Windows · Fixed build · All Windows builds
Windows build 10.0.19045.7807, released on 2026-10-13, fixes 899 CVE, including 1 actively exploited (CISA KEV), deployed across 1 SKUs.
- Published on
- 2026-10-13
- SKUs covered
- 1
- CVEs fixed
- 899
- CISA KEV
- 1
38 critical · 625 high
Windows SKUs covered by this build
The SKUs below share this MSRC build number. Deploying the corresponding KB secures all of them at once.
CVEs fixed by this build
| CVE |
|---|
|
CVE-2026-96951
HIGH 8.8
KEV
Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to bypass a security featu… |
|
CVE-2026-97816
CRITICAL 9.8
Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-97814
CRITICAL 9.8
Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-97815
CRITICAL 9.8
Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-97805
CRITICAL 9.8
Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-96924
CRITICAL 9.8
Untrusted pointer dereference in Windows OLE allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-96219
CRITICAL 9.8
Out-of-bounds write in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-96096
CRITICAL 9.8
Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-85928
CRITICAL 9.8
Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-85809
CRITICAL 9.8
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine |
|
CVE-2026-85814
CRITICAL 9.8
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-85806
CRITICAL 9.8
Integer underflow (wrap or wraparound) in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-85792
CRITICAL 9.8
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine |
|
CVE-2026-84015
CRITICAL 9.8
Heap-based buffer overflow in Remote Access Point-to-Point Protocol (PPP) EAP-TLS allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-83935
CRITICAL 9.8
Heap-based buffer overflow in Microsoft XML allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-83910
CRITICAL 9.8
Out-of-bounds write in RPC Runtime allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-83869
CRITICAL 9.8
Integer underflow (wrap or wraparound) in DNS Server allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-83782
CRITICAL 9.8
Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-83770
CRITICAL 9.8
Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-83748
CRITICAL 9.8
Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-83693
CRITICAL 9.8
Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-83578
CRITICAL 9.8
Integer underflow (wrap or wraparound) in Windows PowerShell allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-83517
CRITICAL 9.8
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-83519
CRITICAL 9.8
Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-70157
CRITICAL 9.8
Heap-based buffer overflow in Windows System Information Console allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-70153
CRITICAL 9.8
Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-70147
CRITICAL 9.8
Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-70096
CRITICAL 9.8
Heap-based buffer overflow in Windows Rich Text Edit Control allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-70024
CRITICAL 9.8
Stack-based buffer overflow in Windows Internet Information Services allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-69883
CRITICAL 9.8
Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-69886
CRITICAL 9.8
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-69705
CRITICAL 9.8
Out-of-bounds write in Windows iSCSI allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-69634
CRITICAL 9.8
Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-69639
CRITICAL 9.8
Heap-based buffer overflow in Windows Libarchive allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-105010
CRITICAL 9.8
Use after free in Microsoft Windows Search Component allows an unauthorized attacker to elevate privileges over a network. |
|
CVE-2026-102210
CRITICAL 9.8
Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-100222
CRITICAL 9.8
Heap-based buffer overflow in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-100202
CRITICAL 9.8
Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-105008
CRITICAL 9.0
No cwe for this issue in Windows Schannel allows an unauthorized attacker to perform spoofing over a network. |
|
CVE-2026-96952
HIGH 8.8
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-96913
HIGH 8.8
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96914
HIGH 8.8
Integer overflow or wraparound in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96917
HIGH 8.8
Heap-based buffer overflow in Windows PCI Bus Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88219
HIGH 8.8
Untrusted pointer dereference in RPC Runtime allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-88165
HIGH 8.8
Out-of-bounds write in Active Directory Domain Services allows an authorized attacker to execute code over a network. |
|
CVE-2026-88159
HIGH 8.8
Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-88157
HIGH 8.8
Heap-based buffer overflow in OpenSSH for Windows allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-88136
HIGH 8.8
Improper resolution of path equivalence in WebDAV allows an authorized attacker to execute code over a network. |
|
CVE-2026-88142
HIGH 8.8
Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-88112
HIGH 8.8
Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-88114
HIGH 8.8
Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-88116
HIGH 8.8
Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-88073
HIGH 8.8
Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85936
HIGH 8.8
Double free in Windows Shell allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-85931
HIGH 8.8
Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network. |
|
CVE-2026-85903
HIGH 8.8
Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-85905
HIGH 8.8
Heap-based buffer overflow in Windows UI Immersive Server allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85817
HIGH 8.8
Reliance on untrusted inputs in a security decision in Windows PowerShell allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-85339
HIGH 8.8
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine |
|
CVE-2026-83934
HIGH 8.8
Stack-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-83928
HIGH 8.8
Out-of-bounds write in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-83929
HIGH 8.8
Out-of-bounds write in Windows GDI allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-83923
HIGH 8.8
Relative path traversal in OpenSSH for Windows allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-83889
HIGH 8.8
Release of invalid pointer or reference in DNS Server allows an authorized attacker to execute code over a network. |
|
CVE-2026-83874
HIGH 8.8
Heap-based buffer overflow in Windows Event Tracing allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-83851
HIGH 8.8
Heap-based buffer overflow in Windows Partition Management Driver allows an unauthorized attacker to elevate privileges over a network. |
|
CVE-2026-83797
HIGH 8.8
Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-83789
HIGH 8.8
Heap-based buffer overflow in Windows SMB Client allows an unauthorized attacker to elevate privileges over a network. |
|
CVE-2026-83784
HIGH 8.8
Absolute path traversal in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges over a network. |
|
CVE-2026-83777
HIGH 8.8
Heap-based buffer overflow in Windows Bluetooth Service allows an unauthorized attacker to elevate privileges over an adjacent network. |
|
CVE-2026-83778
HIGH 8.8
Heap-based buffer overflow in Microsoft Internet Messaging API allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-83759
HIGH 8.8
Improper control of generation of code ('code injection') in Windows Encrypting File System (EFS) allows an authorized attacker to execute code over a network. |
|
CVE-2026-83728
HIGH 8.8
Improper validation of syntactic correctness of input in Windows Hyper-V allows an authorized attacker to perform spoofing locally. |
|
CVE-2026-83725
HIGH 8.8
Heap-based buffer overflow in Microsoft Windows Search Component allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-83716
HIGH 8.8
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally. |
|
CVE-2026-83688
HIGH 8.8
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-83643
HIGH 8.8
Stack-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-83642
HIGH 8.8
Access of resource using incompatible type ('type confusion') in DNS Server allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-77496
HIGH 8.8
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-70580
HIGH 8.8
Missing authentication for critical function in Windows Credential Guard allows an authorized attacker to perform spoofing locally. |
|
CVE-2026-70275
HIGH 8.8
Untrusted pointer dereference in Windows CD-ROM Driver allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-70258
HIGH 8.8
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-70262
HIGH 8.8
Heap-based buffer overflow in WebDAV allows an unauthorized attacker to elevate privileges over a network. |
|
CVE-2026-70210
HIGH 8.8
Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to elevate privileges over a network. |
|
CVE-2026-70185
HIGH 8.8
Protection mechanism failure in Windows PowerShell allows an authorized attacker to bypass a security feature locally. |
|
CVE-2026-70158
HIGH 8.8
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine |
|
CVE-2026-70149
HIGH 8.8
Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver (csc.sys) allows an authorized attacker to disclose informatio… |
|
CVE-2026-70089
HIGH 8.8
Heap-based buffer overflow in Windows GDI allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-70068
HIGH 8.8
Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an unauthorized attacker to elevate privileges over a network. |
|
CVE-2026-69985
HIGH 8.8
Heap-based buffer overflow in Windows Libarchive allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-69945
HIGH 8.8
Missing authorization in Windows AppX Deployment Extensions allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69918
HIGH 8.8
Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69326
HIGH 8.8
Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-108467
HIGH 8.8
Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an authorized attacker to execute code over a network. |
|
CVE-2026-108458
HIGH 8.8
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-105733
HIGH 8.8
Improper access control in Windows Hyper-V allows an authorized attacker to execute code locally. |
|
CVE-2026-105007
HIGH 8.8
An elevation of privilege vulnerability exists in the Network Driver Interface Specification (NDIS) when ndis.sys fails to check the length of a buffer prior t… |
|
CVE-2026-103575
HIGH 8.8
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-102225
HIGH 8.8
Out-of-bounds read in Windows Text Shaping allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-102217
HIGH 8.8
Improper resolution of path equivalence in WebDAV allows an authorized attacker to elevate privileges over a network. |
|
CVE-2026-102214
HIGH 8.8
Use after free in Windows Hyper-V allows an authorized attacker to execute code locally. |
|
CVE-2026-102203
HIGH 8.8
Access of resource using incompatible type ('type confusion') in RPC Runtime allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-100220
HIGH 8.8
Heap-based buffer overflow in Windows Media Video Decoder allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-83845
HIGH 8.4
Improper privilege management in Windows Internet (wininet.dll) allows an authorized attacker to perform spoofing locally. |
|
CVE-2026-85369
HIGH 8.2
Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85926
HIGH 8.1
Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-85799
HIGH 8.1
Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-85371
HIGH 8.1
Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-83914
HIGH 8.1
Use after free in Microsoft XML allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-83522
HIGH 8.1
Reliance on untrusted inputs in a security decision in Windows IKE Extension allows an unauthorized attacker to perform spoofing over a network. |
|
CVE-2026-70229
HIGH 8.1
Incorrect authorization in Active Directory Domain Services allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-70111
HIGH 8.1
Untrusted pointer dereference in Windows Kernel allows an unauthorized attacker to elevate privileges over a network. |
|
CVE-2026-70062
HIGH 8.1
Double free in Windows Libarchive allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-70038
HIGH 8.1
Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-70013
HIGH 8.1
Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-69913
HIGH 8.1
Use after free in Windows TCP/IP allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-108457
HIGH 8.1
Out-of-bounds write in Microsoft Windows PDF allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-108460
HIGH 8.1
Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-100218
HIGH 8.1
Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-96844
HIGH 8.0
Integer underflow (wrap or wraparound) in Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges over an adjacent network. |
|
CVE-2026-88121
HIGH 8.0
Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-83838
HIGH 8.0
Integer underflow (wrap or wraparound) in Windows Bluetooth A2DP driver allows an authorized attacker to elevate privileges over an adjacent network. |
|
CVE-2026-97809
HIGH 7.8
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-97811
HIGH 7.8
Double free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-97804
HIGH 7.8
Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-97806
HIGH 7.8
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-97807
HIGH 7.8
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-97798
HIGH 7.8
Improper neutralization of argument delimiters in a command ('argument injection') in Windows Error Reporting allows an authorized attacker to elevate privileg… |
|
CVE-2026-96953
HIGH 7.8
Null pointer dereference in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to execute code locally. |
|
CVE-2026-96947
HIGH 7.8
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96950
HIGH 7.8
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96946
HIGH 7.8
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96931
HIGH 7.8
Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96933
HIGH 7.8
Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96928
HIGH 7.8
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96929
HIGH 7.8
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96918
HIGH 7.8
Improper access control in Windows NTFS allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96920
HIGH 7.8
Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96912
HIGH 7.8
Use after free in Windows Client License Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96915
HIGH 7.8
Integer overflow or wraparound in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96916
HIGH 7.8
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96867
HIGH 7.8
Out-of-bounds read in Windows NTFS allows an authorized attacker to execute code locally. |
|
CVE-2026-96911
HIGH 7.8
Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locall… |
|
CVE-2026-96862
HIGH 7.8
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96856
HIGH 7.8
Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96843
HIGH 7.8
Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96847
HIGH 7.8
Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96324
HIGH 7.8
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96317
HIGH 7.8
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96318
HIGH 7.8
Heap-based buffer overflow in Windows Resume allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96308
HIGH 7.8
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96309
HIGH 7.8
Use after free in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96312
HIGH 7.8
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96306
HIGH 7.8
Out-of-bounds read in Windows Sysmain Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96243
HIGH 7.8
Improper link resolution before file access ('link following') in Windows WalletService allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96244
HIGH 7.8
Use after free in Windows Internal System User Profile allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96217
HIGH 7.8
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96220
HIGH 7.8
Improper control of generation of code ('code injection') in Windows Assigned Access allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96186
HIGH 7.8
Deserialization of untrusted data in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96108
HIGH 7.8
Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96118
HIGH 7.8
Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88189
HIGH 7.8
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88191
HIGH 7.8
Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locall… |
|
CVE-2026-88193
HIGH 7.8
Heap-based buffer overflow in Microsoft Scripting Engine allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88194
HIGH 7.8
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88182
HIGH 7.8
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88188
HIGH 7.8
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88177
HIGH 7.8
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88179
HIGH 7.8
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88180
HIGH 7.8
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88181
HIGH 7.8
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88168
HIGH 7.8
Heap-based buffer overflow in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88152
HIGH 7.8
Use after free in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88147
HIGH 7.8
Heap-based buffer overflow in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88133
HIGH 7.8
Improper authorization in Windows Portable Device Enumerator Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88134
HIGH 7.8
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88135
HIGH 7.8
Improper access control in WebDAV allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88126
HIGH 7.8
Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88128
HIGH 7.8
Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88118
HIGH 7.8
Integer overflow or wraparound in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88101
HIGH 7.8
Weak authentication in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88105
HIGH 7.8
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88093
HIGH 7.8
Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88080
HIGH 7.8
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88091
HIGH 7.8
Deserialization of untrusted data in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88070
HIGH 7.8
Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88072
HIGH 7.8
Improper access control in Windows Host Guardian Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-87711
HIGH 7.8
Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-87712
HIGH 7.8
Use after free in Windows Quality of Service (QoS) Packet Scheduler allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-87702
HIGH 7.8
Integer overflow or wraparound in Windows Resource Management (MRM) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-87699
HIGH 7.8
Heap-based buffer overflow in Winlogon allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-87700
HIGH 7.8
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85945
HIGH 7.8
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-87694
HIGH 7.8
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85933
HIGH 7.8
Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85927
HIGH 7.8
Heap-based buffer overflow in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85911
HIGH 7.8
Use after free in Windows StateRepository API allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85915
HIGH 7.8
Heap-based buffer overflow in Windows PCI Bus Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85906
HIGH 7.8
Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85908
HIGH 7.8
Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85901
HIGH 7.8
Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85902
HIGH 7.8
Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85869
HIGH 7.8
Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85871
HIGH 7.8
Heap-based buffer overflow in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85872
HIGH 7.8
Use after free in Windows Storage VSP Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85874
HIGH 7.8
Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to execute code locally. |
|
CVE-2026-85863
HIGH 7.8
Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85864
HIGH 7.8
Improper privilege management in Python allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85867
HIGH 7.8
Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85860
HIGH 7.8
Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85861
HIGH 7.8
Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85849
HIGH 7.8
Improper link resolution before file access ('link following') in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85842
HIGH 7.8
Use of externally-controlled format string in Windows Image Acquisition allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85843
HIGH 7.8
Use of uninitialized resource in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85848
HIGH 7.8
Heap-based buffer overflow in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85833
HIGH 7.8
Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85829
HIGH 7.8
Double free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85832
HIGH 7.8
Heap-based buffer overflow in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85822
HIGH 7.8
Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85820
HIGH 7.8
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85807
HIGH 7.8
Integer overflow or wraparound in Windows USB Video Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85795
HIGH 7.8
Use after free in Windows Text Services Framework allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85796
HIGH 7.8
Numeric truncation error in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85800
HIGH 7.8
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85373
HIGH 7.8
Heap-based buffer overflow in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85375
HIGH 7.8
Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85376
HIGH 7.8
Weak authentication in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85377
HIGH 7.8
Access of resource using incompatible type ('type confusion') in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85368
HIGH 7.8
Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85366
HIGH 7.8
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85356
HIGH 7.8
Out-of-bounds read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85358
HIGH 7.8
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85359
HIGH 7.8
Improper control of generation of code ('code injection') in Windows Performance Monitor allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85341
HIGH 7.8
Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85343
HIGH 7.8
Improper link resolution before file access ('link following') in Windows Hyper-V allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85338
HIGH 7.8
Out-of-bounds read in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85332
HIGH 7.8
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85327
HIGH 7.8
Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85318
HIGH 7.8
Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-84013
HIGH 7.8
Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-84016
HIGH 7.8
Out-of-bounds write in Windows EAPHost Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83927
HIGH 7.8
Improper link resolution before file access ('link following') in Windows Registry allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83932
HIGH 7.8
Heap-based buffer overflow in Windows Group Policy allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83922
HIGH 7.8
Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83918
HIGH 7.8
Integer overflow or wraparound in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83919
HIGH 7.8
Heap-based buffer overflow in Microsoft Internet Messaging API allows an authorized attacker to execute code locally. |
|
CVE-2026-83920
HIGH 7.8
Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83912
HIGH 7.8
Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83913
HIGH 7.8
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83902
HIGH 7.8
Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83896
HIGH 7.8
Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83876
HIGH 7.8
Use after free in Windows Shell allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83877
HIGH 7.8
Integer overflow or wraparound in HID Parser Library allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83881
HIGH 7.8
Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83882
HIGH 7.8
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83883
HIGH 7.8
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83872
HIGH 7.8
Incorrect conversion between numeric types in Windows TCP/IP allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83873
HIGH 7.8
Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83867
HIGH 7.8
Heap-based buffer overflow in Windows Push Notifications allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83861
HIGH 7.8
Heap-based buffer overflow in Windows Remote Desktop Protocol allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83863
HIGH 7.8
Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83857
HIGH 7.8
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83859
HIGH 7.8
Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83847
HIGH 7.8
Heap-based buffer overflow in Microsoft Account allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83848
HIGH 7.8
Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83850
HIGH 7.8
Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83840
HIGH 7.8
Weak authentication in Windows Error Reporting allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83833
HIGH 7.8
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83836
HIGH 7.8
Heap-based buffer overflow in Windows Event Tracing allows an unauthorized attacker to execute code locally. |
|
CVE-2026-83837
HIGH 7.8
Improper access control in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83829
HIGH 7.8
Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83830
HIGH 7.8
Heap-based buffer overflow in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83832
HIGH 7.8
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83792
HIGH 7.8
Incorrect authorization in Windows Device Install Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83791
HIGH 7.8
Improper authorization in Windows Virtual Input allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83783
HIGH 7.8
Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83779
HIGH 7.8
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83768
HIGH 7.8
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83769
HIGH 7.8
Use after free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83767
HIGH 7.8
Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83763
HIGH 7.8
Access of resource using incompatible type ('type confusion') in Windows Input System allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83758
HIGH 7.8
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to execute code locally. |
|
CVE-2026-83761
HIGH 7.8
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83762
HIGH 7.8
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83753
HIGH 7.8
Heap-based buffer overflow in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83756
HIGH 7.8
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83741
HIGH 7.8
Use after free in Internet Explorer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83727
HIGH 7.8
Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83732
HIGH 7.8
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83726
HIGH 7.8
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83709
HIGH 7.8
Heap-based buffer overflow in Windows NTLM allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83712
HIGH 7.8
Out-of-bounds write in Windows NTFS allows an authorized attacker to execute code locally. |
|
CVE-2026-83704
HIGH 7.8
Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locall… |
|
CVE-2026-83698
HIGH 7.8
Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83699
HIGH 7.8
Stack-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83700
HIGH 7.8
Use after free in Windows Now Playing Session Manager allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83691
HIGH 7.8
Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83692
HIGH 7.8
Heap-based buffer overflow in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83690
HIGH 7.8
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83678
HIGH 7.8
Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83669
HIGH 7.8
Use of uninitialized resource in Windows Error Reporting allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83659
HIGH 7.8
Improper link resolution before file access ('link following') in Windows User Profile Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83650
HIGH 7.8
Heap-based buffer overflow in Windows Media allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83652
HIGH 7.8
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83654
HIGH 7.8
Missing authentication for critical function in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83638
HIGH 7.8
Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83639
HIGH 7.8
Heap-based buffer overflow in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83640
HIGH 7.8
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally. |
|
CVE-2026-83641
HIGH 7.8
Heap-based buffer overflow in Windows Media allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83587
HIGH 7.8
Untrusted pointer dereference in Windows Core Messaging allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83588
HIGH 7.8
Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83637
HIGH 7.8
Out-of-bounds read in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83583
HIGH 7.8
Improper access control in Windows Geotag Broker allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83585
HIGH 7.8
Use of externally-controlled format string in Windows NTFS allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83579
HIGH 7.8
Heap-based buffer overflow in Windows Smart Card allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83567
HIGH 7.8
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83569
HIGH 7.8
Heap-based buffer overflow in HID Parser Library allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83570
HIGH 7.8
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83513
HIGH 7.8
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83514
HIGH 7.8
Heap-based buffer overflow in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83506
HIGH 7.8
Untrusted search path in Servicing Stack Updates allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83508
HIGH 7.8
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-78459
HIGH 7.8
Heap-based buffer overflow in Windows Internet Information Services allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-73027
HIGH 7.8
External control of system or configuration setting in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70303
HIGH 7.8
Out-of-bounds write in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70566
HIGH 7.8
Null pointer dereference in Windows Schannel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70285
HIGH 7.8
Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70286
HIGH 7.8
Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70278
HIGH 7.8
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70255
HIGH 7.8
Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70245
HIGH 7.8
Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privile… |
|
CVE-2026-70247
HIGH 7.8
Out-of-bounds read in Windows HTTP.sys allows an authorized attacker to execute code locally. |
|
CVE-2026-70238
HIGH 7.8
Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70228
HIGH 7.8
Out-of-bounds read in Desktop Window Manager allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70233
HIGH 7.8
Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70225
HIGH 7.8
Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privile… |
|
CVE-2026-70222
HIGH 7.8
Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70184
HIGH 7.8
Improper resolution of path equivalence in Windows Backup Engine allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70172
HIGH 7.8
Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70177
HIGH 7.8
Numeric truncation error in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70151
HIGH 7.8
Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70143
HIGH 7.8
Heap-based buffer overflow in Windows Network File System allows an authorized attacker to execute code locally. |
|
CVE-2026-70138
HIGH 7.8
Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70139
HIGH 7.8
Heap-based buffer overflow in Windows Update Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70131
HIGH 7.8
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to elevate privileges locally. |
|
CVE-2026-70132
HIGH 7.8
Heap-based buffer overflow in Windows Portable Device File System Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70121
HIGH 7.8
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70123
HIGH 7.8
Numeric truncation error in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70112
HIGH 7.8
Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to execute code locally. |
|
CVE-2026-70113
HIGH 7.8
Integer overflow or wraparound in Windows Client for NFS allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70117
HIGH 7.8
Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70104
HIGH 7.8
Untrusted pointer dereference in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70106
HIGH 7.8
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70108
HIGH 7.8
Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70109
HIGH 7.8
Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally. |
|
CVE-2026-70110
HIGH 7.8
Stack-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally. |
|
CVE-2026-70093
HIGH 7.8
Heap-based buffer overflow in Windows Rich Text Edit Control allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70102
HIGH 7.8
Use after free in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70103
HIGH 7.8
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70092
HIGH 7.8
Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally. |
|
CVE-2026-70060
HIGH 7.8
Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70064
HIGH 7.8
Integer underflow (wrap or wraparound) in Windows Kerberos allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70054
HIGH 7.8
Heap-based buffer overflow in Windows NetBIOS allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70059
HIGH 7.8
Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70048
HIGH 7.8
Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70051
HIGH 7.8
Access of resource using incompatible type ('type confusion') in Windows SmartScreen allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70027
HIGH 7.8
Heap-based buffer overflow in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70023
HIGH 7.8
Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70010
HIGH 7.8
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70015
HIGH 7.8
Use after free in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70008
HIGH 7.8
Integer overflow or wraparound in Windows IP Over USB Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69957
HIGH 7.8
Integer overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69959
HIGH 7.8
Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to execute code locally. |
|
CVE-2026-69963
HIGH 7.8
Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69966
HIGH 7.8
Integer overflow or wraparound in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69950
HIGH 7.8
Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69952
HIGH 7.8
Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69953
HIGH 7.8
Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69949
HIGH 7.8
Heap-based buffer overflow in Windows Client for NFS allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69926
HIGH 7.8
Access of resource using incompatible type ('type confusion') in Desktop Window Manager allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69909
HIGH 7.8
Heap-based buffer overflow in Microsoft COM for Windows allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69916
HIGH 7.8
Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69884
HIGH 7.8
Buffer over-read in Windows GDI allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69898
HIGH 7.8
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69850
HIGH 7.8
Untrusted pointer dereference in Windows Certificates allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69867
HIGH 7.8
Out-of-bounds read in SQLite allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69880
HIGH 7.8
Access of resource using incompatible type ('type confusion') in Desktop Window Manager allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69798
HIGH 7.8
Use after free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69633
HIGH 7.8
Heap-based buffer overflow in Windows Update allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69471
HIGH 7.8
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-61931
HIGH 7.8
Use after free in Windows Perception Simulation Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-68836
HIGH 7.8
Heap-based buffer overflow in Windows kernel32.dll allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-49785
HIGH 7.8
Improper resource shutdown or release in Windows UEFI allows an authorized attacker to bypass a security feature locally. |
|
CVE-2026-108136
HIGH 7.8
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-105003
HIGH 7.8
Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-105004
HIGH 7.8
Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-103568
HIGH 7.8
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Credential Providers allows an authorized attacker to el… |
|
CVE-2026-103553
HIGH 7.8
Out-of-bounds read in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-102227
HIGH 7.8
Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally. |
|
CVE-2026-102215
HIGH 7.8
Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-102216
HIGH 7.8
Access of resource using incompatible type ('type confusion') in Windows StateRepository API allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-102218
HIGH 7.8
Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-102220
HIGH 7.8
Use after free in Windows VHD miniport driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-102201
HIGH 7.8
Use after free in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-102205
HIGH 7.8
Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-102196
HIGH 7.8
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-100215
HIGH 7.8
Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code locally. |
|
CVE-2026-100217
HIGH 7.8
Improper privilege management in Windows Group Policy allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-97788
HIGH 7.5
Observable discrepancy in Active Directory Federation Services (AD FS) allows an unauthorized attacker to disclose information over a network. |
|
CVE-2026-97789
HIGH 7.5
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-96325
HIGH 7.5
Missing reference to active allocated resource in Windows SMB Server allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-96245
HIGH 7.5
Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network. |
|
CVE-2026-96246
HIGH 7.5
Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to disclose information over a network. |
|
CVE-2026-96071
HIGH 7.5
Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-87716
HIGH 7.5
Heap-based buffer overflow in Windows Storage Spaces Controller allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-87713
HIGH 7.5
Use after free in Windows Bluetooth Port Driver allows an unauthorized attacker to elevate privileges over an adjacent network. |
|
CVE-2026-85808
HIGH 7.5
Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-85811
HIGH 7.5
Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over an adjacent network. |
|
CVE-2026-85353
HIGH 7.5
Out-of-bounds read in Windows Print Spooler Components allows an unauthorized attacker to disclose information over a network. |
|
CVE-2026-85334
HIGH 7.5
Out-of-bounds read in Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose information over a network. |
|
CVE-2026-85322
HIGH 7.5
Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network. |
|
CVE-2026-84017
HIGH 7.5
Null pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-83860
HIGH 7.5
Stack-based buffer overflow in Windows GDI allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-83843
HIGH 7.5
Out-of-bounds read in Windows Internet Key Exchange (IKE) Protocol allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-83795
HIGH 7.5
Heap-based buffer overflow in Windows IKE Extension allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-83754
HIGH 7.5
Heap-based buffer overflow in OpenSSH for Windows allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-83739
HIGH 7.5
Use after free in Windows Bluetooth Service allows an unauthorized attacker to execute code over an adjacent network. |
|
CVE-2026-83670
HIGH 7.5
Out-of-bounds read in Function Discovery Service (fdwsd.dll) allows an unauthorized attacker to disclose information over a network. |
|
CVE-2026-83655
HIGH 7.5
Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-83647
HIGH 7.5
Out-of-bounds read in Active Directory Domain Services allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-70207
HIGH 7.5
Heap-based buffer overflow in Network Policy Server (NPS) allows an authorized attacker to execute code over a network. |
|
CVE-2026-70163
HIGH 7.5
Allocation of resources without limits or throttling in OpenSSH for Windows allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-70133
HIGH 7.5
Allocation of resources without limits or throttling in Windows SMB Server allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-70095
HIGH 7.5
Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-70031
HIGH 7.5
Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-70012
HIGH 7.5
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-70014
HIGH 7.5
Use after free in Windows Cryptographic Services allows an authorized attacker to execute code over a network. |
|
CVE-2026-70004
HIGH 7.5
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-70006
HIGH 7.5
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-69992
HIGH 7.5
Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-69994
HIGH 7.5
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-69995
HIGH 7.5
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-69996
HIGH 7.5
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-69997
HIGH 7.5
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-69998
HIGH 7.5
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-69984
HIGH 7.5
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-69986
HIGH 7.5
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-69987
HIGH 7.5
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-69988
HIGH 7.5
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-69991
HIGH 7.5
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-69976
HIGH 7.5
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
|
CVE-2026-108131
HIGH 7.5
No cwe for this issue in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network. |
|
CVE-2026-105723
HIGH 7.5
Untrusted pointer dereference in Windows Distributed File System (DFS) allows an unauthorized attacker to elevate privileges over a network. |
|
CVE-2026-103569
HIGH 7.5
Out-of-bounds read in Windows IKE Extension allows an unauthorized attacker to disclose information over a network. |
|
CVE-2026-103558
HIGH 7.5
Deadlock in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-87705
HIGH 7.4
Improper verification of source of a communication channel in Windows Hyper-V allows an unauthorized attacker to bypass a security feature over an adjacent net… |
|
CVE-2026-85798
HIGH 7.2
Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network. |
|
CVE-2026-108399
HIGH 7.2
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85856
HIGH 7.1
Heap-based buffer overflow in Windows Internet Connection Sharing (ICS) allows an authorized attacker to execute code over an adjacent network. |
|
CVE-2026-83715
HIGH 7.1
Missing authentication for critical function in Windows Error Reporting allows an authorized attacker to perform tampering locally. |
|
CVE-2026-70126
HIGH 7.1
Out-of-bounds read in Windows Bluetooth Port Driver allows an unauthorized attacker to execute code over an adjacent network. |
|
CVE-2026-69452
HIGH 7.1
Use after free in Windows Enterprise App Management allows an authorized attacker to elevate privileges over a network. |
|
CVE-2026-97812
HIGH 7.0
Double free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-97808
HIGH 7.0
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-97793
HIGH 7.0
Missing authentication for critical function in Windows Setup and Deployment allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96949
HIGH 7.0
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96932
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Embedded Mode Service allows an authorized attacker to e… |
|
CVE-2026-96937
HIGH 7.0
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96919
HIGH 7.0
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96923
HIGH 7.0
Use after free in Windows Workstation Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96852
HIGH 7.0
Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96323
HIGH 7.0
Use after free in Windows Update allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96322
HIGH 7.0
Use after free in Windows Remote Desktop Protocol allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96319
HIGH 7.0
Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96310
HIGH 7.0
Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96313
HIGH 7.0
Missing authentication for critical function in Windows Push Notifications allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96302
HIGH 7.0
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96304
HIGH 7.0
Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96305
HIGH 7.0
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96307
HIGH 7.0
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96250
HIGH 7.0
Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96253
HIGH 7.0
Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96254
HIGH 7.0
Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96301
HIGH 7.0
Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96216
HIGH 7.0
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-96209
HIGH 7.0
Out-of-bounds read in Windows Network File System allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88160
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Windows Search Component allows an authorized attacker… |
|
CVE-2026-88161
HIGH 7.0
Use after free in Windows Local Security Authority (LSA) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88146
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Background Intelligent Transfer Service (BITS) allows an… |
|
CVE-2026-88149
HIGH 7.0
Double free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88124
HIGH 7.0
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88127
HIGH 7.0
Use after free in Windows SMB Server allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88113
HIGH 7.0
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88103
HIGH 7.0
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88106
HIGH 7.0
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88107
HIGH 7.0
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88096
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DCOM Server allows an authorized attacker to elevate pri… |
|
CVE-2026-88098
HIGH 7.0
Untrusted pointer dereference in Windows Security Support Provider Interface allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88076
HIGH 7.0
Null pointer dereference in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-87715
HIGH 7.0
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-87710
HIGH 7.0
Improper access control in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-87704
HIGH 7.0
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-87708
HIGH 7.0
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85943
HIGH 7.0
Time-of-check time-of-use (toctou) race condition in Reliable Multicast Transport Driver (RMCAST) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-87693
HIGH 7.0
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85941
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privi… |
|
CVE-2026-85930
HIGH 7.0
Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85934
HIGH 7.0
Use after free in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85920
HIGH 7.0
Time-of-check time-of-use (toctou) race condition in Windows BitLocker allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85912
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Clipboard User Service allows an authorized attacker to … |
|
CVE-2026-85914
HIGH 7.0
Use after free in Windows Embedded Mode Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85918
HIGH 7.0
Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85904
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Device Association Service allows an authorized attacker… |
|
CVE-2026-85870
HIGH 7.0
Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85868
HIGH 7.0
Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85853
HIGH 7.0
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85854
HIGH 7.0
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85846
HIGH 7.0
Use after free in Windows Web Account Manager allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85834
HIGH 7.0
Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85828
HIGH 7.0
Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85824
HIGH 7.0
Use after free in Windows Composite Image File System allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85825
HIGH 7.0
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85826
HIGH 7.0
Out-of-bounds write in Windows Fast FAT Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85827
HIGH 7.0
Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85810
HIGH 7.0
Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85802
HIGH 7.0
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85791
HIGH 7.0
Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85372
HIGH 7.0
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85367
HIGH 7.0
Use after free in Windows Cash Drawer Protocol Provider allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85370
HIGH 7.0
Use after free in WebDAV allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85361
HIGH 7.0
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85362
HIGH 7.0
Release of invalid pointer or reference in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85364
HIGH 7.0
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85365
HIGH 7.0
Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85355
HIGH 7.0
Inclusion of functionality from untrusted control sphere in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85342
HIGH 7.0
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85352
HIGH 7.0
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85354
HIGH 7.0
Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85329
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Account allows an authorized attacker to elevate privi… |
|
CVE-2026-85328
HIGH 7.0
Weak authentication in Windows Projected File System allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-84018
HIGH 7.0
Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-84019
HIGH 7.0
Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-84020
HIGH 7.0
Use after free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-84014
HIGH 7.0
Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83924
HIGH 7.0
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83916
HIGH 7.0
Double free in Windows Error Reporting allows an authorized attacker to execute code locally. |
|
CVE-2026-83917
HIGH 7.0
Use after free in Windows ALPC allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83921
HIGH 7.0
Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83911
HIGH 7.0
Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83915
HIGH 7.0
Use after free in Windows Diagnostic Policy Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83908
HIGH 7.0
Release of invalid pointer or reference in RPC Runtime allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83901
HIGH 7.0
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83899
HIGH 7.0
Improper privilege management in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83879
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Overlay Filter allows an authorized attacker to elevate … |
|
CVE-2026-83866
HIGH 7.0
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83868
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Bluetooth Driver allows an authorized attacker to elev… |
|
CVE-2026-83871
HIGH 7.0
Heap-based buffer overflow in OpenSSH for Windows allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83853
HIGH 7.0
Use after free in Windows Hello allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83846
HIGH 7.0
Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83839
HIGH 7.0
Time-of-check time-of-use (toctou) race condition in Windows Hyper-V allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83841
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K allows an authorized attacker to elevate privileg… |
|
CVE-2026-83842
HIGH 7.0
Double free in Windows TCP/IP allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83834
HIGH 7.0
Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83827
HIGH 7.0
Heap-based buffer overflow in Windows Bluetooth Port Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83793
HIGH 7.0
Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges local… |
|
CVE-2026-83790
HIGH 7.0
Use after free in Windows Hello allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83785
HIGH 7.0
Use after free in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83775
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privi… |
|
CVE-2026-83752
HIGH 7.0
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83749
HIGH 7.0
Use after free in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83750
HIGH 7.0
Time-of-check time-of-use (toctou) race condition in Windows Error Reporting allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83738
HIGH 7.0
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83740
HIGH 7.0
Use after free in Windows Hello allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83722
HIGH 7.0
Use after free in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83724
HIGH 7.0
Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83717
HIGH 7.0
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83718
HIGH 7.0
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83708
HIGH 7.0
Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83710
HIGH 7.0
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83707
HIGH 7.0
Use after free in Windows Event Tracing allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83701
HIGH 7.0
Use after free in Windows Now Playing Session Manager allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83702
HIGH 7.0
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83694
HIGH 7.0
Out-of-bounds read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83696
HIGH 7.0
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83689
HIGH 7.0
Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83680
HIGH 7.0
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83682
HIGH 7.0
Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83676
HIGH 7.0
Integer underflow (wrap or wraparound) in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83644
HIGH 7.0
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83584
HIGH 7.0
Use after free in Windows Smart Card allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83574
HIGH 7.0
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83575
HIGH 7.0
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83580
HIGH 7.0
Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83564
HIGH 7.0
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83509
HIGH 7.0
Untrusted search path in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83510
HIGH 7.0
Time-of-check time-of-use (toctou) race condition in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83505
HIGH 7.0
Time-of-check time-of-use (toctou) race condition in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-81971
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows NTFS allows an authorized attacker to elevate privileges… |
|
CVE-2026-72968
HIGH 7.0
Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70272
HIGH 7.0
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70271
HIGH 7.0
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70252
HIGH 7.0
Use after free in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70253
HIGH 7.0
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70249
HIGH 7.0
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70236
HIGH 7.0
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70237
HIGH 7.0
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70241
HIGH 7.0
Use after free in Windows Kerberos allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70230
HIGH 7.0
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70223
HIGH 7.0
Use after free in Windows Console Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70209
HIGH 7.0
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70212
HIGH 7.0
Improper restriction of communication channel to intended endpoints in Windows Security Center allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70205
HIGH 7.0
Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privile… |
|
CVE-2026-70198
HIGH 7.0
Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70176
HIGH 7.0
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70164
HIGH 7.0
Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70168
HIGH 7.0
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70169
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected Devices Platform Service allows an authorized … |
|
CVE-2026-70160
HIGH 7.0
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70150
HIGH 7.0
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70156
HIGH 7.0
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70136
HIGH 7.0
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70140
HIGH 7.0
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70134
HIGH 7.0
Use after free in Windows Event Tracing allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70086
HIGH 7.0
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70056
HIGH 7.0
Use after free in Windows Update Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70045
HIGH 7.0
Use after free in Windows Work Folders allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70026
HIGH 7.0
Use after free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69977
HIGH 7.0
Use after free in Quality Windows Audio/Video Experience (QWAVE) service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69970
HIGH 7.0
Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69964
HIGH 7.0
Use after free in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69935
HIGH 7.0
Use after free in Windows Storage allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69931
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Storage allows an authorized attacker to elevate privile… |
|
CVE-2026-69915
HIGH 7.0
Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69840
HIGH 7.0
Use after free in Windows Certificates allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69856
HIGH 7.0
Use after free in Windows Storage allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69766
HIGH 7.0
Use after free in Windows Storage allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69795
HIGH 7.0
Null pointer dereference in Windows Clipboard Server allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69736
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Credential Manager allows an authorized attacker to elev… |
|
CVE-2026-69763
HIGH 7.0
Use after free in Windows Storage allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69596
HIGH 7.0
Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-69387
HIGH 7.0
Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-109453
HIGH 7.0
Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-108468
HIGH 7.0
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-108464
HIGH 7.0
Use after free in Software Protection Platform (SPP) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-108465
HIGH 7.0
Use after free in Windows Update Delivery Optimization allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-108461
HIGH 7.0
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-108396
HIGH 7.0
Time-of-check time-of-use (toctou) race condition in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-108132
HIGH 7.0
Double free in Windows Kerberos allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-108135
HIGH 7.0
Improper link resolution before file access ('link following') in Windows Backup Engine allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-105722
HIGH 7.0
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-103555
HIGH 7.0
Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-103565
HIGH 7.0
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-103554
HIGH 7.0
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-102207
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileg… |
|
CVE-2026-102208
HIGH 7.0
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-102211
HIGH 7.0
Use after free in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-102194
HIGH 7.0
Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-102197
HIGH 7.0
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-102193
HIGH 7.0
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-100225
HIGH 7.0
Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-100216
HIGH 7.0
Stack-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-100203
HIGH 7.0
Heap-based buffer overflow in Windows Update Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-100201
HIGH 7.0
Heap-based buffer overflow in Windows Client License Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83895
MEDIUM 6.8
Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an unauthorized attacker to elevate privileges with a physical attack. |
|
CVE-2026-83776
MEDIUM 6.8
Out-of-bounds read in Microsoft Bluetooth Driver allows an unauthorized attacker to elevate privileges with a physical attack. |
|
CVE-2026-83573
MEDIUM 6.8
Integer overflow or wraparound in Windows Kernel Mode Driver allows an unauthorized attacker to elevate privileges with a physical attack. |
|
CVE-2026-69958
MEDIUM 6.8
Heap-based buffer overflow in Windows Overlay Filter allows an unauthorized attacker to execute code with a physical attack. |
|
CVE-2026-69947
MEDIUM 6.8
Heap-based buffer overflow in Windows Overlay Filter allows an unauthorized attacker to execute code with a physical attack. |
|
CVE-2026-102206
MEDIUM 6.8
Heap-based buffer overflow in Windows Portable Device MTP Driver allows an unauthorized attacker to elevate privileges with a physical attack. |
|
CVE-2026-102188
MEDIUM 6.8
Untrusted pointer dereference in Windows Storage Port Driver allows an unauthorized attacker to elevate privileges with a physical attack. |
|
CVE-2026-96938
MEDIUM 6.7
Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-88143
MEDIUM 6.7
Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-85333
MEDIUM 6.7
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Performance Monitor allows an authorized attacker to ele… |
|
CVE-2026-69902
MEDIUM 6.7
Untrusted pointer dereference in Windows NTFS allows an authorized attacker to execute code locally. |
|
CVE-2026-69635
MEDIUM 6.6
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges with a physical attack. |
|
CVE-2026-97844
MEDIUM 6.5
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
|
CVE-2026-97839
MEDIUM 6.5
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
|
CVE-2026-97840
MEDIUM 6.5
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
|
CVE-2026-97841
MEDIUM 6.5
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
|
CVE-2026-97842
MEDIUM 6.5
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
|
CVE-2026-97843
MEDIUM 6.5
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
|
CVE-2026-97833
MEDIUM 6.5
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
|
CVE-2026-97834
MEDIUM 6.5
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
|
CVE-2026-97835
MEDIUM 6.5
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
|
CVE-2026-97836
MEDIUM 6.5
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
|
CVE-2026-97837
MEDIUM 6.5
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
|
CVE-2026-97838
MEDIUM 6.5
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
|
CVE-2026-97828
MEDIUM 6.5
Buffer over-read in DNS Server allows an authorized attacker to disclose information over a network. |
|
CVE-2026-97829
MEDIUM 6.5
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
|
CVE-2026-97831
MEDIUM 6.5
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
|
CVE-2026-97832
MEDIUM 6.5
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
|
CVE-2026-97823
MEDIUM 6.5
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
|
CVE-2026-97824
MEDIUM 6.5
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
|
CVE-2026-97825
MEDIUM 6.5
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
|
CVE-2026-97826
MEDIUM 6.5
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
|
CVE-2026-97827
MEDIUM 6.5
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
|
CVE-2026-97817
MEDIUM 6.5
Heap-based buffer overflow in DNS Server allows an authorized attacker to disclose information over a network. |
|
CVE-2026-97819
MEDIUM 6.5
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
|
CVE-2026-97820
MEDIUM 6.5
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
|
CVE-2026-97821
MEDIUM 6.5
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
|
CVE-2026-97822
MEDIUM 6.5
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
|
CVE-2026-97813
MEDIUM 6.5
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to disclose information over a network. |
|
CVE-2026-88137
MEDIUM 6.5
Files or directories accessible to external parties in WebDAV allows an authorized attacker to disclose information over a network. |
|
CVE-2026-87714
MEDIUM 6.5
Missing authorization in WebDAV allows an authorized attacker to bypass a security feature over a network. |
|
CVE-2026-85859
MEDIUM 6.5
Null pointer dereference in Windows Message Queuing Queue Manager allows an authorized attacker to deny service over a network. |
|
CVE-2026-85847
MEDIUM 6.5
Out-of-bounds read in Windows Print Spooler Components allows an unauthorized attacker to disclose information over a network. |
|
CVE-2026-85840
MEDIUM 6.5
Files or directories accessible to external parties in Windows Event Viewer allows an authorized attacker to disclose information over a network. |
|
CVE-2026-85821
MEDIUM 6.5
Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally. |
|
CVE-2026-85805
MEDIUM 6.5
Improperly implemented security check for standard in Windows PowerShell allows an unauthorized attacker to bypass a security feature over a network. |
|
CVE-2026-85797
MEDIUM 6.5
Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information over a network. |
|
CVE-2026-85337
MEDIUM 6.5
Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network. |
|
CVE-2026-85331
MEDIUM 6.5
Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information over a network. |
|
CVE-2026-83888
MEDIUM 6.5
Buffer over-read in Windows CD-ROM Driver allows an unauthorized attacker to elevate privileges over a network. |
|
CVE-2026-83703
MEDIUM 6.5
Out-of-bounds read in Windows Wi-Fi Driver allows an unauthorized attacker to deny service over an adjacent network. |
|
CVE-2026-83683
MEDIUM 6.5
Absolute path traversal in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information over a network. |
|
CVE-2026-83685
MEDIUM 6.5
Buffer over-read in Windows IKE Extension allows an authorized attacker to deny service over a network. |
|
CVE-2026-83671
MEDIUM 6.5
Out-of-bounds read in Windows Hyper-V allows an authorized attacker to disclose information locally. |
|
CVE-2026-83667
MEDIUM 6.5
Out-of-bounds read in Active Directory Domain Services allows an authorized attacker to deny service over a network. |
|
CVE-2026-83649
MEDIUM 6.5
Out-of-bounds read in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to deny service over a network. |
|
CVE-2026-83651
MEDIUM 6.5
Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information over a network. |
|
CVE-2026-83648
MEDIUM 6.5
Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network. |
|
CVE-2026-83636
MEDIUM 6.5
Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally. |
|
CVE-2026-83521
MEDIUM 6.5
Out-of-bounds read in Windows IKE Extension allows an authorized attacker to disclose information over a network. |
|
CVE-2026-83515
MEDIUM 6.5
Use of uninitialized resource in RPC Runtime allows an unauthorized attacker to disclose information over a network. |
|
CVE-2026-70248
MEDIUM 6.5
Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally. |
|
CVE-2026-70244
MEDIUM 6.5
Out-of-bounds read in DNS Server allows an unauthorized attacker to disclose information over a network. |
|
CVE-2026-70170
MEDIUM 6.5
Untrusted pointer dereference in Windows Kernel allows an authorized attacker to deny service over a network. |
|
CVE-2026-70148
MEDIUM 6.5
Improper authorization in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally. |
|
CVE-2026-70122
MEDIUM 6.5
Time-of-check time-of-use (toctou) race condition in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70072
MEDIUM 6.5
Allocation of resources without limits or throttling in Windows Netlogon allows an authorized attacker to deny service over a network. |
|
CVE-2026-69968
MEDIUM 6.5
Relative path traversal in Windows Libarchive allows an unauthorized attacker to perform tampering over a network. |
|
CVE-2026-69973
MEDIUM 6.5
Improper limitation of a pathname to a restricted directory ('path traversal') in Windows Libarchive allows an unauthorized attacker to perform tampering over … |
|
CVE-2026-69955
MEDIUM 6.5
Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information over a network. |
|
CVE-2026-69940
MEDIUM 6.5
Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information over a network. |
|
CVE-2026-108127
MEDIUM 6.5
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
|
CVE-2026-108128
MEDIUM 6.5
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
|
CVE-2026-108129
MEDIUM 6.5
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
|
CVE-2026-102199
MEDIUM 6.5
Stack-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-71347
MEDIUM 6.4
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Security Center allows an authorized attacker to elevate… |
|
CVE-2026-105006
MEDIUM 6.4
Use after free in HID class driver allows an unauthorized attacker to elevate privileges with a physical attack. |
|
CVE-2026-83500
MEDIUM 6.1
Url redirection to untrusted site ('open redirect') in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack. |
|
CVE-2026-96300
MEDIUM 5.9
Uncontrolled resource consumption in RPC Endpoint Mapper Service allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-85816
MEDIUM 5.7
Out-of-bounds read in Windows Wi-Fi Driver allows an authorized attacker to disclose information over an adjacent network. |
|
CVE-2026-96865
MEDIUM 5.6
Exposure of sensitive system information to an unauthorized control sphere in Windows Secure Kernel Mode allows an authorized attacker to disclose information … |
|
CVE-2026-69978
MEDIUM 5.6
Null pointer dereference in Windows VMSwitch allows an authorized attacker to deny service locally. |
|
CVE-2026-96948
MEDIUM 5.5
Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver (csc.sys) allows an authorized attacker to disclose informatio… |
|
CVE-2026-96935
MEDIUM 5.5
Exposure of sensitive system information to an unauthorized control sphere in Windows NTFS allows an authorized attacker to disclose information locally. |
|
CVE-2026-96925
MEDIUM 5.5
Integer underflow (wrap or wraparound) in Windows NTFS allows an authorized attacker to disclose information locally. |
|
CVE-2026-96927
MEDIUM 5.5
Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally. |
|
CVE-2026-96930
MEDIUM 5.5
Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally. |
|
CVE-2026-96921
MEDIUM 5.5
Access of resource using incompatible type ('type confusion') in Windows Message Queuing Queue Manager allows an authorized attacker to disclose information lo… |
|
CVE-2026-96910
MEDIUM 5.5
Untrusted pointer dereference in Microsoft Windows Search Component allows an authorized attacker to disclose information locally. |
|
CVE-2026-96854
MEDIUM 5.5
Access of resource using incompatible type ('type confusion') in Windows Device Association Service allows an authorized attacker to disclose information local… |
|
CVE-2026-96855
MEDIUM 5.5
Improper access control in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally. |
|
CVE-2026-96857
MEDIUM 5.5
Files or directories accessible to external parties in Windows Projected File System allows an authorized attacker to disclose information locally. |
|
CVE-2026-96858
MEDIUM 5.5
Missing authentication for critical function in Windows Security Account Manager allows an authorized attacker to perform tampering locally. |
|
CVE-2026-96859
MEDIUM 5.5
Out-of-bounds read in Windows Imaging Component allows an authorized attacker to disclose information locally. |
|
CVE-2026-96860
MEDIUM 5.5
Out-of-bounds read in Windows USB Print Driver allows an authorized attacker to disclose information locally. |
|
CVE-2026-96848
MEDIUM 5.5
Buffer over-read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. |
|
CVE-2026-96850
MEDIUM 5.5
Use of uninitialized resource in Windows Modern Device Management (MDM) allows an authorized attacker to disclose information locally. |
|
CVE-2026-96851
MEDIUM 5.5
Buffer over-read in Windows Management Instrumentation allows an authorized attacker to disclose information locally. |
|
CVE-2026-96846
MEDIUM 5.5
Out-of-bounds read in WebDAV allows an authorized attacker to disclose information locally. |
|
CVE-2026-96321
MEDIUM 5.5
Out-of-bounds read in Remote Desktop Display Driver allows an authorized attacker to disclose information locally. |
|
CVE-2026-96314
MEDIUM 5.5
Out-of-bounds read in Windows Audio Service allows an authorized attacker to disclose information locally. |
|
CVE-2026-96315
MEDIUM 5.5
Missing authorization in Windows Overlay Filter allows an authorized attacker to perform tampering locally. |
|
CVE-2026-96316
MEDIUM 5.5
Improper access control in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to perform tampering locally. |
|
CVE-2026-96311
MEDIUM 5.5
Improper authorization in Windows Network List Service allows an authorized attacker to perform tampering locally. |
|
CVE-2026-96247
MEDIUM 5.5
Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally. |
|
CVE-2026-96218
MEDIUM 5.5
Improper access control in Windows Update Stack allows an authorized attacker to perform tampering locally. |
|
CVE-2026-95904
MEDIUM 5.5
Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclose information locally. |
|
CVE-2026-88158
MEDIUM 5.5
Out-of-bounds read in Microsoft Digest Authentication allows an authorized attacker to disclose information locally. |
|
CVE-2026-88162
MEDIUM 5.5
Improper authorization in Windows Encrypting File System (EFS) allows an authorized attacker to perform tampering locally. |
|
CVE-2026-88140
MEDIUM 5.5
Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally. |
|
CVE-2026-87709
MEDIUM 5.5
Improper access control in Windows Host Guardian Service allows an authorized attacker to perform tampering locally. |
|
CVE-2026-87698
MEDIUM 5.5
Out-of-bounds read in Windows Remote Access Service Infrastructure allows an authorized attacker to disclose information locally. |
|
CVE-2026-85935
MEDIUM 5.5
Buffer over-read in Windows USB Driver allows an authorized attacker to disclose information locally. |
|
CVE-2026-85938
MEDIUM 5.5
Improper access control in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally. |
|
CVE-2026-85909
MEDIUM 5.5
Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally. |
|
CVE-2026-85857
MEDIUM 5.5
Insertion of sensitive information into log file in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally. |
|
CVE-2026-85852
MEDIUM 5.5
Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose information locally. |
|
CVE-2026-85830
MEDIUM 5.5
Out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locally. |
|
CVE-2026-85831
MEDIUM 5.5
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to disclose information locally. |
|
CVE-2026-85815
MEDIUM 5.5
Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally. |
|
CVE-2026-85812
MEDIUM 5.5
Files or directories accessible to external parties in Windows Bind Filter Driver allows an authorized attacker to disclose information locally. |
|
CVE-2026-85793
MEDIUM 5.5
Exposure of sensitive system information to an unauthorized control sphere in Windows Sysmain Service allows an authorized attacker to disclose information loc… |
|
CVE-2026-85794
MEDIUM 5.5
Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to disclose information locally. |
|
CVE-2026-85374
MEDIUM 5.5
Out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locally. |
|
CVE-2026-85336
MEDIUM 5.5
Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally. |
|
CVE-2026-85320
MEDIUM 5.5
Use of uninitialized resource in Windows Print Spooler Components allows an authorized attacker to disclose information locally. |
|
CVE-2026-83933
MEDIUM 5.5
Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authorized attacker to disclose information loc… |
|
CVE-2026-83907
MEDIUM 5.5
Exposure of sensitive system information to an unauthorized control sphere in Windows Hello allows an authorized attacker to disclose information locally. |
|
CVE-2026-83904
MEDIUM 5.5
Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally. |
|
CVE-2026-83898
MEDIUM 5.5
Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally. |
|
CVE-2026-83892
MEDIUM 5.5
Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally. |
|
CVE-2026-83893
MEDIUM 5.5
Exposure of sensitive system information to an unauthorized control sphere in Windows Clipboard User Service allows an authorized attacker to disclose informat… |
|
CVE-2026-83884
MEDIUM 5.5
Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally. |
|
CVE-2026-83887
MEDIUM 5.5
Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally. |
|
CVE-2026-83875
MEDIUM 5.5
Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally. |
|
CVE-2026-83864
MEDIUM 5.5
Improper access control in Windows NTFS allows an authorized attacker to disclose information locally. |
|
CVE-2026-83854
MEDIUM 5.5
Improper access control in Windows Notification allows an authorized attacker to disclose information locally. |
|
CVE-2026-83849
MEDIUM 5.5
Out-of-bounds read in Windows Hello allows an authorized attacker to disclose information locally. |
|
CVE-2026-83835
MEDIUM 5.5
Buffer over-read in Windows Common Log File System Driver allows an authorized attacker to disclose information locally. |
|
CVE-2026-83794
MEDIUM 5.5
Out-of-bounds read in Windows Portable Device MTP Driver allows an authorized attacker to disclose information locally. |
|
CVE-2026-83798
MEDIUM 5.5
Improper verification of cryptographic signature in Windows Update Stack allows an authorized attacker to perform spoofing locally. |
|
CVE-2026-83764
MEDIUM 5.5
Incorrect authorization in Windows Clipboard User Service allows an authorized attacker to disclose information locally. |
|
CVE-2026-83765
MEDIUM 5.5
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally. |
|
CVE-2026-83760
MEDIUM 5.5
Out-of-bounds read in Microsoft Bluetooth Driver allows an authorized attacker to disclose information locally. |
|
CVE-2026-83755
MEDIUM 5.5
Use of uninitialized resource in Windows Win32K allows an authorized attacker to disclose information locally. |
|
CVE-2026-83747
MEDIUM 5.5
Out-of-bounds read in Windows Error Reporting allows an authorized attacker to disclose information locally. |
|
CVE-2026-83737
MEDIUM 5.5
Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally. |
|
CVE-2026-83733
MEDIUM 5.5
Out-of-bounds read in Windows Print Spooler Components allows an authorized attacker to disclose information locally. |
|
CVE-2026-83736
MEDIUM 5.5
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-83723
MEDIUM 5.5
Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose information locally. |
|
CVE-2026-83719
MEDIUM 5.5
Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information locally. |
|
CVE-2026-83713
MEDIUM 5.5
Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally. |
|
CVE-2026-83714
MEDIUM 5.5
Use of uninitialized resource in Windows HTTP.sys allows an authorized attacker to disclose information locally. |
|
CVE-2026-83705
MEDIUM 5.5
Exposure of sensitive system information to an unauthorized control sphere in Windows HTTP.sys allows an authorized attacker to disclose information locally. |
|
CVE-2026-83695
MEDIUM 5.5
Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose information locally. |
|
CVE-2026-83686
MEDIUM 5.5
Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally. |
|
CVE-2026-83668
MEDIUM 5.5
Out-of-bounds read in Windows WLAN Service allows an authorized attacker to disclose information locally. |
|
CVE-2026-83658
MEDIUM 5.5
Improper access control in Windows Error Reporting allows an authorized attacker to disclose information locally. |
|
CVE-2026-83664
MEDIUM 5.5
Access of resource using incompatible type ('type confusion') in Windows Portable Device File System Driver allows an authorized attacker to disclose informati… |
|
CVE-2026-83571
MEDIUM 5.5
Null pointer dereference in Windows Audio Service allows an authorized attacker to disclose information locally. |
|
CVE-2026-83565
MEDIUM 5.5
Buffer over-read in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information locally. |
|
CVE-2026-83507
MEDIUM 5.5
Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authorized attacker to disclose information loc… |
|
CVE-2026-81964
MEDIUM 5.5
Use of hard-coded credentials in Windows Update Orchestrator Service allows an authorized attacker to bypass a security feature locally. |
|
CVE-2026-70293
MEDIUM 5.5
Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. |
|
CVE-2026-70294
MEDIUM 5.5
Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. |
|
CVE-2026-70295
MEDIUM 5.5
Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. |
|
CVE-2026-70288
MEDIUM 5.5
Time-of-check time-of-use (toctou) race condition in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. |
|
CVE-2026-70292
MEDIUM 5.5
Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. |
|
CVE-2026-70277
MEDIUM 5.5
Out-of-bounds read in Windows Fast FAT Driver allows an unauthorized attacker to disclose information locally. |
|
CVE-2026-70284
MEDIUM 5.5
Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. |
|
CVE-2026-70270
MEDIUM 5.5
Untrusted pointer dereference in Windows Container Isolation FS Filter Driver allows an authorized attacker to elevate privileges locally. |
|
CVE-2026-70260
MEDIUM 5.5
Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an authorized attacker to disclose information… |
|
CVE-2026-70261
MEDIUM 5.5
Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an authorized attacker to disclose information… |
|
CVE-2026-70232
MEDIUM 5.5
Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally. |
|
CVE-2026-70234
MEDIUM 5.5
Buffer over-read in Desktop Window Manager allows an authorized attacker to disclose information locally. |
|
CVE-2026-70216
MEDIUM 5.5
Insufficient granularity of access control in Windows Mobile Device Management allows an authorized attacker to perform tampering locally. |
|
CVE-2026-70211
MEDIUM 5.5
Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. |
|
CVE-2026-70199
MEDIUM 5.5
Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally. |
|
CVE-2026-70208
MEDIUM 5.5
Out-of-bounds read in Windows HTTP.sys allows an authorized attacker to disclose information locally. |
|
CVE-2026-70173
MEDIUM 5.5
Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally. |
|
CVE-2026-70141
MEDIUM 5.5
Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally. |
|
CVE-2026-70135
MEDIUM 5.5
Out-of-bounds read in Windows Remote POS Driver allows an authorized attacker to disclose information locally. |
|
CVE-2026-70137
MEDIUM 5.5
Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to disclose information locally. |
|
CVE-2026-70128
MEDIUM 5.5
Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally. |
|
CVE-2026-70090
MEDIUM 5.5
Use of uninitialized resource in Windows Netlogon allows an authorized attacker to disclose information locally. |
|
CVE-2026-70084
MEDIUM 5.5
Improper access control in Windows Projected File System allows an authorized attacker to disclose information locally. |
|
CVE-2026-70055
MEDIUM 5.5
Exposure of sensitive system information to an unauthorized control sphere in Windows Cryptographic Services allows an authorized attacker to disclose informat… |
|
CVE-2026-70057
MEDIUM 5.5
Incorrect authorization in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to bypass a security feature locally. |
|
CVE-2026-70044
MEDIUM 5.5
Out-of-bounds read in Microsoft Windows Media Foundation allows an unauthorized attacker to disclose information locally. |
|
CVE-2026-70041
MEDIUM 5.5
Buffer over-read in Windows CD-ROM Driver allows an authorized attacker to disclose information locally. |
|
CVE-2026-70017
MEDIUM 5.5
Access of resource using incompatible type ('type confusion') in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally. |
|
CVE-2026-70011
MEDIUM 5.5
Out-of-bounds read in Windows IP Over USB Service allows an authorized attacker to disclose information locally. |
|
CVE-2026-69979
MEDIUM 5.5
Improper protection of alternate path in Windows AppX Deployment Service allows an authorized attacker to bypass a security feature locally. |
|
CVE-2026-69967
MEDIUM 5.5
Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to disclose information locally. |
|
CVE-2026-69954
MEDIUM 5.5
Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information locally. |
|
CVE-2026-69905
MEDIUM 5.5
Missing authorization in Windows AppX Deployment Service allows an authorized attacker to perform tampering locally. |
|
CVE-2026-69914
MEDIUM 5.5
Out-of-bounds read in Windows AppX Deployment Service allows an authorized attacker to disclose information locally. |
|
CVE-2026-69721
MEDIUM 5.5
Out-of-bounds read in Windows iSCSI allows an authorized attacker to disclose information locally. |
|
CVE-2026-69644
MEDIUM 5.5
Exposure of sensitive system information to an unauthorized control sphere in Windows iSCSI allows an authorized attacker to disclose information locally. |
|
CVE-2026-62687
MEDIUM 5.5
Improper link resolution before file access ('link following') in Windows Backup Engine allows an authorized attacker to disclose information locally. |
|
CVE-2026-62879
MEDIUM 5.5
Missing authentication for critical function in Windows SmartScreen allows an authorized attacker to perform tampering locally. |
|
CVE-2026-108462
MEDIUM 5.5
Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally. |
|
CVE-2026-103567
MEDIUM 5.5
Buffer over-read in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally. |
|
CVE-2026-102187
MEDIUM 5.5
Use of uninitialized resource in Windows Kernel allows an authorized attacker to disclose information locally. |
|
CVE-2026-85939
MEDIUM 5.3
Weak authentication in Windows Kernel allows an authorized attacker to bypass a security feature over a network. |
|
CVE-2026-70025
MEDIUM 5.3
Use after free in Windows Netlogon allows an authorized attacker to deny service over a network. |
|
CVE-2026-108466
MEDIUM 5.3
Out-of-bounds read in Windows Kernel allows an unauthorized attacker to deny service over a network. |
|
CVE-2026-102198
MEDIUM 5.3
Out-of-bounds read in Windows Remote Desktop Protocol allows an authorized attacker to disclose information over a network. |
|
CVE-2026-96853
MEDIUM 4.7
Time-of-check time-of-use (toctou) race condition in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. |
|
CVE-2026-85866
MEDIUM 4.7
Exposure of sensitive system information to an unauthorized control sphere in Windows ALPC allows an authorized attacker to disclose information locally. |
|
CVE-2026-84009
MEDIUM 4.7
Time-of-check time-of-use (toctou) race condition in Windows Projected File System allows an authorized attacker to perform tampering locally. |
|
CVE-2026-83925
MEDIUM 4.7
Use of uninitialized resource in Windows Kernel allows an authorized attacker to disclose information locally. |
|
CVE-2026-83905
MEDIUM 4.7
Exposure of sensitive system information to an unauthorized control sphere in Windows Shell allows an authorized attacker to disclose information locally. |
|
CVE-2026-83909
MEDIUM 4.7
Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose informat… |
|
CVE-2026-83897
MEDIUM 4.7
Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose informat… |
|
CVE-2026-83865
MEDIUM 4.7
Relative path traversal in Windows Internet (wininet.dll) allows an authorized attacker to perform tampering locally. |
|
CVE-2026-83786
MEDIUM 4.7
Generation of error message containing sensitive information in Windows NTFS allows an authorized attacker to disclose information locally. |
|
CVE-2026-83774
MEDIUM 4.7
Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose informat… |
|
CVE-2026-83697
MEDIUM 4.7
Time-of-check time-of-use (toctou) race condition in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally. |
|
CVE-2026-83672
MEDIUM 4.7
Exposure of sensitive system information to an unauthorized control sphere in Windows Installer allows an authorized attacker to disclose information locally. |
|
CVE-2026-83656
MEDIUM 4.7
Missing authentication for critical function in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally. |
|
CVE-2026-83582
MEDIUM 4.7
Use after free in Windows Graphics Kernel allows an authorized attacker to disclose information locally. |
|
CVE-2026-70195
MEDIUM 4.7
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to disclose information locally. |
|
CVE-2026-70077
MEDIUM 4.7
Use after free in Windows Kernel allows an authorized attacker to disclose information locally. |
|
CVE-2026-70063
MEDIUM 4.7
Out-of-bounds read in Windows Kernel allows an authorized attacker to disclose information locally. |
|
CVE-2026-69974
MEDIUM 4.7
Out-of-bounds read in Desktop Window Manager allows an authorized attacker to disclose information locally. |
|
CVE-2026-69969
MEDIUM 4.7
Improper link resolution before file access ('link following') in Windows AppX Deployment Service allows an authorized attacker to disclose information locally. |
|
CVE-2026-69506
MEDIUM 4.7
Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally. |
|
CVE-2026-102186
MEDIUM 4.7
Untrusted pointer dereference in Windows Network File System allows an authorized attacker to disclose information locally. |
|
CVE-2026-88226
MEDIUM 4.6
Out-of-bounds read in Windows Storage Port Driver allows an unauthorized attacker to disclose information with a physical attack. |
|
CVE-2026-83788
MEDIUM 4.6
Buffer over-read in Windows RNDIS allows an unauthorized attacker to disclose information with a physical attack. |
|
CVE-2026-83926
MEDIUM 4.4
Improper certificate validation in Windows Hello allows an authorized attacker to bypass a security feature locally. |
|
CVE-2026-70280
MEDIUM 4.4
Incorrect authorization in Windows Hello allows an authorized attacker to bypass a security feature locally. |
|
CVE-2026-70075
MEDIUM 4.4
Time-of-check time-of-use (toctou) race condition in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to bypass a security fea… |
|
CVE-2026-102221
MEDIUM 4.4
No cwe for this issue in Windows Secure Boot allows an authorized attacker to bypass a security feature locally. |
|
CVE-2026-83766
MEDIUM 4.2
Incorrect authorization in Windows Hyper-V allows an authorized attacker to bypass a security feature over an adjacent network. |
Rolling out build 10.0.19045.7807 across your fleet?
Appaloosa pushes Windows updates, apps and policies from one console.