313135 matches found
EUVD-2026-99861
Use after free in Windows DHCP Server allows an authorized attacker to elevate privileges locally...
CVE-2026-70051
A type confusion vulnerability in Windows SmartScreen allows an authorized attacker to achieve local privilege escalation . The root cause involves the access of resources using incompatible types, which can lead to high impact on confidentiality, integrity, and availability. The CVSS 3.1 score i...
CVE-2026-70055
A vulnerability in Windows Cryptographic Services allows an authorized attacker to perform a local information disclosure . The flaw results in the exposure of sensitive system information to an unauthorized control sphere. This vulnerability is associated with CWE-497 . While a specific root cau...
CVE-2026-70071
The DNS Server is affected by a vulnerability involving the improper verification of cryptographic signatures . This flaw allows an authorized attacker to perform tampering locally . The vulnerability is categorized under CWE-347 . While the documents confirm the root cause and impact, specific d...
CVE-2026-69999
An out-of-bounds read vulnerability exists in Windows Update (CWE-125). This flaw allows an authorized attacker to perform a local information disclosure , potentially exposing sensitive data. The vulnerability has a CVSS 3.1 base score of 5.5 (Medium) . No specific exploit details or evidence of...
CVE-2026-69931
A race condition vulnerability exists in Windows Storage due to concurrent execution using a shared resource with improper synchronization. This flaw allows an authorized attacker to achieve local privilege escalation . No specific affected versions, exploit details, or remediation instructions a...
CVE-2026-69986
A Use after free vulnerability in the Remote Desktop Client allows an unauthorized attacker to execute code over a network. The issue results in a High severity impact, potentially compromising confidentiality, integrity, and availability. While specific affected versions or components are not de...
EUVD-2026-99841
Use after free in Windows Storage allows an authorized attacker to elevate privileges locally...
EUVD-2026-99849
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...
EUVD-2026-99840
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Storage allows an authorized attacker to elevate privileges locally...
EUVD-2026-99832
Observable discrepancy in Microsoft Office SharePoint allows an authorized attacker to perform tampering over a network...
EUVD-2026-99838
Missing authentication for critical function in Windows SmartScreen allows an authorized attacker to perform tampering locally...
EUVD-2026-99835
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...
CVE-2026-96997
A Use after free vulnerability in Microsoft Office OneNote allows an authorized attacker to elevate privileges locally . The issue impacts the OneNote component and is assigned a CVSS score of 7.8 (High) . Microsoft has released security updates to address this vulnerability; users are recommende...
EUVD-2026-99796
Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclose information locally...
CVE-2026-96928
An out-of-bounds read vulnerability exists in Windows NTFS that allows an authorized attacker to achieve local privilege elevation . The vulnerability impacts the NTFS file system component. While the specific root cause is not detailed in the provided documents, the impact includes high confiden...
EUVD-2026-99793
Exposure of sensitive system information to an unauthorized control sphere in Windows NTFS allows an authorized attacker to disclose information locally...
CVE-2026-96921
A type confusion vulnerability (CWE-843) exists in the Windows Message Queuing Queue Manager . This flaw allows an authorized attacker to perform a local information disclosure . No specific exploit details or patch versions are provided in the documents, but the vulnerability is listed as having...
CVE-2026-95904
A buffer over-read vulnerability exists in the Windows Event Logging Service . This flaw allows an authorized attacker to perform a local information disclosure. The vulnerability is assigned a Medium severity (CVSS 3.1 score of 5.5) and is characterized by low attack complexity and low privilege...