CVE-2026-69974

An out-of-bounds read vulnerability exists in the Desktop Window Manager , which allows an authorized attacker to disclose information locally . The vulnerability is classified as a CWE-125 issue. No specific exploit details or proof-of-concept code are provided in the documents, and remediation ...

CVE-2026-69947

A heap-based buffer overflow vulnerability exists in the Windows Overlay Filter component. An unauthorized attacker can exploit this flaw via a physical attack to achieve Remote Code Execution (RCE). The vulnerability carries a MEDIUM severity rating (CVSS 3.1 score of 6.8) and can impact confide...

CVE-2026-69945

The Windows AppX Deployment Extensions component is vulnerable to a local elevation of privilege due to missing authorization . An authorized attacker can exploit this flaw to obtain elevated privileges on the system. The vulnerability has a CVSS 3.1 score of 8.8 (HIGH) and is officially document...

CVE-2026-69952

The Windows Overlay Filter component is vulnerable to an out-of-bounds read (CWE-125). This flaw allows an authorized attacker to perform a local privilege elevation . The severity is rated as HIGH with a CVSS 3.1 score of 7.8. No specific exploit details or in-the-wild exploitation information a...

CVE-2026-69958

A heap-based buffer overflow exists in the Windows Overlay Filter component. This vulnerability allows an unauthorized attacker to achieve Remote Code Execution (RCE) by performing a physical attack . Exploitation details or specific evidence of in-the-wild activity are not provided in the docume...

CVE-2026-69967

An out-of-bounds read vulnerability exists in the Windows Overlay Filter . This flaw allows an authorized attacker to perform a local information disclosure . Specific exploitation details, including active exploits or proof-of-concept code, are not provided in the documents. Remediation is avail...

CVE-2026-69905

The Windows AppX Deployment Service is vulnerable to a missing authorization flaw. This issue allows an authorized attacker to perform tampering locally on the affected system. The vulnerability has been assigned a CVSSv3.1 score of 5.5 (Medium) and is associated with CWE-862 .

CVE-2026-69867

An out-of-bounds read vulnerability exists in SQLite , which could allow an authorized attacker to achieve local privilege escalation . The vulnerability is documented as having a High severity base score of 7.8. No specific affected versions, underlying root causes, or remediation steps are prov...

CVE-2026-69766

A Use after free vulnerability exists in Windows Storage , which allows an authorized attacker to achieve local privilege escalation . The issue is categorized under CWE-416 and CWE-362 (Race Condition). No specific software versions, file paths, or remediation instructions are provided in the do...

CVE-2026-69913

A Use after free vulnerability exists in the Windows TCP/IP stack. This flaw allows an unauthorized attacker to achieve remote code execution over a network. Exploitation details and specific affected versions are not provided in the documents, but the vulnerability is confirmed as a HIGH severit...

CVE-2026-49785

A vulnerability in Windows UEFI involving improper resource shutdown or release allows an authorized attacker to bypass a security feature locally. This issue specifically impacts the UEFI Secure Boot security feature. The CVSS 3.1 score is 7.8 (High) , with a local attack vector and low complexi...

CVE-2026-108462

A Windows Kernel information disclosure vulnerability (CVE-2026-108462) allows an authorized attacker to disclose sensitive system information locally . The root cause is the exposure of sensitive system information to an unauthorized control sphere. The vulnerability has a Medium severity and a ...

CVE-2026-70235

A vulnerability in Windows Event Tracing due to improper authentication allows an authorized attacker to perform spoofing locally . The security impact is categorized as high integrity with a CVSS 3.1 base score of 5.5 . Official remediation is available via Microsoft updates.

CVE-2026-105732

A stack-based buffer overflow in SysInternals allows an authorized attacker to achieve local privilege escalation . The vulnerability has a HIGH base severity score of 7.3. No specific affected versions, root cause components, or exploit links are provided in the documents, though an official fix...

CVE-2026-105722

A Use after free vulnerability exists in the Windows Broadcast DVR User Service . This flaw allows an authorized attacker to achieve local privilege escalation . The official CVSS 3.1 score is 7.0, reflecting a high severity with significant impacts on confidentiality, integrity, and availability...

CVE-2026-105733

A vulnerability exists in Windows Hyper-V due to improper access control . This flaw allows an authorized attacker to achieve local code execution . The vulnerability is associated with CWE-1419 (Incorrect Initialization of Resource) and carries a HIGH severity rating. No specific exploit details...

CVE-2026-105731

The Microsoft Graphics Component contains a vulnerability where the use of uninitialized resources allows an authorized attacker to perform a local information disclosure . The impact is classified as having high confidentiality impact with a CVSS 3.1 base score of 5.5 . No specific exploit detai...

CVE-2026-108398

The .NET Framework is affected by an untrusted search path vulnerability (CWE-426), which allows an authorized attacker to bypass a security feature locally. This vulnerability results in the evading of security measures . While specific version numbers for the affected components are not explici...

CVE-2026-102234

The Visual Studio Code application is vulnerable to a security feature bypass due to the reliance on untrusted inputs in a security decision. An unauthorized attacker can exploit this flaw over a network to bypass specific security features. The vulnerability has a CVSS 3.1 score of 7.4 (HIGH) , ...

CVE-2026-108468

A Use after free vulnerability exists in the Windows Installer component. This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability has a CVSS 3.1 base score of 7.0 and is categorized under CWE-416 . No specific exploit details or patch versions are provided...