CVE-2026-96118

A vulnerability in the Windows Graphics Kernel involving an out-of-bounds read (CWE-125) and integer overflow or wraparound (CWE-190) allows an authorized attacker to achieve local privilege escalation . The security impact is rated as High with an official fix available. No specific exploit code...

CVE-2026-97787

A race condition vulnerability exists in the Windows Container Isolation FS Filter Driver (unionfs.sys) due to concurrent execution using a shared resource with improper synchronization. This flaw allows an authorized attacker to achieve local privilege escalation . No specific exploit details or...

CVE-2026-97792

An improper access control vulnerability exists in the Windows Container Isolation FS Filter Driver (unionfs.sys) . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-732 (Incorrect Permission Assignment for Critical Resource) a...

CVE-2026-97793

A vulnerability in Windows Setup and Deployment arises from missing authentication for a critical function . This flaw allows an authorized attacker to perform a local privilege escalation . The vulnerability is associated with CWE-306 . While a CVSS v3.1 score of 7.0 is provided, specific detail...

CVE-2026-100200

A use after free vulnerability exists in the Windows Update Service , allowing an authorized attacker to achieve local privilege escalation . The vulnerability is categorized under CWE-416 and has a base severity score of 7.0 . While the specific root cause and affected versions are not detailed ...

CVE-2026-97762

An out-of-bounds write vulnerability exists in Microsoft Office Excel , which may allow an unauthorized attacker to execute arbitrary code over a network. The vulnerability has a CVSS 3.1 base score of 8.8 (High) and requires user interaction to exploit. Microsoft has released updates to address ...

EUVD-2026-100275

Null pointer dereference in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to execute code locally...

EUVD-2026-100271

Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver csc.sys allows an authorized attacker to disclose information locally...

CVE-2026-88094

The Azure Storage Library is affected by a vulnerability involving the improper neutralization of special elements in output used by a downstream component (injection). This flaw allows an authorized attacker to elevate privileges over a network. The vulnerability has been addressed by Microsoft;...

CVE-2026-96944

A vulnerability in Windows Storage allows an authorized attacker to disclose information locally due to the insertion of sensitive information into an externally-accessible file or directory. This issue is associated with CWE-538 . The vulnerability has a MEDIUM base severity (5.5) with a LOCAL a...

CVE-2026-96945

An uncaught exception in Windows Failover Cluster allows an unauthorized attacker to perform a denial of service over a network. The vulnerability is associated with CWE-248 . While specific affected versions and remediation steps are not detailed in the provided documents, the issue carries a Hi...

EUVD-2026-100259

Missing authorization in DNS Server allows an authorized attacker to perform tampering locally...

EUVD-2026-100258

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-96926

A missing authorization vulnerability in the DNS Server allows an authorized attacker to perform tampering locally . The vulnerability is associated with CWE-862 . The CVSS 3.1 score is 5.5 (Medium) , with an attack vector of Local and a high impact on Integrity . Official remediation is availabl...

CVE-2026-96932

A race condition vulnerability exists in the Windows Embedded Mode Service due to improper synchronization during concurrent execution using a shared resource. This flaw allows an authorized attacker to perform a local privilege elevation . While the documents confirm the vulnerability type and i...

CVE-2026-69675

An out-of-bounds read vulnerability exists in the Windows Network File System . This flaw allows an authorized attacker to perform a local information disclosure, potentially exposing sensitive data on the system. The vulnerability is associated with CWE-125 . No specific exploit code or in-the-w...

CVE-2026-96931

A vulnerability exists in Windows NTFS involving an untrusted pointer dereference . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is assigned CWE-822 and has a CVSS 3.1 base score of 7.8 (High) . Official remediation is available via a patch fro...

EUVD-2026-100250

Integer underflow wrap or wraparound in Windows NTFS allows an authorized attacker to disclose information locally...

CVE-2026-96925

An integer underflow (wrap or wraparound) vulnerability exists in Windows NTFS . This flaw allows an authorized attacker to perform a local information disclosure . The vulnerability is associated with CWE-191 . No specific exploit information or remediation details are provided in the documents.

CVE-2026-96930

An out-of-bounds read vulnerability exists in the Windows Universal Disk Format File System Driver (UDFS) . This flaw allows an authorized attacker to perform a local information disclosure , potentially exposing sensitive data. No specific exploit details or patch versions are provided in the do...