EUVD-2026-100259

Missing authorization in DNS Server allows an authorized attacker to perform tampering locally...

EUVD-2026-100258

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-96931

A vulnerability exists in Windows NTFS involving an untrusted pointer dereference . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is assigned CWE-822 and has a CVSS 3.1 base score of 7.8 (High) . Official remediation is available via a patch fro...

CVE-2026-96926

A missing authorization vulnerability in the DNS Server allows an authorized attacker to perform tampering locally . The vulnerability is associated with CWE-862 . The CVSS 3.1 score is 5.5 (Medium) , with an attack vector of Local and a high impact on Integrity . Official remediation is availabl...

CVE-2026-96932

A race condition vulnerability exists in the Windows Embedded Mode Service due to improper synchronization during concurrent execution using a shared resource. This flaw allows an authorized attacker to perform a local privilege elevation . While the documents confirm the vulnerability type and i...

CVE-2026-69675

An out-of-bounds read vulnerability exists in the Windows Network File System . This flaw allows an authorized attacker to perform a local information disclosure, potentially exposing sensitive data on the system. The vulnerability is associated with CWE-125 . No specific exploit code or in-the-w...

EUVD-2026-100250

Integer underflow wrap or wraparound in Windows NTFS allows an authorized attacker to disclose information locally...

CVE-2026-96927

An out-of-bounds read vulnerability exists in the Windows NTFS file system. This flaw allows an authorized attacker to perform a local information disclosure , potentially accessing data they are not permitted to view. The vulnerability is categorized under CWE-125 and has a CVSS 3.1 base score o...

CVE-2026-96930

An out-of-bounds read vulnerability exists in the Windows Universal Disk Format File System Driver (UDFS) . This flaw allows an authorized attacker to perform a local information disclosure , potentially exposing sensitive data. No specific exploit details or patch versions are provided in the do...

CVE-2026-96925

An integer underflow (wrap or wraparound) vulnerability exists in Windows NTFS . This flaw allows an authorized attacker to perform a local information disclosure . The vulnerability is associated with CWE-191 . No specific exploit information or remediation details are provided in the documents.

CVE-2026-96909

A heap-based buffer overflow in Windows BitLocker allows an unauthorized attacker to achieve remote code execution over a network. This vulnerability is classified with a CRITICAL CVSS score of 9.80 . While specific technical details regarding the underlying component or file are not provided bey...

CVE-2026-96910

An untrusted pointer dereference vulnerability exists in the Microsoft Windows Search Component . This flaw allows an authorized attacker to perform a local information disclosure attack. The vulnerability is associated with CWE-822 . No specific software versions, root cause details, or exploit ...

CVE-2026-96916

A heap-based buffer overflow exists in the Windows NTFS file system. This vulnerability allows an authorized attacker to perform a local privilege escalation . The severity is rated as HIGH with a CVSS 3.1 score of 7.8. No specific exploitations are mentioned in the provided documents. Remediatio...

CVE-2026-96913

A heap-based buffer overflow exists in the Windows Kernel , which could allow an authorized attacker to achieve local privilege escalation . The vulnerability is assigned a CVSS 3.1 score of 8.8 (High) , indicating significant impact on confidentiality, integrity, and availability. No specific so...

CVE-2026-96918

An improper access control vulnerability exists in Windows NTFS , which allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-863 (Incorrect Authorization) and carries a HIGH base severity score of 7.8. Remediation involves an official fix ...

CVE-2026-96911

The Microsoft Windows Search Component is vulnerable to an improper link resolution before file access (link following) vulnerability. This flaw allows an authorized attacker to achieve local privilege escalation . The CVSS 3.1 score is 7.8 (High), with high impacts on confidentiality, integrity,...

CVE-2026-96912

A Use after free vulnerability in the Windows Client License Service allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-416 and has a CVSS 3.1 base score of 7.8 . While the documents confirm the impact of privilege elevation, no specific...

CVE-2026-96858

A missing authentication vulnerability in the Windows Security Account Manager allows an authorized attacker to perform tampering locally . The root cause is identified as CWE-306 . While no specific exploit code is provided, the vulnerability has an official fix available via Microsoft. Detailed...

CVE-2026-96325

The Windows SMB Server is affected by a vulnerability caused by a missing reference to an active allocated resource (CWE-771). This flaw allows an unauthorized attacker to perform a denial of service (DoS) attack over the network. The vulnerability has a CVSS 3.1 base score of 7.5 and is categori...

CVE-2026-96852

A Use after free vulnerability exists in Windows TCP/IP that allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-416 . While the CVSS 3.1 score indicates a High severity (7.0), specific technical details regarding the vulnerable component ...