CVE-2026-96862

An out-of-bounds read vulnerability exists in Windows Spaceport.sys . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is confirmed by Microsoft and has a CVSS 3.1 base score of 7.8 (High). No specific exploit information or in-the-wild exploitatio...

CVE-2026-96860

The Windows USB Print Driver contains an out-of-bounds read vulnerability (CWE-125, CWE-170). This flaw allows an authorized attacker to perform a local information disclosure . No specific versions, root causes, or remediation steps are provided in the documents, and no exploits or in-the-wild e...

EUVD-2026-99782

Heap-based buffer overflow in Windows Storage Port Driver allows an unauthorized attacker to elevate privileges with a physical attack...

CVE-2026-96848

A buffer over-read vulnerability exists in the Windows Win32 Kernel Subsystem . This flaw allows an authorized attacker to perform a local information disclosure , potentially exposing sensitive data. While the CVSS v3.1 score is 5.5 (Medium) , the vulnerability has a high confidentiality impact....

CVE-2026-96312

A heap-based buffer overflow exists in the Windows Kernel that enables an authorized attacker to perform a local privilege escalation . The vulnerability is categorized under CWE-122 . While the specific component or function is not detailed in the provided documents, the impact involves a high s...

CVE-2026-96317

A use after free vulnerability exists in the Windows Kernel . This flaw allows an authorized attacker to perform a local privilege escalation . While the impact includes high levels of confidentiality, integrity, and availability, the documents do not provide specific details regarding the vulner...

EUVD-2026-99769

Missing authorization in Windows Overlay Filter allows an authorized attacker to perform tampering locally...

EUVD-2026-99775

Buffer over-read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally...

CVE-2026-96309

A Use after free vulnerability in the Windows Subsystem for Linux allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-416 and has a CVSS 3.1 base score of 7.8 . No specific exploit code or in-the-wild exploitation details are provided in ...

CVE-2026-96314

An out-of-bounds read vulnerability exists in the Windows Audio Service . This flaw allows an authorized attacker to perform a local information disclosure, potentially exposing sensitive data. The vulnerability is assigned CWE-125 . No specific exploit details or in-the-wild exploitation informa...

EUVD-2026-99777

Buffer over-read in Windows Management Instrumentation allows an authorized attacker to disclose information locally...

EUVD-2026-99766

Out-of-bounds read in Windows Audio Service allows an authorized attacker to disclose information locally...

CVE-2026-96319

A Use after free vulnerability exists in the Windows USB Print Driver . This flaw allows an authorized attacker to achieve local privilege escalation . While the root cause is identified as a memory management issue, specific technical details regarding the affected component or file are not prov...

EUVD-2026-99764

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-96308

A Use after free vulnerability exists in Windows Installer , which allows an authorized attacker to achieve local privilege escalation . The vulnerability is classified with a High base severity score of 7.8. No specific exploit details or patch versions are provided in the documents.

EUVD-2026-99760

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-96236

A Denial of Service vulnerability exists in ASP.NET Core due to the allocation of resources without limits or throttling . An unauthorized attacker can exploit this flaw over a network to disrupt service availability. Remediation is provided via an official fix .

EUVD-2026-99759

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-96247

A vulnerability exists in Windows Kernel-Mode Drivers due to the use of uninitialized resources (CWE-908). This flaw allows an authorized attacker to perform a local information disclosure . No specific versions or detailed remediation steps are provided in the documents beyond the existence of a...

CVE-2026-96305

A Use after free vulnerability exists in Windows Installer . This flaw allows an authorized attacker to achieve local privilege elevation . While the vulnerability's technical root cause is identified as CWE-416 , specific details regarding the affected component or function are not provided. No ...