CVE-2026-70198

A Use after free vulnerability exists in Windows Push Notifications , which could allow an authorized attacker to elevate privileges locally . The impact includes high levels of confidentiality, integrity, and availability. While the vulnerability is confirmed, specific exploit details are not pr...

CVE-2026-70115

A Use after free vulnerability exists in the Microsoft Windows Search Component . This flaw allows an authorized attacker to perform a local privilege escalation . No specific exploit details or patch versions are provided in the documents.

CVE-2026-70118

A Use after free vulnerability exists in the Windows Audio Service . This flaw allows an authorized attacker to achieve local privilege escalation . While the specific technical root cause is not detailed in the provided documents, the vulnerability is confirmed by Microsoft and carries a CVSS 3....

CVE-2026-70140

A Use after free vulnerability exists in the Windows Audio Service , which could allow an authorized attacker to achieve local privilege escalation . The vulnerability's base score is 7.0, categorized as HIGH severity, with impacts on confidentiality, integrity, and availability. Technical detail...

CVE-2026-70136

A Use after free vulnerability exists in the Microsoft Windows Search Component . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability's CVSS 3.1 score is 7.0 (High) , with an attack complexity rated as high and requiring low privileges for exploitatio...

CVE-2026-70127

A Use after free vulnerability exists in the Windows Domain Name Service (DNS Server) . This flaw allows an unauthorized attacker to achieve Remote Code Execution (RCE) over a network. The vulnerability is rated as HIGH severity (CVSS 3.1 score of 8.1) and affects confidentiality, integrity, and ...

CVE-2026-70062

A double free vulnerability exists in Windows Libarchive , which could allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability is characterized by a high base score of 8.1 with a network attack vector and high complexity. No specific exploit details or re...

CVE-2026-70076

A Use after free vulnerability exists in the Windows Win32 Kernel Subsystem . This flaw allows an authorized attacker to achieve local privilege escalation . While the specific component or file causing the issue is not detailed, the impact is significant for local security boundaries. Remediatio...

CVE-2026-70077

A Use after free vulnerability exists in the Windows Kernel , which allows an authorized attacker to perform a local information disclosure . The vulnerability is assigned a CVSS v3.1 base score of 4.7 (Medium) , with an attack vector of Local and high complexity. No specific details regarding af...

CVE-2026-70025

A Use after free vulnerability in Windows Netlogon allows an authorized attacker to perform a denial of service over a network. The vulnerability is confirmed with a CVSS 3.1 base score of 5.3 (Medium severity). While the attack vector is network-based, it requires low privileges and has high att...

CVE-2026-70015

A Use after free vulnerability exists in the Windows Local Security Authority Subsystem Service (LSASS) . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-122 (Heap-based Buffer Overflow). Official remediation is available vi...

CVE-2026-70021

A use after free vulnerability in Windows Direct Composition allows an authorized attacker to achieve local privilege escalation . While the specific component or file is not detailed, the impact is a high-severity elevation of privileges. Remediation is available via an official fix provided by ...

CVE-2026-70056

A Use after free vulnerability exists in the Windows Update Service . This flaw allows an authorized attacker to achieve local privilege escalation . The CVSS 3.1 score is 7.0 (High) , indicating significant impact on confidentiality, integrity, and availability. No specific exploit details or re...

CVE-2026-70026

A Use after free vulnerability exists in Windows Secure Kernel Mode , which could allow an authorized attacker to achieve local privilege escalation . Technical details regarding the specific component or root cause are not provided in the documents. No exploits or in-the-wild exploitation inform...

CVE-2026-70014

A Use after free vulnerability in Windows Cryptographic Services allows an authorized attacker to execute code over a network. The vulnerability results in Remote Code Execution (RCE) and is characterized by a high base severity score. Specific details regarding the impacted component or file are...

CVE-2026-69976

A Use after free vulnerability in the Remote Desktop Client allows an unauthorized attacker to execute code over a network. The vulnerability results in a high impact on confidentiality, integrity, and availability. No specific technical details regarding the root cause component or exploit links...

CVE-2026-69964

A Use after free vulnerability exists in the Microsoft Streaming Service (specifically identified as the Kernel Streaming Service Driver ). This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-416 . While the CVSS v3.1 score indic...

CVE-2026-69766

A Use after free vulnerability exists in Windows Storage , which allows an authorized attacker to achieve local privilege escalation . The issue is categorized under CWE-416 and CWE-362 (Race Condition). No specific software versions, file paths, or remediation instructions are provided in the do...

CVE-2026-69763

A Use after free vulnerability in Windows Storage allows an authorized attacker to achieve local privilege escalation . The vulnerability is categorized under CWE-416 (Use After Free) and CWE-366 (Race Condition). Exploitation details and specific affected versions are not provided in the documen...

CVE-2026-69935

A Use after free vulnerability exists in Windows Storage , which could allow an authorized attacker to elevate privileges locally . The vulnerability is associated with CWE-416 and CWE-362 (Race Condition). No specific exploit details or patch versions are provided in the documents. Information r...