313178 matches found
CVE-2026-70013
A Use after free vulnerability in Windows iSCSI allows an unauthorized attacker to execute code over a network. The vulnerability has a High base severity score of 8.1. While the documents do not provide specific file paths or technical root causes, the impact includes potential Remote Code Execu...
CVE-2026-70134
A Use after free vulnerability exists in Windows Event Tracing . This flaw allows an authorized attacker to perform a local privilege escalation . No specific exploit code or in-the-wild exploitation details are provided in the documents, though the CVSS 3.1 score indicates a High severity (7.0) ...
CVE-2026-70102
A Use after free vulnerability exists in Windows Spaceport.sys . This flaw allows an authorized attacker to achieve local privilege escalation . No specific exploit details or technical root cause files are provided, but the impact is classified as high regarding confidentiality, integrity, and a...
EUVD-2026-99674
Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to deny service over a network...
CVE-2026-70045
A Use after free vulnerability in Windows Work Folders allows an authorized attacker to achieve local privilege escalation . The vulnerability's impact includes high levels of confidentiality, integrity, and availability. An official fix is available, as indicated by the remediation level. No spe...
EUVD-2026-99669
Integer overflow or wraparound in Windows Client for NFS allows an authorized attacker to elevate privileges locally...
CVE-2026-70113
The Windows Client for NFS is vulnerable to an integer overflow or wraparound condition. This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability has a CVSS 3.1 base score of 7.8 (High) . Official remediation is available via Microsoft security updates.
CVE-2026-88146
A race condition vulnerability exists in the Windows Background Intelligent Transfer Service (BITS) due to concurrent execution using a shared resource with improper synchronization. This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated wit...
CVE-2026-88140
An out-of-bounds read vulnerability exists in the Windows Key Storage Provider . This flaw allows an authorized attacker to perform a local information disclosure by reading data outside of the intended memory boundaries. The vulnerability is assigned a CVSS 3.1 base score of 5.5 (Medium) with a ...
EUVD-2026-99662
Uncontrolled search path element in Windows AI allows an authorized attacker to elevate privileges locally...
EUVD-2026-99655
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally...
EUVD-2026-99651
Uncaught exception in Windows Failover Cluster allows an unauthorized attacker to deny service over a network...
CVE-2026-88099
An uncaught exception in the Windows Failover Cluster allows an unauthorized attacker to perform a denial of service (DoS) over a network. The vulnerability is associated with CWE-248 . While the specific software versions and root cause files are not detailed in the provided documents, an offici...
CVE-2026-88098
A vulnerability exists in the Windows Security Support Provider Interface due to an untrusted pointer dereference . This flaw allows an authorized attacker to perform a local elevation of privilege . The CVSS v3.1 score is 7.0 (High) , indicating high impact on confidentiality, integrity, and ava...
CVE-2026-87697
Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network...
EUVD-2026-99639
Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally...
EUVD-2026-99647
Double free in Windows Hyper-V allows an authorized attacker to elevate privileges locally...
EUVD-2026-99648
Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally...