CVE-2026-96851

Buffer over-read in Windows Management Instrumentation allows an authorized attacker to disclose information locally...

CVE-2026-96853

Time-of-check time-of-use toctou race condition in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally...

CVE-2026-96850

Use of uninitialized resource in Windows Modern Device Management MDM allows an authorized attacker to disclose information locally...

CVE-2026-96852

Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally...

CVE-2026-96325

Missing reference to active allocated resource in Windows SMB Server allows an unauthorized attacker to deny service over a network...

CVE-2026-96843

Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally...

CVE-2026-96323

Use after free in Windows Update allows an authorized attacker to elevate privileges locally...

CVE-2026-96313

Missing authentication for critical function in Windows Push Notifications allows an authorized attacker to elevate privileges locally...

CVE-2026-96302

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-96307

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-96300

Uncontrolled resource consumption in RPC Endpoint Mapper Service allows an unauthorized attacker to deny service over a network...

CVE-2026-96235

Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network...

CVE-2026-96224

Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network...

CVE-2026-96231

Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...

CVE-2026-96216

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-96183

Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to disclose information locally...

CVE-2026-96188

External control of system or configuration setting in Microsoft PowerToys allows an authorized attacker to elevate privileges locally...

CVE-2026-96186

Deserialization of untrusted data in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally...

CVE-2026-96206

Use of uninitialized resource in Windows Subsystem for Linux allows an authorized attacker to disclose information locally...

CVE-2026-96108

Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally...