CVE-2026-83508

Windows NTFS is affected by an out-of-bounds read vulnerability. This flaw allows an authorized attacker to achieve local privilege elevation . While the CVSS v3.1 score indicates a High severity (7.8), specific technical details regarding the affected component, root cause, or exploitability are...

CVE-2026-83507

The Windows Update Orchestrator Service is vulnerable to an improper link resolution before file access (link following) flaw. This vulnerability allows an authorized attacker to perform a local information disclosure . No specific exploit details or remediation steps are provided in the document...

CVE-2026-83509

An untrusted search path vulnerability in Windows Setup Files Cleanup allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-426 . While the root cause is identified as an untrusted search path, specific exploitation details are not provided ...

CVE-2026-83506

An untrusted search path vulnerability in Servicing Stack Updates allows an authorized attacker to perform a local privilege escalation . The vulnerability is associated with CWE-426 and has a HIGH base severity score of 7.8 . While the vulnerability is confirmed, specific details regarding affec...

CVE-2026-69596

A Use after free vulnerability exists in the Windows Program Compatibility Assistant Service . This flaw allows an authorized attacker to achieve local privilege escalation . No specific exploit details or remediation steps are provided in the documents beyond the official fix status.

CVE-2026-73027

The Windows Setup Files Cleanup component is vulnerable to an elevation of privilege vulnerability due to external control of system or configuration settings. This flaw allows an authorized attacker to perform a local privilege escalation. While the impact is categorized as High for confidential...

CVE-2026-78459

A heap-based buffer overflow vulnerability exists in Windows Internet Information Services . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability has a CVSS 3.1 score of 7.8 (High) . Official remediation is available via Microsoft's update guide.

CVE-2026-81971

A race condition vulnerability exists in Windows NTFS due to concurrent execution using a shared resource with improper synchronization. This flaw allows an authorized attacker to achieve local privilege elevation . No specific exploit details or patch versions are provided in the documents, but ...

CVE-2026-69471

A heap-based buffer overflow exists in the Windows Installer component. This vulnerability allows an authorized attacker to achieve local privilege escalation . The documentation identifies the root cause as a heap-based buffer overflow (CWE-122) and an out-of-bounds read (CWE-125). While the CVS...

CVE-2026-70295

A vulnerability in the Windows Win32 Kernel Subsystem allows an authorized attacker to perform an out-of-bounds read to disclose information locally. The vulnerability is categorized as an information disclosure issue. No specific exploit details or in-the-wild exploitation records are provided i...

CVE-2026-70292

An out-of-bounds read vulnerability exists in the Windows Win32 Kernel Subsystem . This flaw allows an authorized attacker to disclose information locally. The vulnerability is categorized under CWE-125 and carries a medium severity score of 5.5. No specific exploit details or remediation version...

CVE-2026-70293

A use of uninitialized resource vulnerability exists in the Windows Win32 Kernel Subsystem . This flaw allows an authorized attacker to perform a local information disclosure . No specific software versions or remediation steps are provided in the documents, though the CVE is confirmed by Microso...

CVE-2026-69733

Windows Update is affected by an untrusted search path vulnerability (CWE-426). This flaw allows an authorized attacker to achieve local privilege escalation . The base severity score is 7.8 (High) , indicating significant impacts on confidentiality, integrity, and availability. No specific explo...

CVE-2026-69783

A vulnerability in Windows Update allows an authorized attacker to achieve local privilege escalation . The root cause is identified as external control of file name or path (CWE-73). Impact includes potential high levels of confidentiality, integrity, and availability compromise. No specific ver...

CVE-2026-69736

A race condition exists in the Windows Credential Manager due to concurrent execution using a shared resource with improper synchronization. This vulnerability allows an authorized attacker to perform a local privilege escalation . No specific software versions or exploit links are provided in th...

CVE-2026-70209

A Use after free vulnerability exists in the Windows Win32 Kernel Subsystem . This flaw allows an authorized attacker to achieve local privilege elevation . No specific details regarding the vulnerable component, version, or exploit availability are provided in the documents beyond the general su...

CVE-2026-70208

An out-of-bounds read vulnerability exists in Windows HTTP.sys . This flaw allows an authorized attacker to perform a local information disclosure. The vulnerability is rated as MEDIUM severity (CVSS 3.1 score of 5.5) with a focus on high confidentiality impact. Remediation involves an official f...

CVE-2026-70237

A Use after free vulnerability exists in the Windows Ancillary Function Driver for WinSock . This flaw allows an authorized attacker to achieve local privilege elevation . While the CVSS v3.1 score reflects a High severity (7.0) with potential for high impact on confidentiality, integrity, and av...

CVE-2026-70232

The Windows Kernel is affected by a vulnerability that allows for the exposure of sensitive system information to an unauthorized control sphere. An authorized attacker can exploit this flaw to disclose information locally . The vulnerability is associated with CWE-497 and carries a CVSS 3.1 base...

CVE-2026-70288

A Time-of-check time-of-use (TOCTOU) race condition exists within the Windows Win32 Kernel Subsystem . This vulnerability allows an authorized attacker to perform a local information disclosure . No specific software versions, root cause files, or exploit details are provided in the documentation...