CVE-2026-68849

Out-of-bounds read in Windows Bluetooth Port Driver allows an authorized attacker to disclose information locally...

CVE-2026-68842

Exposure of sensitive system information to an unauthorized control sphere in Windows MIDI Service Module allows an authorized attacker to disclose information locally...

CVE-2026-68832

Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally...

CVE-2026-68825

Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-68830

Improper link resolution before file access 'link following' in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to disclose information locally...

CVE-2026-68787

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally...

CVE-2026-58599

Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally...

CVE-2026-58600

Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to elevate privileges locally...

CVE-2026-56177

Use after free in Windows Server allows an authorized attacker to elevate privileges locally...

CVE-2026-58820

In multiple locations, there is a possible memory safety issue due to integer overflow. This could lead to local escalation of privilege with no additional execution privileges required...

CVE-2026-28644

In startNextMatchingActivity of ActivityTaskManagerService.java, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28626

In onCreate of SetupPassthroughActivity.java, there is a possible way to launch arbitrary activity due to Intent redirection . This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

EUVD-2026-73972

In onCreate of SetupPassthroughActivity.java, there is a possible way to launch arbitrary activity due to Intent redirection . This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

CVE-2026-28623

A missing permission check in the writeToParcel method of BleRssiRangingCapabilities.java allows for local information disclosure of the Bluetooth MAC address . This vulnerability affects the UWB (Ultra-Wideband) subcomponent and is present in Android 14, 15, and 16 . Exploitation requires no add...

CVE-2026-28612

CVE-2026-28612 identifies a logic error in the resolveActivity function of ActivityStarter.java within the Android Framework . This vulnerability enables Intent Redirection attacks, which can result in a local escalation of privilege without requiring additional execution privileges or user inter...

CVE-2026-28600

In onCreate of PaymentDefaultDialog.java, there is a possible way to change default payment app due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28572

In onCreate of InstallLaunch.kt, there is a possible misleading UI due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-73920

Out-of-bounds read in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to disclose information locally...

EUVD-2026-73919

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...

CVE-2026-85875

An out-of-bounds read vulnerability in Microsoft Office Excel allows an unauthorized local attacker to disclose information. The CVSS 3.1 score is 5.5 (Medium) , with a local attack vector, low complexity, no privileges required, and user interaction required. Impact is limited to confidentiality...