CVE-2026-81969

Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally...

CVE-2026-73027

External control of system or configuration setting in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally...

CVE-2026-70580

Missing authentication for critical function in Windows Credential Guard allows an authorized attacker to perform spoofing locally...

CVE-2026-71347

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Security Center allows an authorized attacker to elevate privileges locally...

CVE-2026-70294

Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally...

CVE-2026-70299

Improper access control in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-70293

Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally...

CVE-2026-70295

Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally...

CVE-2026-70292

Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally...

CVE-2026-70288

Time-of-check time-of-use toctou race condition in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally...

CVE-2026-70264

Improper link resolution before file access 'link following' in Microsoft Defender allows an authorized attacker to disclose information locally...

CVE-2026-70267

Inclusion of functionality from untrusted control sphere in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

CVE-2026-70270

Untrusted pointer dereference in Windows Container Isolation FS Filter Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-70260

Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an authorized attacker to disclose information locally...

CVE-2026-70261

Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an authorized attacker to disclose information locally...

CVE-2026-70248

Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally...

CVE-2026-70247

Out-of-bounds read in Windows HTTP.sys allows an authorized attacker to execute code locally...

CVE-2026-70241

Use after free in Windows Kerberos allows an authorized attacker to elevate privileges locally...

CVE-2026-70235

Improper authentication in Windows Event Tracing allows an authorized attacker to perform spoofing locally...

CVE-2026-70238

Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally...