EUVD-2026-99891

External control of file name or path in Windows Update allows an authorized attacker to elevate privileges locally...

CVE-2026-70292

An out-of-bounds read vulnerability exists in the Windows Win32 Kernel Subsystem . This flaw allows an authorized attacker to disclose information locally. The vulnerability is categorized under CWE-125 and carries a medium severity score of 5.5. No specific exploit details or remediation version...

CVE-2026-70237

A Use after free vulnerability exists in the Windows Ancillary Function Driver for WinSock . This flaw allows an authorized attacker to achieve local privilege elevation . While the CVSS v3.1 score reflects a High severity (7.0) with potential for high impact on confidentiality, integrity, and av...

CVE-2026-70288

A Time-of-check time-of-use (TOCTOU) race condition exists within the Windows Win32 Kernel Subsystem . This vulnerability allows an authorized attacker to perform a local information disclosure . No specific software versions, root cause files, or exploit details are provided in the documentation...

EUVD-2026-99875

Out-of-bounds read in Windows HTTP.sys allows an authorized attacker to disclose information locally...

EUVD-2026-99877

Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally...

CVE-2026-70232

The Windows Kernel is affected by a vulnerability that allows for the exposure of sensitive system information to an unauthorized control sphere. An authorized attacker can exploit this flaw to disclose information locally . The vulnerability is associated with CWE-497 and carries a CVSS 3.1 base...

CVE-2026-70074

A vulnerability in Windows DNS involves an out-of-bounds read (CWE-125) that allows an authorized attacker to disclose information locally. The impact is characterized as a local information disclosure with a Medium severity rating (CVSS 3.1 score of 5.5). An official fix is available, and no spe...

CVE-2026-70201

An out-of-bounds read vulnerability exists in the Windows DHCP Server . This flaw allows an authorized attacker to perform a local denial of service (DoS). The vulnerability is associated with CWE-125 (Out-of-bounds Read) and CWE-416 (Use After Free). Official remediation is available through a M...

EUVD-2026-99866

Allocation of resources without limits or throttling in Windows Netlogon allows an authorized attacker to deny service over a network...

EUVD-2026-99873

Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service locally...

EUVD-2026-99872

Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally...

EUVD-2026-99874

Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-99868

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally...

EUVD-2026-99865

Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information locally...

CVE-2026-70199

The Windows Kernel is affected by an information disclosure vulnerability (CVE-2026-70199 ) where sensitive system information is exposed to an unauthorized control sphere. This flaw allows an authorized attacker to disclose information locally . The vulnerability is associated with CWE-497 . Whi...

EUVD-2026-99855

Out-of-bounds read in Windows Update allows an authorized attacker to disclose information locally...

CVE-2026-70069

A stack-based buffer overflow vulnerability exists in the Windows DHCP Server . This flaw allows an authorized attacker to achieve remote code execution over a network. The vulnerability carries a CVSS 3.1 base score of 8.8 (High) , indicating significant impact on confidentiality, integrity, and...

EUVD-2026-99861

Use after free in Windows DHCP Server allows an authorized attacker to elevate privileges locally...

CVE-2026-70067

A use after free vulnerability exists in the Windows Win32 Kernel Subsystem . This flaw allows an authorized attacker to achieve local privilege elevation . While the vulnerability is confirmed, specific technical details regarding the affected component, file, or root cause are not provided in t...