EUVD-2026-10607

External control of file name or path in Windows Kernel allows an authorized attacker to elevate privileges locally...

EUVD-2026-10644

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally...

EUVD-2026-10634

Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally...

EUVD-2026-10618

Null pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

EUVD-2026-10613

Improper access control in Windows Projected File System allows an authorized attacker to elevate privileges locally...

EUVD-2026-10633

Divide by zero in Microsoft Graphics Component allows an unauthorized attacker to deny service locally...

EUVD-2026-10632

Divide by zero in Microsoft Graphics Component allows an unauthorized attacker to deny service locally...

EUVD-2026-10589

Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...

EUVD-2026-10588

Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...

CVE-2026-26148

External initialization of trusted variables or data stores in Azure Entra ID allows an unauthorized attacker to elevate privileges locally...

CVE-2026-26131

Incorrect default permissions in .NET allows an authorized attacker to elevate privileges locally...

CVE-2026-26134

Integer overflow or wraparound in Microsoft Office allows an authorized attacker to elevate privileges locally...

CVE-2026-25179

Improper validation of specified type of input in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

CVE-2026-25174

Out-of-bounds read in Windows Extensible File Allocation allows an authorized attacker to elevate privileges locally...

CVE-2026-25168

Null pointer dereference in Microsoft Graphics Component allows an unauthorized attacker to deny service locally...

CVE-2026-24285

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally...

CVE-2026-24287

External control of file name or path in Windows Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-23673

Out-of-bounds read in Windows Resilient File System ReFS allows an authorized attacker to elevate privileges locally...

CVE-2025-11739

CWE‑502: Deserialization of Untrusted Data vulnerability exists that could cause arbitrary code execution with administrative privileges when a locally authenticated attacker sends a crafted data stream, triggering unsafe deserialization...

CVE-2026-24296

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Device Association Service allows an authorized attacker to elevate privileges locally...