CVE-2026-72996

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

CVE-2026-72995

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

CVE-2026-72993

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

CVE-2026-72988

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

CVE-2026-72980

Uncontrolled search path element in Windows Hello allows an authorized attacker to bypass a security feature locally...

CVE-2026-72965

Use after free in Windows WebClient Service allows an authorized attacker to elevate privileges locally...

CVE-2026-72958

Double free in Windows Credential Guard allows an authorized attacker to elevate privileges locally...

CVE-2026-72961

Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges locally...

CVE-2026-72953

Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-72945

Use of uninitialized resource in Windows Task Scheduler allows an authorized attacker to disclose information locally...

CVE-2026-72946

Heap-based buffer overflow in Storage Port Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-72935

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally...

CVE-2026-72926

Use after free in Windows Internet Connection Sharing ICS allows an authorized attacker to elevate privileges locally...

CVE-2026-72927

Heap-based buffer overflow in Winsock allows an authorized attacker to elevate privileges locally...

CVE-2026-71353

Double free in Windows Routing and Remote Access Service RRAS allows an authorized attacker to elevate privileges locally...

CVE-2026-71351

Double free in Windows Routing and Remote Access Service RRAS allows an authorized attacker to elevate privileges locally...

CVE-2026-71342

Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally...

CVE-2026-71340

Use after free in Windows File History Service allows an authorized attacker to elevate privileges locally...

CVE-2026-70582

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally...

CVE-2026-70584

Access of resource using incompatible type 'type confusion' in Windows Core Messaging allows an authorized attacker to elevate privileges locally...