EUVD-2026-22593

Improper link resolution before file access 'link following' in Universal Plug and Play upnp.dll allows an authorized attacker to disclose information locally...

EUVD-2026-22542

Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally...

EUVD-2026-22537

Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally...

EUVD-2026-22509

Use after free in Windows Projected File System allows an authorized attacker to elevate privileges locally...

EUVD-2026-22483

Time-of-check time-of-use toctou race condition in Windows LUAFV allows an authorized attacker to elevate privileges locally...

EUVD-2026-22447

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

EUVD-2026-22420

Double free in Windows Kernel allows an authorized attacker to elevate privileges locally...

EUVD-2026-22455

Improper input validation in Windows BitLocker allows an unauthorized attacker to bypass a security feature locally...

EUVD-2026-22390

Double free in Windows Kernel allows an authorized attacker to elevate privileges locally...

EUVD-2026-22366

Untrusted pointer dereference in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to bypass a security feature locally...

EUVD-2026-22388

Access of resource using incompatible type 'type confusion' in Windows OLE allows an authorized attacker to elevate privileges locally...

EUVD-2026-22394

Double free in Windows Shell allows an authorized attacker to elevate privileges locally...

EUVD-2026-22369

Improper input validation in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature locally...

EUVD-2026-22353

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Management Services allows an authorized attacker to elevate privileges locally...

CVE-2026-33101

Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally...

CVE-2026-32220

Improper access control in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to bypass a security feature locally...

CVE-2026-32188

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...

CVE-2026-32159

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Push Notifications allows an authorized attacker to elevate privileges locally...

CVE-2026-32153

Use after free in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally...

CVE-2026-32090

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Speech Brokered Api allows an authorized attacker to elevate privileges locally...