CVE-2026-70051

A type confusion vulnerability in Windows SmartScreen allows an authorized attacker to achieve local privilege escalation . The root cause involves the access of resources using incompatible types, which can lead to high impact on confidentiality, integrity, and availability. The CVSS 3.1 score i...

CVE-2026-70055

A vulnerability in Windows Cryptographic Services allows an authorized attacker to perform a local information disclosure . The flaw results in the exposure of sensitive system information to an unauthorized control sphere. This vulnerability is associated with CWE-497 . While a specific root cau...

CVE-2026-69999

An out-of-bounds read vulnerability exists in Windows Update (CWE-125). This flaw allows an authorized attacker to perform a local information disclosure , potentially exposing sensitive data. The vulnerability has a CVSS 3.1 base score of 5.5 (Medium) . No specific exploit details or evidence of...

CVE-2026-70071

The DNS Server is affected by a vulnerability involving the improper verification of cryptographic signatures . This flaw allows an authorized attacker to perform tampering locally . The vulnerability is categorized under CWE-347 . While the documents confirm the root cause and impact, specific d...

CVE-2026-69931

A race condition vulnerability exists in Windows Storage due to concurrent execution using a shared resource with improper synchronization. This flaw allows an authorized attacker to achieve local privilege escalation . No specific affected versions, exploit details, or remediation instructions a...

CVE-2026-69986

A Use after free vulnerability in the Remote Desktop Client allows an unauthorized attacker to execute code over a network. The issue results in a High severity impact, potentially compromising confidentiality, integrity, and availability. While specific affected versions or components are not de...

EUVD-2026-99841

Use after free in Windows Storage allows an authorized attacker to elevate privileges locally...

EUVD-2026-99849

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

EUVD-2026-99840

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Storage allows an authorized attacker to elevate privileges locally...

EUVD-2026-99832

Observable discrepancy in Microsoft Office SharePoint allows an authorized attacker to perform tampering over a network...

EUVD-2026-99838

Missing authentication for critical function in Windows SmartScreen allows an authorized attacker to perform tampering locally...

EUVD-2026-99835

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

CVE-2026-96997

A Use after free vulnerability in Microsoft Office OneNote allows an authorized attacker to elevate privileges locally . The issue impacts the OneNote component and is assigned a CVSS score of 7.8 (High) . Microsoft has released security updates to address this vulnerability; users are recommende...

EUVD-2026-99793

Exposure of sensitive system information to an unauthorized control sphere in Windows NTFS allows an authorized attacker to disclose information locally...

EUVD-2026-99796

Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclose information locally...

CVE-2026-96928

An out-of-bounds read vulnerability exists in Windows NTFS that allows an authorized attacker to achieve local privilege elevation . The vulnerability impacts the NTFS file system component. While the specific root cause is not detailed in the provided documents, the impact includes high confiden...

CVE-2026-96921

A type confusion vulnerability (CWE-843) exists in the Windows Message Queuing Queue Manager . This flaw allows an authorized attacker to perform a local information disclosure . No specific exploit details or patch versions are provided in the documents, but the vulnerability is listed as having...

EUVD-2026-99792

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally...

EUVD-2026-99791

Access of resource using incompatible type 'type confusion' in Windows Message Queuing Queue Manager allows an authorized attacker to disclose information locally...

CVE-2026-95904

A buffer over-read vulnerability exists in the Windows Event Logging Service . This flaw allows an authorized attacker to perform a local information disclosure. The vulnerability is assigned a Medium severity (CVSS 3.1 score of 5.5) and is characterized by low attack complexity and low privilege...