CVE-2026-90834

The user-mode syscall verifiers for the 16-bit "wide data" UART API in drivers/serial/uarthandlers.c validated the wrong driver operation. zvrfyuartpolloutu16, zvrfyuarttxu16 and zvrfyuartrxenableu16 each ran KSYSCALLDRIVERUART against the 8-bit op pollout, tx, rxenable rather than the 16-bit op...

CVE-2026-90833

The simulated EEPROM driver validated access ranges in eepromrangeisvalid drivers/eeprom/eepromsimulator.c with a single test, offset + len size. Because offset is a signed offt and len an unsigned sizet of the same rank, the addition is evaluated in unsigned arithmetic: a negative offset combine...

EUVD-2026-122379

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Kernel allows an authorized attacker to elevate privileges locally...

EUVD-2026-122371

Buffer over-read in Windows Kernel allows an authorized attacker to disclose information locally...

EUVD-2026-122359

Untrusted pointer dereference in Windows Graphics Kernel allows an authorized attacker to disclose information locally...

EUVD-2026-122329

Use after free in Kernel Transaction Manager allows an authorized attacker to elevate privileges locally...

EUVD-2026-122095

Out-of-bounds read in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack...

EUVD-2026-121547

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...

EUVD-2026-121897

Improper access control in Windows Kernel allows an authorized attacker to bypass a security feature locally...

EUVD-2026-121893

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges with a physical attack...

EUVD-2026-121876

Missing authorization in Windows Kernel allows an authorized attacker to elevate privileges locally...

EUVD-2026-121879

Untrusted pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally...

EUVD-2026-121864

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...

EUVD-2026-121852

Exposure of sensitive information to an unauthorized actor in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally...

EUVD-2026-122058

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...

EUVD-2026-121725

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...

EUVD-2026-122048

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Kernel allows an authorized attacker to elevate privileges locally...

EUVD-2026-122041

An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory. To exploit this vulnerability, an authenticated attacker could run a specially crafted application. An attacker who successfully exploited this vulnerability could obtain information t...

EUVD-2026-122016

An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions. To exploit the vulnerability, a locally authenticated attacker could run a specially...

EUVD-2026-122010

An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions. To exploit the vulnerability, a locally authenticated attacker could run a specially...