CVE-2026-96307

A Use after free vulnerability exists in Windows Installer . This flaw allows an authorized attacker to achieve local privilege elevation . The CVSS 3.1 base score is 7.0 (High) , reflecting impacts on confidentiality, integrity, and availability. No specific exploit code or detailed remediation ...

EUVD-2026-99763

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

EUVD-2026-99751

Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally...

CVE-2026-96217

A heap-based buffer overflow exists in Windows NTFS that allows an authorized attacker to elevate privileges locally . The vulnerability is associated with CWE-122 (Heap-based Buffer Overflow) and CWE-190 (Integer Overflow or Wraparound). No specific exploit information or details on in-the-wild ...

CVE-2026-96224

Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network...

EUVD-2026-99744

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Autopilot allows an authorized attacker to elevate privileges locally...

CVE-2026-96220

The Windows Assigned Access feature contains an improper control of generation of code (code injection) vulnerability. This flaw allows an authorized attacker to perform a local privilege escalation . The vulnerability is associated with CWE-94 . No specific exploit links or exploit details are p...

CVE-2026-96218

A vulnerability exists in the Windows Update Stack due to improper access control . This flaw allows an authorized attacker to perform tampering locally . The vulnerability is associated with CWE-15 (External Control of System or Configuration Setting) and carries a MEDIUM base severity (CVSS 3.1...

CVE-2026-96224

An out-of-bounds write vulnerability exists in .NET , allowing an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a CVSS v3.1 score of 8.80 (High), where the attack complexity is low, but user interaction is required. Exploitation details and specific ...

CVE-2026-96216

A Use after free vulnerability exists in the Windows Kernel (associated with CWE-416 and CWE-822 ). This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is rated with a High base severity (CVSS 3.1 score of 7.0). No specific exploit details or in-the-wi...

EUVD-2026-99745

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-70251

A Server-side request forgery (SSRF) vulnerability exists in Microsoft Office SharePoint , as detailed in CVE-2026-70251 . This flaw allows an authorized attacker to achieve privilege escalation over a network. Microsoft has released official updates to address this issue; users are encouraged to...

EUVD-2026-99692

Improper limitation of a pathname to a restricted directory 'path traversal' in .NET allows an authorized attacker to elevate privileges locally...

CVE-2026-70197

A vulnerability in .NET allows an unauthorized attacker to perform an out-of-bounds write , which can result in the execution of arbitrary code over a network. This issue is identified with a CVSS v3.1 score of 8.1 (High). While the documents confirm the vulnerability and its potential impact, sp...

CVE-2026-70196

Inefficient algorithmic complexity in ASP.NET Core allows an unauthorized attacker to deny service over a network...

CVE-2026-70161

Improper limitation of a pathname to a restricted directory 'path traversal' in .NET allows an authorized attacker to elevate privileges locally...

CVE-2026-70165

Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...

CVE-2026-70196

A Denial of Service vulnerability exists in ASP.NET Core due to inefficient algorithmic complexity . An unauthorized attacker can exploit this issue over a network to disrupt service availability. Microsoft has identified this vulnerability and provides an official fix in their update guidance.

CVE-2026-70181

A Denial of Service vulnerability exists in ASP.NET Core due to the allocation of resources without limits or throttling . An unauthorized attacker can exploit this flaw over a network to deny service. Exploitation details are not provided.

CVE-2026-70165

The .NET runtime is vulnerable to an improper link resolution before file access (link following) issue. This flaw allows an authorized attacker to achieve local privilege escalation on the affected system. The vulnerability is categorized as a MEDIUM severity issue with a CVSS score of 6.70 . No...