CVE-2026-83518

A heap-based buffer overflow exists in the RPC Runtime , which allows an authorized attacker to perform a local privilege escalation . The vulnerability is associated with a HIGH severity rating (CVSS 3.1 score of 7.8). No specific exploit code or in-the-wild exploitation details are provided in ...

CVE-2026-83499

The Windows Server Update Service is impacted by an insufficient granularity of access control vulnerability (CWE-1220). This flaw allows an authorized attacker to achieve local privilege escalation . While the technical root cause is not further detailed in the provided documents, the vulnerabil...

EUVD-2026-99305

Improper access control in Windows Geotag Broker allows an authorized attacker to elevate privileges locally...

CVE-2026-81969

The Windows Server Update Service is affected by a vulnerability involving insufficient granularity of access control . This flaw allows an authorized attacker to perform a local privilege escalation . The vulnerability is characterized by a HIGH base severity score of 7.8 and is associated with ...

CVE-2026-72969

A Use after free vulnerability exists in the Windows Program Compatibility Assistant Service . This flaw allows an authorized attacker to achieve local privilege elevation . While the vulnerability is confirmed, specific technical details regarding the root cause component or specific file are no...

EUVD-2026-99294

Url redirection to untrusted site 'open redirect' in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack...

CVE-2026-83500

A URL redirection to an untrusted site (open redirect) vulnerability exists in Windows BitLocker . This flaw allows an unauthorized attacker to perform a physical attack to bypass a security feature. No specific exploit code or in-the-wild exploitation details are provided in the documents. Remed...

EUVD-2026-99289

Improper neutralization of special elements used in a command 'command injection' in Windows Update allows an authorized attacker to elevate privileges locally...

CVE-2026-69650

The Windows Key Distribution Center is vulnerable to an elevation of privilege flaw due to the improper verification of cryptographic signatures . This vulnerability allows an authorized attacker to achieve local privilege escalation. The CVSS 3.1 score is 7.8 (HIGH) , with a LOCAL attack vector ...

CVE-2026-81964

The Windows Update Orchestrator Service is affected by a security feature bypass vulnerability. This issue is caused by the use of hard-coded credentials , which allows an authorized attacker to perform the bypass locally . The vulnerability is associated with CWE-798 . While the impact on integr...

CVE-2026-69718

A command injection vulnerability exists in Windows Update due to the improper neutralization of special elements used in a command. This flaw allows an authorized attacker to achieve local privilege escalation . No specific exploit information or code is provided in the documents. Remediation in...

CVE-2026-69673

A vulnerability exists in Windows Update due to improper link resolution before file access (link following). This flaw allows an authorized attacker to perform a local elevation of privilege attack. The vulnerability is associated with CWE-59 . No specific exploit details or links are provided i...

EUVD-2026-99288

Improper link resolution before file access 'link following' in Windows Update allows an authorized attacker to elevate privileges locally...

EUVD-2026-99293

Time-of-check time-of-use toctou race condition in Windows SmartScreen allows an authorized attacker to disclose information locally...

CVE-2026-69633

A heap-based buffer overflow vulnerability exists in Windows Update . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is categorized under CWE-122 . Remediation involves applying the official fix provided by Microsoft. No specific exploit details ...

EUVD-2026-99290

Untrusted search path in Windows Update allows an authorized attacker to elevate privileges locally...

EUVD-2026-99292

Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally...

CVE-2026-72934

A Use after free vulnerability exists in the Windows Program Compatibility Assistant Service . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is confirmed with a HIGH base severity score of 7.0. No specific technical root cause details or remedia...

EUVD-2026-99274

Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network...

CVE-2026-70580

A missing authentication vulnerability exists in a critical function within Windows Credential Guard . This flaw allows an authorized attacker to perform spoofing locally . The vulnerability has a HIGH base severity score of 8.8 and is categorized under CWE-306 . Official remediation is available...