CVE-2026-70177

A numeric truncation error within the Microsoft Windows Search Component allows an authorized attacker to achieve local privilege escalation . The vulnerability is caused by improper input validation (CWE-20) and numeric truncation (CWE-197). While the specific affected versions are not detailed ...

EUVD-2026-99188

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

EUVD-2026-99184

Untrusted search path in Windows Update Service allows an authorized attacker to elevate privileges locally...

CVE-2026-70140

A Use after free vulnerability exists in the Windows Audio Service , which could allow an authorized attacker to achieve local privilege escalation . The vulnerability's base score is 7.0, categorized as HIGH severity, with impacts on confidentiality, integrity, and availability. Technical detail...

EUVD-2026-99180

Missing release of memory after effective lifetime in Windows DNS allows an unauthorized attacker to deny service over a network...

CVE-2026-70141

An out-of-bounds read vulnerability exists in the Microsoft Windows Search Component . This flaw allows an authorized attacker to perform a local information disclosure by reading data outside the intended memory boundaries. No specific exploit details or in-the-wild exploitation reports are prov...

CVE-2026-70133

The Windows SMB Server is susceptible to a Denial of Service vulnerability caused by the allocation of resources without limits or throttling (CWE-770). An unauthorized attacker can exploit this flaw over the network to disrupt service availability. While specific exploit details or in-the-wild o...

EUVD-2026-99182

Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally...

CVE-2026-70127

A Use after free vulnerability exists in the Windows Domain Name Service (DNS Server) . This flaw allows an unauthorized attacker to achieve Remote Code Execution (RCE) over a network. The vulnerability is rated as HIGH severity (CVSS 3.1 score of 8.1) and affects confidentiality, integrity, and ...

CVE-2026-70139

A heap-based buffer overflow exists in the Windows Update Service . This vulnerability allows an authorized attacker to achieve local privilege escalation . While the specific root cause component is not detailed beyond the service name, the impact includes high levels of confidentiality, integri...

EUVD-2026-99151

Uncaught exception in Windows DNS allows an unauthorized attacker to deny service over a network...

EUVD-2026-99156

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to perform spoofing locally...

CVE-2026-70082

An uncaught exception in Windows DNS allows an unauthorized attacker to perform a Denial of Service (DoS) over the network. The vulnerability is categorized under CWE-248 and has a CVSS 3.1 base score of 7.5 . While the documents confirm the impact is a high availability risk, specific details re...

CVE-2026-70097

A race condition exists in the Windows Virtualization-Based Security (VBS) Enclave due to concurrent execution using a shared resource with improper synchronization. This vulnerability allows an authorized attacker to perform spoofing locally . The impact is categorized as having high integrity c...

CVE-2026-70087

A vulnerability in the DNS Server stems from incorrect authorization , which allows an authorized attacker to locally bypass a security feature . The impact is categorized as a high level of integrity loss (CVSS 3.1 score of 5.5). While technical details regarding the specific component or root c...

EUVD-2026-99150

Improper enforcement of behavioral workflow in Windows DNS allows an unauthorized attacker to deny service over a network...

CVE-2026-70090

A vulnerability in Windows Netlogon involves the use of uninitialized resource (CWE-908). This flaw allows an authorized attacker to perform a local information disclosure . The CVSS 3.1 score is 5.5 (Medium) , indicating a local attack vector with low complexity and low privileges required. No s...

EUVD-2026-99149

Use after free in Windows Kernel allows an authorized attacker to disclose information locally...

EUVD-2026-99145

Out-of-bounds read in Windows Kernel allows an authorized attacker to disclose information locally...

CVE-2026-70083

A vulnerability in the DNS Server results from incorrect authorization , which allows an authorized attacker to perform tampering locally . This flaw impacts the integrity of the system. No specific software versions, root causes, or remediation steps are provided in the documents. Exploitation d...