EUVD-2026-2136

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows SMB Server allows an authorized attacker to elevate privileges over a network...

EUVD-2026-2133

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Management Services allows an authorized attacker to elevate privileges locally...

EUVD-2026-2149

Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally...

EUVD-2026-2177

Out-of-bounds read in Capability Access Management Service camsvc allows an unauthorized attacker to disclose information locally...

EUVD-2026-2172

Use after free in Windows Clipboard Server allows an unauthorized attacker to elevate privileges locally...

EUVD-2026-2181

Use after free in Windows DWM allows an authorized attacker to elevate privileges locally...

EUVD-2026-2157

Out-of-bounds read in Capability Access Management Service camsvc allows an authorized attacker to disclose information locally...

EUVD-2026-2170

Concurrent execution using shared resource with improper synchronization 'race condition' in Graphics Kernel allows an authorized attacker to elevate privileges locally...

EUVD-2026-2153

Use of a broken or risky cryptographic algorithm in Windows Kerberos allows an authorized attacker to disclose information locally...

EUVD-2026-2193

Out-of-bounds read in Windows TPM allows an authorized attacker to disclose information locally...

EUVD-2026-2202

Out-of-bounds read in Windows Internet Connection Sharing ICS allows an unauthorized attacker to disclose information with a physical attack...

EUVD-2026-2184

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally...

EUVD-2026-2209

Exposure of sensitive information to an unauthorized actor in Windows Remote Procedure Call allows an unauthorized attacker to disclose information locally...

EUVD-2026-2190

Insertion of sensitive information into log file in Windows Kernel allows an unauthorized attacker to disclose information locally...

EUVD-2026-2200

Time-of-check time-of-use toctou race condition in Windows Installer allows an authorized attacker to elevate privileges locally...

EUVD-2026-2201

Concurrent execution using shared resource with improper synchronization 'race condition' in Capability Access Management Service camsvc allows an authorized attacker to elevate privileges locally...

EUVD-2026-2073

Exposure of sensitive information to an unauthorized actor in Desktop Windows Manager allows an authorized attacker to disclose information locally...

EUVD-2026-2195

Software installed and run as a non-privileged user may conduct improper GPU system calls to cause mismanagement of reference counting to cause a potential use after free. Improper reference counting on an internal resource caused scenario where potential for use after free was present...

EUVD-2026-2076

An improper neutralization of special elements used in an os command 'os command injection' vulnerability in Fortinet FortiSIEM 7.4.0, FortiSIEM 7.3.0 through 7.3.4, FortiSIEM 7.1.0 through 7.1.8, FortiSIEM 7.0.0 through 7.0.4, FortiSIEM 6.7.0 through 6.7.10 may allow an attacker to execute...

EUVD-2026-2228

Intermediate register values of secure workloads can be exfiltrated in workloads scheduled from applications running in the non-secure environment of a platform...