Windows · Build corrective
10.0.26200.9168
Advisory MSRC195 CVE corrigées par cette build, déployée sur 1 SKU Windows.
- Publiée le
- 2026-08-11
- SKU couvertes
- 1
- CVE corrigées
- 195
SKU Windows couvertes par cette build
Les SKU ci-dessous partagent ce numéro de build MSRC. Pousser la KB correspondante les sécurise toutes simultanément.
- KEV CISA
- 1
- Critique
- 2
- Élevé
- 184
- En attente NVD
- 0
CVE corrigées par cette build
| CVE | Sévérité | KEV | Publié | Description |
|---|---|---|---|---|
|
CVE-2026-68820
KEV
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges loc… |
HIGH 7.0 | KEV | Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62815
Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network. |
CRITICAL 9.8 | — | Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network. | |
|
CVE-2026-62822
Integer overflow or wraparound in Windows GDI+ allows an unauthorized attacker to execute code over a network. |
HIGH 8.8 | — | Integer overflow or wraparound in Windows GDI+ allows an unauthorized attacker to execute code over a network. | |
|
CVE-2026-62816
Heap-based buffer overflow in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute c… |
HIGH 8.8 | — | Heap-based buffer overflow in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over an adjacent network. | |
|
CVE-2026-62817
Out-of-bounds write in Windows DNS allows an unauthorized attacker to execute code over an adjacent network. |
HIGH 8.8 | — | Out-of-bounds write in Windows DNS allows an unauthorized attacker to execute code over an adjacent network. | |
|
CVE-2026-62800
Heap-based buffer overflow in Windows SMB Server allows an authorized attacker to execute code over a network. |
HIGH 8.8 | — | Heap-based buffer overflow in Windows SMB Server allows an authorized attacker to execute code over a network. | |
|
CVE-2026-62795
Use after free in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code … |
HIGH 8.8 | — | Use after free in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network. | |
|
CVE-2026-62785
Heap-based buffer overflow in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to e… |
HIGH 8.8 | — | Heap-based buffer overflow in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network. | |
|
CVE-2026-62790
Heap-based buffer overflow in Windows SMB Server allows an authorized attacker to execute code over a network. |
HIGH 8.8 | — | Heap-based buffer overflow in Windows SMB Server allows an authorized attacker to execute code over a network. | |
|
CVE-2026-62784
Heap-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to execu… |
HIGH 8.8 | — | Heap-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to execute code over a network. | |
|
CVE-2026-49179
Improper neutralization of special elements used in a command ('command injection') in Windows Active Directory allows … |
HIGH 8.8 | — | Improper neutralization of special elements used in a command ('command injection') in Windows Active Directory allows an unauthorized attacker to execute code… | |
|
CVE-2026-56179
Windows Network Address Translation (NAT) Spoofing Vulnerability |
MEDIUM 8.3 | — | Windows Network Address Translation (NAT) Spoofing Vulnerability | |
|
CVE-2026-62889
Double free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a n… |
HIGH 8.1 | — | Double free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network. | |
|
CVE-2026-62819
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized acces… |
HIGH 8.1 | — | Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine | |
|
CVE-2026-62792
Stack-based buffer overflow in Windows TCP/IP allows an unauthorized attacker to execute code over a network. |
HIGH 8.1 | — | Stack-based buffer overflow in Windows TCP/IP allows an unauthorized attacker to execute code over a network. | |
|
CVE-2026-62781
RPC Runtime Library Remote Code Execution Vulnerability |
HIGH 8.1 | — | RPC Runtime Library Remote Code Execution Vulnerability | |
|
CVE-2026-6726
MITRE: CVE-2026-6726 TPM 2.0 Improper Object Slot Reuse |
HIGH 7.9 | — | MITRE: CVE-2026-6726 TPM 2.0 Improper Object Slot Reuse | |
|
CVE-2026-65814
Heap-based buffer overflow in Windows Storage Port Driver allows an authorized attacker to elevate privileges locally. |
HIGH 7.8 | — | Heap-based buffer overflow in Windows Storage Port Driver allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-65786
Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally. |
HIGH 7.8 | — | Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-65787
Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally. |
HIGH 7.8 | — | Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-65773
Improper access control in Windows Kernel allows an authorized attacker to elevate privileges locally. |
HIGH 7.8 | — | Improper access control in Windows Kernel allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-65774
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. |
HIGH 7.8 | — | Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-65775
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. |
HIGH 7.8 | — | Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62894
Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
HIGH 7.8 | — | Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62890
Heap-based buffer overflow in Windows GDI+ allows an authorized attacker to execute code locally. |
HIGH 7.8 | — | Heap-based buffer overflow in Windows GDI+ allows an authorized attacker to execute code locally. | |
|
CVE-2026-62888
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
HIGH 7.8 | — | Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62885
Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally. |
HIGH 7.8 | — | Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62876
Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally. |
HIGH 7.8 | — | Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62877
Stack-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally. |
HIGH 7.8 | — | Stack-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62880
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally. |
HIGH 7.8 | — | Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62832
Improper link resolution before file access ('link following') in Windows User Profile Service allows an authorized att… |
HIGH 7.8 | — | Improper link resolution before file access ('link following') in Windows User Profile Service allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62811
Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally. |
HIGH 7.8 | — | Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62797
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally. |
HIGH 7.8 | — | Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62783
Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privile… |
HIGH 7.8 | — | Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62779
Use after free in Windows Schannel allows an authorized attacker to elevate privileges locally. |
HIGH 7.8 | — | Use after free in Windows Schannel allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62771
Heap-based buffer overflow in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privilege… |
HIGH 7.8 | — | Heap-based buffer overflow in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62768
Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. |
HIGH 7.8 | — | Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62770
Heap-based buffer overflow in Windows Shell allows an authorized attacker to elevate privileges locally. |
HIGH 7.8 | — | Heap-based buffer overflow in Windows Shell allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62754
Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally. |
HIGH 7.8 | — | Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62755
Stack-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges locally. |
HIGH 7.8 | — | Stack-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62758
Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privile… |
HIGH 7.8 | — | Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62751
Integer overflow or wraparound in Windows Projected File System allows an authorized attacker to elevate privileges loc… |
HIGH 7.8 | — | Integer overflow or wraparound in Windows Projected File System allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62752
Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally. |
HIGH 7.8 | — | Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62747
Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges lo… |
HIGH 7.8 | — | Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62741
Integer underflow (wrap or wraparound) in Windows HTTP.sys allows an authorized attacker to elevate privileges locally. |
HIGH 7.8 | — | Integer underflow (wrap or wraparound) in Windows HTTP.sys allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62735
Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally. |
HIGH 7.8 | — | Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62737
Untrusted pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally. |
HIGH 7.8 | — | Untrusted pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62739
Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally. |
HIGH 7.8 | — | Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62736
Heap-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges locally. |
HIGH 7.8 | — | Heap-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62733
Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally. |
HIGH 7.8 | — | Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62732
Heap-based buffer overflow in Windows Telephony Service allows an authorized attacker to elevate privileges locally. |
HIGH 7.8 | — | Heap-based buffer overflow in Windows Telephony Service allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62722
Heap-based buffer overflow in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally. |
HIGH 7.8 | — | Heap-based buffer overflow in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62713
Heap-based buffer overflow in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privilege… |
HIGH 7.8 | — | Heap-based buffer overflow in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62712
Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally. |
HIGH 7.8 | — | Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62711
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. |
HIGH 7.8 | — | Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62710
Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges lo… |
HIGH 7.8 | — | Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62696
Integer underflow (wrap or wraparound) in Windows Program Compatibility Assistant Service allows an authorized attacker… |
HIGH 7.8 | — | Integer underflow (wrap or wraparound) in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62700
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally. |
HIGH 7.8 | — | Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62701
Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally. |
HIGH 7.8 | — | Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62692
Heap-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to elevate privileges local… |
HIGH 7.8 | — | Heap-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62695
Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally. |
HIGH 7.8 | — | Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62688
Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally. |
HIGH 7.8 | — | Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-61937
Integer overflow or wraparound in Windows HTTP.sys allows an authorized attacker to elevate privileges locally. |
HIGH 7.8 | — | Integer overflow or wraparound in Windows HTTP.sys allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-61934
Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally. |
HIGH 7.8 | — | Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-61925
Incorrect authorization in Windows Installer allows an authorized attacker to elevate privileges locally. |
HIGH 7.8 | — | Incorrect authorization in Windows Installer allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-61930
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. |
HIGH 7.8 | — | Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-61926
Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally. |
HIGH 7.8 | — | Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-61367
Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevat… |
HIGH 7.8 | — | Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-61364
Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevat… |
HIGH 7.8 | — | Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-61365
Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevat… |
HIGH 7.8 | — | Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-61356
Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevat… |
HIGH 7.8 | — | Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-61359
Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally. |
HIGH 7.8 | — | Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-61355
Heap-based buffer overflow in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally. |
HIGH 7.8 | — | Heap-based buffer overflow in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-61353
Heap-based buffer overflow in Windows Telephony Service allows an authorized attacker to elevate privileges locally. |
HIGH 7.8 | — | Heap-based buffer overflow in Windows Telephony Service allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-61349
Use after free in Windows Work Folder Service allows an authorized attacker to elevate privileges locally. |
HIGH 7.8 | — | Use after free in Windows Work Folder Service allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-59127
Integer overflow or wraparound in Windows Installer allows an authorized attacker to elevate privileges locally. |
HIGH 7.8 | — | Integer overflow or wraparound in Windows Installer allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-42976
Missing authentication for critical function in Windows RPC API allows an authorized attacker to elevate privileges loc… |
HIGH 7.8 | — | Missing authentication for critical function in Windows RPC API allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-54984
Windows Imaging Component Remote Code Execution Vulnerability |
HIGH 7.8 | — | Windows Imaging Component Remote Code Execution Vulnerability | |
|
CVE-2026-61923
Windows Display Enhancement Service Elevation of Privilege Vulnerability |
HIGH 7.8 | — | Windows Display Enhancement Service Elevation of Privilege Vulnerability | |
|
CVE-2026-62707
Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability |
HIGH 7.8 | — | Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability | |
|
CVE-2026-62719
Windows Message Queuing Elevation of Privilege Vulnerability |
HIGH 7.8 | — | Windows Message Queuing Elevation of Privilege Vulnerability | |
|
CVE-2026-62777
Windows License Manager Elevation of Privilege Vulnerability |
HIGH 7.8 | — | Windows License Manager Elevation of Privilege Vulnerability | |
|
CVE-2026-65671
Remote Access API Elevation of Privilege Vulnerability |
HIGH 7.8 | — | Remote Access API Elevation of Privilege Vulnerability | |
|
CVE-2026-65672
Remote Access API Elevation of Privilege Vulnerability |
HIGH 7.8 | — | Remote Access API Elevation of Privilege Vulnerability | |
|
CVE-2026-66799
Windows Key Guard Elevation of Privilege Vulnerability |
CRITICAL 7.8 | — | Windows Key Guard Elevation of Privilege Vulnerability | |
|
CVE-2026-66804
Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability |
HIGH 7.8 | — | Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability | |
|
CVE-2026-70344
Windows Installer Elevation of Privilege Vulnerability |
HIGH 7.8 | — | Windows Installer Elevation of Privilege Vulnerability | |
|
CVE-2026-70345
Windows Installer Elevation of Privilege Vulnerability |
HIGH 7.8 | — | Windows Installer Elevation of Privilege Vulnerability | |
|
CVE-2026-70346
Windows Installer Elevation of Privilege Vulnerability |
HIGH 7.8 | — | Windows Installer Elevation of Privilege Vulnerability | |
|
CVE-2026-70347
Windows Installer Elevation of Privilege Vulnerability |
HIGH 7.8 | — | Windows Installer Elevation of Privilege Vulnerability | |
|
CVE-2026-61357
Application Information Services Elevation of Privilege Vulnerability |
HIGH 7.8 | — | Application Information Services Elevation of Privilege Vulnerability | |
|
CVE-2026-61358
Windows Accessibility Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability |
HIGH 7.8 | — | Windows Accessibility Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability | |
|
CVE-2026-62698
Microsoft Digest Authentication Elevation of Privilege Vulnerability |
HIGH 7.8 | — | Microsoft Digest Authentication Elevation of Privilege Vulnerability | |
|
CVE-2026-62717
Windows Message Queuing Elevation of Privilege Vulnerability |
HIGH 7.8 | — | Windows Message Queuing Elevation of Privilege Vulnerability | |
|
CVE-2026-62721
Windows User-Mode Power Service (UMPS) Elevation of Privilege Vulnerability |
HIGH 7.8 | — | Windows User-Mode Power Service (UMPS) Elevation of Privilege Vulnerability | |
|
CVE-2026-65790
Windows Message Queuing Elevation of Privilege Vulnerability |
HIGH 7.8 | — | Windows Message Queuing Elevation of Privilege Vulnerability | |
|
CVE-2026-61363
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
HIGH 7.5 | — | Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | |
|
CVE-2026-59134
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
HIGH 7.5 | — | Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | |
|
CVE-2026-54113
Remote Procedure Call Denial of Service Vulnerability |
HIGH 7.5 | — | Remote Procedure Call Denial of Service Vulnerability | |
|
CVE-2026-59132
Windows TCP/IP Denial of Service Vulnerability |
HIGH 7.5 | — | Windows TCP/IP Denial of Service Vulnerability | |
|
CVE-2026-61352
Remote Desktop Client Remote Code Execution Vulnerability |
HIGH 7.5 | — | Remote Desktop Client Remote Code Execution Vulnerability | |
|
CVE-2026-70307
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges loc… |
HIGH 7.0 | — | Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-65788
Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally. |
HIGH 7.0 | — | Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-65776
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. |
HIGH 7.0 | — | Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-65678
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. |
HIGH 7.0 | — | Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62892
Use after free in Capability Access Management Service (camsvc) allows an authorized attacker to elevate privileges loc… |
HIGH 7.0 | — | Use after free in Capability Access Management Service (camsvc) allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62788
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
HIGH 7.0 | — | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62780
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
HIGH 7.0 | — | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62773
Use after free in Windows Kerberos allows an authorized attacker to elevate privileges locally. |
HIGH 7.0 | — | Use after free in Windows Kerberos allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62766
Double free in Windows Kerberos allows an authorized attacker to elevate privileges locally. |
HIGH 7.0 | — | Double free in Windows Kerberos allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62748
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Servic… |
HIGH 7.0 | — | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to eleva… | |
|
CVE-2026-62753
Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally. |
HIGH 7.0 | — | Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62749
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
HIGH 7.0 | — | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62729
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Servic… |
HIGH 7.0 | — | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to eleva… | |
|
CVE-2026-62734
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Servic… |
HIGH 7.0 | — | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to eleva… | |
|
CVE-2026-62723
Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally. |
HIGH 7.0 | — | Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62724
Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally. |
HIGH 7.0 | — | Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62725
Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally. |
HIGH 7.0 | — | Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62726
Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally. |
HIGH 7.0 | — | Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62728
Time-of-check time-of-use (toctou) race condition in Windows Common Log File System Driver allows an authorized attacke… |
HIGH 7.0 | — | Time-of-check time-of-use (toctou) race condition in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62705
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bind Filter Driv… |
HIGH 7.0 | — | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bind Filter Driver allows an authorized attacker to elev… | |
|
CVE-2026-61939
Use after free in Winlogon allows an authorized attacker to elevate privileges locally. |
HIGH 7.0 | — | Use after free in Winlogon allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62690
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notificatio… |
HIGH 7.0 | — | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elev… | |
|
CVE-2026-62693
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows MIDI Service Mod… |
HIGH 7.0 | — | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows MIDI Service Module allows an authorized attacker to ele… | |
|
CVE-2026-61938
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
HIGH 7.0 | — | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-61927
Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally. |
HIGH 7.0 | — | Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-61929
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
HIGH 7.0 | — | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-61361
Use after free in Windows DHCP Client allows an authorized attacker to execute code locally. |
HIGH 7.0 | — | Use after free in Windows DHCP Client allows an authorized attacker to execute code locally. | |
|
CVE-2026-61348
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges loc… |
HIGH 7.0 | — | Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-59122
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Servic… |
HIGH 7.0 | — | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to eleva… | |
|
CVE-2026-59126
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Event Logging Se… |
HIGH 7.0 | — | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Event Logging Service allows an authorized attacker to e… | |
|
CVE-2026-50472
Heap-based buffer overflow in Windows LUAFV allows an authorized attacker to elevate privileges locally. |
HIGH 7.0 | — | Heap-based buffer overflow in Windows LUAFV allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-61346
Windows Graphics Kernel Elevation of Privilege Vulnerability |
HIGH 7.0 | — | Windows Graphics Kernel Elevation of Privilege Vulnerability | |
|
CVE-2026-61366
Windows Network Connection Broker Elevation of Privilege Vulnerability |
HIGH 7.0 | — | Windows Network Connection Broker Elevation of Privilege Vulnerability | |
|
CVE-2026-62774
Windows Graphics Kernel Elevation of Privilege Vulnerability |
HIGH 7.0 | — | Windows Graphics Kernel Elevation of Privilege Vulnerability | |
|
CVE-2026-62908
Windows Backup Engine Elevation of Privilege Vulnerability |
HIGH 7.0 | — | Windows Backup Engine Elevation of Privilege Vulnerability | |
|
CVE-2026-65783
Windows Autopilot Elevation of Privilege Vulnerability |
HIGH 7.0 | — | Windows Autopilot Elevation of Privilege Vulnerability | |
|
CVE-2026-59125
Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability |
HIGH 7.0 | — | Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability | |
|
CVE-2026-65779
Windows Autopilot Elevation of Privilege Vulnerability |
HIGH 7.0 | — | Windows Autopilot Elevation of Privilege Vulnerability | |
|
CVE-2026-65780
Windows Autopilot Elevation of Privilege Vulnerability |
HIGH 7.0 | — | Windows Autopilot Elevation of Privilege Vulnerability | |
|
CVE-2026-65778
Windows Autopilot Elevation of Privilege Vulnerability |
HIGH 7.0 | — | Windows Autopilot Elevation of Privilege Vulnerability | |
|
CVE-2026-65782
Windows Autopilot Elevation of Privilege Vulnerability |
HIGH 7.0 | — | Windows Autopilot Elevation of Privilege Vulnerability | |
|
CVE-2026-65781
Windows Autopilot Elevation of Privilege Vulnerability |
HIGH 7.0 | — | Windows Autopilot Elevation of Privilege Vulnerability | |
|
CVE-2026-62702
Windows Graphics Kernel Denial of Service Vulnerability |
HIGH 6.8 | — | Windows Graphics Kernel Denial of Service Vulnerability | |
|
CVE-2026-62699
Windows Universal Disk Format File System Driver (UDFS) Remote Code Execution Vulnerability |
HIGH 6.8 | — | Windows Universal Disk Format File System Driver (UDFS) Remote Code Execution Vulnerability | |
|
CVE-2026-65799
Integer overflow or wraparound in Windows DNS allows an authorized attacker to elevate privileges locally. |
MEDIUM 6.7 | — | Integer overflow or wraparound in Windows DNS allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-65795
No cwe for this issue in Windows DNS allows an authorized attacker to elevate privileges locally. |
MEDIUM 6.7 | — | No cwe for this issue in Windows DNS allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-65797
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally. |
MEDIUM 6.7 | — | Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-65798
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally. |
MEDIUM 6.7 | — | Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62881
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally. |
MEDIUM 6.7 | — | Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62883
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally. |
MEDIUM 6.7 | — | Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-62769
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally. |
MEDIUM 6.7 | — | Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally. | |
|
CVE-2026-70304
Windows DNS Elevation of Privilege Vulnerability |
HIGH 6.7 | — | Windows DNS Elevation of Privilege Vulnerability | |
|
CVE-2026-70330
Windows DNS Elevation of Privilege Vulnerability |
HIGH 6.7 | — | Windows DNS Elevation of Privilege Vulnerability | |
|
CVE-2026-59138
Microsoft Remote Registry Service Denial of Service Vulnerability |
HIGH 6.5 | — | Microsoft Remote Registry Service Denial of Service Vulnerability | |
|
CVE-2026-61345
Microsoft Remote Registry Service Denial of Service Vulnerability |
HIGH 6.5 | — | Microsoft Remote Registry Service Denial of Service Vulnerability | |
|
CVE-2026-61924
Windows Remote Desktop Client Information Disclosure Vulnerability |
HIGH 6.5 | — | Windows Remote Desktop Client Information Disclosure Vulnerability | |
|
CVE-2026-62750
Windows HTTP Protocol Stack Tampering Vulnerability |
HIGH 6.5 | — | Windows HTTP Protocol Stack Tampering Vulnerability | |
|
CVE-2026-65785
Windows DHCP Client Denial of Service Vulnerability |
HIGH 6.5 | — | Windows DHCP Client Denial of Service Vulnerability | |
|
CVE-2026-61918
Windows Remote Desktop Client Information Disclosure Vulnerability |
HIGH 6.5 | — | Windows Remote Desktop Client Information Disclosure Vulnerability | |
|
CVE-2026-61921
Windows Remote Desktop Client Information Disclosure Vulnerability |
HIGH 6.5 | — | Windows Remote Desktop Client Information Disclosure Vulnerability | |
|
CVE-2026-62782
Windows SMB Client Information Disclosure Vulnerability |
HIGH 6.5 | — | Windows SMB Client Information Disclosure Vulnerability | |
|
CVE-2026-65794
Windows SMB Client Information Disclosure Vulnerability |
HIGH 6.5 | — | Windows SMB Client Information Disclosure Vulnerability | |
|
CVE-2026-62708
Windows Kernel Elevation of Privilege Vulnerability |
HIGH 6.4 | — | Windows Kernel Elevation of Privilege Vulnerability | |
|
CVE-2026-6727
MITRE: CVE-2026-6727 TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability |
HIGH 5.9 | — | MITRE: CVE-2026-6727 TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability | |
|
CVE-2026-59130
AMD Zen Information Disclosure Vulnerability |
HIGH 5.6 | — | AMD Zen Information Disclosure Vulnerability | |
|
CVE-2026-59131
AMD Zen Information Disclosure Vulnerability |
HIGH 5.6 | — | AMD Zen Information Disclosure Vulnerability | |
|
CVE-2026-59128
Windows Encrypting File System (EFS) Information Disclosure Vulnerability |
HIGH 5.5 | — | Windows Encrypting File System (EFS) Information Disclosure Vulnerability | |
|
CVE-2026-59135
Microsoft Windows Search Component Information Disclosure Vulnerability |
HIGH 5.5 | — | Microsoft Windows Search Component Information Disclosure Vulnerability | |
|
CVE-2026-59136
Microsoft COM for Windows Information Disclosure Vulnerability |
HIGH 5.5 | — | Microsoft COM for Windows Information Disclosure Vulnerability | |
|
CVE-2026-59137
Windows Event Logging Service Information Disclosure Vulnerability |
HIGH 5.5 | — | Windows Event Logging Service Information Disclosure Vulnerability | |
|
CVE-2026-61347
Windows Event Logging Service Information Disclosure Vulnerability |
HIGH 5.5 | — | Windows Event Logging Service Information Disclosure Vulnerability | |
|
CVE-2026-61928
Windows Hello Tampering Vulnerability |
HIGH 5.5 | — | Windows Hello Tampering Vulnerability | |
|
CVE-2026-61933
Windows DWM Core Library Information Disclosure Vulnerability |
HIGH 5.5 | — | Windows DWM Core Library Information Disclosure Vulnerability | |
|
CVE-2026-61936
Windows Defender Firewall Service Security Feature Bypass Vulnerability |
HIGH 5.5 | — | Windows Defender Firewall Service Security Feature Bypass Vulnerability | |
|
CVE-2026-62703
Windows DWM Core Library Information Disclosure Vulnerability |
HIGH 5.5 | — | Windows DWM Core Library Information Disclosure Vulnerability | |
|
CVE-2026-62746
Win32k Information Disclosure Vulnerability |
HIGH 5.5 | — | Win32k Information Disclosure Vulnerability | |
|
CVE-2026-62740
Windows Imaging Component Information Disclosure Vulnerability |
HIGH 5.5 | — | Windows Imaging Component Information Disclosure Vulnerability | |
|
CVE-2026-62798
Win32k Information Disclosure Vulnerability |
HIGH 5.5 | — | Win32k Information Disclosure Vulnerability | |
|
CVE-2026-62796
Windows NTFS Information Disclosure Vulnerability |
HIGH 5.5 | — | Windows NTFS Information Disclosure Vulnerability | |
|
CVE-2026-65662
Windows GDI Information Disclosure Vulnerability |
HIGH 5.5 | — | Windows GDI Information Disclosure Vulnerability | |
|
CVE-2026-65784
Windows NTFS Information Disclosure Vulnerability |
HIGH 5.5 | — | Windows NTFS Information Disclosure Vulnerability | |
|
CVE-2026-70348
Windows Management Services Denial of Service Vulnerability |
HIGH 5.5 | — | Windows Management Services Denial of Service Vulnerability | |
|
CVE-2026-61360
Windows GDI Information Disclosure Vulnerability |
HIGH 5.5 | — | Windows GDI Information Disclosure Vulnerability | |
|
CVE-2026-62709
Windows GDI+ Information Disclosure Vulnerability |
HIGH 5.5 | — | Windows GDI+ Information Disclosure Vulnerability | |
|
CVE-2026-62743
Win32k Information Disclosure Vulnerability |
HIGH 5.5 | — | Win32k Information Disclosure Vulnerability | |
|
CVE-2026-62730
Windows Wired AutoConfig Service Information Disclosure Vulnerability |
HIGH 5.5 | — | Windows Wired AutoConfig Service Information Disclosure Vulnerability | |
|
CVE-2026-62786
Win32k Information Disclosure Vulnerability |
HIGH 5.5 | — | Win32k Information Disclosure Vulnerability | |
|
CVE-2026-62793
Windows NTFS Information Disclosure Vulnerability |
HIGH 5.5 | — | Windows NTFS Information Disclosure Vulnerability | |
|
CVE-2026-62887
Windows NTFS Information Disclosure Vulnerability |
HIGH 5.5 | — | Windows NTFS Information Disclosure Vulnerability | |
|
CVE-2026-62738
Windows Management Instrumentation Information Disclosure Vulnerability |
HIGH 5.5 | — | Windows Management Instrumentation Information Disclosure Vulnerability | |
|
CVE-2026-62757
Improper verification of cryptographic signature in Windows Schannel allows an unauthorized attacker to bypass a securi… |
MEDIUM 5.3 | — | Improper verification of cryptographic signature in Windows Schannel allows an unauthorized attacker to bypass a security feature over a network. | |
|
CVE-2026-65777
Active Directory Security Feature Bypass Vulnerability |
HIGH 5.3 | — | Active Directory Security Feature Bypass Vulnerability | |
|
CVE-2026-61368
Windows Hyper-V Information Disclosure Vulnerability |
HIGH 5.0 | — | Windows Hyper-V Information Disclosure Vulnerability | |
|
CVE-2026-61350
Windows NTFS Information Disclosure Vulnerability |
HIGH 4.6 | — | Windows NTFS Information Disclosure Vulnerability |