CVE-2026-70283

Incorrect authorization in Windows Win32K allows an authorized attacker to elevate privileges locally...

CVE-2026-70290

Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally...

CVE-2026-70145

Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally...

CVE-2026-69911

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

CVE-2026-69891

Use after free in Windows Media allows an authorized attacker to elevate privileges locally...

CVE-2026-69895

Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information locally...

CVE-2026-69896

Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

CVE-2026-69874

Untrusted pointer dereference in Windows ALPC allows an authorized attacker to elevate privileges locally...

CVE-2026-69862

Out-of-bounds read in Windows Wireless Wide Area Network Service allows an authorized attacker to disclose information locally...

CVE-2026-69864

Use after free in Windows Hello allows an authorized attacker to elevate privileges locally...

CVE-2026-69866

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69846

Integer overflow or wraparound in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally...

CVE-2026-69841

Heap-based buffer overflow in Windows Encrypting File System EFS allows an authorized attacker to elevate privileges locally...

CVE-2026-69844

Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally...

CVE-2026-69817

Use after free in Windows Bluetooth Port Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-69820

Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally...

CVE-2026-69821

Improper encoding or escaping of output in Active Directory Certificate Services AD CS allows an authorized attacker to elevate privileges locally...

CVE-2026-69816

Use after free in Windows Accounts Control allows an authorized attacker to elevate privileges locally...

CVE-2026-69799

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Hello allows an authorized attacker to elevate privileges locally...

CVE-2026-69792

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Win32K allows an authorized attacker to bypass a security feature locally...