CVE-2026-70144

A Use after free vulnerability exists in the Windows Win32 Kernel Subsystem . This flaw allows an authorized attacker to achieve local privilege elevation . While the vulnerability is confirmed, the provided documents do not specify the exact file or function involved, nor do they provide details...

CVE-2026-70211

An out-of-bounds read vulnerability exists in the Windows Win32 Kernel Subsystem . This flaw allows an authorized attacker to perform a local information disclosure . The vulnerability is classified as CWE-125 and has a CVSS 3.1 base score of 5.5 (Medium) . No specific exploit details or in-the-w...

CVE-2026-70067

A use after free vulnerability exists in the Windows Win32 Kernel Subsystem . This flaw allows an authorized attacker to achieve local privilege elevation . While the vulnerability is confirmed, specific technical details regarding the affected component, file, or root cause are not provided in t...

CVE-2026-96868

A heap-based buffer overflow exists in the Windows Kernel , which could allow an authorized attacker to achieve local privilege escalation . The vulnerability is characterized by high complexity and requires local access. No specific exploit details or information regarding in-the-wild exploitati...

CVE-2026-96865

A vulnerability in Windows Secure Kernel Mode allows an authorized attacker to disclose sensitive system information locally. This issue is characterized by the exposure of information to an unauthorized control sphere (CWE-497). The vulnerability has a CVSS 3.1 base score of 5.6 (Medium) with a ...

CVE-2026-96848

A buffer over-read vulnerability exists in the Windows Win32 Kernel Subsystem . This flaw allows an authorized attacker to perform a local information disclosure , potentially exposing sensitive data. While the CVSS v3.1 score is 5.5 (Medium) , the vulnerability has a high confidentiality impact....

CVE-2026-96317

A use after free vulnerability exists in the Windows Kernel . This flaw allows an authorized attacker to perform a local privilege escalation . While the impact includes high levels of confidentiality, integrity, and availability, the documents do not provide specific details regarding the vulner...

CVE-2026-96849

A use of uninitialized resource vulnerability in Windows Kernel-Mode Drivers allows an authorized attacker to perform a local information disclosure . The vulnerability is associated with CWE-904 . No specific software versions, root cause details, or exploit links are provided in the documentati...

CVE-2026-96312

A heap-based buffer overflow exists in the Windows Kernel that enables an authorized attacker to perform a local privilege escalation . The vulnerability is categorized under CWE-122 . While the specific component or function is not detailed in the provided documents, the impact involves a high s...

CVE-2026-96247

A vulnerability exists in Windows Kernel-Mode Drivers due to the use of uninitialized resources (CWE-908). This flaw allows an authorized attacker to perform a local information disclosure . No specific versions or detailed remediation steps are provided in the documents beyond the existence of a...

CVE-2026-96216

A Use after free vulnerability exists in the Windows Kernel (associated with CWE-416 and CWE-822 ). This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is rated with a High base severity (CVSS 3.1 score of 7.0). No specific exploit details or in-the-wi...

CVE-2026-88073

A Use after free vulnerability exists in the Windows Graphics Kernel . This flaw allows an authorized attacker to achieve local privilege elevation . While the specific root cause component is not detailed beyond the kernel level, the impact includes high levels of confidentiality, integrity, and...

CVE-2026-85945

A Use after free vulnerability exists in the Windows Kernel . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability has a HIGH severity rating with a CVSS 3.1 score of 7.8. No specific component, file, or exploit code details are provided in the document...

CVE-2026-85939

A weak authentication vulnerability in the Windows Kernel allows an authorized attacker to bypass a security feature over a network. The vulnerability is associated with CWE-1390 and carries a Medium severity rating. While the impact is noted as High for integrity , the documents do not provide s...

CVE-2026-70303

A vulnerability in the Windows Kernel involves an out-of-bounds write (CWE-787). This flaw allows an authorized attacker to achieve local privilege escalation . While the specific component or file is not identified in the provided documents, the impact includes high severity for confidentiality,...

CVE-2026-70170

A vulnerability exists in the Windows Kernel due to an untrusted pointer dereference . This flaw allows an authorized attacker to cause a denial of service (DoS) over a network. No specific exploitation details or patch versions are provided in the documents.

CVE-2026-85871

A heap-based buffer overflow exists in Windows Kernel-Mode Drivers , which may allow an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-122 . No specific exploited versions, specific impacted files, or exploit links are provided in the documents...

CVE-2026-85857

A vulnerability in Windows Kernel-Mode Drivers allows an authorized attacker to perform a local information disclosure . The issue is caused by the insertion of sensitive information into a log file (CWE-532). The impact is characterized as a high level of confidentiality loss for local users. Re...

CVE-2026-85858

An out-of-bounds read vulnerability exists within the Windows Win32 Kernel Subsystem . This flaw allows an authorized attacker to achieve local privilege escalation . While the specific root cause is not detailed, the impact includes unauthorized access to elevated permissions. Remediation is ava...

CVE-2026-85836

A Use after free vulnerability exists in the Windows Kernel , which could allow an authorized attacker to achieve local privilege escalation . The vulnerability is classified with a CVSS 3.1 base score of 7.8 (High) . No specific exploit details or in-the-wild exploitation information are provide...