CVE-2026-88226

An out-of-bounds read vulnerability exists in the Windows Storage Port Driver . This flaw allows an unauthorized attacker to disclose information, but it requires a physical attack to exploit. The vulnerability is associated with CWE-125 . No specific exploit details or in-the-wild exploitation i...

CVE-2026-102186

The Windows Network File System is susceptible to an untrusted pointer dereference vulnerability (CWE-822). This flaw allows an authorized attacker to perform a local information disclosure . The vulnerability has a CVSS 3.1 base score of 4.7 (Medium) , characterized by high attack complexity and...

CVE-2026-102188

The Windows Storage Port Driver is vulnerable to an untrusted pointer dereference (CWE-822). This flaw allows an unauthorized attacker to achieve privilege elevation through a physical attack . While the CVSS v3.1 score indicates a base severity of Medium (6.8) , the impact includes high confiden...

CVE-2026-102187

A vulnerability exists in the Windows Kernel due to the use of uninitialized resource (CWE-908). This flaw allows an authorized attacker to perform a local information disclosure . The CVSS 3.1 score is 5.5 (Medium) , with a high confidentiality impact. An official fix is available as indicated b...

CVE-2026-70023

A use after free vulnerability in Windows Hyper-V allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-416 . While the specific component and root cause are not detailed in the provided documents, the impact includes high confidentiality, i...

CVE-2026-100217

A vulnerability exists in Windows Group Policy due to improper privilege management . This flaw allows an authorized attacker to perform a local privilege escalation . The issue is associated with CWE-862 (Missing Authorization) . While the documents do not provide specific technical details on t...

CVE-2026-100216

A stack-based buffer overflow exists in Windows Storage , which could allow an authorized attacker to achieve local privilege elevation . The vulnerability is characterized by a high level of attack complexity and impacts confidentiality, integrity, and availability. An official fix is available;...

EUVD-2026-100318

Improper neutralization of special elements used in an os command 'os command injection' in Azure CycleCloud allows an authorized attacker to execute code locally...

CVE-2026-100207

A vulnerability in Azure CycleCloud involving improper neutralization of special elements used in an OS command (OS command injection) allows an authorized attacker to execute code locally . This flaw is associated with CWE-78 and has a CVSS 3.1 base score of 7.3 . While the vulnerability was ide...

EUVD-2026-100326

Untrusted pointer dereference in SysInternals allows an authorized attacker to elevate privileges locally...

EUVD-2026-100317

Untrusted pointer dereference in SysInternals allows an authorized attacker to elevate privileges locally...

CVE-2026-100203

A heap-based buffer overflow exists in the Windows Update Service , which could allow an authorized attacker to achieve local privilege escalation . The vulnerability is classified as High severity with a CVSS 3.1 score of 7.0. While the root cause is identified as a heap overflow, specific file ...

EUVD-2026-100325

Improper control of generation of code 'code injection' in ASP.NET Core allows an unauthorized attacker to execute code over a network...

CVE-2026-96118

A vulnerability in the Windows Graphics Kernel involving an out-of-bounds read (CWE-125) and integer overflow or wraparound (CWE-190) allows an authorized attacker to achieve local privilege escalation . The security impact is rated as High with an official fix available. No specific exploit code...

CVE-2026-97793

A vulnerability in Windows Setup and Deployment arises from missing authentication for a critical function . This flaw allows an authorized attacker to perform a local privilege escalation . The vulnerability is associated with CWE-306 . While a CVSS v3.1 score of 7.0 is provided, specific detail...

EUVD-2026-100312

Missing authentication for critical function in Windows Setup and Deployment allows an authorized attacker to elevate privileges locally...

EUVD-2026-100309

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Container Isolation FS Filter Driver unionfs.sys allows an authorized attacker to elevate privileges locally...

EUVD-2026-100311

Improper access control in Windows Container Isolation FS Filter Driver unionfs.sys allows an authorized attacker to elevate privileges locally...

CVE-2026-97787

A race condition vulnerability exists in the Windows Container Isolation FS Filter Driver (unionfs.sys) due to concurrent execution using a shared resource with improper synchronization. This flaw allows an authorized attacker to achieve local privilege escalation . No specific exploit details or...

CVE-2026-97792

An improper access control vulnerability exists in the Windows Container Isolation FS Filter Driver (unionfs.sys) . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-732 (Incorrect Permission Assignment for Critical Resource) a...