CVE-2026-97838

An out-of-bounds read vulnerability exists in the DNS Server , which may allow an authorized attacker to disclose information over a network. The vulnerability is associated with CWE-125 and has a CVSS 3.1 base score of 6.5. No specific software versions, affected components, or remediation steps...

EUVD-2026-100420

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...

EUVD-2026-100409

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-100413

Double free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally...

CVE-2026-97804

A heap-based buffer overflow vulnerability exists in the HID class driver . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability's base score is 7.8 (High) , with impacts on confidentiality, integrity, and availability. No specific exploit information ...

CVE-2026-97810

A heap-based buffer overflow vulnerability exists in the Windows Container Isolation FS Filter Driver (unionfs.sys) . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is tracked as CVE-2026-97810 with a CVSS 3.1 base score of 7.0 (High) . No specif...

CVE-2026-70162

A denial of service vulnerability exists in the Microsoft Common Object Runtime Library due to the improper handling of web requests. A remote unauthenticated attacker can exploit this by issuing specially crafted requests to a .NET web application , potentially causing a denial of service. The o...

CVE-2026-105007

An elevation of privilege vulnerability exists in the Network Driver Interface Specification (NDIS) because ndis.sys fails to validate buffer length before copying memory. In a local attack scenario, an attacker with the ability to execute a malicious application could run a specially crafted app...

EUVD-2026-100396

An elevation of privilege vulnerability exists in the Network Driver Interface Specification NDIS when ndis.sys fails to check the length of a buffer prior to copying memory to it. To exploit the vulnerability, in a local attack scenario, an attacker could run a specially crafted application to...

CVE-2026-105009

A local privilege escalation vulnerability exists in the Windows Server Update Service due to incorrect default permissions (CWE-276). An authorized attacker can exploit this flaw to elevate privileges locally. While the CVSS 3.1 score reflects a High severity (7.5), the attack requires low privi...

CVE-2026-97798

The Windows Error Reporting service is vulnerable to an argument injection vulnerability (CWE-88) caused by improper neutralization of argument delimiters in a command. An authorized attacker can leverage this flaw to achieve local privilege escalation . The official fix is available via the prov...

CVE-2026-103578

A vulnerability in the Windows Kernel involves an untrusted pointer dereference (CWE-822). This flaw allows an unauthorized attacker to achieve privilege elevation via a physical attack . No specific component or file is identified, and no exploit details or specific remediation versions are prov...

EUVD-2026-100391

Untrusted pointer dereference in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack...

EUVD-2026-100395

Use after free in HID class driver allows an unauthorized attacker to elevate privileges with a physical attack...

CVE-2026-103565

A Use after free vulnerability in the Windows Broadcast DVR User Service allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-416 . No specific exploit links or detailed remediation instructions are provided in the documents, though an offi...

CVE-2026-105006

A use after free vulnerability exists in the HID class driver . This flaw allows an unauthorized attacker to perform a physical attack to achieve privilege elevation . The vulnerability is associated with CWE-416 . No specific affected versions or exploit links are provided in the documentation; ...

EUVD-2026-100383

Improper authorization in DNS Server allows an authorized attacker to perform tampering locally...

EUVD-2026-100380

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally...

CVE-2026-103560

The DNS Server is subject to an improper authorization vulnerability (CWE-862) that allows an authorized attacker to perform local tampering . The vulnerability results in a high integrity impact and is rated as MEDIUM severity with a CVSS3.1 score of 5.5. No specific exploit information or remed...

CVE-2026-103553

An out-of-bounds read vulnerability exists in the Windows Partition Management Driver . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-125 . While no specific exploit links or proof-of-concept code are provided in the docume...