293251 matches found
CVE-2026-70288
A Time-of-check time-of-use (TOCTOU) race condition exists within the Windows Win32 Kernel Subsystem . This vulnerability allows an authorized attacker to perform a local information disclosure . No specific software versions, root cause files, or exploit details are provided in the documentation...
CVE-2026-70208
An out-of-bounds read vulnerability exists in Windows HTTP.sys . This flaw allows an authorized attacker to perform a local information disclosure. The vulnerability is rated as MEDIUM severity (CVSS 3.1 score of 5.5) with a focus on high confidentiality impact. Remediation involves an official f...
CVE-2026-70232
The Windows Kernel is affected by a vulnerability that allows for the exposure of sensitive system information to an unauthorized control sphere. An authorized attacker can exploit this flaw to disclose information locally . The vulnerability is associated with CWE-497 and carries a CVSS 3.1 base...
CVE-2026-70075
A Time-of-check time-of-use (TOCTOU) race condition exists in the Windows Virtualization-Based Security (VBS) Enclave . This vulnerability allows an authorized attacker to perform a local security feature bypass . The impact is characterized as a high integrity impact with a Medium base severity ...
CVE-2026-70199
The Windows Kernel is affected by an information disclosure vulnerability (CVE-2026-70199 ) where sensitive system information is exposed to an unauthorized control sphere. This flaw allows an authorized attacker to disclose information locally . The vulnerability is associated with CWE-497 . Whi...
CVE-2026-70230
A Use after free vulnerability exists in the Windows Audio Service . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is categorized as CWE-416 and has a CVSS 3.1 base score of 7.0 (High) . While the root cause is identified as a use after free, sp...
CVE-2026-70201
An out-of-bounds read vulnerability exists in the Windows DHCP Server . This flaw allows an authorized attacker to perform a local denial of service (DoS). The vulnerability is associated with CWE-125 (Out-of-bounds Read) and CWE-416 (Use After Free). Official remediation is available through a M...
CVE-2026-70074
A vulnerability in Windows DNS involves an out-of-bounds read (CWE-125) that allows an authorized attacker to disclose information locally. The impact is characterized as a local information disclosure with a Medium severity rating (CVSS 3.1 score of 5.5). An official fix is available, and no spe...
CVE-2026-70067
A use after free vulnerability exists in the Windows Win32 Kernel Subsystem . This flaw allows an authorized attacker to achieve local privilege elevation . While the vulnerability is confirmed, specific technical details regarding the affected component, file, or root cause are not provided in t...
CVE-2026-70051
A type confusion vulnerability in Windows SmartScreen allows an authorized attacker to achieve local privilege escalation . The root cause involves the access of resources using incompatible types, which can lead to high impact on confidentiality, integrity, and availability. The CVSS 3.1 score i...
CVE-2026-70066
A use after free vulnerability exists in the Windows DHCP Server . This flaw allows an authorized attacker to perform a local elevation of privilege . The vulnerability is classified with a CVSS 3.1 score of 7.0, indicating a high impact on confidentiality, integrity, and availability. No specifi...
CVE-2026-69999
An out-of-bounds read vulnerability exists in Windows Update (CWE-125). This flaw allows an authorized attacker to perform a local information disclosure , potentially exposing sensitive data. The vulnerability has a CVSS 3.1 base score of 5.5 (Medium) . No specific exploit details or evidence of...
CVE-2026-70055
A vulnerability in Windows Cryptographic Services allows an authorized attacker to perform a local information disclosure . The flaw results in the exposure of sensitive system information to an unauthorized control sphere. This vulnerability is associated with CWE-497 . While a specific root cau...
CVE-2026-70071
The DNS Server is affected by a vulnerability involving the improper verification of cryptographic signatures . This flaw allows an authorized attacker to perform tampering locally . The vulnerability is categorized under CWE-347 . While the documents confirm the root cause and impact, specific d...
CVE-2026-69856
A Use after free vulnerability exists in Windows Storage , which may allow an authorized attacker to elevate privileges locally . The vulnerability is associated with CWE-416 (Use After Free) and CWE-362 (Race Condition). No specific exploit information or in-the-wild exploitation details are pro...
CVE-2026-62687
The Windows Backup Engine is susceptible to an Improper Link Resolution Before File Access (link following) vulnerability. This issue allows an authorized attacker to perform a local information disclosure , potentially accessing sensitive data. No specific exploit details or affected versions ar...
CVE-2026-69880
A type confusion vulnerability exists in the Desktop Window Manager , where an authorized attacker can access resources using an incompatible type. This flaw allows for local privilege elevation . No specific exploit details or patch versions are provided in the documents.
CVE-2026-69931
A race condition vulnerability exists in Windows Storage due to concurrent execution using a shared resource with improper synchronization. This flaw allows an authorized attacker to achieve local privilege escalation . No specific affected versions, exploit details, or remediation instructions a...
