CVE-2026-102203

A type confusion vulnerability in the RPC Runtime allows an unauthorized attacker to execute code over a network. This issue involves the access of resources using incompatible types, which can lead to remote code execution. While the vulnerability is confirmed with a high base score, specific de...

EUVD-2026-100359

Heap-based buffer overflow in Windows Portable Device MTP Driver allows an unauthorized attacker to elevate privileges with a physical attack...

CVE-2026-102202

A vulnerability exists in the Windows Container Isolation FS Filter Driver (unionfs.sys) due to improper access control . This flaw allows an authorized attacker to perform a local privilege elevation . The vulnerability is associated with CWE-59 (Improper Link Resolution Before File Access). No ...

EUVD-2026-100347

Integer underflow wrap or wraparound in Windows Failover Cluster allows an unauthorized attacker to deny service over a network...

CVE-2026-102206

A heap-based buffer overflow exists in the Windows Portable Device MTP Driver . This vulnerability allows an unauthorized attacker to achieve privilege escalation via a physical attack . The CVSS 3.1 score is 6.8 (Medium) , with a physical attack vector and no user interaction required. No specif...

CVE-2026-102186

The Windows Network File System is susceptible to an untrusted pointer dereference vulnerability (CWE-822). This flaw allows an authorized attacker to perform a local information disclosure . The vulnerability has a CVSS 3.1 base score of 4.7 (Medium) , characterized by high attack complexity and...

EUVD-2026-100339

Improper restriction of communication channel to intended endpoints in Windows Security Center allows an authorized attacker to elevate privileges locally...

EUVD-2026-100344

Untrusted pointer dereference in Windows Storage Port Driver allows an unauthorized attacker to elevate privileges with a physical attack...

EUVD-2026-100340

Out-of-bounds read in Windows Storage Port Driver allows an unauthorized attacker to disclose information with a physical attack...

CVE-2026-102188

The Windows Storage Port Driver is vulnerable to an untrusted pointer dereference (CWE-822). This flaw allows an unauthorized attacker to achieve privilege elevation through a physical attack . While the CVSS v3.1 score indicates a base severity of Medium (6.8) , the impact includes high confiden...

EUVD-2026-100343

Untrusted pointer dereference in Windows Network File System allows an authorized attacker to disclose information locally...

CVE-2026-70212

The Windows Security Center is affected by a vulnerability involving the improper restriction of communication channels to intended endpoints. This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is categorized under CWE-923 . While the impact is high ...

CVE-2026-102187

A vulnerability exists in the Windows Kernel due to the use of uninitialized resource (CWE-908). This flaw allows an authorized attacker to perform a local information disclosure . The CVSS 3.1 score is 5.5 (Medium) , with a high confidentiality impact. An official fix is available as indicated b...

CVE-2026-88226

An out-of-bounds read vulnerability exists in the Windows Storage Port Driver . This flaw allows an unauthorized attacker to disclose information, but it requires a physical attack to exploit. The vulnerability is associated with CWE-125 . No specific exploit details or in-the-wild exploitation i...

CVE-2026-100217

A vulnerability exists in Windows Group Policy due to improper privilege management . This flaw allows an authorized attacker to perform a local privilege escalation . The issue is associated with CWE-862 (Missing Authorization) . While the documents do not provide specific technical details on t...

EUVD-2026-100338

Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally...

EUVD-2026-100330

Improper privilege management in Windows Group Policy allows an authorized attacker to elevate privileges locally...

EUVD-2026-100335

Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally...

CVE-2026-70023

A use after free vulnerability in Windows Hyper-V allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-416 . While the specific component and root cause are not detailed in the provided documents, the impact includes high confidentiality, i...

CVE-2026-100216

A stack-based buffer overflow exists in Windows Storage , which could allow an authorized attacker to achieve local privilege elevation . The vulnerability is characterized by a high level of attack complexity and impacts confidentiality, integrity, and availability. An official fix is available;...