CVE-2026-70573: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69710: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Hello allows an authorized attacker to elevate privileges locally...

CVE-2026-69394: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally...

CVE-2026-72962: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-72946: Heap-based Buffer Overflow

Heap-based buffer overflow in Storage Port Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-72929: Improper Validation of Integrity Check Value

Improper validation of integrity check value in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-71338: Double Free

Double free in Windows Failover Cluster allows an authorized attacker to elevate privileges locally...

CVE-2026-69293: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

CVE-2026-72958: Double Free

Double free in Windows Credential Guard allows an authorized attacker to elevate privileges locally...

CVE-2026-69787: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

CVE-2026-86819: Missing Authorization

Waves Central for macOS contains a local privilege escalation in the privileged helper service. The helper authorizes connecting XPC clients by comparing the caller's code-signing certificate chain for equality with its own, rather than validating the caller against a pinned code requirement...

CVE-2026-70564: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally...

CVE-2026-70562: Double Free

Double free in Windows Audio Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69711: Use After Free

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69534: Improper Neutralization of Special Elements used in a Command

Improper neutralization of special elements used in a command 'command injection' in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally...

CVE-2026-62694: Use After Free

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-69450: Out-of-bounds Read

Out-of-bounds read in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

CVE-2026-69532: Out-of-bounds Read

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally...

CVE-2026-69436: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows State Repository Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69307: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows USB Audio Class driver usbaudio.sys allows an authorized attacker to elevate privileges locally...