CVE-2026-81963: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in Windows Update Stack allows an authorized attacker to elevate privileges locally...

CVE-2026-70568: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69394: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally...

CVE-2026-68837: Use After Free

Use after free in Windows File History Service allows an authorized attacker to elevate privileges locally...

CVE-2026-72962: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-72946: Heap-based Buffer Overflow

Heap-based buffer overflow in Storage Port Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-72929: Improper Validation of Integrity Check Value

Improper validation of integrity check value in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-72926: Use After Free

Use after free in Windows Internet Connection Sharing ICS allows an authorized attacker to elevate privileges locally...

CVE-2026-71338: Double Free

Double free in Windows Failover Cluster allows an authorized attacker to elevate privileges locally...

CVE-2026-69476: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69846: Integer Overflow or Wraparound

Integer overflow or wraparound in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally...

CVE-2026-69383: External Control of File Name or Path

External control of file name or path in Windows Shell allows an authorized attacker to elevate privileges locally...

CVE-2026-69293: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

CVE-2026-72958: Double Free

Double free in Windows Credential Guard allows an authorized attacker to elevate privileges locally...

CVE-2026-72935: Out-of-bounds Read

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally...

CVE-2026-71351: Double Free

Double free in Windows Routing and Remote Access Service RRAS allows an authorized attacker to elevate privileges locally...

CVE-2026-71340: Use After Free

Use after free in Windows File History Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69787: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69589: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

CVE-2026-58848: Concurrent Execution using Shared Resource with Improper Synchronization

In multiple functions of alloc.c, there is a possible unauthorized read/write access due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...