CVE-2026-72935

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally...

CVE-2026-71353

Double free in Windows Routing and Remote Access Service RRAS allows an authorized attacker to elevate privileges locally...

CVE-2026-72926

Use after free in Windows Internet Connection Sharing ICS allows an authorized attacker to elevate privileges locally...

CVE-2026-72927

Heap-based buffer overflow in Winsock allows an authorized attacker to elevate privileges locally...

CVE-2026-71351

Double free in Windows Routing and Remote Access Service RRAS allows an authorized attacker to elevate privileges locally...

CVE-2026-71342

Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally...

CVE-2026-71340

Use after free in Windows File History Service allows an authorized attacker to elevate privileges locally...

CVE-2026-70584

Access of resource using incompatible type 'type confusion' in Windows Core Messaging allows an authorized attacker to elevate privileges locally...

CVE-2026-70582

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally...

CVE-2026-70573

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

CVE-2026-70581

Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

CVE-2026-70578

Heap-based buffer overflow in Windows Credential Guard allows an authorized attacker to elevate privileges locally...

CVE-2026-70569

Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally...

CVE-2026-70562

Double free in Windows Audio Service allows an authorized attacker to elevate privileges locally...

CVE-2026-70564

Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally...

CVE-2026-70334

Incomplete list of disallowed inputs in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...

CVE-2026-70334

Incomplete list of disallowed inputs in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...

CVE-2026-70283

Incorrect authorization in Windows Win32K allows an authorized attacker to elevate privileges locally...

CVE-2026-70290

Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally...

CVE-2026-70145

Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally...