43623
HIGH 7.8
Windows NT OS Kernel Elevation of Privilege Vulnerability |
|
CVE-2024-43626
HIGH 7.8
Windows Telephony Service Elevation of Privilege Vulnerability |
|
CVE-2024-43629
HIGH 7.8
Windows DWM Core Library Elevation of Privilege Vulnerability |
|
CVE-2024-43630
HIGH 7.8
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2024-43636
HIGH 7.8
Win32k Elevation of Privilege Vulnerability |
|
CVE-2024-43641
HIGH 7.8
Windows Registry Elevation of Privilege Vulnerability |
|
CVE-2024-43644
HIGH 7.8
Windows Client-Side Caching Elevation of Privilege Vulnerability |
|
CVE-2024-49046
HIGH 7.8
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability |
|
CVE-2024-43583
HIGH 7.8
Winlogon Elevation of Privilege Vulnerability |
|
CVE-2026-20852
HIGH 7.7
Incorrect privilege assignment in Windows Hello allows an unauthorized attacker to perform tampering locally. |
|
CVE-2026-20804
HIGH 7.7
Incorrect privilege assignment in Windows Hello allows an unauthorized attacker to perform tampering locally. |
|
CVE-2025-55698
HIGH 7.7
Null pointer dereference in Windows DirectX allows an authorized attacker to deny service over a network. |
|
CVE-2025-53139
HIGH 7.7
Windows Hello Security Feature Bypass Vulnerability |
|
CVE-2025-59200
HIGH 7.7
Data Sharing Service Spoofing Vulnerability |
|
CVE-2025-6965
Exploit
HIGH 7.7
There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead… |
|
CVE-2025-29833
CRITICAL 7.7
Microsoft Virtual Machine Bus (VMBus) Remote Code Execution Vulnerability |
|
CVE-2026-97002
HIGH 7.5
Out-of-bounds read in Windows VMSwitch allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96972
HIGH 7.5
Out-of-bounds read in Windows DNS allows an unauthorized attacker to disclose information over a network. |
|
CVE-2026-96176
HIGH 7.5
Missing release of memory after effective lifetime in Windows DNS allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-96134
HIGH 7.5
Uncontrolled resource consumption in Windows DHCP Server allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-96077
HIGH 7.5
Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-88236
HIGH 7.5
Null pointer dereference in Microsoft QUIC allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-83684
HIGH 7.5
Buffer over-read in Windows iSCSI Target Service allows an unauthorized attacker to disclose information over a network. |
|
CVE-2026-70240
HIGH 7.5
Missing release of memory after effective lifetime in Windows Kerberos allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-105512
HIGH 7.5
Microsoft QUIC Denial of Service Vulnerability |
|
CVE-2026-105515
HIGH 7.5
Windows Message Queuing Denial of Service Vulnerability |
|
CVE-2026-105551
HIGH 7.5
Windows NetBIOS Elevation of Privilege Vulnerability |
|
CVE-2026-105558
HIGH 7.5
Windows Deployment Services Remote Code Execution Vulnerability |
|
CVE-2026-105561
HIGH 7.5
Windows Secure Socket Tunneling Protocol (SSTP) Denial of Service Vulnerability |
|
CVE-2026-105578
HIGH 7.5
Microsoft JScript Remote Code Execution Vulnerability |
|
CVE-2026-105579
HIGH 7.5
Windows DNS Information Disclosure Vulnerability |
|
CVE-2026-108421
HIGH 7.5
Windows File Server Resource Management Service Elevation of Privilege Vulnerability |
|
CVE-2026-112793
HIGH 7.5
Windows Event Collector Service Elevation of Privilege Vulnerability |
|
CVE-2026-112966
HIGH 7.5
Windows Security Account Manager Denial of Service Vulnerability |
|
CVE-2026-112972
HIGH 7.5
Windows SMBv3 Server Remote Code Execution Vulnerability |
|
CVE-2026-112985
HIGH 7.5
Windows JScript Remote Code Execution Vulnerability |
|
CVE-2026-113749
CRITICAL 7.5
Microsoft Windows Codecs Library Remote Code Execution Vulnerability |
|
CVE-2026-113752
CRITICAL 7.5
Windows Print Spooler Components Remote Code Execution Vulnerability |
|
CVE-2026-113768
HIGH 7.5
Windows Performance Counters Remote Code Execution Vulnerability |
|
CVE-2026-113825
CRITICAL 7.5
Windows SMB Server Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability |
|
CVE-2026-113855
HIGH 7.5
Windows DNS Remote Code Execution Vulnerability |
|
CVE-2026-113859
CRITICAL 7.5
Windows TCP/IP Remote Code Execution Vulnerability |
|
CVE-2026-113861
CRITICAL 7.5
Windows Hyper-V Elevation of Privilege Vulnerability |
|
CVE-2026-116698
HIGH 7.5
Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability |
|
CVE-2026-116706
HIGH 7.5
Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability |
|
CVE-2026-118145
CRITICAL 7.5
Windows Function Discovery SSDP Provider Remote Code Execution Vulnerability |
|
CVE-2026-118148
CRITICAL 7.5
Active Directory Domain Services Elevation of Privilege Vulnerability |
|
CVE-2026-118735
HIGH 7.5
Active Directory Domain Services Elevation of Privilege Vulnerability |
|
CVE-2026-119837
HIGH 7.5
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability |
|
CVE-2026-119858
HIGH 7.5
Remote Desktop Client Remote Code Execution Vulnerability |
|
CVE-2026-119880
HIGH 7.5
Microsoft XPS Document Converter Remote Code Execution Vulnerability |
|
CVE-2026-119932
HIGH 7.5
Windows Remote Desktop Denial of Service Vulnerability |
|
CVE-2026-119938
HIGH 7.5
Windows Shell Remote Code Execution Vulnerability |
|
CVE-2026-119944
HIGH 7.5
Windows Mobile Device Management Elevation of Privilege Vulnerability |
|
CVE-2026-119947
CRITICAL 7.5
Windows Hyper-V Elevation of Privilege Vulnerability |
|
CVE-2026-119948
HIGH 7.5
Windows Active Directory Remote Code Execution Vulnerability |
|
CVE-2026-119960
CRITICAL 7.5
Windows Hyper-V Elevation of Privilege Vulnerability |
|
CVE-2026-119966
CRITICAL 7.5
Windows Graphics Kernel Elevation of Privilege Vulnerability |
|
CVE-2026-121680
HIGH 7.5
Windows NTLM Spoofing Vulnerability |
|
CVE-2026-122163
HIGH 7.5
Windows Image Acquisition Remote Code Execution Vulnerability |
|
CVE-2026-122169
HIGH 7.5
Windows IKE Extension Spoofing Vulnerability |
|
CVE-2026-122177
HIGH 7.5
Windows iSCSI Elevation of Privilege Vulnerability |
|
CVE-2026-125134
CRITICAL 7.5
Windows Function Discovery Resource Publication Remote Code Execution Vulnerability |
|
CVE-2026-80094
HIGH 7.5
Remote Desktop Gateway Service Elevation of Privilege Vulnerability |
|
CVE-2026-88212
HIGH 7.5
Windows Network Address Translation (NAT) Remote Code Execution Vulnerability |
|
CVE-2026-88216
HIGH 7.5
Windows DHCP Server Remote Code Execution Vulnerability |
|
CVE-2026-88244
HIGH 7.5
Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability |
|
CVE-2026-95964
HIGH 7.5
Remote Desktop Client Remote Code Execution Vulnerability |
|
CVE-2026-96081
HIGH 7.5
Windows Rich Text Edit Control Remote Code Execution Vulnerability |
|
CVE-2026-96993
HIGH 7.5
Windows Performance Monitor Remote Code Execution Vulnerability |
|
CVE-2026-97830
HIGH 7.5
Double free in Windows Internet Information Services allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-97788
HIGH 7.5
Observable discrepancy in Active Directory Federation Services (AD FS) allows an unauthorized attacker to disclose information over a network. |
|
CVE-2026-97789
HIGH 7.5
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-96945
HIGH 7.5
Uncaught exception in Windows Failover Cluster allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-96866
HIGH 7.5
Out-of-bounds read in Network Device Enrollment Service (NDES) allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-96861
HIGH 7.5
Out-of-bounds read in Network Device Enrollment Service (NDES) allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-96325
HIGH 7.5
Missing reference to active allocated resource in Windows SMB Server allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-96245
HIGH 7.5
Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network. |
|
CVE-2026-96246
HIGH 7.5
Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to disclose information over a network. |
|
CVE-2026-96248
HIGH 7.5
Stack-based buffer overflow in Windows Host Guardian Service allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-96071
HIGH 7.5
Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-87716
HIGH 7.5
Heap-based buffer overflow in Windows Storage Spaces Controller allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-87713
HIGH 7.5
Use after free in Windows Bluetooth Port Driver allows an unauthorized attacker to elevate privileges over an adjacent network. |
|
CVE-2026-85808
HIGH 7.5
Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-85811
HIGH 7.5
Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over an adjacent network. |
|
CVE-2026-85353
HIGH 7.5
Out-of-bounds read in Windows Print Spooler Components allows an unauthorized attacker to disclose information over a network. |
|
CVE-2026-85334
HIGH 7.5
Out-of-bounds read in Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose information over a network. |
|
CVE-2026-85319
HIGH 7.5
Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a net… |
|
CVE-2026-85321
HIGH 7.5
Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a net… |
|
CVE-2026-85322
HIGH 7.5
Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network. |
|
CVE-2026-85324
HIGH 7.5
Memory allocation with excessive size value in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-84017
HIGH 7.5
Null pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-83860
HIGH 7.5
Stack-based buffer overflow in Windows GDI allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-83855
HIGH 7.5
Integer underflow (wrap or wraparound) in Windows WLAN Service allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-83856
HIGH 7.5
Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-83843
HIGH 7.5
Out-of-bounds read in Windows Internet Key Exchange (IKE) Protocol allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-83795
HIGH 7.5
Heap-based buffer overflow in Windows IKE Extension allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-83754
HIGH 7.5
Heap-based buffer overflow in OpenSSH for Windows allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-83739
HIGH 7.5
Use after free in Windows Bluetooth Service allows an unauthorized attacker to execute code over an adjacent network. |
|
CVE-2026-83677
HIGH 7.5
Missing release of memory after effective lifetime in Windows DHCP Client allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-83665
HIGH 7.5
Null pointer dereference in Windows DHCP Server allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-83670
HIGH 7.5
Out-of-bounds read in Function Discovery Service (fdwsd.dll) allows an unauthorized attacker to disclose information over a network. |
|
CVE-2026-83655
HIGH 7.5
Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-83645
HIGH 7.5
Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a net… |
|
CVE-2026-83647
HIGH 7.5
Out-of-bounds read in Active Directory Domain Services allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-83635
HIGH 7.5
Out-of-bounds read in DNS Server allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-83516
HIGH 7.5
Out-of-bounds read in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-70207
HIGH 7.5
Heap-based buffer overflow in Network Policy Server (NPS) allows an authorized attacker to execute code over a network. |
|
CVE-2026-70163
HIGH 7.5
Allocation of resources without limits or throttling in OpenSSH for Windows allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-70155
HIGH 7.5
Missing release of memory after effective lifetime in Windows DNS allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-70133
HIGH 7.5
Allocation of resources without limits or throttling in Windows SMB Server allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-70095
HIGH 7.5
Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-70079
HIGH 7.5
Improper enforcement of behavioral workflow in Windows DNS allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-70082
HIGH 7.5
Uncaught exception in Windows DNS allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-70058
HIGH 7.5
Out-of-bounds write in Windows DHCP Server allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-70031
HIGH 7.5
Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-70033
HIGH 7.5
Missing release of memory after effective lifetime in Remote Desktop Gateway Service allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-70012
HIGH 7.5
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-70014
HIGH 7.5
Use after free in Windows Cryptographic Services allows an authorized attacker to execute code over a network. |
|
CVE-2026-70004
HIGH 7.5
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-70006
HIGH 7.5
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-69992
HIGH 7.5
Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-69994
HIGH 7.5
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-69995
HIGH 7.5
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-69996
HIGH 7.5
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-69997
HIGH 7.5
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-69998
HIGH 7.5
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-69984
HIGH 7.5
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-69986
HIGH 7.5
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-69987
HIGH 7.5
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-69988
HIGH 7.5
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-69991
HIGH 7.5
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-69976
HIGH 7.5
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-69789
HIGH 7.5
Heap-based buffer overflow in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over an adjacent network. |
|
CVE-2026-69577
HIGH 7.5
Out-of-bounds read in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to disclose information over a … |
|
CVE-2026-108131
HIGH 7.5
No cwe for this issue in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network. |
|
CVE-2026-105723
HIGH 7.5
Untrusted pointer dereference in Windows Distributed File System (DFS) allows an unauthorized attacker to elevate privileges over a network. |
|
CVE-2026-105009
HIGH 7.5
Incorrect default permissions in Windows Server Update Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-103569
HIGH 7.5
Out-of-bounds read in Windows IKE Extension allows an unauthorized attacker to disclose information over a network. |
|
CVE-2026-103577
HIGH 7.5
Insecure default variable initialization in Microsoft QUIC allows an unauthorized attacker to bypass a security feature over a network. |
|
CVE-2026-103558
HIGH 7.5
Deadlock in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-102192
HIGH 7.5
Integer underflow (wrap or wraparound) in Windows Failover Cluster allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-69454
HIGH 7.5
Microsoft Azure Attestation service and Device Health Attestation Service Information Disclosure Vulnerability |
|
CVE-2026-84001
HIGH 7.5
Out-of-bounds read in Windows Key Distribution Center allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-83989
HIGH 7.5
Out-of-bounds read in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-81355
HIGH 7.5
Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to execute code locally. |
|
CVE-2026-78446
HIGH 7.5
Use after free in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network. |
|
CVE-2026-77893
HIGH 7.5
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-77895
HIGH 7.5
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-77886
HIGH 7.5
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-77888
HIGH 7.5
Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-77889
HIGH 7.5
Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-77890
HIGH 7.5
Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-77501
HIGH 7.5
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-77502
HIGH 7.5
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-77498
HIGH 7.5
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-77499
HIGH 7.5
Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-77494
HIGH 7.5
Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-73017
HIGH 7.5
Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to execute code locally. |
|
CVE-2026-72989
HIGH 7.5
Use of uninitialized resource in Windows Failover Cluster allows an unauthorized attacker to disclose information over a network. |
|
CVE-2026-72949
HIGH 7.5
Null pointer dereference in Windows SMB Server Network Transport Driver (srvnet.sys) allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-72954
HIGH 7.5
Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network. |
|
CVE-2026-72943
HIGH 7.5
Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network. |
|
CVE-2026-72928
HIGH 7.5
Use after free in Windows DNS allows an authorized attacker to execute code over a network. |
|
CVE-2026-72932
HIGH 7.5
Buffer over-read in Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose information over a network. |
|
CVE-2026-71330
HIGH 7.5
Exposure of sensitive system information to an unauthorized control sphere in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to dis… |
|
CVE-2026-70587
HIGH 7.5
Improper null termination in Windows Remote Desktop Protocol allows an unauthorized attacker to disclose information over a network. |
|
CVE-2026-70570
HIGH 7.5
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine |
|
CVE-2026-70065
HIGH 7.5
Missing release of memory after effective lifetime in Windows DHCP Server allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-69881
HIGH 7.5
Null pointer dereference in Windows IKE Extension allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-69890
HIGH 7.5
Use after free in Windows Virtual Trusted Platform Module allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69852
HIGH 7.5
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine |
|
CVE-2026-69809
HIGH 7.5
Missing release of memory after effective lifetime in Active Directory Domain Services allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-69793
HIGH 7.5
Improper validation of consistency within input in Windows TCP/IP allows an unauthorized attacker to bypass a security feature over a network. |
|
CVE-2026-69760
HIGH 7.5
Out-of-bounds read in Windows Kerberos allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-69744
HIGH 7.5
Null pointer dereference in Windows Kerberos allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-69631
HIGH 7.5
Integer overflow or wraparound in Windows DNS allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-69607
HIGH 7.5
Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-69599
HIGH 7.5
Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network. |
|
CVE-2026-69588
HIGH 7.5
Missing release of memory after effective lifetime in Windows TCP/IP allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-69587
HIGH 7.5
Null pointer dereference in Windows IKE Extension allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-69539
HIGH 7.5
Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network. |
|
CVE-2026-69514
HIGH 7.5
Heap-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to execute code over a network. |
|
CVE-2026-69443
HIGH 7.5
Out-of-bounds read in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to disclose information over a … |
|
CVE-2026-69428
HIGH 7.5
Out-of-bounds read in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-69429
HIGH 7.5
Heap-based buffer overflow in Windows IKE Extension allows an authorized attacker to execute code over a network. |
|
CVE-2026-69397
HIGH 7.5
Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-69342
HIGH 7.5
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-69329
HIGH 7.5
Out-of-bounds read in BranchCache allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-68887
HIGH 7.5
Out-of-bounds read in Windows Message Queuing Queue Manager allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-62813
HIGH 7.5
Use after free in Active Directory Domain Services allows an authorized attacker to execute code over a network. |
|
CVE-2026-62759
HIGH 7.5
Authentication bypass by spoofing in Windows Netlogon allows an unauthorized attacker to perform spoofing over an adjacent network. |
|
CVE-2026-65681
HIGH 7.5
Null pointer dereference in Windows iSCSI Target Service allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-62787
HIGH 7.5
Use after free in Windows DNS allows an authorized attacker to execute code over a network. |
|
CVE-2026-61363
HIGH 7.5
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-61352
HIGH 7.5
Concurrent execution using shared resource with improper synchronization ('race condition') in Remote Desktop Client allows an unauthorized attacker to execute… |
|
CVE-2026-59132
HIGH 7.5
Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-59134
HIGH 7.5
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-54113
HIGH 7.5
Allocation of resources without limits or throttling in Windows Kernel allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-58627
HIGH 7.5
Uncontrolled resource consumption in Windows DHCP Server allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-58531
HIGH 7.5
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB allows an authorized attacker to elevate privileges … |
|
CVE-2026-57089
HIGH 7.5
Use after free in Windows SMB Server Network Transport Driver (srvnet.sys) allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-56648
HIGH 7.5
Time-of-check time-of-use (toctou) race condition in Windows Network File System allows an authorized attacker to elevate privileges over a network. |
|
CVE-2026-50685
HIGH 7.5
Double free in Windows DHCP Server allows an authorized attacker to execute code over a network. |
|
CVE-2026-50647
HIGH 7.5
Loop with unreachable exit condition ('infinite loop') in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a n… |
|
CVE-2026-50505
HIGH 7.5
Use after free in Windows Message Queuing allows an authorized attacker to execute code over a network. |
|
CVE-2026-50496
HIGH 7.5
Out-of-bounds read in Windows Network Policy Server SNMP allows an unauthorized attacker to disclose information over a network. |
|
CVE-2026-50500
HIGH 7.5
Use after free in Windows Netlogon allows an authorized attacker to elevate privileges over a network. |
|
CVE-2026-50470
HIGH 7.5
Out-of-bounds read in Windows Network Policy Server SNMP allows an unauthorized attacker to disclose information over a network. |
|
CVE-2026-50463
HIGH 7.5
Out-of-bounds read in Windows Kernel allows an unauthorized attacker to disclose information over a network. |
|
CVE-2026-50424
HIGH 7.5
Untrusted pointer dereference in Windows Domain Controller allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-50414
HIGH 7.5
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Media allows an authorized attacker to elevate privilege… |
|
CVE-2026-50411
HIGH 7.5
Stack-based buffer overflow in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-50368
HIGH 7.5
Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-50355
HIGH 7.5
Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-50330
HIGH 7.5
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to elevate privileges over a network. |
|
CVE-2026-50328
HIGH 7.5
Uncaught exception in Windows Server Update Service allows an unauthorized attacker to perform tampering over a network. |
|
CVE-2026-50304
HIGH 7.5
Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-54983
HIGH 7.5
Stack-based buffer overflow in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-54119
HIGH 7.5
Loop with unreachable exit condition ('infinite loop') in Windows Active Directory allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-50695
HIGH 7.5
Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-50696
HIGH 7.5
Heap-based buffer overflow in Windows Internet Key Exchange (IKE) Protocol allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-49787
HIGH 7.5
Allocation of resources without limits or throttling in Windows HTTP.sys allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-49788
HIGH 7.5
Allocation of resources without limits or throttling in HTTP/2 allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-49181
HIGH 7.5
Integer underflow (wrap or wraparound) in Windows DHCP Client allows an unauthorized attacker to elevate privileges over a network. |
|
CVE-2026-49171
HIGH 7.5
Use after free in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-40378
HIGH 7.5
Memory allocation with excessive size value in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to deny service over … |
|
CVE-2026-49160
HIGH 7.5
Uncontrolled resource consumption in HTTP/2 allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-48563
HIGH 7.5
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-47654
HIGH 7.5
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-45639
HIGH 7.5
Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network. |
|
CVE-2026-42992
HIGH 7.5
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-42993
HIGH 7.5
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-44799
HIGH 7.5
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-44801
HIGH 7.5
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-42913
HIGH 7.5
Concurrent execution using shared resource with improper synchronization ('race condition') in Remote Desktop Client allows an unauthorized attacker to execute… |
|
CVE-2026-42908
HIGH 7.5
Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network. |
|
CVE-2026-42909
HIGH 7.5
Concurrent execution using shared resource with improper synchronization ('race condition') in Remote Desktop Client allows an unauthorized attacker to execute… |
|
CVE-2026-32161
CRITICAL 7.5
Windows Native WiFi Miniport Driver Remote Code Execution Vulnerability |
|
CVE-2026-35424
HIGH 7.5
Internet Key Exchange (IKE) Protocol Denial of Service Vulnerability |
|
CVE-2026-40405
HIGH 7.5
Windows TCP/IP Denial of Service Vulnerability |
|
CVE-2026-40406
HIGH 7.5
Windows TCP/IP Information Disclosure Vulnerability |
|
CVE-2026-33096
HIGH 7.5
Out-of-bounds read in Windows HTTP.sys allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-32071
HIGH 7.5
Null pointer dereference in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-26154
HIGH 7.5
Improper input validation in Windows Server Update Service allows an unauthorized attacker to perform tampering over a network. |
|
CVE-2026-23674
HIGH 7.5
MapUrlToZone Security Feature Bypass Vulnerability |
|
CVE-2026-25181
HIGH 7.5
GDI+ Information Disclosure Vulnerability |
|
CVE-2026-20846
HIGH 7.5
Buffer over-read in Windows GDI+ allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-21243
HIGH 7.5
Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability |
|
CVE-2026-20934
HIGH 7.5
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB Server allows an authorized attacker to elevate priv… |
|
CVE-2026-20926
HIGH 7.5
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB Server allows an authorized attacker to elevate priv… |
|
CVE-2026-20919
HIGH 7.5
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB Server allows an authorized attacker to elevate priv… |
|
CVE-2026-20921
HIGH 7.5
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB Server allows an authorized attacker to elevate priv… |
|
CVE-2026-20875
HIGH 7.5
Null pointer dereference in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-20854
HIGH 7.5
Use after free in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to execute code over a network. |
|
CVE-2026-20848
HIGH 7.5
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB Server allows an authorized attacker to elevate priv… |
|
CVE-2026-20849
HIGH 7.5
Reliance on untrusted inputs in a security decision in Windows Kerberos allows an authorized attacker to elevate privileges over a network. |
|
CVE-2026-0386
HIGH 7.5
Windows Deployment Services Remote Code Execution Vulnerability |
|
CVE-2025-64658
HIGH 7.5
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Shell allows an authorized attacker to elevate privilege… |
|
CVE-2025-60704
HIGH 7.5
Windows Kerberos Elevation of Privilege Vulnerability |
|
CVE-2025-55326
HIGH 7.5
Windows Connected Devices Platform Service (Cdpsvc) Remote Code Execution Vulnerability |
|
CVE-2025-58726
HIGH 7.5
Windows SMB Server Elevation of Privilege Vulnerability |
|
CVE-2025-59502
MEDIUM 7.5
Remote Procedure Call Denial of Service Vulnerability |
|
CVE-2025-53805
HIGH 7.5
HTTP.sys Denial of Service Vulnerability |
|
CVE-2025-54919
HIGH 7.5
Windows Graphics Component Remote Code Execution Vulnerability |
|
CVE-2025-50169
HIGH 7.5
Windows SMB Remote Code Execution Vulnerability |
|
CVE-2025-53722
HIGH 7.5
Windows Remote Desktop Services Denial of Service Vulnerability |
|
CVE-2025-55231
HIGH 7.5
Windows Storage-based Management Service Remote Code Execution Vulnerability |
|
CVE-2025-47984
HIGH 7.5
Windows GDI Information Disclosure Vulnerability |
|
CVE-2025-48814
HIGH 7.5
Remote Desktop Licensing Service Security Feature Bypass Vulnerability |
|
CVE-2025-32724
HIGH 7.5
Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability |
|
CVE-2025-32725
HIGH 7.5
DHCP Server Service Denial of Service Vulnerability |
|
CVE-2025-33050
HIGH 7.5
DHCP Server Service Denial of Service Vulnerability |
|
CVE-2025-33056
HIGH 7.5
Windows Local Security Authority (LSA) Denial of Service Vulnerability |
|
CVE-2025-33068
HIGH 7.5
Windows Standards-Based Storage Management Service Denial of Service Vulnerability |
|
CVE-2025-26677
HIGH 7.5
Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability |
|
CVE-2025-29831
HIGH 7.5
Windows Remote Desktop Services Remote Code Execution Vulnerability |
|
CVE-2025-29842
HIGH 7.5
UrlMon Security Feature Bypass Vulnerability |
|
CVE-2025-29969
HIGH 7.5
MS-EVEN RPC Remote Code Execution Vulnerability |
|
CVE-2025-26687
HIGH 7.5
Use after free in Windows Win32K - GRFX allows an unauthorized attacker to elevate privileges over a network. |
|
CVE-2025-21174
HIGH 7.5
Windows Standards-Based Storage Management Service Denial of Service Vulnerability |
|
CVE-2025-26641
HIGH 7.5
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability |
|
CVE-2025-26652
HIGH 7.5
Windows Standards-Based Storage Management Service Denial of Service Vulnerability |
|
CVE-2025-26668
HIGH 7.5
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2025-26673
HIGH 7.5
Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability |
|
CVE-2025-26680
HIGH 7.5
Windows Standards-Based Storage Management Service Denial of Service Vulnerability |
|
CVE-2025-26686
CRITICAL 7.5
Windows TCP/IP Remote Code Execution Vulnerability |
|
CVE-2025-27469
HIGH 7.5
Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability |
|
CVE-2025-27470
HIGH 7.5
Windows Standards-Based Storage Management Service Denial of Service Vulnerability |
|
CVE-2025-27473
HIGH 7.5
HTTP.sys Denial of Service Vulnerability |
|
CVE-2025-27479
HIGH 7.5
Kerberos Key Distribution Proxy Service Denial of Service Vulnerability |
|
CVE-2025-27484
HIGH 7.5
Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability |
|
CVE-2025-27485
HIGH 7.5
Windows Standards-Based Storage Management Service Denial of Service Vulnerability |
|
CVE-2025-27486
HIGH 7.5
Windows Standards-Based Storage Management Service Denial of Service Vulnerability |
|
CVE-2025-29810
HIGH 7.5
Active Directory Domain Services Elevation of Privilege Vulnerability |
|
CVE-2025-26634
HIGH 7.5
Windows Core Messaging Elevation of Privileges Vulnerability |
|
CVE-2025-21181
HIGH 7.5
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability |
|
CVE-2025-21351
HIGH 7.5
Windows Active Directory Domain Services API Denial of Service Vulnerability |
|
CVE-2025-21207
HIGH 7.5
Windows Connected Devices Platform Service (Cdpsvc) Denial of Service Vulnerability |
|
CVE-2025-21218
HIGH 7.5
Windows Kerberos Denial of Service Vulnerability |
|
CVE-2025-21220
HIGH 7.5
Microsoft Message Queuing Information Disclosure Vulnerability |
|
CVE-2025-21230
HIGH 7.5
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability |
|
CVE-2025-21231
HIGH 7.5
IP Helper Denial of Service Vulnerability |
|
CVE-2025-21251
HIGH 7.5
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability |
|
CVE-2025-21270
HIGH 7.5
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability |
|
CVE-2025-21276
HIGH 7.5
Windows MapUrlToZone Denial of Service Vulnerability |
|
CVE-2025-21277
HIGH 7.5
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability |
|
CVE-2025-21285
HIGH 7.5
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability |
|
CVE-2025-21289
HIGH 7.5
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability |
|
CVE-2025-21290
HIGH 7.5
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability |
|
CVE-2025-21296
CRITICAL 7.5
BranchCache Remote Code Execution Vulnerability |
|
CVE-2025-21300
HIGH 7.5
Windows Universal Plug and Play (UPnP) Device Host Denial of Service Vulnerability |
|
CVE-2025-21330
HIGH 7.5
Windows Remote Desktop Services Denial of Service Vulnerability |
|
CVE-2025-21389
HIGH 7.5
Windows Universal Plug and Play (UPnP) Device Host Denial of Service Vulnerability |
|
CVE-2024-49113
HIGH 7.5
Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability |
|
CVE-2024-49075
HIGH 7.5
Windows Remote Desktop Services Denial of Service Vulnerability |
|
CVE-2024-49096
HIGH 7.5
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability |
|
CVE-2024-49121
HIGH 7.5
Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability |
|
CVE-2024-49129
HIGH 7.5
Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability |
|
CVE-2024-43450
HIGH 7.5
Windows DNS Spoofing Vulnerability |
|
CVE-2024-43452
HIGH 7.5
Windows Registry Elevation of Privilege Vulnerability |
|
CVE-2024-43642
HIGH 7.5
Windows SMB Denial of Service Vulnerability |
|
CVE-2024-30098
HIGH 7.5
Windows Cryptographic Services Security Feature Bypass Vulnerability |
|
CVE-2026-69327
HIGH 7.4
Windows Remote Desktop Services Remote Code Execution Vulnerability |
|
CVE-2026-96222
HIGH 7.4
Improper certificate validation in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network. |
|
CVE-2026-87705
HIGH 7.4
Improper verification of source of a communication channel in Windows Hyper-V allows an unauthorized attacker to bypass a security feature over an adjacent net… |
|
CVE-2026-83511
HIGH 7.4
Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network. |
|
CVE-2026-69347
HIGH 7.4
Heap-based buffer overflow in Windows Fast FAT Driver allows an unauthorized attacker to execute code locally. |
|
CVE-2026-54127
HIGH 7.4
Use after free in Windows Hyper-V allows an unauthorized attacker to elevate privileges locally. |
|
CVE-2026-40413
HIGH 7.4
Windows TCP/IP Denial of Service Vulnerability |
|
CVE-2026-40414
HIGH 7.4
Windows TCP/IP Denial of Service Vulnerability |
|
CVE-2026-32156
HIGH 7.4
Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an unauthorized attacker to execute code locally. |
|
CVE-2026-25167
HIGH 7.4
Microsoft Brokering File System Elevation of Privilege Vulnerability |
|
CVE-2026-20844
HIGH 7.4
Use after free in Windows Clipboard Server allows an unauthorized attacker to elevate privileges locally. |
|
CVE-2025-59210
HIGH 7.4
Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability |
|
CVE-2025-59206
HIGH 7.4
Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability |
|
CVE-2025-59189
HIGH 7.4
Use after free in Microsoft Brokering File System allows an unauthorized attacker to elevate privileges locally. |
|
CVE-2025-55693
HIGH 7.4
Use after free in Windows Kernel allows an unauthorized attacker to elevate privileges locally. |
|
CVE-2025-48004
HIGH 7.4
Microsoft Brokering File System Elevation of Privilege Vulnerability |
|
CVE-2025-55335
HIGH 7.4
Windows NTFS Elevation of Privilege Vulnerability |
|
CVE-2025-55687
HIGH 7.4
Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability |
|
CVE-2025-54103
HIGH 7.4
Windows Management Service Elevation of Privilege Vulnerability |
|
CVE-2025-49690
HIGH 7.4
Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability |
|
CVE-2025-29838
HIGH 7.4
Windows ExecutionContext Driver Elevation of Privilege Vulnerability |
|
CVE-2025-21182
HIGH 7.4
Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability |
|
CVE-2025-21183
HIGH 7.4
Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability |
|
CVE-2026-119900
HIGH 7.3
Windows NTFS Elevation of Privilege Vulnerability |
|
CVE-2026-50482
HIGH 7.3
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally. |
|
CVE-2026-58640
HIGH 7.3
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally. |
|
CVE-2026-49789
HIGH 7.3
Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-49790
HIGH 7.3
Integer underflow (wrap or wraparound) in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-32149
HIGH 7.3
Improper input validation in Windows Hyper-V allows an authorized attacker to execute code locally. |
|
CVE-2026-21244
Exploit
HIGH 7.3
Windows Hyper-V Remote Code Execution Vulnerability |
|
CVE-2026-21247
HIGH 7.3
Windows Hyper-V Remote Code Execution Vulnerability |
|
CVE-2026-21248
Exploit
HIGH 7.3
Windows Hyper-V Remote Code Execution Vulnerability |
|
CVE-2025-62565
HIGH 7.3
Windows File Explorer Elevation of Privilege Vulnerability |
|
CVE-2025-25004
HIGH 7.3
PowerShell Elevation of Privilege Vulnerability |
|
CVE-2025-54116
HIGH 7.3
Improper access control in Windows MultiPoint Services allows an authorized attacker to elevate privileges locally. |
|
CVE-2025-54911
HIGH 7.3
Windows BitLocker Elevation of Privilege Vulnerability |
|
CVE-2025-55236
CRITICAL 7.3
Graphics Kernel Remote Code Execution Vulnerability |
|
CVE-2025-50159
HIGH 7.3
Remote Access Point-to-Point Protocol (PPP) EAP-TLS Elevation of Privilege Vulnerability |
|
CVE-2025-50161
HIGH 7.3
Win32k Elevation of Privilege Vulnerability |
|
CVE-2025-49680
HIGH 7.3
Windows Performance Recorder (WPR) Denial of Service Vulnerability |
|
CVE-2025-49682
HIGH 7.3
Windows Media Elevation of Privilege Vulnerability |
|
CVE-2025-32721
HIGH 7.3
Windows Recovery Driver Elevation of Privilege Vulnerability |
|
CVE-2025-24076
Exploit
HIGH 7.3
Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability |
|
CVE-2024-49107
HIGH 7.3
WmsRepair Service Elevation of Privilege Vulnerability |
|
CVE-2026-105520
HIGH 7.2
Windows DNS Elevation of Privilege Vulnerability |
|
CVE-2026-105560
HIGH 7.2
Windows DHCP Server Remote Code Execution Vulnerability |
|
CVE-2026-85798
HIGH 7.2
Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network. |
|
CVE-2026-108399
HIGH 7.2
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally. |
|
CVE-2025-53779
MEDIUM 7.2
Windows Kerberos Elevation of Privilege Vulnerability |
|
CVE-2025-49666
HIGH 7.2
Windows Server Setup and Boot Event Collection Remote Code Execution Vulnerability |
|
CVE-2024-49089
HIGH 7.2
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2024-49091
HIGH 7.2
Windows Domain Name Service Remote Code Execution Vulnerability |
|
CVE-2026-112973
HIGH 7.1
Windows Kernel Security Feature Bypass Vulnerability |
|
CVE-2026-119988
HIGH 7.1
Windows SMB Remote Code Execution Vulnerability |
|
CVE-2026-85856
HIGH 7.1
Heap-based buffer overflow in Windows Internet Connection Sharing (ICS) allows an authorized attacker to execute code over an adjacent network. |
|
CVE-2026-83715
HIGH 7.1
Missing authentication for critical function in Windows Error Reporting allows an authorized attacker to perform tampering locally. |
|
CVE-2026-70126
HIGH 7.1
Out-of-bounds read in Windows Bluetooth Port Driver allows an unauthorized attacker to execute code over an adjacent network. |
|
CVE-2026-69452
HIGH 7.1
Use after free in Windows Enterprise App Management allows an authorized attacker to elevate privileges over a network. |
|
CVE-2026-69775
HIGH 7.1
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges over a network. |
|
CVE-2026-69761
HIGH 7.1
Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges over a network. |
|
CVE-2026-69757
HIGH 7.1
Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges over a network. |
|
CVE-2026-69706
HIGH 7.1
Use after free in Windows Win32K allows an authorized attacker to elevate privileges over a network. |
|
CVE-2026-69688
HIGH 7.1
Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges over a network. |
|
CVE-2026-69602
HIGH 7.1
Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges over a network. |
|
CVE-2026-69597
HIGH 7.1
Use after free in Windows HTTP.sys allows an authorized attacker to elevate privileges over a network. |
|
CVE-2026-69553
HIGH 7.1
Missing authorization in Windows Hyper-V allows an authorized attacker to elevate privileges over a network. |
|
CVE-2026-69536
HIGH 7.1
Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network. |
|
CVE-2026-69482
HIGH 7.1
Creation of temporary file in directory with insecure permissions in Windows Error Reporting allows an authorized attacker to perform tampering locally. |
|
CVE-2026-69460
HIGH 7.1
Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges over a network. |
|
CVE-2026-69451
HIGH 7.1
Use after free in Windows Management Instrumentation allows an authorized attacker to elevate privileges over a network. |
|
CVE-2026-69396
HIGH 7.1
Use after free in Windows NDIS allows an authorized attacker to elevate privileges over a network. |
|
CVE-2026-69384
HIGH 7.1
Null pointer dereference in Virtual Hard Disk (VHD) Miniport Driver allows an unauthorized attacker to deny service locally. |
|
CVE-2026-69364
HIGH 7.1
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Print Spooler Components allows an authorized attacker t… |
|
CVE-2026-69366
HIGH 7.1
Use after free in Windows Kernel allows an authorized attacker to elevate privileges over a network. |
|
CVE-2026-69357
HIGH 7.1
Use after free in Windows NDIS allows an authorized attacker to elevate privileges over a network. |
|
CVE-2026-69358
HIGH 7.1
Use of uninitialized resource in Remote Desktop Client allows an authorized attacker to execute code over a network. |
|
CVE-2026-69337
HIGH 7.1
Double free in Windows Registry allows an authorized attacker to elevate privileges over a network. |
|
CVE-2026-69338
HIGH 7.1
Use after free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges over a network. |
|
CVE-2026-69340
HIGH 7.1
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network. |
|
CVE-2026-69336
HIGH 7.1
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network. |
|
CVE-2026-69313
HIGH 7.1
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network. |
|
CVE-2026-69314
HIGH 7.1
Use after free in Windows Device Association Broker service allows an authorized attacker to elevate privileges over a network. |
|
CVE-2026-69305
HIGH 7.1
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a network. |
|
CVE-2026-69296
HIGH 7.1
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges over a network. |
|
CVE-2026-69274
HIGH 7.1
Use after free in Windows Win32K allows an authorized attacker to elevate privileges over a network. |
|
CVE-2026-69272
HIGH 7.1
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network. |
|
CVE-2026-68893
HIGH 7.1
Use after free in Windows Remote Desktop Licensing Service allows an authorized attacker to elevate privileges over a network. |
|
CVE-2026-68889
HIGH 7.1
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network. |
|
CVE-2026-68846
HIGH 7.1
Use after free in Windows Kernel allows an authorized attacker to elevate privileges over a network. |
|
CVE-2026-68835
HIGH 7.1
Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges over a network. |
|
CVE-2026-50682
HIGH 7.1
Out-of-bounds read in Windows Active Directory allows an authorized attacker to deny service over a network. |
|
CVE-2026-50465
HIGH 7.1
Improper access control in Microsoft Windows DNS allows an authorized attacker to perform tampering locally. |
|
CVE-2026-50451
HIGH 7.1
Missing authentication for critical function in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-55144
HIGH 7.1
Missing cryptographic step in Windows CryptoAPI allows an authorized attacker to perform tampering locally. |
|
CVE-2026-50354
HIGH 7.1
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-49791
HIGH 7.1
Improper link resolution before file access ('link following') in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate pri… |
|
CVE-2026-49165
HIGH 7.1
Use of uninitialized resource in Microsoft Windows App Store allows an authorized attacker to disclose information locally. |
|
CVE-2026-47288
HIGH 7.1
Integer overflow or wraparound in Windows Kerberos allows an authorized attacker to execute code over an adjacent network. |
|
CVE-2026-40401
HIGH 7.1
Windows TCP/IP Denial of Service Vulnerability |
|
CVE-2026-26151
HIGH 7.1
Insufficient ui warning of dangerous operations in Windows Remote Desktop allows an unauthorized attacker to perform spoofing over a network. |
|
CVE-2025-62570
HIGH 7.1
Improper access control in Windows Camera Frame Server Monitor allows an authorized attacker to disclose information locally. |
|
CVE-2025-64720
HIGH 7.1
LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From version 1.6.0 … |
|
CVE-2025-65018
HIGH 7.1
LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From version 1.6.0 … |
|
CVE-2025-59208
HIGH 7.1
Windows MapUrlToZone Information Disclosure Vulnerability |
|
CVE-2025-48819
HIGH 7.1
Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability |
|
CVE-2025-48821
HIGH 7.1
Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability |
|
CVE-2025-27491
CRITICAL 7.1
Windows Hyper-V Remote Code Execution Vulnerability |
|
CVE-2025-29809
HIGH 7.1
Windows Kerberos Security Feature Bypass Vulnerability |
|
CVE-2025-25008
HIGH 7.1
Windows Server Elevation of Privilege Vulnerability |
|
CVE-2025-21379
CRITICAL 7.1
DHCP Client Service Remote Code Execution Vulnerability |
|
CVE-2025-21419
HIGH 7.1
Windows Setup Files Cleanup Elevation of Privilege Vulnerability |
|
CVE-2025-21299
HIGH 7.1
Windows Kerberos Security Feature Bypass Vulnerability |
|
CVE-2026-96994
HIGH 7.0
Use after free in Winsock allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96978
HIGH 7.0
Use after free in Windows Credential User Interface allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96971
HIGH 7.0
Use after free in Windows NetBIOS allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96973
HIGH 7.0
Use after free in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96969
HIGH 7.0
Double free in Windows TCP/IP allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96171
HIGH 7.0
Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96158
HIGH 7.0
Use of uninitialized resource in Microsoft ActiveX Installer Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96168
HIGH 7.0
Untrusted pointer dereference in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96153
HIGH 7.0
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96155
HIGH 7.0
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96139
HIGH 7.0
Untrusted pointer dereference in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96124
HIGH 7.0
Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96088
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected User Experiences and Telemetry allows an autho… |
|
CVE-2026-96073
HIGH 7.0
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96075
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Feedback Hub allows an authorized attacker to elevate pr… |
|
CVE-2026-96061
HIGH 7.0
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96072
HIGH 7.0
Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96051
HIGH 7.0
Out-of-bounds read in Windows USB Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96042
HIGH 7.0
Use after free in Windows Connection Manager Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96043
HIGH 7.0
Use after free in Windows Connection Manager Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96046
HIGH 7.0
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96047
HIGH 7.0
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96035
HIGH 7.0
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96026
HIGH 7.0
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96027
HIGH 7.0
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96019
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privi… |
|
CVE-2026-96004
HIGH 7.0
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96007
HIGH 7.0
Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96008
HIGH 7.0
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95987
HIGH 7.0
Use after free in Windows User Manager Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95989
HIGH 7.0
Use after free in vhdmp.sys allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95976
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Diagnostic Policy Service allows an authorized attacker … |
|
CVE-2026-95979
HIGH 7.0
Use after free in Windows Brokering File System allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95966
HIGH 7.0
Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95968
HIGH 7.0
Use after free in Windows Smart Card allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95971
HIGH 7.0
Untrusted pointer dereference in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95973
HIGH 7.0
Untrusted pointer dereference in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95974
HIGH 7.0
Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95961
HIGH 7.0
Double free in Windows USB Video Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95950
HIGH 7.0
Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95938
HIGH 7.0
Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95922
HIGH 7.0
Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95923
HIGH 7.0
Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95906
HIGH 7.0
Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95888
HIGH 7.0
Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95876
HIGH 7.0
Use after free in Windows Local Session Manager (LSM) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-94525
HIGH 7.0
An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files. The vulnerability could allow elevation of… |
|
CVE-2026-94514
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileg… |
|
CVE-2026-94519
HIGH 7.0
Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-94522
HIGH 7.0
Use after free in Kernel Transaction Manager allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88242
HIGH 7.0
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88237
HIGH 7.0
Use after free in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88228
HIGH 7.0
Heap-based buffer overflow in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85862
HIGH 7.0
Double free in Windows Error Reporting allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70120
HIGH 7.0
Use after free in Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70231
HIGH 7.0
Use after free in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-124224
HIGH 7.0
Improper link resolution before file access ('link following') in Windows PowerShell allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-123389
HIGH 7.0
Use after free in Quality Windows Audio/Video Experience (QWAVE) service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-122182
HIGH 7.0
Improper link resolution before file access ('link following') in Windows Maps allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-122174
HIGH 7.0
Improper link resolution before file access ('link following') in Windows Task Scheduler allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-122179
HIGH 7.0
Heap-based buffer overflow in Windows Internet Connection Sharing (ICS) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-122170
HIGH 7.0
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-121670
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Overlay Filter allows an authorized attacker to elevate … |
|
CVE-2026-121671
HIGH 7.0
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-103571
HIGH 7.0
Windows CNG Key Isolation Service Elevation of Privilege Vulnerability |
|
CVE-2026-105017
HIGH 7.0
Volume Shadow Copy Elevation of Privilege Vulnerability |
|
CVE-2026-105024
HIGH 7.0
Windows Storage Spaces Controller Elevation of Privilege Vulnerability |
|
CVE-2026-105504
HIGH 7.0
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2026-105510
HIGH 7.0
Windows Secure Socket Tunneling Protocol (SSTP) Elevation of Privilege Vulnerability |
|
CVE-2026-105511
HIGH 7.0
Windows Point-to-Point Protocol over Ethernet (PPPoE) Elevation of Privilege Vulnerability |
|
CVE-2026-105513
HIGH 7.0
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2026-105522
HIGH 7.0
Winlogon Elevation of Privilege Vulnerability |
|
CVE-2026-105525
HIGH 7.0
Windows Network Connection Broker Elevation of Privilege Vulnerability |
|
CVE-2026-105526
HIGH 7.0
Winsock Elevation of Privilege Vulnerability |
|
CVE-2026-105529
HIGH 7.0
Windows Storage Elevation of Privilege Vulnerability |
|
CVE-2026-105533
HIGH 7.0
Windows COM Elevation of Privilege Vulnerability |
|
CVE-2026-105540
HIGH 7.0
Windows Error Reporting Elevation of Privilege Vulnerability |
|
CVE-2026-105545
HIGH 7.0
Windows Installer Elevation of Privilege Vulnerability |
|
CVE-2026-105546
HIGH 7.0
Windows Management Instrumentation Elevation of Privilege Vulnerability |
|
CVE-2026-105547
HIGH 7.0
Windows Setup and Deployment Elevation of Privilege Vulnerability |
|
CVE-2026-105553
HIGH 7.0
Windows Filtering Platform (WFP) Elevation of Privilege Vulnerability |
|
CVE-2026-105554
HIGH 7.0
Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability |
|
CVE-2026-105566
HIGH 7.0
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2026-105567
HIGH 7.0
Windows Print Spooler Components Elevation of Privilege Vulnerability |
|
CVE-2026-105582
HIGH 7.0
Windows DWM Core Library Elevation of Privilege Vulnerability |
|
CVE-2026-105583
HIGH 7.0
Windows DWM Core Library Elevation of Privilege Vulnerability |
|
CVE-2026-105586
HIGH 7.0
Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability |
|
CVE-2026-105587
HIGH 7.0
Windows OLE DB Elevation of Privilege Vulnerability |
|
CVE-2026-105589
HIGH 7.0
Windows Wireless Networking Elevation of Privilege Vulnerability |
|
CVE-2026-108406
HIGH 7.0
Windows Network Connection Broker Elevation of Privilege Vulnerability |
|
CVE-2026-108413
HIGH 7.0
Windows Telephony Service Elevation of Privilege Vulnerability |
|
CVE-2026-108414
HIGH 7.0
Windows Projected File System Filter Driver Elevation of Privilege Vulnerability |
|
CVE-2026-112756
HIGH 7.0
Windows Filtering Platform (WFP) Elevation of Privilege Vulnerability |
|
CVE-2026-112759
HIGH 7.0
Windows Task Scheduler Elevation of Privilege Vulnerability |
|
CVE-2026-112763
HIGH 7.0
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
|
CVE-2026-112764
HIGH 7.0
Windows USB Driver Elevation of Privilege Vulnerability |
|
CVE-2026-112765
HIGH 7.0
Windows Print Spooler Components Elevation of Privilege Vulnerability |
|
CVE-2026-112766
HIGH 7.0
Windows exFAT File System Elevation of Privilege Vulnerability |
|
CVE-2026-112790
HIGH 7.0
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2026-112791
HIGH 7.0
Windows Print Spooler Components Elevation of Privilege Vulnerability |
|
CVE-2026-112792
HIGH 7.0
Windows Print Spooler Components Elevation of Privilege Vulnerability |
|
CVE-2026-112796
HIGH 7.0
Windows Event Collector Service Elevation of Privilege Vulnerability |
|
CVE-2026-112797
HIGH 7.0
Windows Print Spooler Components Elevation of Privilege Vulnerability |
|
CVE-2026-112798
HIGH 7.0
Windows NetBIOS Elevation of Privilege Vulnerability |
|
CVE-2026-112804
HIGH 7.0
Windows exFAT File System Elevation of Privilege Vulnerability |
|
CVE-2026-112810
HIGH 7.0
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
|
CVE-2026-112812
HIGH 7.0
Windows SMB Client Elevation of Privilege Vulnerability |
|
CVE-2026-112968
HIGH 7.0
Windows COM Elevation of Privilege Vulnerability |
|
CVE-2026-112976
HIGH 7.0
Windows Print Spooler Components Elevation of Privilege Vulnerability |
|
CVE-2026-112986
HIGH 7.0
Windows DWM Core Library Elevation of Privilege Vulnerability |
|
CVE-2026-112987
HIGH 7.0
Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability |
|
CVE-2026-112989
HIGH 7.0
Windows Servicing Stack Updates Elevation of Privilege Vulnerability |
|
CVE-2026-113750
HIGH 7.0
Windows Device Inventory Elevation of Privilege Vulnerability |
|
CVE-2026-113751
HIGH 7.0
Windows Fast FAT Driver Elevation of Privilege Vulnerability |
|
CVE-2026-113755
HIGH 7.0
Windows Filter Manager Elevation of Privilege Vulnerability |
|
CVE-2026-113769
HIGH 7.0
Windows COM+ Event System Service Elevation of Privilege Vulnerability |
|
CVE-2026-113770
HIGH 7.0
Windows Print Spooler Components Elevation of Privilege Vulnerability |
|
CVE-2026-113819
HIGH 7.0
Desktop Window Manager Elevation of Privilege Vulnerability |
|
CVE-2026-113820
HIGH 7.0
Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability |
|
CVE-2026-113860
CRITICAL 7.0
Windows Hyper-V Elevation of Privilege Vulnerability |
|
CVE-2026-116707
HIGH 7.0
Windows Link Layer Topology Discovery Protocol Elevation of Privilege Vulnerability |
|
CVE-2026-118123
HIGH 7.0
Windows Point-to-Point Protocol over Ethernet (PPPoE) Elevation of Privilege Vulnerability |
|
CVE-2026-118124
HIGH 7.0
Windows Internet Connection Sharing (ICS) Elevation of Privilege Vulnerability |
|
CVE-2026-118125
HIGH 7.0
Windows Message Queuing Elevation of Privilege Vulnerability |
|
CVE-2026-119386
HIGH 7.0
Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability |
|
CVE-2026-119387
HIGH 7.0
Quality Windows Audio/Video Experience (QWAVE) service Elevation of Privilege Vulnerability |
|
CVE-2026-119388
HIGH 7.0
Quality Windows Audio/Video Experience (QWAVE) service Elevation of Privilege Vulnerability |
|
CVE-2026-119389
HIGH 7.0
Windows Storage Elevation of Privilege Vulnerability |
|
CVE-2026-119397
HIGH 7.0
Windows Kernel Transaction Manager Elevation of Privilege Vulnerability |
|
CVE-2026-119398
HIGH 7.0
Windows Installer Elevation of Privilege Vulnerability |
|
CVE-2026-119399
HIGH 7.0
Windows Installer Elevation of Privilege Vulnerability |
|
CVE-2026-119822
HIGH 7.0
Windows Overlay Filter Elevation of Privilege Vulnerability |
|
CVE-2026-119827
HIGH 7.0
Windows Win32k Elevation of Privilege Vulnerability |
|
CVE-2026-119831
HIGH 7.0
Windows Installer Elevation of Privilege Vulnerability |
|
CVE-2026-119833
HIGH 7.0
Windows Message Queuing Elevation of Privilege Vulnerability |
|
CVE-2026-119835
HIGH 7.0
Windows Smart Card Elevation of Privilege Vulnerability |
|
CVE-2026-119844
HIGH 7.0
Windows Device Association Service Elevation of Privilege Vulnerability |
|
CVE-2026-119849
HIGH 7.0
Virtual Hard Disk (VHD) Miniport Driver Remote Code Execution Vulnerability |
|
CVE-2026-119851
HIGH 7.0
Windows Storage Spaces Controller Elevation of Privilege Vulnerability |
|
CVE-2026-119859
HIGH 7.0
Windows Internet Connection Sharing (ICS) Elevation of Privilege Vulnerability |
|
CVE-2026-119860
HIGH 7.0
Windows Internet Connection Sharing (ICS) Elevation of Privilege Vulnerability |
|
CVE-2026-119861
HIGH 7.0
Windows Internet Connection Sharing (ICS) Elevation of Privilege Vulnerability |
|
CVE-2026-119865
HIGH 7.0
Windows Installer Elevation of Privilege Vulnerability |
|
CVE-2026-119866
HIGH 7.0
Windows Device Association Service Elevation of Privilege Vulnerability |
|
CVE-2026-119868
HIGH 7.0
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2026-119870
HIGH 7.0
Windows SMB Client Elevation of Privilege Vulnerability |
|
CVE-2026-119873
HIGH 7.0
Windows NetBIOS Elevation of Privilege Vulnerability |
|
CVE-2026-119874
HIGH 7.0
Windows Device Association Service Elevation of Privilege Vulnerability |
|
CVE-2026-119876
HIGH 7.0
Windows USB Scanner Driver Elevation of Privilege Vulnerability |
|
CVE-2026-119888
HIGH 7.0
Windows Audio Service Elevation of Privilege Vulnerability |
|
CVE-2026-119893
HIGH 7.0
Windows Audio Service Elevation of Privilege Vulnerability |
|
CVE-2026-119894
HIGH 7.0
Windows Audio Service Elevation of Privilege Vulnerability |
|
CVE-2026-119895
HIGH 7.0
Windows Audio Service Elevation of Privilege Vulnerability |
|
CVE-2026-119898
HIGH 7.0
Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability |
|
CVE-2026-119913
HIGH 7.0
Windows Print Spooler Components Elevation of Privilege Vulnerability |
|
CVE-2026-119919
HIGH 7.0
Windows Distributed Transaction Coordinator Elevation of Privilege Vulnerability |
|
CVE-2026-119921
HIGH 7.0
Windows Microsoft Account Sign-in Assistant Elevation of Privilege Vulnerability |
|
CVE-2026-119928
HIGH 7.0
Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability |
|
CVE-2026-119931
HIGH 7.0
Windows Text Services Framework Elevation of Privilege Vulnerability |
|
CVE-2026-119974
HIGH 7.0
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
|
CVE-2026-119992
HIGH 7.0
Windows HTTP.sys Elevation of Privilege Vulnerability |
|
CVE-2026-69565
HIGH 7.0
Windows Remote Desktop Services Remote Code Execution Vulnerability |
|
CVE-2026-96054
HIGH 7.0
Microsoft Color Management Remote Code Execution Vulnerability |
|
CVE-2026-97810
HIGH 7.0
Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-97812
HIGH 7.0
Double free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-97793
HIGH 7.0
Missing authentication for critical function in Windows Setup and Deployment allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-97787
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Container Isolation FS Filter Driver (unionfs.sys) allow… |
|
CVE-2026-96949
HIGH 7.0
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96939
HIGH 7.0
Time-of-check time-of-use (toctou) race condition in Servicing Stack Updates allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96932
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Embedded Mode Service allows an authorized attacker to e… |
|
CVE-2026-96937
HIGH 7.0
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96923
HIGH 7.0
Use after free in Windows Workstation Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96868
HIGH 7.0
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96852
HIGH 7.0
Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96323
HIGH 7.0
Use after free in Windows Update allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96322
HIGH 7.0
Use after free in Windows Remote Desktop Protocol allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96319
HIGH 7.0
Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96310
HIGH 7.0
Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96313
HIGH 7.0
Missing authentication for critical function in Windows Push Notifications allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96302
HIGH 7.0
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96304
HIGH 7.0
Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96305
HIGH 7.0
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96307
HIGH 7.0
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96250
HIGH 7.0
Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96253
HIGH 7.0
Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96254
HIGH 7.0
Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96301
HIGH 7.0
Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96216
HIGH 7.0
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96209
HIGH 7.0
Out-of-bounds read in Windows Network File System allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95943
HIGH 7.0
Double free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88160
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Windows Search Component allows an authorized attacker… |
|
CVE-2026-88161
HIGH 7.0
Use after free in Windows Local Security Authority (LSA) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88146
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Background Intelligent Transfer Service (BITS) allows an… |
|
CVE-2026-88149
HIGH 7.0
Double free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88139
HIGH 7.0
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88141
HIGH 7.0
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88124
HIGH 7.0
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88127
HIGH 7.0
Use after free in Windows SMB Server allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88110
HIGH 7.0
Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88106
HIGH 7.0
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88107
HIGH 7.0
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88096
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DCOM Server allows an authorized attacker to elevate pri… |
|
CVE-2026-88098
HIGH 7.0
Untrusted pointer dereference in Windows Security Support Provider Interface allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88076
HIGH 7.0
Null pointer dereference in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-87715
HIGH 7.0
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-87710
HIGH 7.0
Improper access control in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-87704
HIGH 7.0
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-87708
HIGH 7.0
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85943
HIGH 7.0
Time-of-check time-of-use (toctou) race condition in Reliable Multicast Transport Driver (RMCAST) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-87693
HIGH 7.0
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85941
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privi… |
|
CVE-2026-85930
HIGH 7.0
Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85934
HIGH 7.0
Use after free in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85920
HIGH 7.0
Time-of-check time-of-use (toctou) race condition in Windows BitLocker allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85912
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Clipboard User Service allows an authorized attacker to … |
|
CVE-2026-85914
HIGH 7.0
Use after free in Windows Embedded Mode Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85918
HIGH 7.0
Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85904
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Device Association Service allows an authorized attacker… |
|
CVE-2026-85870
HIGH 7.0
Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85868
HIGH 7.0
Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85853
HIGH 7.0
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85854
HIGH 7.0
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85855
HIGH 7.0
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85846
HIGH 7.0
Use after free in Windows Web Account Manager allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85834
HIGH 7.0
Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85828
HIGH 7.0
Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85823
HIGH 7.0
Use after free in Windows Composite Image File System allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85824
HIGH 7.0
Use after free in Windows Composite Image File System allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85825
HIGH 7.0
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85826
HIGH 7.0
Out-of-bounds write in Windows Fast FAT Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85827
HIGH 7.0
Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85810
HIGH 7.0
Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85802
HIGH 7.0
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85803
HIGH 7.0
Use after free in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85791
HIGH 7.0
Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85372
HIGH 7.0
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85367
HIGH 7.0
Use after free in Windows Cash Drawer Protocol Provider allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85370
HIGH 7.0
Use after free in WebDAV allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85361
HIGH 7.0
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85362
HIGH 7.0
Release of invalid pointer or reference in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85364
HIGH 7.0
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85365
HIGH 7.0
Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85355
HIGH 7.0
Inclusion of functionality from untrusted control sphere in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85342
HIGH 7.0
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85352
HIGH 7.0
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85354
HIGH 7.0
Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85329
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Account allows an authorized attacker to elevate privi… |
|
CVE-2026-85328
HIGH 7.0
Weak authentication in Windows Projected File System allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-84018
HIGH 7.0
Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-84019
HIGH 7.0
Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-84020
HIGH 7.0
Use after free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-84014
HIGH 7.0
Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83930
HIGH 7.0
Use after free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83924
HIGH 7.0
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83916
HIGH 7.0
Double free in Windows Error Reporting allows an authorized attacker to execute code locally. |
|
CVE-2026-83917
HIGH 7.0
Use after free in Windows ALPC allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83921
HIGH 7.0
Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83911
HIGH 7.0
Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83915
HIGH 7.0
Use after free in Windows Diagnostic Policy Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83908
HIGH 7.0
Release of invalid pointer or reference in RPC Runtime allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83900
HIGH 7.0
Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83901
HIGH 7.0
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83899
HIGH 7.0
Improper privilege management in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83886
HIGH 7.0
Use after free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83879
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Overlay Filter allows an authorized attacker to elevate … |
|
CVE-2026-83866
HIGH 7.0
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83868
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Bluetooth Driver allows an authorized attacker to elev… |
|
CVE-2026-83871
HIGH 7.0
Heap-based buffer overflow in OpenSSH for Windows allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83852
HIGH 7.0
Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83846
HIGH 7.0
Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83839
HIGH 7.0
Time-of-check time-of-use (toctou) race condition in Windows Hyper-V allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83841
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K allows an authorized attacker to elevate privileg… |
|
CVE-2026-83842
HIGH 7.0
Double free in Windows TCP/IP allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83834
HIGH 7.0
Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83827
HIGH 7.0
Heap-based buffer overflow in Windows Bluetooth Port Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83793
HIGH 7.0
Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges local… |
|
CVE-2026-83785
HIGH 7.0
Use after free in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83775
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privi… |
|
CVE-2026-83752
HIGH 7.0
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83749
HIGH 7.0
Use after free in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83750
HIGH 7.0
Time-of-check time-of-use (toctou) race condition in Windows Error Reporting allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83738
HIGH 7.0
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83740
HIGH 7.0
Use after free in Windows Hello allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83722
HIGH 7.0
Use after free in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83724
HIGH 7.0
Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83717
HIGH 7.0
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83718
HIGH 7.0
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83708
HIGH 7.0
Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83710
HIGH 7.0
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83707
HIGH 7.0
Use after free in Windows Event Tracing allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83701
HIGH 7.0
Use after free in Windows Now Playing Session Manager allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83702
HIGH 7.0
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83694
HIGH 7.0
Out-of-bounds read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83696
HIGH 7.0
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83687
HIGH 7.0
Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83689
HIGH 7.0
Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83680
HIGH 7.0
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83682
HIGH 7.0
Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83675
HIGH 7.0
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83676
HIGH 7.0
Integer underflow (wrap or wraparound) in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83666
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Active Directory Certificate Services (AD CS) allows an authoriz… |
|
CVE-2026-83644
HIGH 7.0
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83584
HIGH 7.0
Use after free in Windows Smart Card allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83574
HIGH 7.0
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83575
HIGH 7.0
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83580
HIGH 7.0
Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83564
HIGH 7.0
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83566
HIGH 7.0
Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83509
HIGH 7.0
Untrusted search path in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83510
HIGH 7.0
Time-of-check time-of-use (toctou) race condition in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83505
HIGH 7.0
Time-of-check time-of-use (toctou) race condition in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-81971
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows NTFS allows an authorized attacker to elevate privileges… |
|
CVE-2026-72969
HIGH 7.0
Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-72934
HIGH 7.0
Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-72955
HIGH 7.0
Use after free in Windows Application Compatibility Cache allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-72968
HIGH 7.0
Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70272
HIGH 7.0
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70273
HIGH 7.0
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70271
HIGH 7.0
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70252
HIGH 7.0
Use after free in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70253
HIGH 7.0
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70249
HIGH 7.0
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70243
HIGH 7.0
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70236
HIGH 7.0
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70237
HIGH 7.0
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70241
HIGH 7.0
Use after free in Windows Kerberos allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70230
HIGH 7.0
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70223
HIGH 7.0
Use after free in Windows Console Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70209
HIGH 7.0
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70205
HIGH 7.0
Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privile… |
|
CVE-2026-70198
HIGH 7.0
Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70176
HIGH 7.0
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70164
HIGH 7.0
Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70168
HIGH 7.0
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70169
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected Devices Platform Service allows an authorized … |
|
CVE-2026-70160
HIGH 7.0
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70150
HIGH 7.0
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70156
HIGH 7.0
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70144
HIGH 7.0
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70136
HIGH 7.0
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70140
HIGH 7.0
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70134
HIGH 7.0
Use after free in Windows Event Tracing allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70118
HIGH 7.0
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70115
HIGH 7.0
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70086
HIGH 7.0
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70076
HIGH 7.0
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70066
HIGH 7.0
Use after free in Windows DHCP Server allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70067
HIGH 7.0
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70056
HIGH 7.0
Use after free in Windows Update Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70045
HIGH 7.0
Use after free in Windows Work Folders allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70021
HIGH 7.0
Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70026
HIGH 7.0
Use after free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69977
HIGH 7.0
Use after free in Quality Windows Audio/Video Experience (QWAVE) service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69970
HIGH 7.0
Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69964
HIGH 7.0
Use after free in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69935
HIGH 7.0
Use after free in Windows Storage allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69931
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Storage allows an authorized attacker to elevate privile… |
|
CVE-2026-69915
HIGH 7.0
Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69840
HIGH 7.0
Use after free in Windows Certificates allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69856
HIGH 7.0
Use after free in Windows Storage allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69766
HIGH 7.0
Use after free in Windows Storage allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69795
HIGH 7.0
Null pointer dereference in Windows Clipboard Server allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69736
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Credential Manager allows an authorized attacker to elev… |
|
CVE-2026-69743
HIGH 7.0
Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69763
HIGH 7.0
Use after free in Windows Storage allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69596
HIGH 7.0
Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69387
HIGH 7.0
Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-109453
HIGH 7.0
Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-108468
HIGH 7.0
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-108464
HIGH 7.0
Use after free in Software Protection Platform (SPP) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-108465
HIGH 7.0
Use after free in Windows Update Delivery Optimization allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-108396
HIGH 7.0
Time-of-check time-of-use (toctou) race condition in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-108132
HIGH 7.0
Double free in Windows Kerberos allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-103555
HIGH 7.0
Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-102207
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileg… |
|
CVE-2026-102211
HIGH 7.0
Use after free in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-102194
HIGH 7.0
Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-102189
HIGH 7.0
Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-102191
HIGH 7.0
Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-100225
HIGH 7.0
Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-100216
HIGH 7.0
Stack-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-100203
HIGH 7.0
Heap-based buffer overflow in Windows Update Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-100200
HIGH 7.0
Use after free in Windows Update Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-100201
HIGH 7.0
Heap-based buffer overflow in Windows Client License Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85360
HIGH 7.0
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83999
HIGH 7.0
Improper link resolution before file access ('link following') in Windows Resilient File System (ReFS) Deduplication Service allows an authorized attacker to e… |
|
CVE-2026-83940
HIGH 7.0
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-80093
HIGH 7.0
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-78457
HIGH 7.0
Use after free in Windows Security App allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-77905
HIGH 7.0
Use after free in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-77894
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privi… |
|
CVE-2026-73022
HIGH 7.0
Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-73005
HIGH 7.0
Use after free in Windows Authentication Methods allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-73003
HIGH 7.0
Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-72963
HIGH 7.0
Use after free in Windows Modern Execution Server allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-72952
HIGH 7.0
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to execute code locally. |
|
CVE-2026-72930
HIGH 7.0
Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to execute code locally. |
|
CVE-2026-71353
HIGH 7.0
Double free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-72926
HIGH 7.0
Use after free in Windows Internet Connection Sharing (ICS) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-71351
HIGH 7.0
Double free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-71342
HIGH 7.0
Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-71332
HIGH 7.0
Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-71333
HIGH 7.0
Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70585
HIGH 7.0
Use after free in Windows Services for NFS ONCRPC XDR Driver allows an authorized attacker to execute code locally. |
|
CVE-2026-70573
HIGH 7.0
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70577
HIGH 7.0
Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70565
HIGH 7.0
Use after free in Windows AF_UNIX Socket Provider allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70567
HIGH 7.0
Double free in Windows Display Enhancement Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70568
HIGH 7.0
Heap-based buffer overflow in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70562
HIGH 7.0
Double free in Windows Audio Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70283
HIGH 7.0
Incorrect authorization in Windows Win32K allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69911
HIGH 7.0
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69891
HIGH 7.0
Use after free in Windows Media allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69896
HIGH 7.0
Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69889
HIGH 7.0
Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69859
HIGH 7.0
Time-of-check time-of-use (toctou) race condition in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69866
HIGH 7.0
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69834
HIGH 7.0
Use after free in Windows ALPC allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69838
HIGH 7.0
Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69816
HIGH 7.0
Use after free in Windows Accounts Control allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69817
HIGH 7.0
Use after free in Windows Bluetooth Port Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69818
HIGH 7.0
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69814
HIGH 7.0
Use after free in Windows Credential Providers allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69791
HIGH 7.0
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69779
HIGH 7.0
Time-of-check time-of-use (toctou) race condition in Windows Win32K allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69708
HIGH 7.0
Use after free in Windows Web Platform Storage allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69711
HIGH 7.0
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69692
HIGH 7.0
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69693
HIGH 7.0
Use after free in Windows Device Association Broker service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69694
HIGH 7.0
Deserialization of untrusted data in Windows IP Address Management (IPAM) Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69682
HIGH 7.0
Use after free in Windows Host Guardian Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69652
HIGH 7.0
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69654
HIGH 7.0
Use after free in Windows Accounts Control allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69648
HIGH 7.0
Use after free in Windows Notification allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69645
HIGH 7.0
Use after free in Windows Message Queuing allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69630
HIGH 7.0
Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69621
HIGH 7.0
Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69617
HIGH 7.0
Out-of-bounds read in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69610
HIGH 7.0
Buffer over-read in Windows Win32K allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69611
HIGH 7.0
Use after free in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69613
HIGH 7.0
Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69605
HIGH 7.0
Use after free in Microsoft Install Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69606
HIGH 7.0
Use after free in Windows Shell allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69600
HIGH 7.0
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69578
HIGH 7.0
Numeric truncation error in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69581
HIGH 7.0
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69573
HIGH 7.0
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69574
HIGH 7.0
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69575
HIGH 7.0
Use after free in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69563
HIGH 7.0
Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69564
HIGH 7.0
Heap-based buffer overflow in Windows Online Certificate Status Protocol (OCSP) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69567
HIGH 7.0
Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69560
HIGH 7.0
Use after free in Windows Work Folder Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69549
HIGH 7.0
Out-of-bounds read in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69540
HIGH 7.0
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69516
HIGH 7.0
Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69517
HIGH 7.0
Use after free in Windows Wireless Networking allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69501
HIGH 7.0
Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69498
HIGH 7.0
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69500
HIGH 7.0
Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69492
HIGH 7.0
Heap-based buffer overflow in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69488
HIGH 7.0
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69468
HIGH 7.0
Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69470
HIGH 7.0
Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69472
HIGH 7.0
Use after free in Windows Devices Human Interface allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69473
HIGH 7.0
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69466
HIGH 7.0
Time-of-check time-of-use (toctou) race condition in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69448
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bluetooth Service allows an authorized attacker to eleva… |
|
CVE-2026-69441
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privi… |
|
CVE-2026-69430
HIGH 7.0
Use after free in Windows Embedded Mode Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69422
HIGH 7.0
Use after free in Windows USB Video Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69413
HIGH 7.0
Use after free in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69398
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bluetooth Service allows an authorized attacker to eleva… |
|
CVE-2026-69401
HIGH 7.0
Use after free in Audio Video Control Transport Protocol allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69404
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an authorized attacker to elevate privileg… |
|
CVE-2026-69394
HIGH 7.0
Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69383
HIGH 7.0
External control of file name or path in Windows Shell allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69385
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an authorized attacker to elevate privileg… |
|
CVE-2026-69388
HIGH 7.0
Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69379
HIGH 7.0
Improper link resolution before file access ('link following') in Windows NTFS allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69362
HIGH 7.0
Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69341
HIGH 7.0
Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69335
HIGH 7.0
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69331
HIGH 7.0
Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69319
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Video Driver allows an authorized attacker to elevat… |
|
CVE-2026-69309
HIGH 7.0
Double free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69310
HIGH 7.0
Use after free in Windows DNS allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69311
HIGH 7.0
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69299
HIGH 7.0
Use after free in Microsoft COM for Windows allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69300
HIGH 7.0
Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69292
HIGH 7.0
Double free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69287
HIGH 7.0
Use after free in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69279
HIGH 7.0
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69280
HIGH 7.0
Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69281
HIGH 7.0
Use after free in Windows License Manager allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69275
HIGH 7.0
Use after free in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-68897
HIGH 7.0
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-68884
HIGH 7.0
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-68840
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Driver allows an authorized attacker to elevate priv… |
|
CVE-2026-68824
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected User Experiences and Telemetry allows an autho… |
|
CVE-2026-68825
HIGH 7.0
Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-62694
HIGH 7.0
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-50349
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows an authoriz… |
|
CVE-2026-62727
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to eleva… |
|
CVE-2026-70307
HIGH 7.0
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-65788
HIGH 7.0
Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-65776
HIGH 7.0
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-65678
HIGH 7.0
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-62908
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Backup Engine allows an authorized attacker to elevate p… |
|
CVE-2026-62892
HIGH 7.0
Use after free in Capability Access Management Service (camsvc) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-62788
HIGH 7.0
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-62780
HIGH 7.0
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-62773
HIGH 7.0
Use after free in Windows Kerberos allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-62774
HIGH 7.0
Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-62766
HIGH 7.0
Double free in Windows Kerberos allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-62748
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to eleva… |
|
CVE-2026-62749
HIGH 7.0
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-62753
HIGH 7.0
Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-62729
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to eleva… |
|
CVE-2026-62734
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to eleva… |
|
CVE-2026-62723
HIGH 7.0
Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-62724
HIGH 7.0
Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-62725
HIGH 7.0
Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-62726
HIGH 7.0
Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-62728
HIGH 7.0
Time-of-check time-of-use (toctou) race condition in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-61939
HIGH 7.0
Use after free in Winlogon allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-62690
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elev… |
|
CVE-2026-61938
HIGH 7.0
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-61927
HIGH 7.0
Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-61929
HIGH 7.0
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-61366
HIGH 7.0
Double free in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-61361
HIGH 7.0
Use after free in Windows DHCP Client allows an authorized attacker to execute code locally. |
|
CVE-2026-61348
HIGH 7.0
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-61346
HIGH 7.0
Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-59122
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to eleva… |
|
CVE-2026-59125
HIGH 7.0
Use after free in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-59126
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Event Logging Service allows an authorized attacker to e… |
|
CVE-2026-50472
HIGH 7.0
Heap-based buffer overflow in Windows LUAFV allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-58629
HIGH 7.0
Use after free in Windows DirectX allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-58637
HIGH 7.0
Use after free in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-58619
HIGH 7.0
Use after free in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-58544
HIGH 7.0
Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-57093
HIGH 7.0
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-56173
HIGH 7.0
Use after free in Windows WebView allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-50672
HIGH 7.0
Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-50674
HIGH 7.0
Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-50669
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to eleva… |
|
CVE-2026-50503
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an authorized attacker to elevate privile… |
|
CVE-2026-50490
HIGH 7.0
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-50491
HIGH 7.0
Out-of-bounds read in Code Integrity DLL (ci.dll) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-50459
HIGH 7.0
Use after free in Windows Kernel allows an unauthorized attacker to elevate privileges locally. |
|
CVE-2026-50449
HIGH 7.0
Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-50452
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an unauthorized attacker to elevate privi… |
|
CVE-2026-50410
HIGH 7.0
Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-50403
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an authorized attacker to elevate privile… |
|
CVE-2026-50392
HIGH 7.0
Use after free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-50393
HIGH 7.0
Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-50396
HIGH 7.0
Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-50397
HIGH 7.0
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-50390
HIGH 7.0
Access of resource using incompatible type ('type confusion') in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-50371
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows LUAFV allows an authorized attacker to elevate privilege… |
|
CVE-2026-50372
HIGH 7.0
Buffer over-read in Windows Redirected Drive Buffering allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-50359
HIGH 7.0
Use after free in Microsoft XML Core Services allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-50358
HIGH 7.0
Use after free in Windows Media allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-50345
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an authorized attacker to elevate privile… |
|
CVE-2026-50348
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an unauthorized attacker to elevate privi… |
|
CVE-2026-50322
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an authorized attacker to elevate privile… |
|
CVE-2026-50307
HIGH 7.0
Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-58526
HIGH 7.0
Use after free in Windows Storage allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-54996
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Print Driver allows an authorized attacker to elevat… |
|
CVE-2026-54989
HIGH 7.0
Use after free in Quality Windows Audio/Video Experience (QWAVE) service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-54129
HIGH 7.0
Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-54111
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Print Driver allows an authorized attacker to elevat… |
|
CVE-2026-50384
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Clip Service allows an authorized attacker to elevate pr… |
|
CVE-2026-50356
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Windows App Store allows an authorized attacker to ele… |
|
CVE-2026-50323
HIGH 7.0
Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-50325
HIGH 7.0
Improper access control in Windows Win32K allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-50297
HIGH 7.0
Improper access control in Windows Win32K allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-49806
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Print Driver allows an authorized attacker to elevat… |
|
CVE-2026-50296
HIGH 7.0
Use after free in Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-49802
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Print Driver allows an authorized attacker to elevat… |
|
CVE-2026-49803
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows AppX Deployment Service allows an authorized attacker to… |
|
CVE-2026-49805
HIGH 7.0
Improper access control in Windows Win32K allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-49183
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Clipboard Server allows an authorized attacker to elevat… |
|
CVE-2026-49784
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Windows App Store allows an authorized attacker to ele… |
|
CVE-2026-48571
HIGH 7.0
Use after free in Windows App Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-48572
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows App Installer allows an authorized attacker to elevate p… |
|
CVE-2026-49162
HIGH 7.0
Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-47648
HIGH 7.0
Untrusted search path in Windows Storage allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-45653
HIGH 7.0
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-45640
HIGH 7.0
Use after free in Windows Bluetooth Port Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-45598
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows an authoriz… |
|
CVE-2026-45601
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows an authoriz… |
|
CVE-2026-45603
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows an authoriz… |
|
CVE-2026-45596
HIGH 7.0
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-45597
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in UI Automation Manager (uiamanager.dll) allows an authorized atta… |
|
CVE-2026-42984
HIGH 7.0
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-42911
HIGH 7.0
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-42912
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to eleva… |
|
CVE-2026-42836
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Function Discovery Service (fdwsd.dll) allows an authorized atta… |
|
CVE-2026-41108
HIGH 7.0
Heap-based buffer overflow in Microsoft Windows DNS allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-34335
HIGH 7.0
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
|
CVE-2025-54518
HIGH 7.0
Improper isolation of shared resources within the CPU operation cache on Zen 2-based products could allow an attacker to corrupt instructions executed at a dif… |
|
CVE-2026-35416
HIGH 7.0
Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privile… |
|
CVE-2026-34345
HIGH 7.0
Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privile… |
|
CVE-2026-33839
HIGH 7.0
Win32k Elevation of Privilege Vulnerability |
|
CVE-2026-34331
HIGH 7.0
Win32k Elevation of Privilege Vulnerability |
|
CVE-2026-34340
HIGH 7.0
Windows Projected File System Elevation of Privilege Vulnerability |
|
CVE-2026-34341
HIGH 7.0
Windows Link-Layer Discovery Protocol (LLDP) Elevation of Privilege Vulnerability |
|
CVE-2026-34342
HIGH 7.0
Windows Print Spooler Elevation of Privilege Vulnerability |
|
CVE-2026-34347
HIGH 7.0
Windows Win32k Elevation of Privilege Vulnerability |
|
CVE-2026-40410
HIGH 7.0
Windows SMB Client Elevation of Privilege Vulnerability |
|
CVE-2026-42825
HIGH 7.0
Windows Telephony Service Elevation of Privilege Vulnerability |
|
CVE-2026-33104
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an authorized attacker to elevate p… |
|
CVE-2026-33100
HIGH 7.0
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-32219
HIGH 7.0
Double free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-32150
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Function Discovery Service (fdwsd.dll) allows an authorized atta… |
|
CVE-2026-32093
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Function Discovery Service (fdwsd.dll) allows an authorized atta… |
|
CVE-2026-32086
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Function Discovery Service (fdwsd.dll) allows an authorized atta… |
|
CVE-2026-32087
HIGH 7.0
Heap-based buffer overflow in Function Discovery Service (fdwsd.dll) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-32082
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SSDP Service allows an authorized attacker to elevate pr… |
|
CVE-2026-32083
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SSDP Service allows an authorized attacker to elevate pr… |
|
CVE-2026-32080
HIGH 7.0
Use after free in Windows WalletService allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-32073
HIGH 7.0
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-32075
HIGH 7.0
Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-32070
HIGH 7.0
Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-32068
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SSDP Service allows an authorized attacker to elevate pr… |
|
CVE-2026-27929
HIGH 7.0
Time-of-check time-of-use (toctou) race condition in Windows LUAFV allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-27926
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Cloud Files Mini Filter Driver allows an authorized atta… |
|
CVE-2026-27922
HIGH 7.0
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-27921
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an authorized attacker to elevate privileg… |
|
CVE-2026-27917
HIGH 7.0
Use after free in Windows WFP NDIS Lightweight Filter Driver (wfplwfs.sys) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-27908
HIGH 7.0
Use after free in Windows TDI Translation Driver (tdx.sys) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-26182
HIGH 7.0
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-26177
HIGH 7.0
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-26173
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows an authoriz… |
|
CVE-2026-26174
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Server Update Service allows an authorized attacker to e… |
|
CVE-2026-26166
HIGH 7.0
Double free in Windows Shell allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-26165
HIGH 7.0
Use after free in Windows Shell allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-26152
HIGH 7.0
Insecure storage of sensitive information in Windows Cryptographic Services allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-25184
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Applocker Filter Driver (applockerfltr.sys) allows an authorized… |
|
CVE-2026-24285
HIGH 7.0
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-23671
HIGH 7.0
Windows Bluetooth RFCOM Protocol Driver Elevation of Privilege Vulnerability |
|
CVE-2026-24295
HIGH 7.0
Windows Device Association Service Elevation of Privilege Vulnerability |
|
CVE-2026-24296
HIGH 7.0
Windows Device Association Service Elevation of Privilege Vulnerability |
|
CVE-2026-25170
HIGH 7.0
Windows Hyper-V Elevation of Privilege Vulnerability |
|
CVE-2026-25171
HIGH 7.0
Windows Authentication Elevation of Privilege Vulnerability |
|
CVE-2026-25178
HIGH 7.0
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
|
CVE-2026-25179
HIGH 7.0
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
|
CVE-2026-21234
HIGH 7.0
Windows Connected Devices Platform Service Elevation of Privilege Vulnerability |
|
CVE-2026-21237
HIGH 7.0
Windows Subsystem for Linux Elevation of Privilege Vulnerability |
|
CVE-2026-21241
HIGH 7.0
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
|
CVE-2026-21242
HIGH 7.0
Windows Subsystem for Linux Elevation of Privilege Vulnerability |
|
CVE-2026-21253
HIGH 7.0
Mailslot File System Elevation of Privilege Vulnerability |
|
CVE-2026-21508
HIGH 7.0
Windows Storage Elevation of Privilege Vulnerability |
|
CVE-2026-21221
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Capability Access Management Service (camsvc) allows an authoriz… |
|
CVE-2026-20869
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Local Session Manager (LSM) allows an authorized attacke… |
|
CVE-2026-20863
HIGH 7.0
Double free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-20842
HIGH 7.0
Use after free in Windows DWM allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-20836
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Graphics Kernel allows an authorized attacker to elevate privile… |
|
CVE-2026-20814
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Graphics Kernel allows an authorized attacker to elevate privile… |
|
CVE-2026-20815
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Capability Access Management Service (camsvc) allows an authoriz… |
|
CVE-2026-20808
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Printer Association Object allows an authorized attacker to elev… |
|
CVE-2026-20830
HIGH 7.0
Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability |
|
CVE-2025-62569
HIGH 7.0
Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally. |
|
CVE-2025-62469
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Brokering File System allows an authorized attacker to… |
|
CVE-2025-62573
HIGH 7.0
DirectX Graphics Kernel Elevation of Privilege Vulnerability |
|
CVE-2025-59506
HIGH 7.0
DirectX Graphics Kernel Elevation of Privilege Vulnerability |
|
CVE-2025-59507
HIGH 7.0
Windows Speech Runtime Elevation of Privilege Vulnerability |
|
CVE-2025-59508
HIGH 7.0
Windows Speech Recognition Elevation of Privilege Vulnerability |
|
CVE-2025-59515
HIGH 7.0
Windows Broadcast DVR User Service Elevation of Privilege Vulnerability |
|
CVE-2025-60716
CRITICAL 7.0
DirectX Graphics Kernel Elevation of Privilege Vulnerability |
|
CVE-2025-60717
HIGH 7.0
Windows Broadcast DVR User Service Elevation of Privilege Vulnerability |
|
CVE-2025-60719
HIGH 7.0
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
|
CVE-2025-62213
HIGH 7.0
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
|
CVE-2025-62217
HIGH 7.0
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
|
CVE-2025-55689
HIGH 7.0
Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally. |
|
CVE-2025-55690
HIGH 7.0
Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally. |
|
CVE-2025-55691
HIGH 7.0
Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally. |
|
CVE-2025-55684
HIGH 7.0
Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally. |
|
CVE-2025-55686
HIGH 7.0
Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally. |
|
CVE-2025-55688
HIGH 7.0
Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally. |
|
CVE-2025-50174
HIGH 7.0
Use after free in Windows Device Association Broker service allows an authorized attacker to elevate privileges locally. |
|
CVE-2025-55331
HIGH 7.0
Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability |
|
CVE-2025-55340
HIGH 7.0
Windows Remote Desktop Protocol Security Feature Bypass |
|
CVE-2025-55678
HIGH 7.0
DirectX Graphics Kernel Elevation of Privilege Vulnerability |
|
CVE-2025-55681
HIGH 7.0
Desktop Window Manager Elevation of Privilege Vulnerability |
|
CVE-2025-55685
HIGH 7.0
Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability |
|
CVE-2025-58725
HIGH 7.0
Windows COM+ Event System Service Elevation of Privilege Vulnerability |
|
CVE-2025-58727
HIGH 7.0
Windows Connected Devices Platform Service Elevation of Privilege Vulnerability |
|
CVE-2025-58730
HIGH 7.0
Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability |
|
CVE-2025-58731
HIGH 7.0
Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability |
|
CVE-2025-58732
HIGH 7.0
Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability |
|
CVE-2025-58733
HIGH 7.0
Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability |
|
CVE-2025-58734
HIGH 7.0
Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability |
|
CVE-2025-58735
HIGH 7.0
Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability |
|
CVE-2025-58736
HIGH 7.0
Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability |
|
CVE-2025-58737
HIGH 7.0
Remote Desktop Protocol Remote Code Execution Vulnerability |
|
CVE-2025-58738
HIGH 7.0
Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability |
|
CVE-2025-59193
HIGH 7.0
Windows Management Services Elevation of Privilege Vulnerability |
|
CVE-2025-59194
HIGH 7.0
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2025-59195
HIGH 7.0
Windows Graphics Component Denial of Service Vulnerability |
|
CVE-2025-59196
HIGH 7.0
Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability |
|
CVE-2025-59202
HIGH 7.0
Windows Remote Desktop Services Elevation of Privilege Vulnerability |
|
CVE-2025-59205
HIGH 7.0
Windows Graphics Component Elevation of Privilege Vulnerability |
|
CVE-2025-59261
HIGH 7.0
Windows Graphics Component Elevation of Privilege Vulnerability |
|
CVE-2025-59282
HIGH 7.0
Internet Information Services (IIS) Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability |
|
CVE-2025-59289
HIGH 7.0
Windows Bluetooth Service Elevation of Privilege Vulnerability |
|
CVE-2025-59215
HIGH 7.0
Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally. |
|
CVE-2025-59216
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Graphics Component allows an authorized attacker to el… |
|
CVE-2025-54108
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Capability Access Management Service (camsvc) allows an authoriz… |
|
CVE-2025-54105
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Brokering File System allows an authorized attacker to… |
|
CVE-2025-49734
HIGH 7.0
PowerShell Direct Elevation of Privilege Vulnerability |
|
CVE-2025-53802
HIGH 7.0
Windows Bluetooth Service Elevation of Privilege Vulnerability |
|
CVE-2025-53807
HIGH 7.0
Windows Graphics Component Elevation of Privilege Vulnerability |
|
CVE-2025-54093
HIGH 7.0
Windows TCP/IP Driver Elevation of Privilege Vulnerability |
|
CVE-2025-54099
HIGH 7.0
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
|
CVE-2025-54112
HIGH 7.0
Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability |
|
CVE-2025-54114
HIGH 7.0
Windows Connected Devices Platform Service Elevation of Privilege Vulnerability |
|
CVE-2025-54115
HIGH 7.0
Windows Hyper-V Elevation of Privilege Vulnerability |
|
CVE-2025-55223
HIGH 7.0
DirectX Graphics Kernel Elevation of Privilege Vulnerability |
|
CVE-2025-59220
HIGH 7.0
Windows Bluetooth Service Elevation of Privilege Vulnerability |
|
CVE-2025-49762
HIGH 7.0
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
|
CVE-2025-50158
HIGH 7.0
Windows NTFS Information Disclosure Vulnerability |
|
CVE-2025-50167
HIGH 7.0
Windows Hyper-V Elevation of Privilege Vulnerability |
|
CVE-2025-53134
HIGH 7.0
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
|
CVE-2025-53135
HIGH 7.0
DirectX Graphics Kernel Elevation of Privilege Vulnerability |
|
CVE-2025-53137
HIGH 7.0
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
|
CVE-2025-53140
HIGH 7.0
Windows Kernel Transaction Manager Elevation of Privilege Vulnerability |
|
CVE-2025-53142
HIGH 7.0
Microsoft Brokering File System Elevation of Privilege Vulnerability |
|
CVE-2025-53147
HIGH 7.0
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
|
CVE-2025-53718
HIGH 7.0
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
|
CVE-2025-53721
HIGH 7.0
Windows Connected Devices Platform Service Elevation of Privilege Vulnerability |
|
CVE-2025-47975
HIGH 7.0
Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability |
|
CVE-2025-49678
HIGH 7.0
NTFS Elevation of Privilege Vulnerability |
|
CVE-2025-49727
HIGH 7.0
Win32k Elevation of Privilege Vulnerability |
|
CVE-2025-49744
Exploit
HIGH 7.0
Windows Graphics Component Elevation of Privilege Vulnerability |
|
CVE-2025-27468
HIGH 7.0
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability |
|
CVE-2025-29841
HIGH 7.0
Universal Print Management Service Elevation of Privilege Vulnerability |
|
CVE-2025-21191
HIGH 7.0
Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability |
|
CVE-2025-26640
HIGH 7.0
Windows Digital Media Elevation of Privilege Vulnerability |
|
CVE-2025-26649
HIGH 7.0
Windows Secure Channel Elevation of Privilege Vulnerability |
|
CVE-2025-26665
HIGH 7.0
Windows upnphost.dll Elevation of Privilege Vulnerability |
|
CVE-2025-27478
HIGH 7.0
Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability |
|
CVE-2025-27492
HIGH 7.0
Windows Secure Channel Elevation of Privilege Vulnerability |
|
CVE-2025-27732
HIGH 7.0
Windows Graphics Component Elevation of Privilege Vulnerability |
|
CVE-2025-21184
HIGH 7.0
Windows Core Messaging Elevation of Privileges Vulnerability |
|
CVE-2025-21414
HIGH 7.0
Windows Core Messaging Elevation of Privileges Vulnerability |
|
CVE-2024-49084
HIGH 7.0
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2024-49095
HIGH 7.0
Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability |
|
CVE-2024-49097
HIGH 7.0
Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability |
|
CVE-2020-17103
HIGH 7.0
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
|
CVE-2026-97015
MEDIUM 6.8
Heap-based buffer overflow in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack. |
|
CVE-2026-96982
MEDIUM 6.8
Integer overflow or wraparound in HID Parser Library allows an unauthorized attacker to elevate privileges with a physical attack. |
|
CVE-2026-96979
MEDIUM 6.8
Integer overflow or wraparound in HID Parser Library allows an unauthorized attacker to elevate privileges with a physical attack. |
|
CVE-2026-96974
MEDIUM 6.8
Integer overflow or wraparound in HID Parser Library allows an unauthorized attacker to elevate privileges with a physical attack. |
|
CVE-2026-95905
MEDIUM 6.8
Heap-based buffer overflow in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack. |
|
CVE-2026-125135
MEDIUM 6.8
Out-of-bounds read in HID Parser Library allows an unauthorized attacker to elevate privileges with a physical attack. |
|
CVE-2026-122173
MEDIUM 6.8
Heap-based buffer overflow in HID Parser Library allows an unauthorized attacker to elevate privileges with a physical attack. |
|
CVE-2026-122167
MEDIUM 6.8
Heap-based buffer overflow in Windows USB Driver allows an unauthorized attacker to elevate privileges with a physical attack. |
|
CVE-2026-108404
HIGH 6.8
Windows CD-ROM Driver Remote Code Execution Vulnerability |
|
CVE-2026-108415
HIGH 6.8
Windows File Server Resource Management Service Elevation of Privilege Vulnerability |
|
CVE-2026-108416
HIGH 6.8
Windows File Server Resource Management Service Elevation of Privilege Vulnerability |
|
CVE-2026-112755
HIGH 6.8
Windows RNDIS Elevation of Privilege Vulnerability |
|
CVE-2026-118143
HIGH 6.8
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2026-119823
HIGH 6.8
Windows Storport Miniport Driver Remote Code Execution Vulnerability |
|
CVE-2026-119829
HIGH 6.8
Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability |
|
CVE-2026-119830
HIGH 6.8
Windows Storport Miniport Driver Elevation of Privilege Vulnerability |
|
CVE-2026-119884
HIGH 6.8
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2026-119885
HIGH 6.8
Windows Storport Miniport Driver Elevation of Privilege Vulnerability |
|
CVE-2026-119918
HIGH 6.8
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2026-119935
HIGH 6.8
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2026-96863
MEDIUM 6.8
Heap-based buffer overflow in Windows Storage Port Driver allows an unauthorized attacker to elevate privileges with a physical attack. |
|
CVE-2026-85323
MEDIUM 6.8
Weak authentication in Network Device Enrollment Service (NDES) allows an authorized attacker to perform spoofing over a network. |
|
CVE-2026-83895
MEDIUM 6.8
Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an unauthorized attacker to elevate privileges with a physical attack. |
|
CVE-2026-83776
MEDIUM 6.8
Out-of-bounds read in Microsoft Bluetooth Driver allows an unauthorized attacker to elevate privileges with a physical attack. |
|
CVE-2026-83573
MEDIUM 6.8
Integer overflow or wraparound in Windows Kernel Mode Driver allows an unauthorized attacker to elevate privileges with a physical attack. |
|
CVE-2026-69958
MEDIUM 6.8
Heap-based buffer overflow in Windows Overlay Filter allows an unauthorized attacker to execute code with a physical attack. |
|
CVE-2026-69947
MEDIUM 6.8
Heap-based buffer overflow in Windows Overlay Filter allows an unauthorized attacker to execute code with a physical attack. |
|
CVE-2026-59116
MEDIUM 6.8
Use of a broken or risky cryptographic algorithm in Windows Remote Desktop allows an unauthorized attacker to bypass a security feature over a network. |
|
CVE-2026-102206
MEDIUM 6.8
Heap-based buffer overflow in Windows Portable Device MTP Driver allows an unauthorized attacker to elevate privileges with a physical attack. |
|
CVE-2026-102188
MEDIUM 6.8
Untrusted pointer dereference in Windows Storage Port Driver allows an unauthorized attacker to elevate privileges with a physical attack. |
|
CVE-2026-78451
MEDIUM 6.8
Untrusted pointer dereference in Microsoft Windows SCSI Class System File allows an unauthorized attacker to elevate privileges with a physical attack. |
|
CVE-2026-77892
MEDIUM 6.8
No cwe for this issue in Windows Boot Manager allows an unauthorized attacker to elevate privileges with a physical attack. |
|
CVE-2026-72999
MEDIUM 6.8
Out-of-bounds read in Windows USB Hub Driver allows an unauthorized attacker to elevate privileges with a physical attack. |
|
CVE-2026-72985
MEDIUM 6.8
Heap-based buffer overflow in Windows Volume Shadow Copy allows an unauthorized attacker to elevate privileges with a physical attack. |
|
CVE-2026-71350
MEDIUM 6.8
Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code with a physical attack. |
|
CVE-2026-71348
MEDIUM 6.8
Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code with a physical attack. |
|
CVE-2026-71349
MEDIUM 6.8
Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code with a physical attack. |
|
CVE-2026-71329
MEDIUM 6.8
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code with a physical attack. |
|
CVE-2026-69566
MEDIUM 6.8
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code with a physical attack. |
|
CVE-2026-69490
MEDIUM 6.8
Out-of-bounds read in Windows USB Mass Storage Class Driver allows an unauthorized attacker to elevate privileges with a physical attack. |
|
CVE-2026-69415
MEDIUM 6.8
Missing authentication for critical function in Windows DHCP Server allows an authorized attacker to elevate privileges over a network. |
|
CVE-2026-68833
MEDIUM 6.8
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code with a physical attack. |
|
CVE-2026-62702
MEDIUM 6.8
Null pointer dereference in Windows Graphics Kernel allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-62699
MEDIUM 6.8
Null pointer dereference in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to execute code locally. |
|
CVE-2026-58528
MEDIUM 6.8
Out-of-bounds read in Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker to disclose information with a physical attack. |
|
CVE-2026-50668
MEDIUM 6.8
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to elevate privileges with a physical attack. |
|
CVE-2026-50492
MEDIUM 6.8
Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker to execute code with a physical attack. |
|
CVE-2026-50426
MEDIUM 6.8
Relative path traversal in DNS Server allows an authorized attacker to execute code over an adjacent network. |
|
CVE-2026-50298
MEDIUM 6.8
Integer overflow or wraparound in Windows Spaceport.sys allows an unauthorized attacker to elevate privileges with a physical attack. |
|
CVE-2026-50299
MEDIUM 6.8
Integer overflow or wraparound in Windows Storage Spaces Direct allows an unauthorized attacker to execute code with a physical attack. |
|
CVE-2026-49168
MEDIUM 6.8
Integer overflow or wraparound in Windows Storage Spaces Direct allows an unauthorized attacker to elevate privileges with a physical attack. |
|
CVE-2026-50507
MEDIUM 6.8
Missing authentication for critical function in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack. |
|
CVE-2026-45608
MEDIUM 6.8
Out-of-bounds read in Windows DHCP Client allows an unauthorized attacker to disclose information locally. |
|
CVE-2026-45585
MEDIUM 6.8
Microsoft is aware of a security feature bypass vulnerability in Windows publicly referred to as "YellowKey". The proof of concept for this vulnerabi… |
|
CVE-2026-32223
MEDIUM 6.8
Heap-based buffer overflow in Windows USB Print Driver allows an unauthorized attacker to elevate privileges with a physical attack. |
|
CVE-2025-49751
HIGH 6.8
Windows Hyper-V Denial of Service Vulnerability |
|
CVE-2025-47999
HIGH 6.8
Windows Hyper-V Denial of Service Vulnerability |
|
CVE-2025-48001
HIGH 6.8
Windows BitLocker Security Feature Bypass Vulnerability |
|
CVE-2025-48003
HIGH 6.8
Windows BitLocker Security Feature Bypass Vulnerability |
|
CVE-2025-48800
HIGH 6.8
Windows BitLocker Security Feature Bypass Vulnerability |
|
CVE-2025-48804
HIGH 6.8
Windows BitLocker Security Feature Bypass Vulnerability |
|
CVE-2025-48818
HIGH 6.8
Windows BitLocker Security Feature Bypass Vulnerability |
|
CVE-2025-26637
HIGH 6.8
Windows BitLocker Security Feature Bypass Vulnerability |
|
CVE-2025-21349
HIGH 6.8
Windows Remote Desktop Configuration Service Tampering Vulnerability |
|
CVE-2025-21211
HIGH 6.8
Secure Boot Security Feature Bypass Vulnerability |
|
CVE-2024-49073
HIGH 6.8
Windows Mobile Broadband Driver Elevation of Privilege Vulnerability |
|
CVE-2024-49077
HIGH 6.8
Windows Mobile Broadband Driver Elevation of Privilege Vulnerability |
|
CVE-2024-49078
HIGH 6.8
Windows Mobile Broadband Driver Elevation of Privilege Vulnerability |
|
CVE-2024-49082
HIGH 6.8
Windows File Explorer Information Disclosure Vulnerability |
|
CVE-2024-49083
HIGH 6.8
Windows Mobile Broadband Driver Elevation of Privilege Vulnerability |
|
CVE-2024-49092
HIGH 6.8
Windows Mobile Broadband Driver Elevation of Privilege Vulnerability |
|
CVE-2024-49110
HIGH 6.8
Windows Mobile Broadband Driver Elevation of Privilege Vulnerability |
|
CVE-2024-43449
HIGH 6.8
Windows USB Video Class System Driver Elevation of Privilege Vulnerability |
|
CVE-2024-43634
HIGH 6.8
Windows USB Video Class System Driver Elevation of Privilege Vulnerability |
|
CVE-2024-43637
HIGH 6.8
Windows USB Video Class System Driver Elevation of Privilege Vulnerability |
|
CVE-2024-43638
HIGH 6.8
Windows USB Video Class System Driver Elevation of Privilege Vulnerability |
|
CVE-2024-43643
HIGH 6.8
Windows USB Video Class System Driver Elevation of Privilege Vulnerability |
|
CVE-2026-96179
MEDIUM 6.7
Use after free in DNS Server allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-95910
MEDIUM 6.7
Improper certificate validation in Windows Hyper-V allows an authorized attacker to bypass a security feature locally. |
|
CVE-2026-112980
HIGH 6.7
Windows Print Spooler Components Elevation of Privilege Vulnerability |
|
CVE-2026-119852
HIGH 6.7
Windows Installer Elevation of Privilege Vulnerability |
|
CVE-2026-119912
HIGH 6.7
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2026-119914
HIGH 6.7
Windows Setup and Deployment Elevation of Privilege Vulnerability |
|
CVE-2026-96938
MEDIUM 6.7
Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88143
MEDIUM 6.7
Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85333
MEDIUM 6.7
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Performance Monitor allows an authorized attacker to ele… |
|
CVE-2026-83706
MEDIUM 6.7
Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69902
MEDIUM 6.7
Untrusted pointer dereference in Windows NTFS allows an authorized attacker to execute code locally. |
|
CVE-2026-72948
MEDIUM 6.7
Relative path traversal in Windows DNS allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-72935
MEDIUM 6.7
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-72927
MEDIUM 6.7
Heap-based buffer overflow in Winsock allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-71339
MEDIUM 6.7
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69449
MEDIUM 6.7
Heap-based buffer overflow in Windows BitLocker allows an authorized attacker to execute code locally. |
|
CVE-2026-69373
MEDIUM 6.7
Integer overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69350
MEDIUM 6.7
Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70330
MEDIUM 6.7
Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70304
MEDIUM 6.7
Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-65799
MEDIUM 6.7
Integer overflow or wraparound in Windows DNS allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-65795
MEDIUM 6.7
Relative path traversal in Windows DNS allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-65797
MEDIUM 6.7
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-65798
MEDIUM 6.7
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-62881
MEDIUM 6.7
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-62883
MEDIUM 6.7
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-62769
MEDIUM 6.7
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-32170
MEDIUM 6.7
Double free in Windows Rich Text Edit allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-21530
HIGH 6.7
Windows Rich Text Edit Elevation of Privilege Vulnerability |
|
CVE-2026-41097
HIGH 6.7
Secure Boot Security Feature Bypass Vulnerability |
|
CVE-2026-20876
MEDIUM 6.7
Heap-based buffer overflow in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally. |
|
CVE-2025-53808
HIGH 6.7
Windows Defender Firewall Service Elevation of Privilege Vulnerability |
|
CVE-2025-53810
HIGH 6.7
Windows Defender Firewall Service Elevation of Privilege Vulnerability |
|
CVE-2025-54094
HIGH 6.7
Windows Defender Firewall Service Elevation of Privilege Vulnerability |
|
CVE-2025-54104
HIGH 6.7
Windows Defender Firewall Service Elevation of Privilege Vulnerability |
|
CVE-2025-54109
HIGH 6.7
Windows Defender Firewall Service Elevation of Privilege Vulnerability |
|
CVE-2025-54915
HIGH 6.7
Windows Defender Firewall Service Elevation of Privilege Vulnerability |
|
CVE-2025-55226
CRITICAL 6.7
Graphics Kernel Remote Code Execution Vulnerability |
|
CVE-2025-48807
CRITICAL 6.7
Windows Hyper-V Remote Code Execution Vulnerability |
|
CVE-2025-49743
HIGH 6.7
Windows Graphics Component Elevation of Privilege Vulnerability |
|
CVE-2025-48803
HIGH 6.7
Windows Virtualization-Based Security (VBS) Elevation of Privilege Vulnerability |
|
CVE-2025-48811
HIGH 6.7
Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability |
|
CVE-2025-3052
HIGH 6.7
Cert CC: CVE-2025-3052 InsydeH2O Secure Boot Bypass |
|
CVE-2025-26681
HIGH 6.7
Win32k Elevation of Privilege Vulnerability |
|
CVE-2024-7344
HIGH 6.7
Cert CC: CVE-2024-7344 Howyar Taiwan Secure Boot Bypass |
|
CVE-2024-43631
HIGH 6.7
Windows Secure Kernel Mode Elevation of Privilege Vulnerability |
|
CVE-2024-43646
HIGH 6.7
Windows Secure Kernel Mode Elevation of Privilege Vulnerability |
|
CVE-2023-24932
HIGH 6.7
Secure Boot Security Feature Bypass Vulnerability |
|
CVE-2026-95889
MEDIUM 6.6
Untrusted pointer dereference in Windows Storage allows an authorized attacker to elevate privileges with a physical attack. |
|
CVE-2026-105018
HIGH 6.6
Windows Partition Management Driver Elevation of Privilege Vulnerability |
|
CVE-2026-112969
HIGH 6.6
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2026-112984
HIGH 6.6
Windows USB Video Driver Elevation of Privilege Vulnerability |
|
CVE-2026-118144
HIGH 6.6
Windows Smart Card Elevation of Privilege Vulnerability |
|
CVE-2026-119383
HIGH 6.6
Windows Smart Card Elevation of Privilege Vulnerability |
|
CVE-2026-119394
HIGH 6.6
Windows Enhanced Storage Remote Code Execution Vulnerability |
|
CVE-2026-119937
HIGH 6.6
Kernel Streaming Service Driver Elevation of Privilege Vulnerability |
|
CVE-2026-85841
MEDIUM 6.6
Use after free in Windows DHCP Server allows an authorized attacker to execute code over a network. |
|
CVE-2026-69635
MEDIUM 6.6
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges with a physical attack. |
|
CVE-2026-69469
MEDIUM 6.6
Integer overflow or wraparound in Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker to elevate privileges with a physical attack. |
|
CVE-2026-61920
MEDIUM 6.6
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DNS allows an authorized attacker to execute code over a… |
|
CVE-2026-49804
MEDIUM 6.6
Heap-based buffer overflow in Windows USB Video Driver allows an unauthorized attacker to elevate privileges with a physical attack. |
|
CVE-2025-2884
MEDIUM 6.6
TCG TPM2.0 Reference implementation's CryptHmacSign helper function is vulnerable to Out-of-Bounds read due to the lack of validation the signature scheme with… |
|
CVE-2025-24987
HIGH 6.6
Windows USB Video Class System Driver Elevation of Privilege Vulnerability |
|
CVE-2025-24988
HIGH 6.6
Windows USB Video Class System Driver Elevation of Privilege Vulnerability |
|
CVE-2025-21226
HIGH 6.6
Windows Digital Media Elevation of Privilege Vulnerability |
|
CVE-2025-21227
HIGH 6.6
Windows Digital Media Elevation of Privilege Vulnerability |
|
CVE-2025-21228
HIGH 6.6
Windows Digital Media Elevation of Privilege Vulnerability |
|
CVE-2025-21229
HIGH 6.6
Windows Digital Media Elevation of Privilege Vulnerability |
|
CVE-2025-21232
HIGH 6.6
Windows Digital Media Elevation of Privilege Vulnerability |
|
CVE-2025-21249
HIGH 6.6
Windows Digital Media Elevation of Privilege Vulnerability |
|
CVE-2025-21255
HIGH 6.6
Windows Digital Media Elevation of Privilege Vulnerability |
|
CVE-2025-21256
HIGH 6.6
Windows Digital Media Elevation of Privilege Vulnerability |
|
CVE-2025-21258
HIGH 6.6
Windows Digital Media Elevation of Privilege Vulnerability |
|
CVE-2025-21260
HIGH 6.6
Windows Digital Media Elevation of Privilege Vulnerability |
|
CVE-2025-21261
HIGH 6.6
Windows Digital Media Elevation of Privilege Vulnerability |
|
CVE-2025-21263
HIGH 6.6
Windows Digital Media Elevation of Privilege Vulnerability |
|
CVE-2025-21265
HIGH 6.6
Windows Digital Media Elevation of Privilege Vulnerability |
|
CVE-2025-21310
HIGH 6.6
Windows Digital Media Elevation of Privilege Vulnerability |
|
CVE-2025-21324
HIGH 6.6
Windows Digital Media Elevation of Privilege Vulnerability |
|
CVE-2025-21327
HIGH 6.6
Windows Digital Media Elevation of Privilege Vulnerability |
|
CVE-2025-21341
HIGH 6.6
Windows Digital Media Elevation of Privilege Vulnerability |
|
CVE-2024-49081
HIGH 6.6
Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability |
|
CVE-2024-49094
HIGH 6.6
Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability |
|
CVE-2024-49101
HIGH 6.6
Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability |
|
CVE-2024-49109
HIGH 6.6
Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability |
|
CVE-2024-49111
HIGH 6.6
Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability |
|
CVE-2026-96086
MEDIUM 6.5
Out-of-bounds read in Windows WLAN Service allows an unauthorized attacker to deny service over an adjacent network. |
|
CVE-2026-96082
MEDIUM 6.5
Out-of-bounds read in Windows Kerberos allows an authorized attacker to deny service over a network. |
|
CVE-2026-96018
MEDIUM 6.5
Weak authentication in Windows AppContainer allows an authorized attacker to disclose information locally. |
|
CVE-2026-105559
HIGH 6.5
Windows Active Directory Denial of Service Vulnerability |
|
CVE-2026-105568
HIGH 6.5
Windows Active Directory Domain Services Denial of Service Vulnerability |
|
CVE-2026-108417
HIGH 6.5
Windows Remote Desktop Client Information Disclosure Vulnerability |
|
CVE-2026-108418
HIGH 6.5
Windows Remote Desktop Client Information Disclosure Vulnerability |
|
CVE-2026-108419
HIGH 6.5
Windows Remote Desktop Client Information Disclosure Vulnerability |
|
CVE-2026-108424
HIGH 6.5
Windows GDI Information Disclosure Vulnerability |
|
CVE-2026-112795
HIGH 6.5
Windows Security Account Manager Denial of Service Vulnerability |
|
CVE-2026-112807
HIGH 6.5
Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability |
|
CVE-2026-112808
HIGH 6.5
Windows Print Spooler Components Information Disclosure Vulnerability |
|
CVE-2026-113818
HIGH 6.5
Windows Deployment Services Information Disclosure Vulnerability |
|
CVE-2026-116699
HIGH 6.5
Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability |
|
CVE-2026-118214
HIGH 6.5
Windows Advanced Rasterization Platform Information Disclosure Vulnerability |
|
CVE-2026-118739
HIGH 6.5
Windows DHCP Client Denial of Service Vulnerability |
|
CVE-2026-119396
HIGH 6.5
Windows Remote Access API Tampering Vulnerability |
|
CVE-2026-119887
HIGH 6.5
Windows Installer Information Disclosure Vulnerability |
|
CVE-2026-119940
HIGH 6.5
Windows Kerberos Denial of Service Vulnerability |
|
CVE-2026-97844
MEDIUM 6.5
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
|
CVE-2026-97839
MEDIUM 6.5
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
|
CVE-2026-97840
MEDIUM 6.5
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
|
CVE-2026-97841
MEDIUM 6.5
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
|
CVE-2026-97842
MEDIUM 6.5
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
|
CVE-2026-97843
MEDIUM 6.5
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
|
CVE-2026-97833
MEDIUM 6.5
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
|
CVE-2026-97834
MEDIUM 6.5
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
|
CVE-2026-97835
MEDIUM 6.5
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
|
CVE-2026-97836
MEDIUM 6.5
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
|
CVE-2026-97837
MEDIUM 6.5
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
|
CVE-2026-97838
MEDIUM 6.5
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
|
CVE-2026-97828
MEDIUM 6.5
Buffer over-read in DNS Server allows an authorized attacker to disclose information over a network. |
|
CVE-2026-97829
MEDIUM 6.5
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
|
CVE-2026-97831
MEDIUM 6.5
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
|
CVE-2026-97832
MEDIUM 6.5
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
|
CVE-2026-97823
MEDIUM 6.5
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
|
CVE-2026-97824
MEDIUM 6.5
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
|
CVE-2026-97825
MEDIUM 6.5
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
|
CVE-2026-97826
MEDIUM 6.5
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
|
CVE-2026-97827
MEDIUM 6.5
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
|
CVE-2026-97817
MEDIUM 6.5
Heap-based buffer overflow in DNS Server allows an authorized attacker to disclose information over a network. |
|
CVE-2026-97819
MEDIUM 6.5
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
|
CVE-2026-97820
MEDIUM 6.5
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
|
CVE-2026-97821
MEDIUM 6.5
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
|
CVE-2026-97822
MEDIUM 6.5
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
|
CVE-2026-97813
MEDIUM 6.5
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to disclose information over a network. |
|
CVE-2026-88137
MEDIUM 6.5
Files or directories accessible to external parties in WebDAV allows an authorized attacker to disclose information over a network. |
|
CVE-2026-88129
MEDIUM 6.5
Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network. |
|
CVE-2026-88130
MEDIUM 6.5
Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network. |
|
CVE-2026-88123
MEDIUM 6.5
Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network. |
|
CVE-2026-88125
MEDIUM 6.5
Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network. |
|
CVE-2026-88122
MEDIUM 6.5
Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network. |
|
CVE-2026-87714
MEDIUM 6.5
Missing authorization in WebDAV allows an authorized attacker to bypass a security feature over a network. |
|
CVE-2026-85859
MEDIUM 6.5
Null pointer dereference in Windows Message Queuing Queue Manager allows an authorized attacker to deny service over a network. |
|
CVE-2026-85847
MEDIUM 6.5
Out-of-bounds read in Windows Print Spooler Components allows an unauthorized attacker to disclose information over a network. |
|
CVE-2026-85840
MEDIUM 6.5
Files or directories accessible to external parties in Windows Event Viewer allows an authorized attacker to disclose information over a network. |
|
CVE-2026-85821
MEDIUM 6.5
Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally. |
|
CVE-2026-85805
MEDIUM 6.5
Improperly implemented security check for standard in Windows PowerShell allows an unauthorized attacker to bypass a security feature over a network. |
|
CVE-2026-85797
MEDIUM 6.5
Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information over a network. |
|
CVE-2026-85337
MEDIUM 6.5
Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network. |
|
CVE-2026-85331
MEDIUM 6.5
Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information over a network. |
|
CVE-2026-84007
MEDIUM 6.5
Out-of-bounds read in Remote Desktop Gateway Service allows an authorized attacker to disclose information over a network. |
|
CVE-2026-83906
MEDIUM 6.5
Incorrect implementation of authentication algorithm in Windows Shell allows an unauthorized attacker to perform spoofing over a network. |
|
CVE-2026-83888
MEDIUM 6.5
Buffer over-read in Windows CD-ROM Driver allows an unauthorized attacker to elevate privileges over a network. |
|
CVE-2026-83703
MEDIUM 6.5
Out-of-bounds read in Windows Wi-Fi Driver allows an unauthorized attacker to deny service over an adjacent network. |
|
CVE-2026-83683
MEDIUM 6.5
Absolute path traversal in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information over a network. |
|
CVE-2026-83685
MEDIUM 6.5
Buffer over-read in Windows IKE Extension allows an authorized attacker to deny service over a network. |
|
CVE-2026-83671
MEDIUM 6.5
Out-of-bounds read in Windows Hyper-V allows an authorized attacker to disclose information locally. |
|
CVE-2026-83667
MEDIUM 6.5
Out-of-bounds read in Active Directory Domain Services allows an authorized attacker to deny service over a network. |
|
CVE-2026-83649
MEDIUM 6.5
Out-of-bounds read in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to deny service over a network. |
|
CVE-2026-83651
MEDIUM 6.5
Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information over a network. |
|
CVE-2026-83648
MEDIUM 6.5
Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network. |
|
CVE-2026-83636
MEDIUM 6.5
Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally. |
|
CVE-2026-83521
MEDIUM 6.5
Out-of-bounds read in Windows IKE Extension allows an authorized attacker to disclose information over a network. |
|
CVE-2026-83515
MEDIUM 6.5
Use of uninitialized resource in RPC Runtime allows an unauthorized attacker to disclose information over a network. |
|
CVE-2026-70248
MEDIUM 6.5
Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally. |
|
CVE-2026-70244
MEDIUM 6.5
Out-of-bounds read in DNS Server allows an unauthorized attacker to disclose information over a network. |
|
CVE-2026-70170
MEDIUM 6.5
Untrusted pointer dereference in Windows Kernel allows an authorized attacker to deny service over a network. |
|
CVE-2026-70166
MEDIUM 6.5
Out-of-bounds read in Windows DNS allows an authorized attacker to deny service over a network. |
|
CVE-2026-70119
MEDIUM 6.5
Out-of-bounds read in Windows DNS allows an authorized attacker to execute code over a network. |
|
CVE-2026-70072
MEDIUM 6.5
Allocation of resources without limits or throttling in Windows Netlogon allows an authorized attacker to deny service over a network. |
|
CVE-2026-69968
MEDIUM 6.5
Relative path traversal in Windows Libarchive allows an unauthorized attacker to perform tampering over a network. |
|
CVE-2026-69973
MEDIUM 6.5
Improper limitation of a pathname to a restricted directory ('path traversal') in Windows Libarchive allows an unauthorized attacker to perform tampering over … |
|
CVE-2026-69955
MEDIUM 6.5
Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information over a network. |
|
CVE-2026-69940
MEDIUM 6.5
Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information over a network. |
|
CVE-2026-108127
MEDIUM 6.5
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
|
CVE-2026-108128
MEDIUM 6.5
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
|
CVE-2026-108129
MEDIUM 6.5
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
|
CVE-2026-103576
MEDIUM 6.5
Url redirection to untrusted site ('open redirect') in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a … |
|
CVE-2026-102199
MEDIUM 6.5
Stack-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-78453
MEDIUM 6.5
Integer underflow (wrap or wraparound) in Microsoft Windows SCSI Class System File allows an unauthorized attacker to disclose information over a network. |
|
CVE-2026-77896
MEDIUM 6.5
Integer overflow or wraparound in Remote Desktop Client allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-72942
MEDIUM 6.5
Out-of-bounds read in Windows Spaceport.sys allows an unauthorized attacker to disclose information over a network. |
|
CVE-2026-72939
MEDIUM 6.5
Null pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to deny service over a network. |
|
CVE-2026-70019
MEDIUM 6.5
Windows hard link in Windows Compressed Folder allows an unauthorized attacker to disclose information over a network. |
|
CVE-2026-69839
MEDIUM 6.5
Uncaught exception in Windows iSCSI Target Service allows an authorized attacker to deny service over a network. |
|
CVE-2026-69781
MEDIUM 6.5
Missing release of memory after effective lifetime in Windows DHCP Client allows an unauthorized attacker to deny service over an adjacent network. |
|
CVE-2026-69624
MEDIUM 6.5
Incomplete list of disallowed inputs in Active Directory Certificate Services (AD CS) allows an authorized attacker to perform tampering over a network. |
|
CVE-2026-69497
MEDIUM 6.5
Missing release of memory after effective lifetime in Windows DHCP Server allows an authorized attacker to deny service over a network. |
|
CVE-2026-69395
MEDIUM 6.5
Use of externally-controlled format string in Active Directory Certificate Services (AD CS) allows an authorized attacker to disclose information over a networ… |
|
CVE-2026-69374
MEDIUM 6.5
Allocation of resources without limits or throttling in Windows SMB Server allows an authorized attacker to deny service over a network. |
|
CVE-2026-69297
MEDIUM 6.5
Storing passwords in a recoverable format in Windows DHCP Server allows an authorized attacker to disclose information over a network. |
|
CVE-2026-68898
MEDIUM 6.5
Out-of-bounds read in Windows iSCSI allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-69267
MEDIUM 6.5
Insufficient granularity of access control in Windows Connected User Experiences and Telemetry allows an authorized attacker to disclose information locally. |
|
CVE-2026-62801
MEDIUM 6.5
Improper limitation of a pathname to a restricted directory ('path traversal') in Windows PowerShell allows an unauthorized attacker to bypass a security featu… |
|
CVE-2026-62762
MEDIUM 6.5
Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network. |
|
CVE-2026-65794
MEDIUM 6.5
Buffer over-read in Windows SMB Client allows an unauthorized attacker to disclose information over a network. |
|
CVE-2026-65785
MEDIUM 6.5
Uncontrolled resource consumption in Windows DHCP Client allows an unauthorized attacker to deny service over an adjacent network. |
|
CVE-2026-62814
MEDIUM 6.5
Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network. |
|
CVE-2026-62782
MEDIUM 6.5
Out-of-bounds read in Windows SMB Client allows an unauthorized attacker to disclose information over a network. |
|
CVE-2026-62750
MEDIUM 6.5
Partial string comparison in Windows HTTP Protocol Stack allows an unauthorized attacker to perform tampering over an adjacent network. |
|
CVE-2026-62742
MEDIUM 6.5
Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network. |
|
CVE-2026-62745
MEDIUM 6.5
Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network. |
|
CVE-2026-62718
MEDIUM 6.5
Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network. |
|
CVE-2026-62720
MEDIUM 6.5
Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network. |
|
CVE-2026-62714
MEDIUM 6.5
Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network. |
|
CVE-2026-62715
MEDIUM 6.5
Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network. |
|
CVE-2026-62716
MEDIUM 6.5
Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network. |
|
CVE-2026-61921
MEDIUM 6.5
Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network. |
|
CVE-2026-61924
MEDIUM 6.5
Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network. |
|
CVE-2026-61918
MEDIUM 6.5
Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network. |
|
CVE-2026-59138
MEDIUM 6.5
Null pointer dereference in Microsoft Remote Registry Service allows an authorized attacker to deny service over a network. |
|
CVE-2026-61345
MEDIUM 6.5
Null pointer dereference in Microsoft Remote Registry Service allows an authorized attacker to deny service over a network. |
|
CVE-2026-58546
MEDIUM 6.5
Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network. |
|
CVE-2026-58539
MEDIUM 6.5
Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network. |
|
CVE-2026-58533
MEDIUM 6.5
Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network. |
|
CVE-2026-58535
MEDIUM 6.5
Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network. |
|
CVE-2026-57982
MEDIUM 6.5
Use of uninitialized resource in Windows RDP allows an authorized attacker to disclose information over a network. |
|
CVE-2026-56168
MEDIUM 6.5
Null pointer dereference in Windows SMB Server allows an authorized attacker to deny service over a network. |
|
CVE-2026-54126
MEDIUM 6.5
Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network. |
|
CVE-2026-50504
MEDIUM 6.5
Buffer over-read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network. |
|
CVE-2026-50497
MEDIUM 6.5
Off-by-one error in Windows Remote Desktop Protocol allows an unauthorized attacker to disclose information over a network. |
|
CVE-2026-50445
MEDIUM 6.5
Buffer over-read in Windows RDP allows an unauthorized attacker to disclose information over a network. |
|
CVE-2026-50376
MEDIUM 6.5
Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network. |
|
CVE-2026-50366
MEDIUM 6.5
Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network. |
|
CVE-2026-57976
MEDIUM 6.5
Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network. |
|
CVE-2026-57979
MEDIUM 6.5
Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network. |
|
CVE-2026-55003
MEDIUM 6.5
Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network. |
|
CVE-2026-49799
MEDIUM 6.5
Uncontrolled resource consumption in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to deny service over a network. |
|
CVE-2026-34348
MEDIUM 6.5
Protection mechanism failure in Windows Event Logging Service allows an authorized attacker to disclose information over a network. |
|
CVE-2026-42907
MEDIUM 6.5
Exposure of sensitive information to an unauthorized actor in Windows Shell allows an authorized attacker to disclose information over a network. |
|
CVE-2026-42903
MEDIUM 6.5
Null pointer dereference in Windows Kerberos allows an authorized attacker to deny service over a network. |
|
CVE-2026-34350
MEDIUM 6.5
Null pointer dereference in Windows Storport Miniport Driver allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-35422
HIGH 6.5
Windows TCP/IP Driver Security Feature Bypass Vulnerability |
|
CVE-2026-32151
MEDIUM 6.5
Exposure of sensitive information to an unauthorized actor in Windows Shell allows an authorized attacker to disclose information over a network. |
|
CVE-2026-27925
MEDIUM 6.5
Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an unauthorized attacker to disclose information over an adjacent network. |
|
CVE-2026-26155
MEDIUM 6.5
Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability |
|
CVE-2026-20925
MEDIUM 6.5
External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network. |
|
CVE-2026-20872
MEDIUM 6.5
External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network. |
|
CVE-2026-20847
MEDIUM 6.5
Exposure of sensitive information to an unauthorized actor in Windows Shell allows an authorized attacker to perform spoofing over a network. |
|
CVE-2026-20812
MEDIUM 6.5
Improper input validation in Windows LDAP - Lightweight Directory Access Protocol allows an authorized attacker to perform tampering over a network. |
|
CVE-2025-62473
MEDIUM 6.5
Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network. |
|
CVE-2025-62463
MEDIUM 6.5
Null pointer dereference in Windows DirectX allows an authorized attacker to deny service locally. |
|
CVE-2025-62465
HIGH 6.5
DirectX Graphics Kernel Denial of Service Vulnerability |
|
CVE-2025-64670
HIGH 6.5
Windows DirectX Information Disclosure Vulnerability |
|
CVE-2025-60708
HIGH 6.5
Storvsp.sys Driver Denial of Service Vulnerability |
|
CVE-2025-59257
MEDIUM 6.5
Improper validation of specified type of input in Windows Local Session Manager (LSM) allows an authorized attacker to deny service over a network. |
|
CVE-2025-55700
HIGH 6.5
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability |
|
CVE-2025-58717
HIGH 6.5
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability |
|
CVE-2025-58729
HIGH 6.5
Windows Local Session Manager (LSM) Denial of Service Vulnerability |
|
CVE-2025-58739
HIGH 6.5
Microsoft Windows File Explorer Spoofing Vulnerability |
|
CVE-2025-59185
HIGH 6.5
NTLM Hash Disclosure Spoofing Vulnerability |
|
CVE-2025-59214
HIGH 6.5
Microsoft Windows File Explorer Spoofing Vulnerability |
|
CVE-2025-59244
HIGH 6.5
NTLM Hash Disclosure Spoofing Vulnerability |
|
CVE-2025-59259
HIGH 6.5
Windows Local Session Manager (LSM) Denial of Service Vulnerability |
|
CVE-2025-53809
MEDIUM 6.5
Improper input validation in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to deny service over a network. |
|
CVE-2025-53796
HIGH 6.5
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability |
|
CVE-2025-53797
HIGH 6.5
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability |
|
CVE-2025-53798
HIGH 6.5
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability |
|
CVE-2025-53806
HIGH 6.5
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability |
|
CVE-2025-54095
HIGH 6.5
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability |
|
CVE-2025-54096
HIGH 6.5
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability |
|
CVE-2025-54097
HIGH 6.5
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability |
|
CVE-2025-55225
HIGH 6.5
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability |
|
CVE-2025-50154
Exploit
HIGH 6.5
Microsoft Windows File Explorer Spoofing Vulnerability |
|
CVE-2025-50166
HIGH 6.5
Windows Distributed Transaction Coordinator (MSDTC) Information Disclosure Vulnerability |
|
CVE-2025-50172
HIGH 6.5
DirectX Graphics Kernel Denial of Service Vulnerability |
|
CVE-2025-53716
HIGH 6.5
Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability |
|
CVE-2025-47978
HIGH 6.5
Windows Kerberos Denial of Service Vulnerability |
|
CVE-2025-49670
HIGH 6.5
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2025-49671
HIGH 6.5
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability |
|
CVE-2025-49681
HIGH 6.5
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability |
|
CVE-2025-32715
HIGH 6.5
Remote Desktop Protocol Client Information Disclosure Vulnerability |
|
CVE-2025-33057
HIGH 6.5
Windows Local Security Authority (LSA) Denial of Service Vulnerability |
|
CVE-2025-29830
HIGH 6.5
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability |
|
CVE-2025-29832
HIGH 6.5
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability |
|
CVE-2025-29835
HIGH 6.5
Windows Remote Access Connection Manager Information Disclosure Vulnerability |
|
CVE-2025-29836
HIGH 6.5
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability |
|
CVE-2025-29958
HIGH 6.5
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability |
|
CVE-2025-29959
HIGH 6.5
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability |
|
CVE-2025-29960
HIGH 6.5
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability |
|
CVE-2025-29961
HIGH 6.5
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability |
|
CVE-2025-21197
HIGH 6.5
Windows NTFS Information Disclosure Vulnerability |
|
CVE-2025-21203
HIGH 6.5
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability |
|
CVE-2025-26651
HIGH 6.5
Windows Local Session Manager (LSM) Denial of Service Vulnerability |
|
CVE-2025-26664
HIGH 6.5
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability |
|
CVE-2025-26667
HIGH 6.5
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability |
|
CVE-2025-26672
HIGH 6.5
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability |
|
CVE-2025-26676
HIGH 6.5
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability |
|
CVE-2025-27474
HIGH 6.5
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability |
|
CVE-2025-27738
HIGH 6.5
Windows Resilient File System (ReFS) Information Disclosure Vulnerability |
|
CVE-2025-24071
Exploit
HIGH 6.5
Microsoft Windows File Explorer Spoofing Vulnerability |
|
CVE-2025-24996
HIGH 6.5
NTLM Hash Disclosure Spoofing Vulnerability |
|
CVE-2025-21212
HIGH 6.5
Internet Connection Sharing (ICS) Denial of Service Vulnerability |
|
CVE-2025-21216
HIGH 6.5
Internet Connection Sharing (ICS) Denial of Service Vulnerability |
|
CVE-2025-21254
HIGH 6.5
Internet Connection Sharing (ICS) Denial of Service Vulnerability |
|
CVE-2025-21352
HIGH 6.5
Internet Connection Sharing (ICS) Denial of Service Vulnerability |
|
CVE-2025-21377
HIGH 6.5
NTLM Hash Disclosure Spoofing Vulnerability |
|
CVE-2025-21193
HIGH 6.5
Active Directory Federation Server Spoofing Vulnerability |
|
CVE-2025-21217
HIGH 6.5
Windows NTLM Spoofing Vulnerability |
|
CVE-2025-21272
HIGH 6.5
Windows COM Server Information Disclosure Vulnerability |
|
CVE-2025-21288
HIGH 6.5
Windows COM Server Information Disclosure Vulnerability |
|
CVE-2025-21301
HIGH 6.5
Windows Geolocation Service Information Disclosure Vulnerability |
|
CVE-2025-21308
HIGH 6.5
Windows Themes Spoofing Vulnerability |
|
CVE-2025-21313
HIGH 6.5
Windows Security Account Manager (SAM) Denial of Service Vulnerability |
|
CVE-2025-21314
HIGH 6.5
Windows SmartScreen Spoofing Vulnerability |
|
CVE-2026-96992
MEDIUM 6.4
Use after free in Windows PCI Bus Driver allows an unauthorized attacker to elevate privileges with a physical attack. |
|
CVE-2026-96981
MEDIUM 6.4
Out-of-bounds write in Windows PCI Bus Driver allows an unauthorized attacker to elevate privileges with a physical attack. |
|
CVE-2026-88215
MEDIUM 6.4
Use after free in Windows Filtering Platform (WFP) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-105588
HIGH 6.4
Windows DHCP Server Elevation of Privilege Vulnerability |
|
CVE-2026-113864
CRITICAL 6.4
Windows Hyper-V Elevation of Privilege Vulnerability |
|
CVE-2026-119869
HIGH 6.4
Windows Failover Cluster Elevation of Privilege Vulnerability |
|
CVE-2026-119871
HIGH 6.4
Windows IP Translation Configuration Service Elevation of Privilege Vulnerability |
|
CVE-2026-119965
HIGH 6.4
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2026-105006
MEDIUM 6.4
Use after free in HID class driver allows an unauthorized attacker to elevate privileges with a physical attack. |
|
CVE-2026-77887
MEDIUM 6.4
Out-of-bounds read in Windows DHCP Server allows an authorized attacker to execute code locally. |
|
CVE-2026-77891
MEDIUM 6.4
Out-of-bounds read in Windows DHCP Server allows an authorized attacker to execute code locally. |
|
CVE-2026-71338
MEDIUM 6.4
Double free in Windows Failover Cluster allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70582
MEDIUM 6.4
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Instrumentation allows an authorized attacker… |
|
CVE-2026-69878
MEDIUM 6.4
Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code locally. |
|
CVE-2026-62708
MEDIUM 6.4
Use after free in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack. |
|
CVE-2026-57097
MEDIUM 6.4
Untrusted search path in Microsoft XML allows an unauthorized attacker to bypass a security feature with a physical attack. |
|
CVE-2026-55000
MEDIUM 6.4
Use after free in Windows USB Print Driver allows an unauthorized attacker to elevate privileges with a physical attack. |
|
CVE-2026-21265
MEDIUM 6.4
Windows Secure Boot stores Microsoft certificates in the UEFI KEK and DB. These original certificates are approaching expiration, and devices containing affect… |
|
CVE-2026-113763
HIGH 6.3
Windows DPAPI (Data Protection Application Programming Interface) Elevation of Privilege Vulnerability |
|
CVE-2026-119840
HIGH 6.3
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability |
|
CVE-2026-58543
MEDIUM 6.3
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Print Driver allows an authorized attacker to elevat… |
|
CVE-2026-50374
MEDIUM 6.3
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges with a physical attack. |
|
CVE-2026-50375
MEDIUM 6.3
Heap-based buffer overflow in Windows DirectX allows an authorized attacker to elevate privileges locally. |
|
CVE-2025-60723
HIGH 6.3
DirectX Graphics Kernel Denial of Service Vulnerability |
|
CVE-2025-48813
HIGH 6.3
Virtual Secure Mode Spoofing Vulnerability |
|
CVE-2026-85916
MEDIUM 6.2
Exposure of private personal information to an unauthorized actor in Azure Active Directory allows an unauthorized attacker to disclose information locally. |
|
CVE-2026-57095
MEDIUM 6.2
Exposure of sensitive information to an unauthorized actor in Windows Win32K allows an unauthorized attacker to elevate privileges locally. |
|
CVE-2026-50420
MEDIUM 6.2
Out-of-bounds read in Windows HTTP.sys allows an unauthorized attacker to disclose information locally. |
|
CVE-2026-49807
MEDIUM 6.2
Exposure of sensitive information to an unauthorized actor in Windows DirectX allows an unauthorized attacker to disclose information locally. |
|
CVE-2026-50294
MEDIUM 6.2
Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an unauthorized attacker to disclose information locally. |
|
CVE-2026-40380
HIGH 6.2
Windows Volume Manager Extension Driver Remote Code Execution Vulnerability |
|
CVE-2026-32072
MEDIUM 6.2
Improper authentication in Windows Active Directory allows an unauthorized attacker to perform spoofing locally. |
|
CVE-2026-25168
HIGH 6.2
Windows Graphics Component Denial of Service Vulnerability |
|
CVE-2026-25169
HIGH 6.2
Windows Graphics Component Denial of Service Vulnerability |
|
CVE-2026-20851
MEDIUM 6.2
Out-of-bounds read in Capability Access Management Service (camsvc) allows an unauthorized attacker to disclose information locally. |
|
CVE-2026-20821
MEDIUM 6.2
Exposure of sensitive information to an unauthorized actor in Windows Remote Procedure Call allows an unauthorized attacker to disclose information locally. |
|
CVE-2026-20818
HIGH 6.2
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2025-59258
HIGH 6.2
Windows Active Directory Federation Services (ADFS) Information Disclosure Vulnerability |
|
CVE-2025-47980
CRITICAL 6.2
Windows Imaging Component Information Disclosure Vulnerability |
|
CVE-2025-29955
HIGH 6.2
Windows Hyper-V Denial of Service Vulnerability |
|
CVE-2025-29957
HIGH 6.2
Windows Deployment Services Denial of Service Vulnerability |
|
CVE-2025-21278
HIGH 6.2
Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability |
|
CVE-2024-38203
HIGH 6.2
Windows Package Library Manager Information Disclosure Vulnerability |
|
CVE-2026-83500
MEDIUM 6.1
Url redirection to untrusted site ('open redirect') in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack. |
|
CVE-2026-50661
MEDIUM 6.1
Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack. |
|
CVE-2026-50495
MEDIUM 6.1
Improper access control in Microsoft Windows DNS allows an authorized attacker to perform tampering locally. |
|
CVE-2026-50453
MEDIUM 6.1
Out-of-bounds read in Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker to disclose information with a physical attack. |
|
CVE-2026-50383
MEDIUM 6.1
Buffer over-read in Windows Print Spooler Components allows an authorized attacker to disclose information locally. |
|
CVE-2026-49174
MEDIUM 6.1
Missing authentication for critical function in Microsoft Windows DNS allows an authorized attacker to perform tampering locally. |
|
CVE-2026-32088
MEDIUM 6.1
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Biometric Service allows an unauthorized attacker to byp… |
|
CVE-2026-26169
MEDIUM 6.1
Buffer over-read in Windows Kernel Memory allows an authorized attacker to disclose information locally. |
|
CVE-2025-55682
MEDIUM 6.1
Improper enforcement of behavioral workflow in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack. |
|
CVE-2025-55337
MEDIUM 6.1
Improper enforcement of behavioral workflow in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack. |
|
CVE-2025-55330
HIGH 6.1
Windows BitLocker Security Feature Bypass Vulnerability |
|
CVE-2025-55332
HIGH 6.1
Windows BitLocker Security Feature Bypass Vulnerability |
|
CVE-2025-55333
HIGH 6.1
Windows BitLocker Security Feature Bypass Vulnerability |
|
CVE-2025-55338
HIGH 6.1
Windows BitLocker Security Feature Bypass Vulnerability |
|
CVE-2025-21202
HIGH 6.1
Windows Recovery Environment Agent Elevation of Privilege Vulnerability |
|
CVE-2026-112757
HIGH 6.0
Windows Secure Kernel Mode Information Disclosure Vulnerability |
|
CVE-2026-119955
HIGH 6.0
Windows Hyper-V Denial of Service Vulnerability |
|
CVE-2026-25250
MEDIUM 6.0
EAZ EazyFix 12.9 allows a Security Feature Bypass related to a "Missing Cryptographic Step" associated with "Secure Boot disable." |
|
CVE-2026-58638
MEDIUM 6.0
Missing cryptographic step in Windows Boot Loader allows an authorized attacker to bypass a security feature locally. |
|
CVE-2025-27735
HIGH 6.0
Windows Virtualization-Based Security (VBS) Security Feature Bypass Vulnerability |
|
CVE-2025-21347
HIGH 6.0
Windows Deployment Services Denial of Service Vulnerability |
|
CVE-2026-96975
MEDIUM 5.9
Out-of-bounds read in DNS Server allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-95913
MEDIUM 5.9
Use after free in Windows Hyper-V allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-105557
HIGH 5.9
Windows DHCP Server Information Disclosure Vulnerability |
|
CVE-2026-108425
HIGH 5.9
Windows DNS Information Disclosure Vulnerability |
|
CVE-2026-116697
HIGH 5.9
Reliable Multicast Transport Driver (RMCAST) Denial of Service Vulnerability |
|
CVE-2026-118213
HIGH 5.9
Windows Deployment Services Information Disclosure Vulnerability |
|
CVE-2026-119404
HIGH 5.9
Windows Client for NFS Security Feature Bypass Vulnerability |
|
CVE-2026-119832
HIGH 5.9
Windows BitLocker Security Feature Bypass Vulnerability |
|
CVE-2026-119909
HIGH 5.9
Windows Internet Information Services Denial of Service Vulnerability |
|
CVE-2026-119936
HIGH 5.9
Windows Internet Information Services Denial of Service Vulnerability |
|
CVE-2026-119946
HIGH 5.9
HTTP.sys Information Disclosure Vulnerability |
|
CVE-2026-119972
HIGH 5.9
Remote Procedure Call Denial of Service Vulnerability |
|
CVE-2026-122474
HIGH 5.9
Windows Security Account Manager Remote Protocol Security Feature Bypass Vulnerability |
|
CVE-2026-96300
MEDIUM 5.9
Uncontrolled resource consumption in RPC Endpoint Mapper Service allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-88099
MEDIUM 5.9
Uncaught exception in Windows Failover Cluster allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-85790
MEDIUM 5.9
Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network. |
|
CVE-2026-70005
MEDIUM 5.9
Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to bypass a security feature over a network. |
|
CVE-2026-69982
MEDIUM 5.9
Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to bypass a security feature over a network. |
|
CVE-2026-78523
MEDIUM 5.9
Use after free in Windows DNS allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-72978
MEDIUM 5.9
Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a net… |
|
CVE-2026-70091
MEDIUM 5.9
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DNS allows an unauthorized attacker to deny service over… |
|
CVE-2026-70124
MEDIUM 5.9
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to disclose information over a network. |
|
CVE-2026-69929
MEDIUM 5.9
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to disclose information over a network. |
|
CVE-2026-69930
MEDIUM 5.9
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to disclose information over a network. |
|
CVE-2026-69803
MEDIUM 5.9
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to disclose information over a network. |
|
CVE-2026-68819
MEDIUM 5.9
Buffer over-read in Windows Network File System allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-6727
MEDIUM 5.9
A timing side-channel vulnerability exists in the RSA OAEP decryption implementation. A privileged local attacker with access to the TPM command interface may … |
|
CVE-2026-56649
MEDIUM 5.9
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Network File System allows an unauthorized attacker to e… |
|
CVE-2026-50324
MEDIUM 5.9
Loop with unreachable exit condition ('infinite loop') in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a n… |
|
CVE-2025-48823
HIGH 5.9
Windows Cryptographic Services Information Disclosure Vulnerability |
|
CVE-2025-30394
HIGH 5.9
Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability |
|
CVE-2025-27471
HIGH 5.9
Microsoft Streaming Service Denial of Service Vulnerability |
|
CVE-2025-21350
HIGH 5.9
Windows Kerberos Denial of Service Vulnerability |
|
CVE-2025-21225
HIGH 5.9
Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability |
|
CVE-2025-21242
HIGH 5.9
Windows Kerberos Information Disclosure Vulnerability |
|
CVE-2024-38264
HIGH 5.9
Microsoft Virtual Hard Disk (VHDX) Denial of Service Vulnerability |
|
CVE-2026-88231
MEDIUM 5.7
Out-of-bounds read in Windows iSCSI allows an authorized attacker to disclose information over a network. |
|
CVE-2026-88211
MEDIUM 5.7
Out-of-bounds read in Graphic Fonts allows an authorized attacker to disclose information over a network. |
|
CVE-2026-85816
MEDIUM 5.7
Out-of-bounds read in Windows Wi-Fi Driver allows an authorized attacker to disclose information over an adjacent network. |
|
CVE-2026-69723
MEDIUM 5.7
Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information over a netwo… |
|
CVE-2026-69679
MEDIUM 5.7
Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network. |
|
CVE-2026-69637
MEDIUM 5.7
Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network. |
|
CVE-2026-69591
MEDIUM 5.7
Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information over a network. |
|
CVE-2026-69569
MEDIUM 5.7
Untrusted pointer dereference in Windows Print Spooler Components allows an authorized attacker to deny service over a network. |
|
CVE-2026-69572
MEDIUM 5.7
Out-of-bounds read in Windows SMB Client allows an authorized attacker to disclose information over a network. |
|
CVE-2026-69552
MEDIUM 5.7
Generation of error message containing sensitive information in Windows Print Spooler Components allows an authorized attacker to disclose information over a n… |
|
CVE-2026-69507
MEDIUM 5.7
Insertion of sensitive information into externally-accessible file or directory in Microsoft Windows Search Component allows an authorized attacker to disclose… |
|
CVE-2026-69416
MEDIUM 5.7
Buffer over-read in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network. |
|
CVE-2026-69405
MEDIUM 5.7
Missing release of memory after effective lifetime in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network. |
|
CVE-2026-69393
MEDIUM 5.7
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information over a network. |
|
CVE-2026-69372
MEDIUM 5.7
Out-of-bounds read in Windows Network File System allows an authorized attacker to deny service over a network. |
|
CVE-2026-69349
MEDIUM 5.7
Use of uninitialized resource in Windows Management Instrumentation allows an authorized attacker to disclose information over a network. |
|
CVE-2026-69317
MEDIUM 5.7
Out-of-bounds read in Remote Desktop Client allows an authorized attacker to disclose information over a network. |
|
CVE-2026-68874
MEDIUM 5.7
Out-of-bounds read in Windows Program Compatibility Assistant Service allows an authorized attacker to disclose information over a network. |
|
CVE-2026-23670
MEDIUM 5.7
Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to bypass a security feature locally. |
|
CVE-2025-50156
HIGH 5.7
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability |
|
CVE-2025-50157
HIGH 5.7
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability |
|
CVE-2025-53138
HIGH 5.7
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability |
|
CVE-2025-53148
HIGH 5.7
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability |
|
CVE-2025-53153
HIGH 5.7
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability |
|
CVE-2025-53719
HIGH 5.7
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability |
|
CVE-2025-48002
HIGH 5.7
Windows Hyper-V Information Disclosure Vulnerability |
|
CVE-2025-49722
HIGH 5.7
Windows Print Spooler Denial of Service Vulnerability |
|
CVE-2025-29974
HIGH 5.7
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2026-96150
MEDIUM 5.6
Use of uninitialized resource in Microsoft Windows Codecs Library allows an authorized attacker to disclose information locally. |
|
CVE-2026-96022
MEDIUM 5.6
Use of uninitialized resource in Windows Text Services Framework allows an authorized attacker to disclose information locally. |
|
CVE-2026-96865
MEDIUM 5.6
Exposure of sensitive system information to an unauthorized control sphere in Windows Secure Kernel Mode allows an authorized attacker to disclose information … |
|
CVE-2026-83885
MEDIUM 5.6
Inadequate encryption strength in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to perform spoofing locally. |
|
CVE-2026-70097
MEDIUM 5.6
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Virtualization-Based Security (VBS) Enclave allows an au… |
|
CVE-2026-69978
MEDIUM 5.6
Null pointer dereference in Windows VMSwitch allows an authorized attacker to deny service locally. |
|
CVE-2026-69832
MEDIUM 5.6
Exposure of sensitive system information to an unauthorized control sphere in Windows Win32K allows an authorized attacker to disclose information locally. |
|
CVE-2026-59130
MEDIUM 5.6
No cwe for this issue in AMD Zen allows an authorized attacker to disclose information locally. |
|
CVE-2026-59131
MEDIUM 5.6
No cwe for this issue in AMD Zen allows an authorized attacker to disclose information locally. |
|
CVE-2024-36350
CRITICAL 5.6
AMD: CVE-2024-36350 Transient Scheduler Attack in Store Queue |
|
CVE-2024-36357
CRITICAL 5.6
AMD: CVE-2024-36357 Transient Scheduler Attack in L1 Data Queue |
|
CVE-2025-21336
HIGH 5.6
Windows Cryptographic Information Disclosure Vulnerability |
|
CVE-2026-96989
MEDIUM 5.5
Out-of-bounds read in Secondary Logon allows an authorized attacker to disclose information locally. |
|
CVE-2026-96156
MEDIUM 5.5
Use of uninitialized resource in Windows Broker Infrastructure Service allows an authorized attacker to disclose information locally. |
|
CVE-2026-96137
MEDIUM 5.5
Exposure of sensitive system information to an unauthorized control sphere in Windows Graphics Kernel allows an authorized attacker to disclose information loc… |
|
CVE-2026-96133
MEDIUM 5.5
Improper access control in Windows Graphics Kernel allows an authorized attacker to disclose information locally. |
|
CVE-2026-96112
MEDIUM 5.5
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information locally. |
|
CVE-2026-96101
MEDIUM 5.5
Files or directories accessible to external parties in Windows Connected User Experiences and Telemetry allows an authorized attacker to disclose information l… |
|
CVE-2026-96110
MEDIUM 5.5
Use after free in Windows OLE allows an authorized attacker to disclose information locally. |
|
CVE-2026-96059
MEDIUM 5.5
Use after free in HID class driver allows an authorized attacker to disclose information locally. |
|
CVE-2026-96041
MEDIUM 5.5
Out-of-bounds read in Windows USB Hub Driver allows an authorized attacker to disclose information locally. |
|
CVE-2026-96001
MEDIUM 5.5
Exposure of sensitive system information to an unauthorized control sphere in Windows Bluetooth Service allows an authorized attacker to disclose information l… |
|
CVE-2026-95977
MEDIUM 5.5
Out-of-bounds read in Windows Event Viewer allows an authorized attacker to disclose information locally. |
|
CVE-2026-95944
MEDIUM 5.5
Weak authentication in Windows App Readiness Service allows an authorized attacker to perform tampering locally. |
|
CVE-2026-95946
MEDIUM 5.5
Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to disclose information locally. |
|
CVE-2026-95908
MEDIUM 5.5
Out-of-bounds read in Remote Desktop Client allows an authorized attacker to disclose information locally. |
|
CVE-2026-95893
MEDIUM 5.5
Use of uninitialized resource in Windows Win32K allows an authorized attacker to disclose information locally. |
|
CVE-2026-94517
MEDIUM 5.5
Use of uninitialized resource in Kernel Transaction Manager allows an authorized attacker to disclose information locally. |
|
CVE-2026-88247
MEDIUM 5.5
Use of uninitialized resource in Windows Program Compatibility Assistant Service allows an authorized attacker to disclose information locally. |
|
CVE-2026-88220
MEDIUM 5.5
Buffer over-read in Windows Performance Counters allows an authorized attacker to disclose information locally. |
|
CVE-2026-88217
MEDIUM 5.5
Use of uninitialized resource in Windows Graphics Kernel allows an authorized attacker to disclose information locally. |
|
CVE-2026-84004
MEDIUM 5.5
Processor optimization removal or modification of security-critical code in AMD Zen allows an authorized attacker to disclose information locally. |
|
CVE-2026-84005
MEDIUM 5.5
Processor optimization removal or modification of security-critical code in AMD Zen allows an authorized attacker to disclose information locally. |
|
CVE-2026-122297
MEDIUM 5.5
Use of uninitialized resource in Kernel Transaction Manager allows an authorized attacker to disclose information locally. |
|
CVE-2026-122162
MEDIUM 5.5
Integer underflow (wrap or wraparound) in Windows Update Stack allows an authorized attacker to disclose information locally. |
|
CVE-2026-105527
HIGH 5.5
Windows Encrypting File System (EFS) Denial of Service Vulnerability |
|
CVE-2026-105530
HIGH 5.5
Windows System Events Broker Information Disclosure Vulnerability |
|
CVE-2026-105531
HIGH 5.5
Windows Print Spooler Components Information Disclosure Vulnerability |
|
CVE-2026-105537
HIGH 5.5
Mailslot File System Information Disclosure Vulnerability |
|
CVE-2026-105552
HIGH 5.5
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2026-105584
HIGH 5.5
Windows Inventory Backup Information Disclosure Vulnerability |
|
CVE-2026-108408
HIGH 5.5
Windows Telephony Service Information Disclosure Vulnerability |
|
CVE-2026-108409
HIGH 5.5
Windows Overlay Filter Information Disclosure Vulnerability |
|
CVE-2026-108410
HIGH 5.5
Windows Management Instrumentation Information Disclosure Vulnerability |
|
CVE-2026-112750
HIGH 5.5
Windows Overlay Filter Information Disclosure Vulnerability |
|
CVE-2026-112754
HIGH 5.5
Microsoft Graphics Component Information Disclosure Vulnerability |
|
CVE-2026-112803
HIGH 5.5
Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability |
|
CVE-2026-112814
HIGH 5.5
Windows Management Instrumentation Elevation of Privilege Vulnerability |
|
CVE-2026-112965
HIGH 5.5
Windows Management Instrumentation Information Disclosure Vulnerability |
|
CVE-2026-112974
HIGH 5.5
Microsoft Account Tampering Vulnerability |
|
CVE-2026-112977
HIGH 5.5
Windows Deployment Services Information Disclosure Vulnerability |
|
CVE-2026-112979
HIGH 5.5
Windows State Repository Service Tampering Vulnerability |
|
CVE-2026-112982
HIGH 5.5
Microsoft Account Tampering Vulnerability |
|
CVE-2026-112988
HIGH 5.5
Windows Desktop Window Manager Elevation of Privilege Vulnerability |
|
CVE-2026-113757
HIGH 5.5
Windows FileCrypt Driver Information Disclosure Vulnerability |
|
CVE-2026-113844
HIGH 5.5
Windows NTFS Tampering Vulnerability |
|
CVE-2026-118140
HIGH 5.5
Server for NFS Information Disclosure Vulnerability |
|
CVE-2026-118736
HIGH 5.5
Windows Network File System Information Disclosure Vulnerability |
|
CVE-2026-119825
HIGH 5.5
Win32k Information Disclosure Vulnerability |
|
CVE-2026-119855
HIGH 5.5
Windows COM+ Event System Service Information Disclosure Vulnerability |
|
CVE-2026-119856
HIGH 5.5
Win32k Information Disclosure Vulnerability |
|
CVE-2026-119857
HIGH 5.5
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2026-97790
MEDIUM 5.5
Improper link resolution before file access ('link following') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to p… |
|
CVE-2026-96948
MEDIUM 5.5
Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver (csc.sys) allows an authorized attacker to disclose informatio… |
|
CVE-2026-96944
MEDIUM 5.5
Insertion of sensitive information into externally-accessible file or directory in Windows Storage allows an authorized attacker to disclose information locall… |
|
CVE-2026-96935
MEDIUM 5.5
Exposure of sensitive system information to an unauthorized control sphere in Windows NTFS allows an authorized attacker to disclose information locally. |
|
CVE-2026-96925
MEDIUM 5.5
Integer underflow (wrap or wraparound) in Windows NTFS allows an authorized attacker to disclose information locally. |
|
CVE-2026-96926
MEDIUM 5.5
Missing authorization in DNS Server allows an authorized attacker to perform tampering locally. |
|
CVE-2026-96927
MEDIUM 5.5
Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally. |
|
CVE-2026-96930
MEDIUM 5.5
Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally. |
|
CVE-2026-96921
MEDIUM 5.5
Access of resource using incompatible type ('type confusion') in Windows Message Queuing Queue Manager allows an authorized attacker to disclose information lo… |
|
CVE-2026-96910
MEDIUM 5.5
Untrusted pointer dereference in Microsoft Windows Search Component allows an authorized attacker to disclose information locally. |
|
CVE-2026-96854
MEDIUM 5.5
Access of resource using incompatible type ('type confusion') in Windows Device Association Service allows an authorized attacker to disclose information local… |
|
CVE-2026-96855
MEDIUM 5.5
Improper access control in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally. |
|
CVE-2026-96857
MEDIUM 5.5
Files or directories accessible to external parties in Windows Projected File System allows an authorized attacker to disclose information locally. |
|
CVE-2026-96858
MEDIUM 5.5
Missing authentication for critical function in Windows Security Account Manager allows an authorized attacker to perform tampering locally. |
|
CVE-2026-96859
MEDIUM 5.5
Out-of-bounds read in Windows Imaging Component allows an authorized attacker to disclose information locally. |
|
CVE-2026-96860
MEDIUM 5.5
Out-of-bounds read in Windows USB Print Driver allows an authorized attacker to disclose information locally. |
|
CVE-2026-96848
MEDIUM 5.5
Buffer over-read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. |
|
CVE-2026-96850
MEDIUM 5.5
Use of uninitialized resource in Windows Modern Device Management (MDM) allows an authorized attacker to disclose information locally. |
|
CVE-2026-96851
MEDIUM 5.5
Buffer over-read in Windows Management Instrumentation allows an authorized attacker to disclose information locally. |
|
CVE-2026-96846
MEDIUM 5.5
Out-of-bounds read in WebDAV allows an authorized attacker to disclose information locally. |
|
CVE-2026-96321
MEDIUM 5.5
Out-of-bounds read in Remote Desktop Display Driver allows an authorized attacker to disclose information locally. |
|
CVE-2026-96314
MEDIUM 5.5
Out-of-bounds read in Windows Audio Service allows an authorized attacker to disclose information locally. |
|
CVE-2026-96315
MEDIUM 5.5
Missing authorization in Windows Overlay Filter allows an authorized attacker to perform tampering locally. |
|
CVE-2026-96316
MEDIUM 5.5
Improper access control in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to perform tampering locally. |
|
CVE-2026-96311
MEDIUM 5.5
Improper authorization in Windows Network List Service allows an authorized attacker to perform tampering locally. |
|
CVE-2026-96247
MEDIUM 5.5
Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally. |
|
CVE-2026-96218
MEDIUM 5.5
Improper access control in Windows Update Stack allows an authorized attacker to perform tampering locally. |
|
CVE-2026-95904
MEDIUM 5.5
Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclose information locally. |
|
CVE-2026-88158
MEDIUM 5.5
Out-of-bounds read in Microsoft Digest Authentication allows an authorized attacker to disclose information locally. |
|
CVE-2026-88162
MEDIUM 5.5
Improper authorization in Windows Encrypting File System (EFS) allows an authorized attacker to perform tampering locally. |
|
CVE-2026-88140
MEDIUM 5.5
Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally. |
|
CVE-2026-87709
MEDIUM 5.5
Improper access control in Windows Host Guardian Service allows an authorized attacker to perform tampering locally. |
|
CVE-2026-87698
MEDIUM 5.5
Out-of-bounds read in Windows Remote Access Service Infrastructure allows an authorized attacker to disclose information locally. |
|
CVE-2026-85935
MEDIUM 5.5
Buffer over-read in Windows USB Driver allows an authorized attacker to disclose information locally. |
|
CVE-2026-85910
MEDIUM 5.5
Buffer over-read in Windows StateRepository API allows an authorized attacker to disclose information locally. |
|
CVE-2026-85909
MEDIUM 5.5
Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally. |
|
CVE-2026-85865
MEDIUM 5.5
Improper authentication in Windows DHCP Server allows an authorized attacker to bypass a security feature locally. |
|
CVE-2026-85857
MEDIUM 5.5
Insertion of sensitive information into log file in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally. |
|
CVE-2026-85852
MEDIUM 5.5
Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose information locally. |
|
CVE-2026-85830
MEDIUM 5.5
Out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locally. |
|
CVE-2026-85831
MEDIUM 5.5
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to disclose information locally. |
|
CVE-2026-85815
MEDIUM 5.5
Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally. |
|
CVE-2026-85812
MEDIUM 5.5
Files or directories accessible to external parties in Windows Bind Filter Driver allows an authorized attacker to disclose information locally. |
|
CVE-2026-85794
MEDIUM 5.5
Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to disclose information locally. |
|
CVE-2026-85374
MEDIUM 5.5
Out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locally. |
|
CVE-2026-85336
MEDIUM 5.5
Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally. |
|
CVE-2026-85320
MEDIUM 5.5
Use of uninitialized resource in Windows Print Spooler Components allows an authorized attacker to disclose information locally. |
|
CVE-2026-84011
MEDIUM 5.5
Incorrect authorization in Windows SMB Client allows an authorized attacker to bypass a security feature locally. |
|
CVE-2026-83933
MEDIUM 5.5
Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authorized attacker to disclose information loc… |
|
CVE-2026-83904
MEDIUM 5.5
Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally. |
|
CVE-2026-83898
MEDIUM 5.5
Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally. |
|
CVE-2026-83892
MEDIUM 5.5
Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally. |
|
CVE-2026-83893
MEDIUM 5.5
Exposure of sensitive system information to an unauthorized control sphere in Windows Clipboard User Service allows an authorized attacker to disclose informat… |
|
CVE-2026-83884
MEDIUM 5.5
Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally. |
|
CVE-2026-83887
MEDIUM 5.5
Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally. |
|
CVE-2026-83875
MEDIUM 5.5
Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally. |
|
CVE-2026-83864
MEDIUM 5.5
Improper access control in Windows NTFS allows an authorized attacker to disclose information locally. |
|
CVE-2026-83854
MEDIUM 5.5
Improper access control in Windows Notification allows an authorized attacker to disclose information locally. |
|
CVE-2026-83835
MEDIUM 5.5
Buffer over-read in Windows Common Log File System Driver allows an authorized attacker to disclose information locally. |
|
CVE-2026-83794
MEDIUM 5.5
Out-of-bounds read in Windows Portable Device MTP Driver allows an authorized attacker to disclose information locally. |
|
CVE-2026-83798
MEDIUM 5.5
Improper verification of cryptographic signature in Windows Update Stack allows an authorized attacker to perform spoofing locally. |
|
CVE-2026-83787
MEDIUM 5.5
Insufficient verification of data authenticity in Windows DHCP Server allows an authorized attacker to bypass a security feature locally. |
|
CVE-2026-83764
MEDIUM 5.5
Incorrect authorization in Windows Clipboard User Service allows an authorized attacker to disclose information locally. |
|
CVE-2026-83765
MEDIUM 5.5
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally. |
|
CVE-2026-83760
MEDIUM 5.5
Out-of-bounds read in Microsoft Bluetooth Driver allows an authorized attacker to disclose information locally. |
|
CVE-2026-83755
MEDIUM 5.5
Use of uninitialized resource in Windows Win32K allows an authorized attacker to disclose information locally. |
|
CVE-2026-83747
MEDIUM 5.5
Out-of-bounds read in Windows Error Reporting allows an authorized attacker to disclose information locally. |
|
CVE-2026-83737
MEDIUM 5.5
Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally. |
|
CVE-2026-83733
MEDIUM 5.5
Out-of-bounds read in Windows Print Spooler Components allows an authorized attacker to disclose information locally. |
|
CVE-2026-83736
MEDIUM 5.5
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83723
MEDIUM 5.5
Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose information locally. |
|
CVE-2026-83719
MEDIUM 5.5
Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information locally. |
|
CVE-2026-83713
MEDIUM 5.5
Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally. |
|
CVE-2026-83714
MEDIUM 5.5
Use of uninitialized resource in Windows HTTP.sys allows an authorized attacker to disclose information locally. |
|
CVE-2026-83705
MEDIUM 5.5
Exposure of sensitive system information to an unauthorized control sphere in Windows HTTP.sys allows an authorized attacker to disclose information locally. |
|
CVE-2026-83695
MEDIUM 5.5
Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose information locally. |
|
CVE-2026-83686
MEDIUM 5.5
Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally. |
|
CVE-2026-83668
MEDIUM 5.5
Out-of-bounds read in Windows WLAN Service allows an authorized attacker to disclose information locally. |
|
CVE-2026-83658
MEDIUM 5.5
Improper access control in Windows Error Reporting allows an authorized attacker to disclose information locally. |
|
CVE-2026-83664
MEDIUM 5.5
Access of resource using incompatible type ('type confusion') in Windows Portable Device File System Driver allows an authorized attacker to disclose informati… |
|
CVE-2026-83571
MEDIUM 5.5
Null pointer dereference in Windows Audio Service allows an authorized attacker to disclose information locally. |
|
CVE-2026-83565
MEDIUM 5.5
Buffer over-read in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information locally. |
|
CVE-2026-83507
MEDIUM 5.5
Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authorized attacker to disclose information loc… |
|
CVE-2026-81964
MEDIUM 5.5
Use of hard-coded credentials in Windows Update Orchestrator Service allows an authorized attacker to bypass a security feature locally. |
|
CVE-2026-70293
MEDIUM 5.5
Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. |
|
CVE-2026-70294
MEDIUM 5.5
Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. |
|
CVE-2026-70295
MEDIUM 5.5
Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. |
|
CVE-2026-70288
MEDIUM 5.5
Time-of-check time-of-use (toctou) race condition in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. |
|
CVE-2026-70292
MEDIUM 5.5
Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. |
|
CVE-2026-70277
MEDIUM 5.5
Out-of-bounds read in Windows Fast FAT Driver allows an unauthorized attacker to disclose information locally. |
|
CVE-2026-70284
MEDIUM 5.5
Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. |
|
CVE-2026-70270
MEDIUM 5.5
Untrusted pointer dereference in Windows Container Isolation FS Filter Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70260
MEDIUM 5.5
Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an authorized attacker to disclose information… |
|
CVE-2026-70261
MEDIUM 5.5
Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an authorized attacker to disclose information… |
|
CVE-2026-70235
MEDIUM 5.5
Improper authentication in Windows Event Tracing allows an authorized attacker to perform spoofing locally. |
|
CVE-2026-70232
MEDIUM 5.5
Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally. |
|
CVE-2026-70234
MEDIUM 5.5
Buffer over-read in Desktop Window Manager allows an authorized attacker to disclose information locally. |
|
CVE-2026-70227
MEDIUM 5.5
Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally. |
|
CVE-2026-70216
MEDIUM 5.5
Insufficient granularity of access control in Windows Mobile Device Management allows an authorized attacker to perform tampering locally. |
|
CVE-2026-70211
MEDIUM 5.5
Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. |
|
CVE-2026-70199
MEDIUM 5.5
Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally. |
|
CVE-2026-70201
MEDIUM 5.5
Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service locally. |
|
CVE-2026-70208
MEDIUM 5.5
Out-of-bounds read in Windows HTTP.sys allows an authorized attacker to disclose information locally. |
|
CVE-2026-70173
MEDIUM 5.5
Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally. |
|
CVE-2026-70141
MEDIUM 5.5
Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally. |
|
CVE-2026-70135
MEDIUM 5.5
Out-of-bounds read in Windows Remote POS Driver allows an authorized attacker to disclose information locally. |
|
CVE-2026-70137
MEDIUM 5.5
Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to disclose information locally. |
|
CVE-2026-70128
MEDIUM 5.5
Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally. |
|
CVE-2026-70085
MEDIUM 5.5
Missing authorization in DNS Server allows an authorized attacker to perform tampering locally. |
|
CVE-2026-70087
MEDIUM 5.5
Incorrect authorization in DNS Server allows an authorized attacker to bypass a security feature locally. |
|
CVE-2026-70090
MEDIUM 5.5
Use of uninitialized resource in Windows Netlogon allows an authorized attacker to disclose information locally. |
|
CVE-2026-70083
MEDIUM 5.5
Incorrect authorization in DNS Server allows an authorized attacker to perform tampering locally. |
|
CVE-2026-70084
MEDIUM 5.5
Improper access control in Windows Projected File System allows an authorized attacker to disclose information locally. |
|
CVE-2026-70071
MEDIUM 5.5
Improper verification of cryptographic signature in DNS Server allows an authorized attacker to perform tampering locally. |
|
CVE-2026-70074
MEDIUM 5.5
Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information locally. |
|
CVE-2026-70055
MEDIUM 5.5
Exposure of sensitive system information to an unauthorized control sphere in Windows Cryptographic Services allows an authorized attacker to disclose informat… |
|
CVE-2026-70057
MEDIUM 5.5
Incorrect authorization in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to bypass a security feature locally. |
|
CVE-2026-70044
MEDIUM 5.5
Out-of-bounds read in Microsoft Windows Media Foundation allows an unauthorized attacker to disclose information locally. |
|
CVE-2026-70041
MEDIUM 5.5
Buffer over-read in Windows CD-ROM Driver allows an authorized attacker to disclose information locally. |
|
CVE-2026-70017
MEDIUM 5.5
Access of resource using incompatible type ('type confusion') in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally. |
|
CVE-2026-70011
MEDIUM 5.5
Out-of-bounds read in Windows IP Over USB Service allows an authorized attacker to disclose information locally. |
|
CVE-2026-69999
MEDIUM 5.5
Out-of-bounds read in Windows Update allows an authorized attacker to disclose information locally. |
|
CVE-2026-69979
MEDIUM 5.5
Improper protection of alternate path in Windows AppX Deployment Service allows an authorized attacker to bypass a security feature locally. |
|
CVE-2026-69967
MEDIUM 5.5
Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to disclose information locally. |
|
CVE-2026-69971
MEDIUM 5.5
Incorrect authorization in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally. |
|
CVE-2026-69954
MEDIUM 5.5
Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information locally. |
|
CVE-2026-69919
MEDIUM 5.5
Out-of-bounds read in Windows Cryptographic Services allows an authorized attacker to disclose information locally. |
|
CVE-2026-69905
MEDIUM 5.5
Missing authorization in Windows AppX Deployment Service allows an authorized attacker to perform tampering locally. |
|
CVE-2026-69914
MEDIUM 5.5
Out-of-bounds read in Windows AppX Deployment Service allows an authorized attacker to disclose information locally. |
|
CVE-2026-69721
MEDIUM 5.5
Out-of-bounds read in Windows iSCSI allows an authorized attacker to disclose information locally. |
|
CVE-2026-69644
MEDIUM 5.5
Exposure of sensitive system information to an unauthorized control sphere in Windows iSCSI allows an authorized attacker to disclose information locally. |
|
CVE-2026-69675
MEDIUM 5.5
Out-of-bounds read in Windows Network File System allows an authorized attacker to disclose information locally. |
|
CVE-2026-62879
MEDIUM 5.5
Missing authentication for critical function in Windows SmartScreen allows an authorized attacker to perform tampering locally. |
|
CVE-2026-108462
MEDIUM 5.5
Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally. |
|
CVE-2026-103560
MEDIUM 5.5
Improper authorization in DNS Server allows an authorized attacker to perform tampering locally. |
|
CVE-2026-102187
MEDIUM 5.5
Use of uninitialized resource in Windows Kernel allows an authorized attacker to disclose information locally. |
|
CVE-2026-85835
HIGH 5.5
Servicing Stack Updates Information Disclosure Vulnerability |
|
CVE-2026-83501
MEDIUM 5.5
Out-of-bounds read in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to disclose information locally. |
|
CVE-2026-77492
MEDIUM 5.5
Out-of-bounds read in Storage Port Driver allows an authorized attacker to disclose information locally. |
|
CVE-2026-77491
MEDIUM 5.5
Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information locally. |
|
CVE-2026-73004
MEDIUM 5.5
Missing authentication for critical function in Windows Autopilot allows an authorized attacker to perform tampering locally. |
|
CVE-2026-73008
MEDIUM 5.5
Exposure of private personal information to an unauthorized actor in Windows Biometric Service allows an authorized attacker to disclose information locally. |
|
CVE-2026-72964
MEDIUM 5.5
Missing authentication for critical function in Windows Internet Connection Sharing (ICS) allows an authorized attacker to perform tampering locally. |
|
CVE-2026-72966
MEDIUM 5.5
Missing authorization in Windows Remote Access Connection Manager allows an authorized attacker to perform tampering locally. |
|
CVE-2026-72937
MEDIUM 5.5
Out-of-bounds read in Storage Port Driver allows an authorized attacker to disclose information locally. |
|
CVE-2026-71341
MEDIUM 5.5
Out-of-bounds read in Windows Partition Management Driver allows an authorized attacker to disclose information locally. |
|
CVE-2026-70290
MEDIUM 5.5
Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. |
|
CVE-2026-70145
MEDIUM 5.5
Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally. |
|
CVE-2026-69808
MEDIUM 5.5
Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally. |
|
CVE-2026-69794
MEDIUM 5.5
Buffer over-read in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information locally. |
|
CVE-2026-69770
MEDIUM 5.5
Use of uninitialized resource in Windows Spaceport.sys allows an authorized attacker to disclose information locally. |
|
CVE-2026-69741
MEDIUM 5.5
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information locally. |
|
CVE-2026-69684
MEDIUM 5.5
Generation of error message containing sensitive information in Windows Error Reporting allows an authorized attacker to disclose information locally. |
|
CVE-2026-69672
MEDIUM 5.5
Use of uninitialized resource in Windows DNS allows an authorized attacker to disclose information locally. |
|
CVE-2026-69674
MEDIUM 5.5
Missing authentication for critical function in Windows Modern Device Management (MDM) allows an authorized attacker to bypass a security feature locally. |
|
CVE-2026-69627
MEDIUM 5.5
Out-of-bounds read in Windows Remote Desktop Licensing Service allows an authorized attacker to disclose information locally. |
|
CVE-2026-69616
MEDIUM 5.5
Out-of-bounds read in Windows Remote Desktop Services allows an authorized attacker to disclose information locally. |
|
CVE-2026-69618
MEDIUM 5.5
Out-of-bounds read in Windows SMB Client allows an authorized attacker to disclose information locally. |
|
CVE-2026-69609
MEDIUM 5.5
Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally. |
|
CVE-2026-69568
MEDIUM 5.5
Out-of-bounds read in Windows Storage Spaces Controller allows an authorized attacker to disclose information locally. |
|
CVE-2026-69554
MEDIUM 5.5
Missing authentication for critical function in Microsoft Windows Search Component allows an authorized attacker to perform tampering locally. |
|
CVE-2026-69531
MEDIUM 5.5
Unintended proxy or intermediary ('confused deputy') in Microsoft Windows Speech allows an authorized attacker to perform tampering locally. |
|
CVE-2026-69527
MEDIUM 5.5
Out-of-bounds read in Windows USB Mass Storage Class Driver allows an authorized attacker to disclose information locally. |
|
CVE-2026-69504
MEDIUM 5.5
Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally. |
|
CVE-2026-69457
MEDIUM 5.5
Out-of-bounds read in Windows USB Driver allows an authorized attacker to disclose information locally. |
|
CVE-2026-69453
MEDIUM 5.5
Missing authorization in Microsoft Windows Search Component allows an authorized attacker to perform tampering locally. |
|
CVE-2026-69406
MEDIUM 5.5
Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally. |
|
CVE-2026-69403
MEDIUM 5.5
Missing authorization in Windows SMB Server allows an authorized attacker to disclose information locally. |
|
CVE-2026-69390
MEDIUM 5.5
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information locally. |
|
CVE-2026-69376
MEDIUM 5.5
Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally. |
|
CVE-2026-69369
MEDIUM 5.5
Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information locally. |
|
CVE-2026-69367
MEDIUM 5.5
Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally. |
|
CVE-2026-69351
MEDIUM 5.5
Exposure of private personal information to an unauthorized actor in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to disclo… |
|
CVE-2026-69353
MEDIUM 5.5
Out-of-bounds read in Windows Text Shaping allows an authorized attacker to disclose information locally. |
|
CVE-2026-69344
MEDIUM 5.5
Out-of-bounds read in Windows Print Spooler Components allows an authorized attacker to disclose information locally. |
|
CVE-2026-69345
MEDIUM 5.5
Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally. |
|
CVE-2026-69343
MEDIUM 5.5
Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to disclose information locally. |
|
CVE-2026-69318
MEDIUM 5.5
Out-of-bounds read in Windows Imaging Component allows an authorized attacker to disclose information locally. |
|
CVE-2026-69321
MEDIUM 5.5
Missing authentication for critical function in Windows Power Dependency Coordinator allows an authorized attacker to perform tampering locally. |
|
CVE-2026-69315
MEDIUM 5.5
Exposure of sensitive system information to an unauthorized control sphere in Windows License Manager allows an authorized attacker to disclose information loc… |
|
CVE-2026-69308
MEDIUM 5.5
Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally. |
|
CVE-2026-69303
MEDIUM 5.5
Out-of-bounds read in Push Message Routing Service allows an authorized attacker to disclose information locally. |
|
CVE-2026-69294
MEDIUM 5.5
Generation of error message containing sensitive information in Microsoft COM for Windows allows an authorized attacker to disclose information locally. |
|
CVE-2026-69286
MEDIUM 5.5
Out-of-bounds read in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to disclose information locally. |
|
CVE-2026-69288
MEDIUM 5.5
Use of uninitialized resource in Windows GDI+ allows an authorized attacker to disclose information locally. |
|
CVE-2026-68895
MEDIUM 5.5
Numeric truncation error in Internet Storage Name Service allows an authorized attacker to disclose information locally. |
|
CVE-2026-68881
MEDIUM 5.5
Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally. |
|
CVE-2026-68886
MEDIUM 5.5
Use after free in Windows Network Connection Broker allows an authorized attacker to disclose information locally. |
|
CVE-2026-68852
MEDIUM 5.5
Use of uninitialized resource in Microsoft Account allows an authorized attacker to disclose information locally. |
|
CVE-2026-68873
MEDIUM 5.5
Insertion of sensitive information into log file in Windows Program Compatibility Assistant Service allows an authorized attacker to disclose information local… |
|
CVE-2026-68851
MEDIUM 5.5
Buffer over-read in Windows NTFS allows an authorized attacker to disclose information locally. |
|
CVE-2026-68843
MEDIUM 5.5
Use after free in Microsoft Office Word allows an authorized attacker to disclose information locally. |
|
CVE-2026-68831
MEDIUM 5.5
Files or directories accessible to external parties in Windows Defender Firewall Service allows an authorized attacker to disclose information locally. |
|
CVE-2026-68830
MEDIUM 5.5
Improper link resolution before file access ('link following') in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to disclose … |
|
CVE-2026-83991
HIGH 5.5
Windows Cloud Files Mini Filter Driver Tampering Vulnerability |
|
CVE-2026-65784
MEDIUM 5.5
Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally. |
|
CVE-2026-65662
MEDIUM 5.5
Out-of-bounds read in Windows GDI allows an authorized attacker to disclose information locally. |
|
CVE-2026-62887
MEDIUM 5.5
Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally. |
|
CVE-2026-62798
MEDIUM 5.5
Untrusted pointer dereference in Windows Win32K allows an authorized attacker to disclose information locally. |
|
CVE-2026-62793
MEDIUM 5.5
Buffer over-read in Windows NTFS allows an authorized attacker to disclose information locally. |
|
CVE-2026-62796
MEDIUM 5.5
Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally. |
|
CVE-2026-62786
MEDIUM 5.5
Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally. |
|
CVE-2026-62743
MEDIUM 5.5
Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally. |
|
CVE-2026-62746
MEDIUM 5.5
Buffer over-read in Windows Win32K allows an authorized attacker to disclose information locally. |
|
CVE-2026-62738
MEDIUM 5.5
Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose information locally. |
|
CVE-2026-62740
MEDIUM 5.5
Use of uninitialized resource in Windows Imaging Component allows an authorized attacker to disclose information locally. |
|
CVE-2026-62730
MEDIUM 5.5
Buffer over-read in Windows Wired AutoConfig Service allows an authorized attacker to disclose information locally. |
|
CVE-2026-62703
MEDIUM 5.5
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally. |
|
CVE-2026-62709
MEDIUM 5.5
Use of uninitialized resource in Windows GDI+ allows an authorized attacker to disclose information locally. |
|
CVE-2026-61936
MEDIUM 5.5
Missing authorization in Windows Defender Firewall Service allows an authorized attacker to bypass a security feature locally. |
|
CVE-2026-61933
MEDIUM 5.5
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally. |
|
CVE-2026-61928
MEDIUM 5.5
Cleartext storage of sensitive information in Windows Hello allows an authorized attacker to perform tampering locally. |
|
CVE-2026-61360
MEDIUM 5.5
Untrusted pointer dereference in Windows GDI allows an authorized attacker to disclose information locally. |
|
CVE-2026-61347
MEDIUM 5.5
Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclose information locally. |
|
CVE-2026-59136
MEDIUM 5.5
Use of uninitialized resource in Microsoft COM for Windows allows an authorized attacker to disclose information locally. |
|
CVE-2026-59137
MEDIUM 5.5
Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose information locally. |
|
CVE-2026-59135
MEDIUM 5.5
Weak authentication in Microsoft Windows Search Component allows an authorized attacker to disclose information locally. |
|
CVE-2026-59128
MEDIUM 5.5
Out-of-bounds read in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information locally. |
|
CVE-2026-58545
MEDIUM 5.5
Improper access control in Windows Kernel allows an authorized attacker to bypass a security feature locally. |
|
CVE-2026-58547
MEDIUM 5.5
Heap-based buffer overflow in Universal Plug and Play (upnp.dll) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-57083
MEDIUM 5.5
Use of uninitialized resource in Microsoft Windows Codecs Library allows an unauthorized attacker to disclose information locally. |
|
CVE-2026-57084
MEDIUM 5.5
Use of uninitialized resource in Windows File Explorer allows an unauthorized attacker to disclose information locally. |
|
CVE-2026-57085
MEDIUM 5.5
Out-of-bounds read in Windows Print Spooler Components allows an authorized attacker to disclose information locally. |
|
CVE-2026-56184
MEDIUM 5.5
Exposure of sensitive information to an unauthorized actor in Windows Win32K allows an authorized attacker to disclose information locally. |
|
CVE-2026-50690
MEDIUM 5.5
Use of uninitialized resource in Windows SMB allows an authorized attacker to disclose information locally. |
|
CVE-2026-50681
MEDIUM 5.5
Exposure of sensitive information to an unauthorized actor in Windows Cryptographic Services allows an authorized attacker to disclose information locally. |
|
CVE-2026-50483
MEDIUM 5.5
Exposure of sensitive information to an unauthorized actor in Microsoft Graphics Component allows an authorized attacker to disclose information locally. |
|
CVE-2026-50475
MEDIUM 5.5
Buffer over-read in Windows Kernel allows an authorized attacker to disclose information locally. |
|
CVE-2026-50473
MEDIUM 5.5
Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally. |
|
CVE-2026-50455
MEDIUM 5.5
Use of uninitialized resource in Universal Plug and Play (upnp.dll) allows an authorized attacker to disclose information locally. |
|
CVE-2026-50456
MEDIUM 5.5
Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally. |
|
CVE-2026-50442
MEDIUM 5.5
Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally. |
|
CVE-2026-50434
MEDIUM 5.5
Exposure of sensitive information to an unauthorized actor in Windows Push Notifications allows an authorized attacker to disclose information locally. |
|
CVE-2026-50437
MEDIUM 5.5
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally. |
|
CVE-2026-50430
MEDIUM 5.5
Exposure of sensitive information to an unauthorized actor in Windows Push Notifications allows an authorized attacker to disclose information locally. |
|
CVE-2026-50431
MEDIUM 5.5
Exposure of sensitive information to an unauthorized actor in Windows Quality of Service (QoS) Packet Scheduler allows an authorized attacker to disclose infor… |
|
CVE-2026-50409
MEDIUM 5.5
Exposure of sensitive information to an unauthorized actor in Windows Overlay Filter allows an authorized attacker to disclose information locally. |
|
CVE-2026-50401
MEDIUM 5.5
Out-of-bounds read in Windows Cloud Files Mini Filter Driver allows an authorized attacker to disclose information locally. |
|
CVE-2026-50394
MEDIUM 5.5
Exposure of sensitive information to an unauthorized actor in Windows Media allows an authorized attacker to disclose information locally. |
|
CVE-2026-50389
MEDIUM 5.5
Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally. |
|
CVE-2026-50377
MEDIUM 5.5
Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-50352
MEDIUM 5.5
Exposure of sensitive information to an unauthorized actor in Windows Cryptographic Services allows an authorized attacker to disclose information locally. |
|
CVE-2026-50339
MEDIUM 5.5
Exposure of sensitive information to an unauthorized actor in Windows Push Notifications allows an authorized attacker to disclose information locally. |
|
CVE-2026-50341
MEDIUM 5.5
Buffer over-read in Windows NTFS allows an authorized attacker to disclose information locally. |
|
CVE-2026-50334
MEDIUM 5.5
Exposure of sensitive information to an unauthorized actor in Windows Notification allows an authorized attacker to disclose information locally. |
|
CVE-2026-49177
MEDIUM 5.5
Out-of-bounds read in Windows TCP/IP allows an authorized attacker to disclose information locally. |
|
CVE-2026-58614
MEDIUM 5.5
Out-of-bounds read in Windows Kernel allows an authorized attacker to bypass a security feature locally. |
|
CVE-2026-54997
MEDIUM 5.5
Use of uninitialized resource in Windows SMB allows an authorized attacker to disclose information locally. |
|
CVE-2026-50381
MEDIUM 5.5
Access of resource using incompatible type ('type confusion') in Composite Image File System Driver allows an authorized attacker to disclose information local… |
|
CVE-2026-50350
MEDIUM 5.5
Exposure of sensitive information to an unauthorized actor in Windows Trusted Runtime Interface Driver allows an authorized attacker to disclose information lo… |
|
CVE-2026-50316
MEDIUM 5.5
Insertion of sensitive information into log file in Windows Kernel allows an authorized attacker to disclose information locally. |
|
CVE-2026-50300
MEDIUM 5.5
Integer underflow (wrap or wraparound) in Windows Kernel allows an authorized attacker to disclose information locally. |
|
CVE-2026-50303
MEDIUM 5.5
Use of a cryptographic primitive with a risky implementation in Windows Key Guard allows an authorized attacker to bypass a security feature locally. |
|
CVE-2026-50295
MEDIUM 5.5
Improper privilege management in Microsoft Windows DNS allows an authorized attacker to bypass a security feature locally. |
|
CVE-2026-49801
MEDIUM 5.5
Use of uninitialized resource in Windows SMB allows an authorized attacker to disclose information locally. |
|
CVE-2026-49180
MEDIUM 5.5
Improper link resolution before file access ('link following') in Universal Plug and Play (upnp.dll) allows an authorized attacker to disclose information loca… |
|
CVE-2026-40422
MEDIUM 5.5
Use of uninitialized resource in Windows File Explorer allows an authorized attacker to disclose information locally. |
|
CVE-2026-41087
MEDIUM 5.5
Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally. |
|
CVE-2026-33842
MEDIUM 5.5
Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally. |
|
CVE-2026-34328
MEDIUM 5.5
Exposure of sensitive information to an unauthorized actor in Windows Audio Service allows an authorized attacker to disclose information locally. |
|
CVE-2026-34346
MEDIUM 5.5
Cleartext transmission of sensitive information in Windows Ancillary Function Driver for WinSock allows an authorized attacker to disclose information locally. |
|
CVE-2026-34349
MEDIUM 5.5
Exposure of sensitive information to an unauthorized actor in Windows Media allows an authorized attacker to disclose information locally. |
|
CVE-2026-48566
MEDIUM 5.5
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-45604
MEDIUM 5.5
Out-of-bounds read in Windows Application Identity (AppID) Subsystem allows an authorized attacker to disclose information locally. |
|
CVE-2026-45606
MEDIUM 5.5
Out-of-bounds read in Microsoft UxTheme Library (uxtheme.dll) allows an authorized attacker to deny service locally. |
|
CVE-2026-45634
MEDIUM 5.5
Out-of-bounds read in Windows DHCP Server allows an authorized attacker to disclose information locally. |
|
CVE-2026-45594
MEDIUM 5.5
Exposure of sensitive information to an unauthorized actor in Windows Application Identity (AppID) Subsystem allows an authorized attacker to disclose informat… |
|
CVE-2026-44805
MEDIUM 5.5
Use after free in Windows Network Controller (NC) Host Agent allows an authorized attacker to deny service locally. |
|
CVE-2026-42973
MEDIUM 5.5
Exposure of sensitive information to an unauthorized actor in Windows Push Notifications allows an authorized attacker to disclose information locally. |
|
CVE-2026-42968
MEDIUM 5.5
Out-of-bounds read in Windows Telephony Service allows an authorized attacker to disclose information locally. |
|
CVE-2026-42969
MEDIUM 5.5
Use of uninitialized resource in Windows Push Notifications allows an authorized attacker to disclose information locally. |
|
CVE-2026-42970
MEDIUM 5.5
Exposure of sensitive information to an unauthorized actor in Windows Push Notifications allows an authorized attacker to disclose information locally. |
|
CVE-2026-42971
MEDIUM 5.5
Exposure of sensitive information to an unauthorized actor in Windows Push Notifications allows an authorized attacker to disclose information locally. |
|
CVE-2026-42972
MEDIUM 5.5
Exposure of sensitive information to an unauthorized actor in Windows Hyper-V allows an authorized attacker to disclose information locally. |
|
CVE-2026-42915
MEDIUM 5.5
Incorrect calculation of buffer size in Windows VMSwitch allows an authorized attacker to deny service locally. |
|
CVE-2026-42906
MEDIUM 5.5
Exposure of sensitive information to an unauthorized actor in Windows Shell allows an authorized attacker to disclose information locally. |
|
CVE-2026-34339
HIGH 5.5
Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability |
|
CVE-2026-35419
HIGH 5.5
Windows DWM Core Library Information Disclosure Vulnerability |
|
CVE-2026-32217
MEDIUM 5.5
Insertion of sensitive information into log file in Windows Kernel allows an authorized attacker to disclose information locally. |
|
CVE-2026-32218
MEDIUM 5.5
Insertion of sensitive information into log file in Windows Kernel allows an authorized attacker to disclose information locally. |
|
CVE-2026-32214
MEDIUM 5.5
Improper access control in Universal Plug and Play (upnp.dll) allows an authorized attacker to disclose information locally. |
|
CVE-2026-32215
MEDIUM 5.5
Insertion of sensitive information into log file in Windows Kernel allows an authorized attacker to disclose information locally. |
|
CVE-2026-32212
MEDIUM 5.5
Improper link resolution before file access ('link following') in Universal Plug and Play (upnp.dll) allows an authorized attacker to disclose information loca… |
|
CVE-2026-32181
MEDIUM 5.5
Improper privilege management in Microsoft Windows allows an authorized attacker to deny service locally. |
|
CVE-2026-32085
MEDIUM 5.5
Exposure of sensitive information to an unauthorized actor in Windows Remote Procedure Call allows an authorized attacker to disclose information locally. |
|
CVE-2026-32084
MEDIUM 5.5
Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally. |
|
CVE-2026-32079
MEDIUM 5.5
Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally. |
|
CVE-2026-32081
MEDIUM 5.5
Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally. |
|
CVE-2026-27931
MEDIUM 5.5
Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information locally. |
|
CVE-2026-27930
MEDIUM 5.5
Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information locally. |
|
CVE-2026-20806
MEDIUM 5.5
Access of resource using incompatible type ('type confusion') in Windows COM allows an authorized attacker to disclose information locally. |
|
CVE-2026-25180
HIGH 5.5
Out-of-bounds read in Microsoft Graphics Component allows an unauthorized attacker to disclose information locally. |
|
CVE-2026-25186
HIGH 5.5
Windows Accessibility Infrastructure (ATBroker.exe) Information Disclosure Vulnerability |
|
CVE-2026-21222
HIGH 5.5
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2026-20939
MEDIUM 5.5
Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally. |
|
CVE-2026-20932
MEDIUM 5.5
Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally. |
|
CVE-2026-20937
MEDIUM 5.5
Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally. |
|
CVE-2026-20862
MEDIUM 5.5
Exposure of sensitive information to an unauthorized actor in Windows Management Services allows an authorized attacker to disclose information locally. |
|
CVE-2026-20838
MEDIUM 5.5
Generation of error message containing sensitive information in Windows Kernel allows an authorized attacker to disclose information locally. |
|
CVE-2026-20839
MEDIUM 5.5
Improper access control in Windows Client-Side Caching (CSC) Service allows an authorized attacker to disclose information locally. |
|
CVE-2026-20835
MEDIUM 5.5
Out-of-bounds read in Capability Access Management Service (camsvc) allows an authorized attacker to disclose information locally. |
|
CVE-2026-20827
MEDIUM 5.5
Exposure of sensitive information to an unauthorized actor in Tablet Windows User Interface (TWINUI) Subsystem allows an authorized attacker to disclose inform… |
|
CVE-2026-20829
MEDIUM 5.5
Out-of-bounds read in Windows TPM allows an authorized attacker to disclose information locally. |
|
CVE-2026-20823
MEDIUM 5.5
Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally. |
|
CVE-2026-20824
MEDIUM 5.5
Protection mechanism failure in Windows Remote Assistance allows an unauthorized attacker to bypass a security feature locally. |
|
CVE-2026-20833
HIGH 5.5
Windows Kerberos Information Disclosure Vulnerability |
|
CVE-2025-62468
MEDIUM 5.5
Out-of-bounds read in Windows Defender Firewall Service allows an authorized attacker to disclose information locally. |
|
CVE-2025-59509
HIGH 5.5
Windows Speech Recognition Information Disclosure Vulnerability |
|
CVE-2025-59510
HIGH 5.5
Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability |
|
CVE-2025-59513
HIGH 5.5
Windows Bluetooth RFCOM Protocol Driver Information Disclosure Vulnerability |
|
CVE-2025-60706
HIGH 5.5
Windows Hyper-V Information Disclosure Vulnerability |
|
CVE-2025-62208
HIGH 5.5
Windows License Manager Information Disclosure Vulnerability |
|
CVE-2025-62209
HIGH 5.5
Windows License Manager Information Disclosure Vulnerability |
|
CVE-2025-55676
MEDIUM 5.5
Generation of error message containing sensitive information in Windows USB Video Driver allows an authorized attacker to disclose information locally. |
|
CVE-2025-47979
MEDIUM 5.5
Insertion of sensitive information into log file in Windows Failover Cluster allows an authorized attacker to disclose information locally. |
|
CVE-2025-55325
HIGH 5.5
Windows Storage Management Provider Information Disclosure Vulnerability |
|
CVE-2025-55336
HIGH 5.5
Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability |
|
CVE-2025-55683
HIGH 5.5
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2025-55695
HIGH 5.5
Windows WLAN AutoConfig Service Information Disclosure Vulnerability |
|
CVE-2025-55699
HIGH 5.5
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2025-59184
HIGH 5.5
Storage Spaces Direct Information Disclosure Vulnerability |
|
CVE-2025-59186
HIGH 5.5
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2025-59188
HIGH 5.5
Microsoft Failover Cluster Information Disclosure Vulnerability |
|
CVE-2025-59190
HIGH 5.5
Windows Search Service Denial of Service Vulnerability |
|
CVE-2025-59197
HIGH 5.5
Windows ETL Channel Information Disclosure Vulnerability |
|
CVE-2025-59203
HIGH 5.5
Windows State Repository API Server File Information Disclosure Vulnerability |
|
CVE-2025-59204
HIGH 5.5
Windows Management Services Information Disclosure Vulnerability |
|
CVE-2025-59209
HIGH 5.5
Windows Push Notification Information Disclosure Vulnerability |
|
CVE-2025-59211
HIGH 5.5
Windows Push Notification Information Disclosure Vulnerability |
|
CVE-2025-59253
HIGH 5.5
Windows Search Service Denial of Service Vulnerability |
|
CVE-2025-59260
HIGH 5.5
Microsoft Failover Cluster Virtual Driver Information Disclosure Vulnerability |
|
CVE-2025-53799
CRITICAL 5.5
Use of uninitialized resource in Windows Imaging Component allows an unauthorized attacker to disclose information locally. |
|
CVE-2025-53803
HIGH 5.5
Windows Kernel Memory Information Disclosure Vulnerability |
|
CVE-2025-53804
HIGH 5.5
Windows Kernel-Mode Driver Information Disclosure Vulnerability |
|
CVE-2025-53136
HIGH 5.5
NT OS Kernel Information Disclosure Vulnerability |
|
CVE-2025-53156
HIGH 5.5
Windows Storage Port Driver Information Disclosure Vulnerability |
|
CVE-2025-26636
HIGH 5.5
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2025-48808
HIGH 5.5
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2025-48809
HIGH 5.5
Windows Secure Kernel Mode Information Disclosure Vulnerability |
|
CVE-2025-48810
HIGH 5.5
Windows Secure Kernel Mode Information Disclosure Vulnerability |
|
CVE-2025-49658
HIGH 5.5
Windows Transport Driver Interface (TDI) Translation Driver Information Disclosure Vulnerability |
|
CVE-2025-49664
HIGH 5.5
Windows User-Mode Driver Framework Host Information Disclosure Vulnerability |
|
CVE-2025-49684
HIGH 5.5
Windows Storage Port Driver Information Disclosure Vulnerability |
|
CVE-2025-24065
HIGH 5.5
Windows Storage Management Provider Information Disclosure Vulnerability |
|
CVE-2025-24068
HIGH 5.5
Windows Storage Management Provider Information Disclosure Vulnerability |
|
CVE-2025-24069
HIGH 5.5
Windows Storage Management Provider Information Disclosure Vulnerability |
|
CVE-2025-32719
HIGH 5.5
Windows Storage Management Provider Information Disclosure Vulnerability |
|
CVE-2025-32720
HIGH 5.5
Windows Storage Management Provider Information Disclosure Vulnerability |
|
CVE-2025-32722
HIGH 5.5
Windows Storage Port Driver Information Disclosure Vulnerability |
|
CVE-2025-33052
HIGH 5.5
Windows DWM Core Library Information Disclosure Vulnerability |
|
CVE-2025-33055
HIGH 5.5
Windows Storage Management Provider Information Disclosure Vulnerability |
|
CVE-2025-33058
HIGH 5.5
Windows Storage Management Provider Information Disclosure Vulnerability |
|
CVE-2025-33059
HIGH 5.5
Windows Storage Management Provider Information Disclosure Vulnerability |
|
CVE-2025-33060
HIGH 5.5
Windows Storage Management Provider Information Disclosure Vulnerability |
|
CVE-2025-33061
HIGH 5.5
Windows Storage Management Provider Information Disclosure Vulnerability |
|
CVE-2025-33062
HIGH 5.5
Windows Storage Management Provider Information Disclosure Vulnerability |
|
CVE-2025-33063
HIGH 5.5
Windows Storage Management Provider Information Disclosure Vulnerability |
|
CVE-2025-33065
HIGH 5.5
Windows Storage Management Provider Information Disclosure Vulnerability |
|
CVE-2025-29829
HIGH 5.5
Windows Trusted Runtime Interface Driver Information Disclosure Vulnerability |
|
CVE-2025-29837
HIGH 5.5
Windows Installer Information Disclosure Vulnerability |
|
CVE-2025-27736
HIGH 5.5
Windows Power Dependency Coordinator Information Disclosure Vulnerability |
|
CVE-2025-27742
HIGH 5.5
NTFS Information Disclosure Vulnerability |
|
CVE-2025-24992
HIGH 5.5
Windows NTFS Information Disclosure Vulnerability |
|
CVE-2025-21257
HIGH 5.5
Windows WLAN AutoConfig Service Information Disclosure Vulnerability |
|
CVE-2025-21274
HIGH 5.5
Windows Event Tracing Denial of Service Vulnerability |
|
CVE-2025-21280
HIGH 5.5
Windows Virtual Trusted Platform Module Denial of Service Vulnerability |
|
CVE-2025-21284
HIGH 5.5
Windows Virtual Trusted Platform Module Denial of Service Vulnerability |
|
CVE-2025-21316
HIGH 5.5
Windows Kernel Memory Information Disclosure Vulnerability |
|
CVE-2025-21317
HIGH 5.5
Windows Kernel Memory Information Disclosure Vulnerability |
|
CVE-2025-21318
HIGH 5.5
Windows Kernel Memory Information Disclosure Vulnerability |
|
CVE-2025-21319
HIGH 5.5
Windows Kernel Memory Information Disclosure Vulnerability |
|
CVE-2025-21320
HIGH 5.5
Windows Kernel Memory Information Disclosure Vulnerability |
|
CVE-2025-21321
HIGH 5.5
Windows Kernel Memory Information Disclosure Vulnerability |
|
CVE-2025-21323
HIGH 5.5
Windows Kernel Memory Information Disclosure Vulnerability |
|
CVE-2025-21340
HIGH 5.5
Windows Virtualization-Based Security (VBS) Security Feature Bypass Vulnerability |
|
CVE-2025-21374
HIGH 5.5
Windows CSC Service Information Disclosure Vulnerability |
|
CVE-2021-45985
HIGH 5.5
Mitre: CVE-2021-45985 Erroneous finalizer call in Lua leads to a heap-based buffer over-read |
|
CVE-2020-35538
MEDIUM 5.5
A crafted input file could cause a null pointer dereference in jcopy_sample_rows() when processed by libjpeg-turbo. |
|
CVE-2026-45595
MEDIUM 5.4
Protection mechanism failure in Windows Mark of the Web (MOTW) allows an unauthorized attacker to bypass a security feature over a network. |
|
CVE-2026-35423
HIGH 5.4
Windows 11 Telnet Client Information Disclosure Vulnerability |
|
CVE-2025-47160
HIGH 5.4
Windows Shortcut Files Security Feature Bypass Vulnerability |
|
CVE-2025-29956
HIGH 5.4
Windows SMB Information Disclosure Vulnerability |
|
CVE-2026-96983
MEDIUM 5.3
Use after free in Windows DNS allows an unauthorized attacker to deny service over an adjacent network. |
|
CVE-2026-96965
MEDIUM 5.3
Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally. |
|
CVE-2026-95884
MEDIUM 5.3
Buffer over-read in Windows Active Directory Certificate Services allows an authorized attacker to disclose information over a network. |
|
CVE-2026-105492
HIGH 5.3
Microsoft Remote Registry Service Denial of Service Vulnerability |
|
CVE-2026-105590
HIGH 5.3
Windows Active Directory Certificate Services Security Feature Bypass |
|
CVE-2026-108402
HIGH 5.3
Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability |
|
CVE-2026-112975
HIGH 5.3
Windows Link-Layer Discovery Protocol (LLDP) Denial of Service Vulnerability |
|
CVE-2026-113756
HIGH 5.3
Windows FileCrypt Driver Security Feature Bypass Vulnerability |
|
CVE-2026-113773
HIGH 5.3
Windows DHCP Server Spoofing Vulnerability |
|
CVE-2026-119848
HIGH 5.3
Windows Message Queuing Denial of Service Vulnerability |
|
CVE-2026-119867
HIGH 5.3
Windows Installer Security Feature Bypass Vulnerability |
|
CVE-2026-119882
HIGH 5.3
Windows Remote Desktop Services Information Disclosure Vulnerability |
|
CVE-2026-119890
HIGH 5.3
Windows DHCP Server Denial of Service Vulnerability |
|
CVE-2026-119959
HIGH 5.3
Windows Hyper-V Spoofing Vulnerability |
|
CVE-2026-85939
MEDIUM 5.3
Weak authentication in Windows Kernel allows an authorized attacker to bypass a security feature over a network. |
|
CVE-2026-70025
MEDIUM 5.3
Use after free in Windows Netlogon allows an authorized attacker to deny service over a network. |
|
CVE-2026-69640
MEDIUM 5.3
Incorrect authorization in Windows Key Distribution Center allows an authorized attacker to bypass a security feature over a network. |
|
CVE-2026-108466
MEDIUM 5.3
Out-of-bounds read in Windows Kernel allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-102198
MEDIUM 5.3
Out-of-bounds read in Windows Remote Desktop Protocol allows an authorized attacker to disclose information over a network. |
|
CVE-2026-70575
MEDIUM 5.3
Null pointer dereference in Windows Schannel allows an authorized attacker to deny service over a network. |
|
CVE-2026-65777
MEDIUM 5.3
Inadequate encryption strength in Windows Active Directory allows an authorized attacker to bypass a security feature over a network. |
|
CVE-2026-62757
MEDIUM 5.3
Improper verification of cryptographic signature in Windows Schannel allows an unauthorized attacker to bypass a security feature over a network. |
|
CVE-2026-50432
MEDIUM 5.3
Use after free in Windows Virtual Filtering Platform (VFP) allows an authorized attacker to deny service over a network. |
|
CVE-2026-50415
MEDIUM 5.3
Exposure of sensitive information to an unauthorized actor in Windows Media allows an unauthorized attacker to disclose information over a network. |
|
CVE-2026-44806
MEDIUM 5.3
Missing release of memory after effective lifetime in Windows Cryptographic Services allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-45655
MEDIUM 5.3
Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack. |
|
CVE-2026-42914
MEDIUM 5.3
Out-of-bounds read in Windows Kerberos allows an authorized attacker to deny service over a network. |
|
CVE-2023-20585
HIGH 5.3
Insufficient checks of the RMP on host buffer access in IOMMU may allow an attacker with privileges and a compromised hypervisor to trigger an out of bounds co… |
|
CVE-2026-25185
HIGH 5.3
Windows Shell Link Processing Spoofing Vulnerability |
|
CVE-2026-20927
MEDIUM 5.3
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB Server allows an authorized attacker to deny service… |
|
CVE-2025-62567
HIGH 5.3
Windows Hyper-V Denial of Service Vulnerability |
|
CVE-2025-55229
HIGH 5.3
Windows Certificate Spoofing Vulnerability |
|
CVE-2026-50418
MEDIUM 5.1
Improper access control in Windows System allows an unauthorized attacker to bypass a security feature locally. |
|
CVE-2025-55679
HIGH 5.1
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2025-33069
HIGH 5.1
Windows App Control for Business Security Feature Bypass Vulnerability |
|
CVE-2025-26644
HIGH 5.1
Windows Hello Spoofing Vulnerability |
|
CVE-2026-105506
HIGH 5.0
Windows Shell Information Disclosure Vulnerability |
|
CVE-2026-61368
MEDIUM 5.0
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to disclose information locally. |
|
CVE-2025-59198
HIGH 5.0
Windows Search Service Denial of Service Vulnerability |
|
CVE-2026-97006
MEDIUM 4.9
Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network. |
|
CVE-2026-96988
MEDIUM 4.9
Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network. |
|
CVE-2026-96984
MEDIUM 4.9
Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network. |
|
CVE-2026-96985
MEDIUM 4.9
Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network. |
|
CVE-2026-96986
MEDIUM 4.9
Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network. |
|
CVE-2026-96987
MEDIUM 4.9
Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network. |
|
CVE-2026-96976
MEDIUM 4.9
Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network. |
|
CVE-2026-96980
MEDIUM 4.9
Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network. |
|
CVE-2026-96970
MEDIUM 4.9
Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network. |
|
CVE-2026-96017
MEDIUM 4.9
Use after free in DNS Server allows an authorized attacker to deny service over a network. |
|
CVE-2026-119905
HIGH 4.9
Windows DNS Spoofing Vulnerability |
|
CVE-2026-119970
HIGH 4.9
Windows DNS Information Disclosure Vulnerability |
|
CVE-2026-119971
HIGH 4.9
Windows DNS Server Information Disclosure Vulnerability |
|
CVE-2026-83646
MEDIUM 4.8
Url redirection to untrusted site ('open redirect') in Active Directory Federation Services (AD FS) allows an authorized attacker to perform spoofing over a ne… |
|
CVE-2026-69474
MEDIUM 4.8
Use after free in Windows Overlay Filter allows an authorized attacker to disclose information over a network. |
|
CVE-2026-50684
MEDIUM 4.8
Improper neutralization of input during web page generation ('cross-site scripting') in Active Directory Federation Services (AD FS) allows an authorized attac… |
|
CVE-2025-21179
HIGH 4.8
DHCP Client Service Denial of Service Vulnerability |
|
CVE-2026-96144
MEDIUM 4.7
Use of uninitialized resource in Windows Graphics Kernel allows an authorized attacker to disclose information locally. |
|
CVE-2026-96093
MEDIUM 4.7
Out-of-bounds read in Windows Internet (wininet.dll) allows an authorized attacker to disclose information locally. |
|
CVE-2026-96048
MEDIUM 4.7
Use of uninitialized resource in Windows Graphics Kernel allows an authorized attacker to disclose information locally. |
|
CVE-2026-102200
HIGH 4.7
Windows NTFS Tampering Vulnerability |
|
CVE-2026-108423
HIGH 4.7
Windows WinHTTP Information Disclosure Vulnerability |
|
CVE-2026-112789
HIGH 4.7
Windows Installer Information Disclosure Vulnerability |
|
CVE-2026-112806
HIGH 4.7
Windows Print Spooler Components Information Disclosure Vulnerability |
|
CVE-2026-112813
HIGH 4.7
Windows Overlay Filter Elevation of Privilege Vulnerability |
|
CVE-2026-112990
HIGH 4.7
Windows USB Video Driver Elevation of Privilege Vulnerability |
|
CVE-2026-113754
HIGH 4.7
Windows FileCrypt Driver Information Disclosure Vulnerability |
|
CVE-2026-113764
HIGH 4.7
Windows Projected File System Information Disclosure Vulnerability |
|
CVE-2026-113772
HIGH 4.7
Windows Redirected Drive Buffering Information Disclosure Vulnerability |
|
CVE-2026-113815
HIGH 4.7
Microsoft PowerShell Security Feature Bypass Vulnerability |
|
CVE-2026-119385
HIGH 4.7
Windows Hyper-V Denial of Service Vulnerability |
|
CVE-2026-119836
HIGH 4.7
Windows Management Services Information Disclosure Vulnerability |
|
CVE-2026-119838
HIGH 4.7
Windows Installer Information Disclosure Vulnerability |
|
CVE-2026-119841
HIGH 4.7
Windows Graphics Kernel Information Disclosure Vulnerability |
|
CVE-2026-119910
HIGH 4.7
Win32k Information Disclosure Vulnerability |
|
CVE-2026-119942
HIGH 4.7
HTTP.sys Information Disclosure Vulnerability |
|
CVE-2026-96853
MEDIUM 4.7
Time-of-check time-of-use (toctou) race condition in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. |
|
CVE-2026-85866
MEDIUM 4.7
Exposure of sensitive system information to an unauthorized control sphere in Windows ALPC allows an authorized attacker to disclose information locally. |
|
CVE-2026-84009
MEDIUM 4.7
Time-of-check time-of-use (toctou) race condition in Windows Projected File System allows an authorized attacker to perform tampering locally. |
|
CVE-2026-83925
MEDIUM 4.7
Use of uninitialized resource in Windows Kernel allows an authorized attacker to disclose information locally. |
|
CVE-2026-83905
MEDIUM 4.7
Exposure of sensitive system information to an unauthorized control sphere in Windows Shell allows an authorized attacker to disclose information locally. |
|
CVE-2026-83909
MEDIUM 4.7
Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose informat… |
|
CVE-2026-83897
MEDIUM 4.7
Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose informat… |
|
CVE-2026-83865
MEDIUM 4.7
Relative path traversal in Windows Internet (wininet.dll) allows an authorized attacker to perform tampering locally. |
|
CVE-2026-83786
MEDIUM 4.7
Generation of error message containing sensitive information in Windows NTFS allows an authorized attacker to disclose information locally. |
|
CVE-2026-83774
MEDIUM 4.7
Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose informat… |
|
CVE-2026-83697
MEDIUM 4.7
Time-of-check time-of-use (toctou) race condition in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally. |
|
CVE-2026-83672
MEDIUM 4.7
Exposure of sensitive system information to an unauthorized control sphere in Windows Installer allows an authorized attacker to disclose information locally. |
|
CVE-2026-83656
MEDIUM 4.7
Missing authentication for critical function in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally. |
|
CVE-2026-83582
MEDIUM 4.7
Use after free in Windows Graphics Kernel allows an authorized attacker to disclose information locally. |
|
CVE-2026-70195
MEDIUM 4.7
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to disclose information locally. |
|
CVE-2026-70077
MEDIUM 4.7
Use after free in Windows Kernel allows an authorized attacker to disclose information locally. |
|
CVE-2026-70063
MEDIUM 4.7
Out-of-bounds read in Windows Kernel allows an authorized attacker to disclose information locally. |
|
CVE-2026-69974
MEDIUM 4.7
Out-of-bounds read in Desktop Window Manager allows an authorized attacker to disclose information locally. |
|
CVE-2026-69969
MEDIUM 4.7
Improper link resolution before file access ('link following') in Windows AppX Deployment Service allows an authorized attacker to disclose information locally. |
|
CVE-2026-69506
MEDIUM 4.7
Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally. |
|
CVE-2026-102186
MEDIUM 4.7
Untrusted pointer dereference in Windows Network File System allows an authorized attacker to disclose information locally. |
|
CVE-2026-72931
MEDIUM 4.7
Missing release of resource after effective lifetime in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to deny service locally. |
|
CVE-2026-69895
MEDIUM 4.7
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information locally. |
|
CVE-2026-69853
MEDIUM 4.7
Use of uninitialized resource in Windows Win32K allows an authorized attacker to disclose information locally. |
|
CVE-2026-69792
MEDIUM 4.7
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K allows an authorized attacker to bypass a securit… |
|
CVE-2026-69483
MEDIUM 4.7
Out-of-bounds read in Windows Image Acquisition allows an authorized attacker to disclose information locally. |
|
CVE-2026-69316
MEDIUM 4.7
Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information locally. |
|
CVE-2026-68891
MEDIUM 4.7
Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally. |
|
CVE-2026-68849
MEDIUM 4.7
Out-of-bounds read in Windows Bluetooth Port Driver allows an authorized attacker to disclose information locally. |
|
CVE-2026-50310
MEDIUM 4.7
Integer overflow or wraparound in Windows Devices Human Interface allows an authorized attacker to disclose information locally. |
|
CVE-2026-50312
MEDIUM 4.7
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-49167
MEDIUM 4.7
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2025-58719
HIGH 4.7
Windows Connected Devices Platform Service Elevation of Privilege Vulnerability |
|
CVE-2026-96058
MEDIUM 4.6
Out-of-bounds read in Windows Kernel allows an unauthorized attacker to disclose information with a physical attack. |
|
CVE-2026-88226
MEDIUM 4.6
Out-of-bounds read in Windows Storage Port Driver allows an unauthorized attacker to disclose information with a physical attack. |
|
CVE-2026-83788
MEDIUM 4.6
Buffer over-read in Windows RNDIS allows an unauthorized attacker to disclose information with a physical attack. |
|
CVE-2026-78508
MEDIUM 4.6
Out-of-bounds read in Windows CD-ROM Driver allows an unauthorized attacker to disclose information with a physical attack. |
|
CVE-2026-78452
MEDIUM 4.6
Out-of-bounds read in Microsoft Windows SCSI Class System File allows an unauthorized attacker to disclose information with a physical attack. |
|
CVE-2026-69548
MEDIUM 4.6
Heap-based buffer overflow in Windows RNDIS allows an unauthorized attacker to disclose information with a physical attack. |
|
CVE-2026-69381
MEDIUM 4.6
Out-of-bounds read in Windows Storage Port Driver allows an unauthorized attacker to disclose information with a physical attack. |
|
CVE-2026-61350
MEDIUM 4.6
Buffer over-read in Windows NTFS allows an unauthorized attacker to disclose information with a physical attack. |
|
CVE-2026-49794
MEDIUM 4.6
Out-of-bounds read in Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker to disclose information with a physical attack. |
|
CVE-2026-26175
MEDIUM 4.6
Use of uninitialized resource in Windows Boot Manager allows an unauthorized attacker to bypass a security feature with a physical attack. |
|
CVE-2026-20928
MEDIUM 4.6
Improper removal of sensitive information before storage or transfer in Windows Recovery Environment Agent allows an unauthorized attacker to bypass a security… |
|
CVE-2026-20834
MEDIUM 4.6
Absolute path traversal in Windows Shell allows an unauthorized attacker to perform spoofing with a physical attack. |
|
CVE-2026-20828
MEDIUM 4.6
Out-of-bounds read in Windows Internet Connection Sharing (ICS) allows an unauthorized attacker to disclose information with a physical attack. |
|
CVE-2025-21213
HIGH 4.6
Secure Boot Security Feature Bypass Vulnerability |
|
CVE-2025-21215
HIGH 4.6
Secure Boot Security Feature Bypass Vulnerability |
|
CVE-2024-49087
HIGH 4.6
Windows Mobile Broadband Driver Information Disclosure Vulnerability |
|
CVE-2026-50485
MEDIUM 4.5
Buffer over-read in Windows Hyper-V allows an authorized attacker to deny service over an adjacent network. |
|
CVE-2026-95998
MEDIUM 4.4
Missing authentication for critical function in Windows StateRepository API allows an authorized attacker to perform tampering locally. |
|
CVE-2026-85907
MEDIUM 4.4
Improper authentication in Windows SSDP Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83926
MEDIUM 4.4
Improper certificate validation in Windows Hello allows an authorized attacker to bypass a security feature locally. |
|
CVE-2026-70075
MEDIUM 4.4
Time-of-check time-of-use (toctou) race condition in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to bypass a security fea… |
|
CVE-2026-102221
MEDIUM 4.4
No cwe for this issue in Windows Secure Boot allows an authorized attacker to bypass a security feature locally. |
|
CVE-2026-72980
MEDIUM 4.4
Uncontrolled search path element in Windows Hello allows an authorized attacker to bypass a security feature locally. |
|
CVE-2026-69713
MEDIUM 4.4
Dependency on vulnerable third-party component in Windows Secure Boot allows an authorized attacker to bypass a security feature locally. |
|
CVE-2026-32209
HIGH 4.4
Windows Filtering Platform (WFP) Security Feature Bypass Vulnerability |
|
CVE-2026-32220
MEDIUM 4.4
Improper access control in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to bypass a security feature locally. |
|
CVE-2026-20962
MEDIUM 4.4
Use of uninitialized resource in Dynamic Root of Trust for Measurement (DRTM) allows an authorized attacker to disclose information locally. |
|
CVE-2026-20825
MEDIUM 4.4
Improper access control in Windows Hyper-V allows an authorized attacker to disclose information locally. |
|
CVE-2025-47969
HIGH 4.4
Windows Virtualization-Based Security (VBS) Information Disclosure Vulnerability |
|
CVE-2025-24997
HIGH 4.4
DirectX Graphics Kernel File Denial of Service Vulnerability |
|
CVE-2026-105549
HIGH 4.3
Windows Smart Card Information Disclosure Vulnerability |
|
CVE-2026-78516
MEDIUM 4.3
Insertion of sensitive information into externally-accessible file or directory in Windows Storage allows an authorized attacker to disclose information locall… |
|
CVE-2026-73019
MEDIUM 4.3
Improper resolution of path equivalence in Windows URL Moniker allows an unauthorized attacker to bypass a security feature over a network. |
|
CVE-2026-33829
Exploit
MEDIUM 4.3
Exposure of sensitive information to an unauthorized actor in Windows Snipping Tool allows an unauthorized attacker to perform spoofing over a network. |
|
CVE-2026-20936
MEDIUM 4.3
Out-of-bounds read in Windows NDIS allows an authorized attacker to disclose information with a physical attack. |
|
CVE-2025-54107
HIGH 4.3
MapUrlToZone Security Feature Bypass Vulnerability |
|
CVE-2025-54917
HIGH 4.3
MapUrlToZone Security Feature Bypass Vulnerability |
|
CVE-2025-21247
HIGH 4.3
MapUrlToZone Security Feature Bypass Vulnerability |
|
CVE-2025-24055
HIGH 4.3
Windows USB Video Class System Driver Information Disclosure Vulnerability |
|
CVE-2025-21189
HIGH 4.3
MapUrlToZone Security Feature Bypass Vulnerability |
|
CVE-2025-21219
HIGH 4.3
MapUrlToZone Security Feature Bypass Vulnerability |
|
CVE-2025-21268
HIGH 4.3
MapUrlToZone Security Feature Bypass Vulnerability |
|
CVE-2025-21269
HIGH 4.3
Windows HTML Platforms Security Feature Bypass Vulnerability |
|
CVE-2025-21328
HIGH 4.3
MapUrlToZone Security Feature Bypass Vulnerability |
|
CVE-2025-21329
HIGH 4.3
MapUrlToZone Security Feature Bypass Vulnerability |
|
CVE-2025-21332
HIGH 4.3
MapUrlToZone Security Feature Bypass Vulnerability |
|
CVE-2024-49098
HIGH 4.3
Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure Vulnerability |
|
CVE-2024-49099
HIGH 4.3
Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure Vulnerability |
|
CVE-2024-49103
HIGH 4.3
Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure Vulnerability |
|
CVE-2026-83766
MEDIUM 4.2
Incorrect authorization in Windows Hyper-V allows an authorized attacker to bypass a security feature over an adjacent network. |
|
CVE-2026-70116
MEDIUM 4.2
Stack-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker to bypass a security feature with a physical attack. |
|
CVE-2026-50302
MEDIUM 4.2
Improper certificate validation in Windows Cryptographic Services allows an unauthorized attacker to bypass a security feature over a network. |
|
CVE-2025-21210
HIGH 4.2
Windows BitLocker Information Disclosure Vulnerability |
|
CVE-2025-21214
HIGH 4.2
Windows BitLocker Information Disclosure Vulnerability |
|
CVE-2026-113816
HIGH 4.1
Windows Link-Layer Discovery Protocol (LLDP) Elevation of Privilege Vulnerability |
|
CVE-2026-113821
HIGH 4.1
Microsoft Windows SCSI Class System File Information Disclosure Vulnerability |
|
CVE-2026-119395
HIGH 4.0
Storport.sys Driver Information Disclosure Vulnerability |
|
CVE-2026-119875
HIGH 4.0
Windows Storport Miniport Driver Information Disclosure Vulnerability |
|
CVE-2025-29839
HIGH 4.0
Windows Multiple UNC Provider Driver Information Disclosure Vulnerability |
|
CVE-2026-45642
LOW 3.9
Improper input validation in Microsoft Azure Attestation service and Device Health Attestation Service allows an authorized attacker to perform spoofing with a… |
|
CVE-2025-49760
MEDIUM 3.5
Windows Storage Spoofing Vulnerability |
|
CVE-2026-113766
HIGH 3.3
Windows Language Experience Service Tampering Vulnerability |
|
CVE-2026-119883
HIGH 3.3
Data Deduplication Security Feature Bypass Vulnerability |
|
CVE-2026-50419
LOW 3.3
Exposure of sensitive information to an unauthorized actor in Windows Kernel allows an authorized attacker to disclose information locally. |
|
CVE-2026-50416
LOW 3.3
Exposure of sensitive information to an unauthorized actor in Windows Win32K allows an authorized attacker to disclose information locally. |
|
CVE-2026-21249
HIGH 3.3
Windows NTLM Spoofing Vulnerability |
|
CVE-2025-59284
LOW 3.3
Exposure of sensitive information to an unauthorized actor in Windows NTLM allows an unauthorized attacker to perform spoofing locally. |
|
CVE-2025-21337
HIGH 3.3
Windows NTFS Elevation of Privilege Vulnerability |
|
CVE-2025-59280
HIGH 3.1
Windows SMB Client Tampering Vulnerability |
|
CVE-2025-59294
HIGH 2.1
Windows Taskbar Live Preview Information Disclosure Vulnerability |
|
CVE-2024-9157
HIGH
Synaptics: CVE-2024-9157 Synaptics Service Binaries DLL Loading Vulnerability |
Roll out this Windows update across your fleet
Appaloosa pushes Windows updates and verifies they land on every device.