CVE-2026-62705 Microsoft Brokering File System Elevation of Privilege Vulnerability

...

CVE-2026-62699

The CVE-2026-62699 entry concerns the Windows Universal Disk Format File System Driver (UDFS). It describes a heap-based buffer overflow in UDFS that permits code execution by an unauthenticated attacker with physical access to the system. Affected component: UDFS in Windows. Root cause: heap-bas...

CVE-2026-62690 Windows Push Notifications Elevation of Privilege Vulnerability

...

EUVD-2026-56339

Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-61932 Windows DWM Core Library Elevation of Privilege Vulnerability

...

EUVD-2026-56336

Heap-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally...

EUVD-2026-56335

Integer overflow or wraparound in Windows HTTP.sys allows an authorized attacker to elevate privileges locally...

EUVD-2026-56334

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally...

EUVD-2026-56328

Double free in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally...

EUVD-2026-56325

Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally...

CVE-2026-61353

Heap-based buffer overflow in Windows Telephony Service allows an authorized attacker to elevate privileges locally...

CVE-2026-59135 Microsoft Windows Search Component Information Disclosure Vulnerability

...

EUVD-2026-56308

Integer overflow or wraparound in Windows Installer allows an authorized attacker to elevate privileges locally...

EUVD-2026-56288

Untrusted search path in Windows Narrator Braille allows an authorized attacker to elevate privileges locally...

EUVD-2026-56287

Heap-based buffer overflow in Windows LUAFV allows an authorized attacker to elevate privileges locally...

CVE-2025-61970

Weak permissions in the Vitis™ Unified installation path on local Windows machines could allow a low-privileged user to create arbitrary code, potentially resulting in binary hijacking...

CVE-2026-48442 CAI Content Credentials | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)

CAI Content Credentials is affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could result in a Arbitrary file system read. An attacker could leverage this vulnerability to gain unauthorized read access to files or directories outside th...

CVE-2026-48435 CAI Content Credentials | Integer Underflow (Wrap or Wraparound) (CWE-191)

CAI Content Credentials is affected by an Integer Underflow Wrap or Wraparound vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not...

CVE-2026-71389 CAI Content Credentials | Integer Underflow (Wrap or Wraparound) (CWE-191)

CAI Content Credentials is affected by an Integer Underflow Wrap or Wraparound vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not...

CVE-2026-68202

A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture sequencer component. An unprivileged local user with access to the sound device can exploit a timing window during the cleanup of a queue timer. This allows the user to re-open a timer that has already been closed,...