CVE-2026-96325

The Windows SMB Server is affected by a vulnerability caused by a missing reference to an active allocated resource (CWE-771). This flaw allows an unauthorized attacker to perform a denial of service (DoS) attack over the network. The vulnerability has a CVSS 3.1 base score of 7.5 and is categori...

CVE-2026-96852

A Use after free vulnerability exists in Windows TCP/IP that allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-416 . While the CVSS 3.1 score indicates a High severity (7.0), specific technical details regarding the vulnerable component ...

CVE-2026-96847

A vulnerability in WebDAV involves an untrusted pointer dereference that allows an authorized attacker to perform a local privilege elevation . The issue is associated with CWE-822 and has a CVSS 3.1 base score of 7.8 (High) . No specific affected versions, root causes, or exploit links are provi...

CVE-2026-96231

A vulnerability exists in .NET due to improper link resolution before file access (link following). This flaw allows an authorized attacker to elevate privileges locally . The impact is categorized as Access to elevated privileges with a CVSS score of 7.8 . No specific exploit details or remediat...

CVE-2026-96235

A vulnerability in .NET involves an out-of-bounds write that allows an unauthorized attacker to execute arbitrary code over a network. This issue is categorized under CWE-787 and has a CVSS 3.1 score of 8.8 (High) . Exploitation details are not provided in the documents, but the impact includes h...

CVE-2026-96250

A Use after free vulnerability exists in the Windows USB Print Driver , where an authorized attacker can achieve local privilege elevation . The vulnerability is associated with CWE-416 . While the documents confirm the impact and the affected component, no specific exploit details or available l...

CVE-2026-96188

A vulnerability in Microsoft PowerToys allows an authorized attacker to achieve local privilege elevation through external control of system or configuration settings (CWE-15). The vulnerability has a High base severity score of 7.3, requiring local access and user interaction to exploit. No spec...

CVE-2026-96186

The Microsoft Windows Media Foundation component is vulnerable to a deserialization of untrusted data flaw (CWE-502). This vulnerability allows an authorized attacker to achieve local privilege elevation . No specific patch versions or exploit links are provided in the documents.

CVE-2026-88123

A DNS Server contains an out-of-bounds read vulnerability (CWE-125) that allows an authorized attacker to perform a denial of service over a network. The vulnerability has a Medium base severity score of 6.5. While the documents confirm the impact and root cause, no specific exploit code or in-th...

CVE-2026-69919

An out-of-bounds read vulnerability exists in Windows Cryptographic Services . This flaw allows an authorized attacker to perform a local attack to disclose information . The vulnerability is associated with CWE-125 . No specific exploit details or remediation instructions are provided in the doc...

CVE-2026-87695

A vulnerability in Microsoft Exchange Server involves the inclusion of functionality from an untrusted control sphere, which allows an authorized attacker to achieve local privilege escalation . The vulnerability has a base score of 7.8 (High) . Microsoft has released updates to address this issu...

CVE-2026-83746

An Absolute path traversal vulnerability exists in Skype for Business and Microsoft Lync . This flaw allows an authorized attacker to achieve privilege escalation over a network. The vulnerability is classified with a CVSS 3.1 score of 8.1 (High). Microsoft has released updates to address this is...

CVE-2026-70184

The Windows Backup Engine is vulnerable to an Improper Resolution of Path Equivalence (CWE-41) vulnerability. This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability has a HIGH base severity score of 7.8. While the impact involves high confidentiality, int...

CVE-2026-70229

A vulnerability in Active Directory Domain Services involves incorrect authorization , which allows an unauthorized attacker to perform remote code execution over a network. The vulnerability is assigned CWE-863 and has a High base severity score of 8.1. No specific version numbers, root cause te...

CVE-2026-70054

A heap-based buffer overflow exists in Windows NetBIOS that allows an authorized attacker to achieve local privilege escalation . The vulnerability results in high impacts on confidentiality, integrity, and availability. An official fix is available, and no specific exploit code or in-the-wild ex...

CVE-2026-69915

A Use after free vulnerability in Windows NTFS allows an authorized attacker to achieve local privilege elevation . The vulnerability is categorized under CWE-416 and carries a High severity base score of 7.0. Technical details regarding specific impacted components or files are not provided in t...

CVE-2026-88191

The Microsoft Windows Search Component is vulnerable to an improper link resolution before file access (link following) flaw. This vulnerability allows an authorized attacker to achieve local privilege escalation . While the specific root cause details are limited to the link-following mechanism,...

CVE-2026-88179

An out-of-bounds read vulnerability exists in the Windows DWM Core Library . This flaw allows an authorized attacker to perform a local elevation of privilege . The vulnerability is associated with CWE-125 . No specific exploit details or in-the-wild exploitation information are provided in the d...

CVE-2026-88180

An out-of-bounds read vulnerability exists in the Windows DWM Core Library . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-125 and has a CVSS 3.1 base score of 7.8 (High). Remediation is available via an official fix from M...

CVE-2026-88189

An out-of-bounds read vulnerability exists in the Windows DWM Core Library . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is assigned a High severity base score of 7.8. No specific exploit details or remediation steps are provided in the docume...