CVE-2026-97798

The Windows Error Reporting service is vulnerable to an argument injection vulnerability (CWE-88) caused by improper neutralization of argument delimiters in a command. An authorized attacker can leverage this flaw to achieve local privilege escalation . The official fix is available via the prov...

CVE-2026-70162

A denial of service vulnerability exists in the Microsoft Common Object Runtime Library due to the improper handling of web requests. A remote unauthenticated attacker can exploit this by issuing specially crafted requests to a .NET web application , potentially causing a denial of service. The o...

CVE-2026-103578

A vulnerability in the Windows Kernel involves an untrusted pointer dereference (CWE-822). This flaw allows an unauthorized attacker to achieve privilege elevation via a physical attack . No specific component or file is identified, and no exploit details or specific remediation versions are prov...

CVE-2026-105006

A use after free vulnerability exists in the HID class driver . This flaw allows an unauthorized attacker to perform a physical attack to achieve privilege elevation . The vulnerability is associated with CWE-416 . No specific affected versions or exploit links are provided in the documentation; ...

CVE-2026-103565

A Use after free vulnerability in the Windows Broadcast DVR User Service allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-416 . No specific exploit links or detailed remediation instructions are provided in the documents, though an offi...

CVE-2026-103553

An out-of-bounds read vulnerability exists in the Windows Partition Management Driver . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-125 . While no specific exploit links or proof-of-concept code are provided in the docume...

CVE-2026-103560

The DNS Server is subject to an improper authorization vulnerability (CWE-862) that allows an authorized attacker to perform local tampering . The vulnerability results in a high integrity impact and is rated as MEDIUM severity with a CVSS3.1 score of 5.5. No specific exploit information or remed...

CVE-2026-102221

A security feature bypass vulnerability exists in Windows Secure Boot (CVE-2026-102221), which allows an authorized attacker to bypass a security feature locally . The vulnerability is associated with CWE-299 (Improper Check for Certificate Revocation). The impact involves a high integrity impact...

CVE-2026-102207

A race condition vulnerability exists in the Windows Kernel due to concurrent execution using a shared resource with improper synchronization. This flaw allows an authorized attacker to achieve local privilege escalation . No specific exploit details or version-specific remediation steps are prov...

CVE-2026-102208

A Use after free vulnerability exists in the Windows Win32 Kernel Subsystem . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is assigned a CVSS 3.1 score of 7.0 (High) , with high impact on confidentiality, integrity, and availability. No specifi...

CVE-2026-102220

A use after free vulnerability in the Windows VHD miniport driver allows an authorized attacker to achieve local privilege elevation . While the technical details of the root cause are limited to the vulnerability type, the impact includes high confidentiality, integrity, and availability consequ...

CVE-2026-102214

A Use after free vulnerability in Windows Hyper-V allows an authorized attacker to achieve local code execution . The vulnerability is categorized under CWE-416 and has a CVSS 3.1 base score of 8.8 (High) . The metrics indicate that the attack is local, requires low privileges, and has low comple...

CVE-2026-102203

A type confusion vulnerability in the RPC Runtime allows an unauthorized attacker to execute code over a network. This issue involves the access of resources using incompatible types, which can lead to remote code execution. While the vulnerability is confirmed with a high base score, specific de...

CVE-2026-102206

A heap-based buffer overflow exists in the Windows Portable Device MTP Driver . This vulnerability allows an unauthorized attacker to achieve privilege escalation via a physical attack . The CVSS 3.1 score is 6.8 (Medium) , with a physical attack vector and no user interaction required. No specif...

CVE-2026-102202

A vulnerability exists in the Windows Container Isolation FS Filter Driver (unionfs.sys) due to improper access control . This flaw allows an authorized attacker to perform a local privilege elevation . The vulnerability is associated with CWE-59 (Improper Link Resolution Before File Access). No ...

CVE-2026-70212

The Windows Security Center is affected by a vulnerability involving the improper restriction of communication channels to intended endpoints. This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is categorized under CWE-923 . While the impact is high ...

CVE-2026-88226

An out-of-bounds read vulnerability exists in the Windows Storage Port Driver . This flaw allows an unauthorized attacker to disclose information, but it requires a physical attack to exploit. The vulnerability is associated with CWE-125 . No specific exploit details or in-the-wild exploitation i...

CVE-2026-102186

The Windows Network File System is susceptible to an untrusted pointer dereference vulnerability (CWE-822). This flaw allows an authorized attacker to perform a local information disclosure . The vulnerability has a CVSS 3.1 base score of 4.7 (Medium) , characterized by high attack complexity and...

CVE-2026-102188

The Windows Storage Port Driver is vulnerable to an untrusted pointer dereference (CWE-822). This flaw allows an unauthorized attacker to achieve privilege elevation through a physical attack . While the CVSS v3.1 score indicates a base severity of Medium (6.8) , the impact includes high confiden...

CVE-2026-102187

A vulnerability exists in the Windows Kernel due to the use of uninitialized resource (CWE-908). This flaw allows an authorized attacker to perform a local information disclosure . The CVSS 3.1 score is 5.5 (Medium) , with a high confidentiality impact. An official fix is available as indicated b...