EUVD-2026-99152

Missing authorization in DNS Server allows an authorized attacker to perform tampering locally...

CVE-2026-70025

A Use after free vulnerability in Windows Netlogon allows an authorized attacker to perform a denial of service over a network. The vulnerability is confirmed with a CVSS 3.1 base score of 5.3 (Medium severity). While the attack vector is network-based, it requires low privileges and has high att...

EUVD-2026-99134

Access of resource using incompatible type 'type confusion' in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally...

EUVD-2026-99140

Use after free in Windows Update Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-99133

Use after free in Windows Local Security Authority Subsystem Service LSASS allows an authorized attacker to elevate privileges locally...

EUVD-2026-99121

Use after free in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-99129

Null pointer dereference in Windows VMSwitch allows an authorized attacker to deny service locally...

EUVD-2026-99120

Integer overflow or wraparound in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-99125

Incorrect authorization in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally...

EUVD-2026-99131

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally...

EUVD-2026-99127

Out-of-bounds read in Desktop Window Manager allows an authorized attacker to disclose information locally...

CVE-2026-69979

The Windows AppX Deployment Service is affected by a security feature bypass vulnerability (CVE-2026-69979 ) caused by improper protection of an alternate path . An authorized attacker can exploit this flaw locally to evade security measures. The vulnerability is assigned a CVSS 3.1 score of 5.5 ...

CVE-2026-69971

This vulnerability exists in Windows Kernel-Mode Drivers due to incorrect authorization (CWE-863). It allows an authorized attacker to perform a local information disclosure . The impact is categorized as high for confidentiality. An official fix is available, as indicated by the remediation leve...

CVE-2026-69974

An out-of-bounds read vulnerability exists in the Desktop Window Manager , which allows an authorized attacker to disclose information locally . The vulnerability is classified as a CWE-125 issue. No specific exploit details or proof-of-concept code are provided in the documents, and remediation ...

EUVD-2026-99113

Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally...

EUVD-2026-99116

Heap-based buffer overflow in Windows Overlay Filter allows an unauthorized attacker to execute code with a physical attack...

CVE-2026-69958

A heap-based buffer overflow exists in the Windows Overlay Filter component. This vulnerability allows an unauthorized attacker to achieve Remote Code Execution (RCE) by performing a physical attack . Exploitation details or specific evidence of in-the-wild activity are not provided in the docume...

CVE-2026-69945

The Windows AppX Deployment Extensions component is vulnerable to a local elevation of privilege due to missing authorization . An authorized attacker can exploit this flaw to obtain elevated privileges on the system. The vulnerability has a CVSS 3.1 score of 8.8 (HIGH) and is officially document...

EUVD-2026-99109

Missing authorization in Windows AppX Deployment Extensions allows an authorized attacker to elevate privileges locally...

CVE-2026-69967

An out-of-bounds read vulnerability exists in the Windows Overlay Filter . This flaw allows an authorized attacker to perform a local information disclosure . Specific exploitation details, including active exploits or proof-of-concept code, are not provided in the documents. Remediation is avail...