CVE-2026-70173

Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally...

CVE-2026-70164

Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally...

CVE-2026-70161

Improper limitation of a pathname to a restricted directory 'path traversal' in .NET allows an authorized attacker to elevate privileges locally...

CVE-2026-70149

Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver csc.sys allows an authorized attacker to disclose information locally...

CVE-2026-70155

Missing release of memory after effective lifetime in Windows DNS allows an unauthorized attacker to deny service over a network...

CVE-2026-70142

Untrusted search path in Windows Update Service allows an authorized attacker to elevate privileges locally...

CVE-2026-70148

Improper authorization in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally...

CVE-2026-70138

Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally...

CVE-2026-70134

Use after free in Windows Event Tracing allows an authorized attacker to elevate privileges locally...

CVE-2026-70128

Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally...

CVE-2026-70119

Out-of-bounds read in Windows DNS allows an authorized attacker to execute code over a network...

CVE-2026-70123

Numeric truncation error in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...

CVE-2026-70106

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-70085

Missing authorization in DNS Server allows an authorized attacker to perform tampering locally...

CVE-2026-70087

Incorrect authorization in DNS Server allows an authorized attacker to bypass a security feature locally...

CVE-2026-70090

Use of uninitialized resource in Windows Netlogon allows an authorized attacker to disclose information locally...

CVE-2026-70077

Use after free in Windows Kernel allows an authorized attacker to disclose information locally...

CVE-2026-70084

Improper access control in Windows Projected File System allows an authorized attacker to disclose information locally...

CVE-2026-70079

Improper enforcement of behavioral workflow in Windows DNS allows an unauthorized attacker to deny service over a network...

CVE-2026-70074

Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information locally...