CVE-2026-70582

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally...

CVE-2026-70584

Access of resource using incompatible type 'type confusion' in Windows Core Messaging allows an authorized attacker to elevate privileges locally...

CVE-2026-70581

Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

CVE-2026-70573

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

CVE-2026-70578

Heap-based buffer overflow in Windows Credential Guard allows an authorized attacker to elevate privileges locally...

CVE-2026-70569

Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally...

CVE-2026-70562

Double free in Windows Audio Service allows an authorized attacker to elevate privileges locally...

CVE-2026-70564

Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally...

CVE-2026-70334

Incomplete list of disallowed inputs in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...

CVE-2026-70334

Incomplete list of disallowed inputs in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...

CVE-2026-70283

Incorrect authorization in Windows Win32K allows an authorized attacker to elevate privileges locally...

CVE-2026-70290

Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally...

CVE-2026-70145

Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally...

CVE-2026-69911

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

CVE-2026-69891

Use after free in Windows Media allows an authorized attacker to elevate privileges locally...

CVE-2026-69895

Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information locally...

CVE-2026-69896

Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

CVE-2026-69874

Untrusted pointer dereference in Windows ALPC allows an authorized attacker to elevate privileges locally...

CVE-2026-69862

Out-of-bounds read in Windows Wireless Wide Area Network Service allows an authorized attacker to disclose information locally...

CVE-2026-69864

Use after free in Windows Hello allows an authorized attacker to elevate privileges locally...