Windows · Build corrective
10.0.26200.9106
Advisory MSRC195 CVE corrigées par cette build, déployée sur 1 SKU Windows.
- Publiée le
- 2026-08-11
- SKU couvertes
- 1
- CVE corrigées
- 195
SKU Windows couvertes par cette build
Les SKU ci-dessous partagent ce numéro de build MSRC. Pousser la KB correspondante les sécurise toutes simultanément.
- KEV CISA
- 1
- Critique
- 2
- Élevé
- 160
- En attente NVD
- 0
CVE corrigées par cette build
| CVE | Sévérité | KEV | Publié | Description |
|---|---|---|---|---|
|
CVE-2026-68820
KEV
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges loc… |
HIGH 7.0 | KEV | Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62815
Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network. |
CRITICAL 9.8 | — | Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network. | |
|
CVE-2026-62822
Integer overflow or wraparound in Windows GDI+ allows an unauthorized attacker to execute code over a network. |
HIGH 8.8 | — | Integer overflow or wraparound in Windows GDI+ allows an unauthorized attacker to execute code over a network. | |
|
CVE-2026-62816
Heap-based buffer overflow in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute c… |
HIGH 8.8 | — | Heap-based buffer overflow in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over an adjacent network. | |
|
CVE-2026-62817
Out-of-bounds write in Windows DNS allows an unauthorized attacker to execute code over an adjacent network. |
HIGH 8.8 | — | Out-of-bounds write in Windows DNS allows an unauthorized attacker to execute code over an adjacent network. | |
|
CVE-2026-62800
Heap-based buffer overflow in Windows SMB Server allows an authorized attacker to execute code over a network. |
HIGH 8.8 | — | Heap-based buffer overflow in Windows SMB Server allows an authorized attacker to execute code over a network. | |
|
CVE-2026-62795
Use after free in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code … |
HIGH 8.8 | — | Use after free in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network. | |
|
CVE-2026-62785
Heap-based buffer overflow in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to e… |
HIGH 8.8 | — | Heap-based buffer overflow in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network. | |
|
CVE-2026-62790
Heap-based buffer overflow in Windows SMB Server allows an authorized attacker to execute code over a network. |
HIGH 8.8 | — | Heap-based buffer overflow in Windows SMB Server allows an authorized attacker to execute code over a network. | |
|
CVE-2026-62784
Heap-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to execu… |
HIGH 8.8 | — | Heap-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to execute code over a network. | |
|
CVE-2026-49179
Improper neutralization of special elements used in a command ('command injection') in Windows Active Directory allows … |
HIGH 8.8 | — | Improper neutralization of special elements used in a command ('command injection') in Windows Active Directory allows an unauthorized attacker to execute code… | |
|
CVE-2026-56179
Origin validation error in Windows Network Address Translation (NAT) allows an unauthorized attacker to perform spoofin… |
HIGH 8.3 | — | Origin validation error in Windows Network Address Translation (NAT) allows an unauthorized attacker to perform spoofing over an adjacent network. | |
|
CVE-2026-62889
Double free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a n… |
HIGH 8.1 | — | Double free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network. | |
|
CVE-2026-62819
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized acces… |
HIGH 8.1 | — | Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine | |
|
CVE-2026-62792
Stack-based buffer overflow in Windows TCP/IP allows an unauthorized attacker to execute code over a network. |
HIGH 8.1 | — | Stack-based buffer overflow in Windows TCP/IP allows an unauthorized attacker to execute code over a network. | |
|
CVE-2026-62781
Heap-based buffer overflow in RPC Runtime allows an unauthorized attacker to execute code over a network. |
HIGH 8.1 | — | Heap-based buffer overflow in RPC Runtime allows an unauthorized attacker to execute code over a network. | |
|
CVE-2026-6726
An information leakage vulnerability was reported in the TCG TPM 2.0 reference code that could allow a local attacker w… |
HIGH 7.9 | — | An information leakage vulnerability was reported in the TCG TPM 2.0 reference code that could allow a local attacker with elevated privileges to obtain a cred… | |
|
CVE-2026-70346
Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. |
HIGH 7.8 | — | Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-70345
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. |
HIGH 7.8 | — | Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-66804
Improper access control in Windows Cross Device Service allows an authorized attacker to elevate privileges locally. |
HIGH 7.8 | — | Improper access control in Windows Cross Device Service allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-65814
Heap-based buffer overflow in Windows Storage Port Driver allows an authorized attacker to elevate privileges locally. |
HIGH 7.8 | — | Heap-based buffer overflow in Windows Storage Port Driver allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-65786
Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally. |
HIGH 7.8 | — | Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-65787
Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally. |
HIGH 7.8 | — | Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-65790
Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privileges locally. |
HIGH 7.8 | — | Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-65773
Improper access control in Windows Kernel allows an authorized attacker to elevate privileges locally. |
HIGH 7.8 | — | Improper access control in Windows Kernel allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-65774
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. |
HIGH 7.8 | — | Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-65775
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. |
HIGH 7.8 | — | Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-65671
Heap-based buffer overflow in Windows Remote Access API allows an authorized attacker to elevate privileges locally. |
HIGH 7.8 | — | Heap-based buffer overflow in Windows Remote Access API allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-65672
Heap-based buffer overflow in Windows Remote Access API allows an authorized attacker to elevate privileges locally. |
HIGH 7.8 | — | Heap-based buffer overflow in Windows Remote Access API allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62894
Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
HIGH 7.8 | — | Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62890
Heap-based buffer overflow in Windows GDI+ allows an authorized attacker to execute code locally. |
HIGH 7.8 | — | Heap-based buffer overflow in Windows GDI+ allows an authorized attacker to execute code locally. | |
|
CVE-2026-62888
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
HIGH 7.8 | — | Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62885
Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally. |
HIGH 7.8 | — | Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62876
Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally. |
HIGH 7.8 | — | Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62877
Stack-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally. |
HIGH 7.8 | — | Stack-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62880
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally. |
HIGH 7.8 | — | Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62832
Improper link resolution before file access ('link following') in Windows User Profile Service allows an authorized att… |
HIGH 7.8 | — | Improper link resolution before file access ('link following') in Windows User Profile Service allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62811
Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally. |
HIGH 7.8 | — | Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62797
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally. |
HIGH 7.8 | — | Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62783
Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privile… |
HIGH 7.8 | — | Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62779
Use after free in Windows Schannel allows an authorized attacker to elevate privileges locally. |
HIGH 7.8 | — | Use after free in Windows Schannel allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62777
Missing authentication for critical function in Windows License Manager allows an authorized attacker to elevate privil… |
HIGH 7.8 | — | Missing authentication for critical function in Windows License Manager allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62771
Heap-based buffer overflow in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privilege… |
HIGH 7.8 | — | Heap-based buffer overflow in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62768
Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. |
HIGH 7.8 | — | Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62770
Heap-based buffer overflow in Windows Shell allows an authorized attacker to elevate privileges locally. |
HIGH 7.8 | — | Heap-based buffer overflow in Windows Shell allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62754
Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally. |
HIGH 7.8 | — | Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62755
Stack-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges locally. |
HIGH 7.8 | — | Stack-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62758
Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privile… |
HIGH 7.8 | — | Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62751
Integer overflow or wraparound in Windows Projected File System allows an authorized attacker to elevate privileges loc… |
HIGH 7.8 | — | Integer overflow or wraparound in Windows Projected File System allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62752
Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally. |
HIGH 7.8 | — | Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62747
Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges lo… |
HIGH 7.8 | — | Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62741
Integer underflow (wrap or wraparound) in Windows HTTP.sys allows an authorized attacker to elevate privileges locally. |
HIGH 7.8 | — | Integer underflow (wrap or wraparound) in Windows HTTP.sys allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62735
Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally. |
HIGH 7.8 | — | Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62737
Untrusted pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally. |
HIGH 7.8 | — | Untrusted pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62739
Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally. |
HIGH 7.8 | — | Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62736
Heap-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges locally. |
HIGH 7.8 | — | Heap-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62733
Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally. |
HIGH 7.8 | — | Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62732
Heap-based buffer overflow in Windows Telephony Service allows an authorized attacker to elevate privileges locally. |
HIGH 7.8 | — | Heap-based buffer overflow in Windows Telephony Service allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62722
Heap-based buffer overflow in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally. |
HIGH 7.8 | — | Heap-based buffer overflow in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62717
Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privileges locally. |
HIGH 7.8 | — | Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62721
Insufficient granularity of access control in User-Mode Power Service (UMPS) allows an authorized attacker to elevate p… |
HIGH 7.8 | — | Insufficient granularity of access control in User-Mode Power Service (UMPS) allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62713
Heap-based buffer overflow in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privilege… |
HIGH 7.8 | — | Heap-based buffer overflow in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62712
Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally. |
HIGH 7.8 | — | Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62711
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. |
HIGH 7.8 | — | Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62707
Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally. |
HIGH 7.8 | — | Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62710
Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges lo… |
HIGH 7.8 | — | Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62696
Integer underflow (wrap or wraparound) in Windows Program Compatibility Assistant Service allows an authorized attacker… |
HIGH 7.8 | — | Integer underflow (wrap or wraparound) in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62698
Numeric truncation error in Microsoft Digest Authentication allows an authorized attacker to elevate privileges locally. |
HIGH 7.8 | — | Numeric truncation error in Microsoft Digest Authentication allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62700
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally. |
HIGH 7.8 | — | Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62701
Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally. |
HIGH 7.8 | — | Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62692
Heap-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to elevate privileges local… |
HIGH 7.8 | — | Heap-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62695
Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally. |
HIGH 7.8 | — | Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62688
Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally. |
HIGH 7.8 | — | Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-61937
Integer overflow or wraparound in Windows HTTP.sys allows an authorized attacker to elevate privileges locally. |
HIGH 7.8 | — | Integer overflow or wraparound in Windows HTTP.sys allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-61934
Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally. |
HIGH 7.8 | — | Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-61925
Incorrect authorization in Windows Installer allows an authorized attacker to elevate privileges locally. |
HIGH 7.8 | — | Incorrect authorization in Windows Installer allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-61930
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. |
HIGH 7.8 | — | Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-61926
Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally. |
HIGH 7.8 | — | Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-61367
Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevat… |
HIGH 7.8 | — | Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-61364
Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevat… |
HIGH 7.8 | — | Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-61365
Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevat… |
HIGH 7.8 | — | Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-61356
Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevat… |
HIGH 7.8 | — | Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-61359
Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally. |
HIGH 7.8 | — | Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-61355
Heap-based buffer overflow in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally. |
HIGH 7.8 | — | Heap-based buffer overflow in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-61357
Use after free in Application Information Services allows an authorized attacker to elevate privileges locally. |
HIGH 7.8 | — | Use after free in Application Information Services allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-61358
Improper link resolution before file access ('link following') in Windows Accessibility Infrastructure (ATBroker.exe) a… |
HIGH 7.8 | — | Improper link resolution before file access ('link following') in Windows Accessibility Infrastructure (ATBroker.exe) allows an authorized attacker to elevate … | |
|
CVE-2026-61353
Heap-based buffer overflow in Windows Telephony Service allows an authorized attacker to elevate privileges locally. |
HIGH 7.8 | — | Heap-based buffer overflow in Windows Telephony Service allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-61349
Use after free in Windows Work Folder Service allows an authorized attacker to elevate privileges locally. |
HIGH 7.8 | — | Use after free in Windows Work Folder Service allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-59127
Integer overflow or wraparound in Windows Installer allows an authorized attacker to elevate privileges locally. |
HIGH 7.8 | — | Integer overflow or wraparound in Windows Installer allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-54984
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code locally. |
HIGH 7.8 | — | Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code locally. | |
|
CVE-2026-42976
Missing authentication for critical function in Windows RPC API allows an authorized attacker to elevate privileges loc… |
HIGH 7.8 | — | Missing authentication for critical function in Windows RPC API allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-61923
Windows Display Enhancement Service Elevation of Privilege Vulnerability |
HIGH 7.8 | — | Windows Display Enhancement Service Elevation of Privilege Vulnerability | |
|
CVE-2026-62719
Windows Message Queuing Elevation of Privilege Vulnerability |
HIGH 7.8 | — | Windows Message Queuing Elevation of Privilege Vulnerability | |
|
CVE-2026-66799
Windows Key Guard Elevation of Privilege Vulnerability |
CRITICAL 7.8 | — | Windows Key Guard Elevation of Privilege Vulnerability | |
|
CVE-2026-70344
Windows Installer Elevation of Privilege Vulnerability |
HIGH 7.8 | — | Windows Installer Elevation of Privilege Vulnerability | |
|
CVE-2026-70347
Windows Installer Elevation of Privilege Vulnerability |
HIGH 7.8 | — | Windows Installer Elevation of Privilege Vulnerability | |
|
CVE-2026-61363
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
HIGH 7.5 | — | Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | |
|
CVE-2026-61352
Concurrent execution using shared resource with improper synchronization ('race condition') in Remote Desktop Client al… |
HIGH 7.5 | — | Concurrent execution using shared resource with improper synchronization ('race condition') in Remote Desktop Client allows an unauthorized attacker to execute… | |
|
CVE-2026-59132
Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service over a network. |
HIGH 7.5 | — | Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service over a network. | |
|
CVE-2026-59134
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
HIGH 7.5 | — | Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | |
|
CVE-2026-54113
Allocation of resources without limits or throttling in Windows Kernel allows an unauthorized attacker to deny service … |
HIGH 7.5 | — | Allocation of resources without limits or throttling in Windows Kernel allows an unauthorized attacker to deny service over a network. | |
|
CVE-2026-70307
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges loc… |
HIGH 7.0 | — | Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-65788
Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally. |
HIGH 7.0 | — | Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-65783
Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally. |
HIGH 7.0 | — | Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-65780
Double free in Windows Autopilot allows an authorized attacker to elevate privileges locally. |
HIGH 7.0 | — | Double free in Windows Autopilot allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-65776
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. |
HIGH 7.0 | — | Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-65678
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. |
HIGH 7.0 | — | Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62892
Use after free in Capability Access Management Service (camsvc) allows an authorized attacker to elevate privileges loc… |
HIGH 7.0 | — | Use after free in Capability Access Management Service (camsvc) allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62788
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
HIGH 7.0 | — | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62780
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
HIGH 7.0 | — | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62773
Use after free in Windows Kerberos allows an authorized attacker to elevate privileges locally. |
HIGH 7.0 | — | Use after free in Windows Kerberos allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62766
Double free in Windows Kerberos allows an authorized attacker to elevate privileges locally. |
HIGH 7.0 | — | Double free in Windows Kerberos allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62748
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Servic… |
HIGH 7.0 | — | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to eleva… | |
|
CVE-2026-62753
Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally. |
HIGH 7.0 | — | Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62749
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
HIGH 7.0 | — | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62729
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Servic… |
HIGH 7.0 | — | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to eleva… | |
|
CVE-2026-62734
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Servic… |
HIGH 7.0 | — | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to eleva… | |
|
CVE-2026-62723
Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally. |
HIGH 7.0 | — | Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62724
Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally. |
HIGH 7.0 | — | Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62725
Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally. |
HIGH 7.0 | — | Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62726
Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally. |
HIGH 7.0 | — | Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62728
Time-of-check time-of-use (toctou) race condition in Windows Common Log File System Driver allows an authorized attacke… |
HIGH 7.0 | — | Time-of-check time-of-use (toctou) race condition in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62705
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bind Filter Driv… |
HIGH 7.0 | — | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bind Filter Driver allows an authorized attacker to elev… | |
|
CVE-2026-61939
Use after free in Winlogon allows an authorized attacker to elevate privileges locally. |
HIGH 7.0 | — | Use after free in Winlogon allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62690
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notificatio… |
HIGH 7.0 | — | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elev… | |
|
CVE-2026-62693
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows MIDI Service Mod… |
HIGH 7.0 | — | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows MIDI Service Module allows an authorized attacker to ele… | |
|
CVE-2026-61938
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
HIGH 7.0 | — | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-61927
Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally. |
HIGH 7.0 | — | Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-61929
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
HIGH 7.0 | — | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-61361
Use after free in Windows DHCP Client allows an authorized attacker to execute code locally. |
HIGH 7.0 | — | Use after free in Windows DHCP Client allows an authorized attacker to execute code locally. | |
|
CVE-2026-61348
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges loc… |
HIGH 7.0 | — | Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-61346
Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
HIGH 7.0 | — | Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-59122
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Servic… |
HIGH 7.0 | — | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to eleva… | |
|
CVE-2026-59125
Use after free in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally. |
HIGH 7.0 | — | Use after free in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-59126
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Event Logging Se… |
HIGH 7.0 | — | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Event Logging Service allows an authorized attacker to e… | |
|
CVE-2026-50472
Heap-based buffer overflow in Windows LUAFV allows an authorized attacker to elevate privileges locally. |
HIGH 7.0 | — | Heap-based buffer overflow in Windows LUAFV allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-61366
Windows Network Connection Broker Elevation of Privilege Vulnerability |
HIGH 7.0 | — | Windows Network Connection Broker Elevation of Privilege Vulnerability | |
|
CVE-2026-62774
Windows Graphics Kernel Elevation of Privilege Vulnerability |
HIGH 7.0 | — | Windows Graphics Kernel Elevation of Privilege Vulnerability | |
|
CVE-2026-62908
Windows Backup Engine Elevation of Privilege Vulnerability |
HIGH 7.0 | — | Windows Backup Engine Elevation of Privilege Vulnerability | |
|
CVE-2026-65779
Windows Autopilot Elevation of Privilege Vulnerability |
HIGH 7.0 | — | Windows Autopilot Elevation of Privilege Vulnerability | |
|
CVE-2026-65778
Windows Autopilot Elevation of Privilege Vulnerability |
HIGH 7.0 | — | Windows Autopilot Elevation of Privilege Vulnerability | |
|
CVE-2026-65782
Windows Autopilot Elevation of Privilege Vulnerability |
HIGH 7.0 | — | Windows Autopilot Elevation of Privilege Vulnerability | |
|
CVE-2026-65781
Windows Autopilot Elevation of Privilege Vulnerability |
HIGH 7.0 | — | Windows Autopilot Elevation of Privilege Vulnerability | |
|
CVE-2026-62699
Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an unauthorized attacker t… |
MEDIUM 6.8 | — | Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an unauthorized attacker to execute code with a physical attack. | |
|
CVE-2026-62702
Windows Graphics Kernel Denial of Service Vulnerability |
HIGH 6.8 | — | Windows Graphics Kernel Denial of Service Vulnerability | |
|
CVE-2026-70330
Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally. |
MEDIUM 6.7 | — | Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-70304
Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally. |
MEDIUM 6.7 | — | Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-65799
Integer overflow or wraparound in Windows DNS allows an authorized attacker to elevate privileges locally. |
MEDIUM 6.7 | — | Integer overflow or wraparound in Windows DNS allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-65795
No cwe for this issue in Windows DNS allows an authorized attacker to elevate privileges locally. |
MEDIUM 6.7 | — | No cwe for this issue in Windows DNS allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-65797
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally. |
MEDIUM 6.7 | — | Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-65798
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally. |
MEDIUM 6.7 | — | Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62881
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally. |
MEDIUM 6.7 | — | Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62883
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally. |
MEDIUM 6.7 | — | Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62769
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally. |
MEDIUM 6.7 | — | Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-65785
Uncontrolled resource consumption in Windows DHCP Client allows an unauthorized attacker to deny service over an adjace… |
MEDIUM 6.5 | — | Uncontrolled resource consumption in Windows DHCP Client allows an unauthorized attacker to deny service over an adjacent network. | |
|
CVE-2026-62750
Partial string comparison in Windows HTTP Protocol Stack allows an unauthorized attacker to perform tampering over an a… |
MEDIUM 6.5 | — | Partial string comparison in Windows HTTP Protocol Stack allows an unauthorized attacker to perform tampering over an adjacent network. | |
|
CVE-2026-61924
Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network. |
MEDIUM 6.5 | — | Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network. | |
|
CVE-2026-61918
Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network. |
MEDIUM 6.5 | — | Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network. | |
|
CVE-2026-59138
Null pointer dereference in Microsoft Remote Registry Service allows an authorized attacker to deny service over a netw… |
MEDIUM 6.5 | — | Null pointer dereference in Microsoft Remote Registry Service allows an authorized attacker to deny service over a network. | |
|
CVE-2026-61345
Null pointer dereference in Microsoft Remote Registry Service allows an authorized attacker to deny service over a netw… |
MEDIUM 6.5 | — | Null pointer dereference in Microsoft Remote Registry Service allows an authorized attacker to deny service over a network. | |
|
CVE-2026-61921
Windows Remote Desktop Client Information Disclosure Vulnerability |
HIGH 6.5 | — | Windows Remote Desktop Client Information Disclosure Vulnerability | |
|
CVE-2026-62782
Windows SMB Client Information Disclosure Vulnerability |
HIGH 6.5 | — | Windows SMB Client Information Disclosure Vulnerability | |
|
CVE-2026-65794
Windows SMB Client Information Disclosure Vulnerability |
HIGH 6.5 | — | Windows SMB Client Information Disclosure Vulnerability | |
|
CVE-2026-62708
Windows Kernel Elevation of Privilege Vulnerability |
HIGH 6.4 | — | Windows Kernel Elevation of Privilege Vulnerability | |
|
CVE-2026-6727
A timing side-channel vulnerability exists in the RSA OAEP decryption implementation. A privileged local attacker with … |
MEDIUM 5.9 | — | A timing side-channel vulnerability exists in the RSA OAEP decryption implementation. A privileged local attacker with access to the TPM command interface may … | |
|
CVE-2026-59130
No cwe for this issue in AMD Zen allows an authorized attacker to disclose information locally. |
MEDIUM 5.6 | — | No cwe for this issue in AMD Zen allows an authorized attacker to disclose information locally. | |
|
CVE-2026-59131
No cwe for this issue in AMD Zen allows an authorized attacker to disclose information locally. |
MEDIUM 5.6 | — | No cwe for this issue in AMD Zen allows an authorized attacker to disclose information locally. | |
|
CVE-2026-70348
Improper link resolution before file access ('link following') in Windows Management Services allows an authorized atta… |
MEDIUM 5.5 | — | Improper link resolution before file access ('link following') in Windows Management Services allows an authorized attacker to deny service locally. | |
|
CVE-2026-65784
Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally. |
MEDIUM 5.5 | — | Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally. | |
|
CVE-2026-65662
Out-of-bounds read in Windows GDI allows an authorized attacker to disclose information locally. |
MEDIUM 5.5 | — | Out-of-bounds read in Windows GDI allows an authorized attacker to disclose information locally. | |
|
CVE-2026-62793
Buffer over-read in Windows NTFS allows an authorized attacker to disclose information locally. |
MEDIUM 5.5 | — | Buffer over-read in Windows NTFS allows an authorized attacker to disclose information locally. | |
|
CVE-2026-62786
Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally. |
MEDIUM 5.5 | — | Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally. | |
|
CVE-2026-62703
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally. |
MEDIUM 5.5 | — | Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally. | |
|
CVE-2026-61936
Missing authorization in Windows Defender Firewall Service allows an authorized attacker to bypass a security feature l… |
MEDIUM 5.5 | — | Missing authorization in Windows Defender Firewall Service allows an authorized attacker to bypass a security feature locally. | |
|
CVE-2026-59136
Use of uninitialized resource in Microsoft COM for Windows allows an authorized attacker to disclose information locall… |
MEDIUM 5.5 | — | Use of uninitialized resource in Microsoft COM for Windows allows an authorized attacker to disclose information locally. | |
|
CVE-2026-59137
Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose information lo… |
MEDIUM 5.5 | — | Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose information locally. | |
|
CVE-2026-59135
Weak authentication in Microsoft Windows Search Component allows an authorized attacker to disclose information locally. |
MEDIUM 5.5 | — | Weak authentication in Microsoft Windows Search Component allows an authorized attacker to disclose information locally. | |
|
CVE-2026-59128
Out-of-bounds read in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information locall… |
MEDIUM 5.5 | — | Out-of-bounds read in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information locally. | |
|
CVE-2026-61347
Windows Event Logging Service Information Disclosure Vulnerability |
HIGH 5.5 | — | Windows Event Logging Service Information Disclosure Vulnerability | |
|
CVE-2026-61928
Windows Hello Tampering Vulnerability |
HIGH 5.5 | — | Windows Hello Tampering Vulnerability | |
|
CVE-2026-61933
Windows DWM Core Library Information Disclosure Vulnerability |
HIGH 5.5 | — | Windows DWM Core Library Information Disclosure Vulnerability | |
|
CVE-2026-62746
Win32k Information Disclosure Vulnerability |
HIGH 5.5 | — | Win32k Information Disclosure Vulnerability | |
|
CVE-2026-62740
Windows Imaging Component Information Disclosure Vulnerability |
HIGH 5.5 | — | Windows Imaging Component Information Disclosure Vulnerability | |
|
CVE-2026-62798
Win32k Information Disclosure Vulnerability |
HIGH 5.5 | — | Win32k Information Disclosure Vulnerability | |
|
CVE-2026-62796
Windows NTFS Information Disclosure Vulnerability |
HIGH 5.5 | — | Windows NTFS Information Disclosure Vulnerability | |
|
CVE-2026-61360
Windows GDI Information Disclosure Vulnerability |
HIGH 5.5 | — | Windows GDI Information Disclosure Vulnerability | |
|
CVE-2026-62709
Windows GDI+ Information Disclosure Vulnerability |
HIGH 5.5 | — | Windows GDI+ Information Disclosure Vulnerability | |
|
CVE-2026-62743
Win32k Information Disclosure Vulnerability |
HIGH 5.5 | — | Win32k Information Disclosure Vulnerability | |
|
CVE-2026-62730
Windows Wired AutoConfig Service Information Disclosure Vulnerability |
HIGH 5.5 | — | Windows Wired AutoConfig Service Information Disclosure Vulnerability | |
|
CVE-2026-62887
Windows NTFS Information Disclosure Vulnerability |
HIGH 5.5 | — | Windows NTFS Information Disclosure Vulnerability | |
|
CVE-2026-62738
Windows Management Instrumentation Information Disclosure Vulnerability |
HIGH 5.5 | — | Windows Management Instrumentation Information Disclosure Vulnerability | |
|
CVE-2026-62757
Improper verification of cryptographic signature in Windows Schannel allows an unauthorized attacker to bypass a securi… |
MEDIUM 5.3 | — | Improper verification of cryptographic signature in Windows Schannel allows an unauthorized attacker to bypass a security feature over a network. | |
|
CVE-2026-65777
Active Directory Security Feature Bypass Vulnerability |
HIGH 5.3 | — | Active Directory Security Feature Bypass Vulnerability | |
|
CVE-2026-61368
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to disclose information locally. |
MEDIUM 5.0 | — | Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to disclose information locally. | |
|
CVE-2026-61350
Buffer over-read in Windows NTFS allows an unauthorized attacker to disclose information with a physical attack. |
MEDIUM 4.6 | — | Buffer over-read in Windows NTFS allows an unauthorized attacker to disclose information with a physical attack. |