CVE-2026-69596

A Use after free vulnerability exists in the Windows Program Compatibility Assistant Service . This flaw allows an authorized attacker to achieve local privilege escalation . No specific exploit details or remediation steps are provided in the documents beyond the official fix status.

EUVD-2026-99896

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges with a physical attack...

CVE-2026-78459

A heap-based buffer overflow vulnerability exists in Windows Internet Information Services . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability has a CVSS 3.1 score of 7.8 (High) . Official remediation is available via Microsoft's update guide.

CVE-2026-69733

Windows Update is affected by an untrusted search path vulnerability (CWE-426). This flaw allows an authorized attacker to achieve local privilege escalation . The base severity score is 7.8 (High) , indicating significant impacts on confidentiality, integrity, and availability. No specific explo...

EUVD-2026-99890

Untrusted search path in Windows Update allows an authorized attacker to elevate privileges locally...

EUVD-2026-99884

Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally...

EUVD-2026-99883

Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally...

CVE-2026-69783

A vulnerability in Windows Update allows an authorized attacker to achieve local privilege escalation . The root cause is identified as external control of file name or path (CWE-73). Impact includes potential high levels of confidentiality, integrity, and availability compromise. No specific ver...

CVE-2026-70295

A vulnerability in the Windows Win32 Kernel Subsystem allows an authorized attacker to perform an out-of-bounds read to disclose information locally. The vulnerability is categorized as an information disclosure issue. No specific exploit details or in-the-wild exploitation records are provided i...

EUVD-2026-99886

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Credential Manager allows an authorized attacker to elevate privileges locally...

CVE-2026-70293

A use of uninitialized resource vulnerability exists in the Windows Win32 Kernel Subsystem . This flaw allows an authorized attacker to perform a local information disclosure . No specific software versions or remediation steps are provided in the documents, though the CVE is confirmed by Microso...

EUVD-2026-99891

External control of file name or path in Windows Update allows an authorized attacker to elevate privileges locally...

CVE-2026-70292

An out-of-bounds read vulnerability exists in the Windows Win32 Kernel Subsystem . This flaw allows an authorized attacker to disclose information locally. The vulnerability is categorized under CWE-125 and carries a medium severity score of 5.5. No specific exploit details or remediation version...

CVE-2026-70237

A Use after free vulnerability exists in the Windows Ancillary Function Driver for WinSock . This flaw allows an authorized attacker to achieve local privilege elevation . While the CVSS v3.1 score reflects a High severity (7.0) with potential for high impact on confidentiality, integrity, and av...

CVE-2026-70288

A Time-of-check time-of-use (TOCTOU) race condition exists within the Windows Win32 Kernel Subsystem . This vulnerability allows an authorized attacker to perform a local information disclosure . No specific software versions, root cause files, or exploit details are provided in the documentation...

EUVD-2026-99877

Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally...

CVE-2026-70232

The Windows Kernel is affected by a vulnerability that allows for the exposure of sensitive system information to an unauthorized control sphere. An authorized attacker can exploit this flaw to disclose information locally . The vulnerability is associated with CWE-497 and carries a CVSS 3.1 base...

EUVD-2026-99875

Out-of-bounds read in Windows HTTP.sys allows an authorized attacker to disclose information locally...

EUVD-2026-99866

Allocation of resources without limits or throttling in Windows Netlogon allows an authorized attacker to deny service over a network...

CVE-2026-70074

A vulnerability in Windows DNS involves an out-of-bounds read (CWE-125) that allows an authorized attacker to disclose information locally. The impact is characterized as a local information disclosure with a Medium severity rating (CVSS 3.1 score of 5.5). An official fix is available, and no spe...