CVE-2026-69284

Heap-based buffer overflow in Windows DCOM Server allows an authorized attacker to elevate privileges locally...

CVE-2026-69280

Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally...

CVE-2026-69281

Use after free in Windows License Manager allows an authorized attacker to elevate privileges locally...

CVE-2026-69267

Insufficient granularity of access control in Windows Connected User Experiences and Telemetry allows an authorized attacker to disclose information locally...

CVE-2026-68896

Absolute path traversal in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

CVE-2026-68891

Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally...

CVE-2026-68849

Out-of-bounds read in Windows Bluetooth Port Driver allows an authorized attacker to disclose information locally...

CVE-2026-68851

Buffer over-read in Windows NTFS allows an authorized attacker to disclose information locally...

CVE-2026-68850

Heap-based buffer overflow in Microsoft Account allows an authorized attacker to elevate privileges locally...

CVE-2026-68842

Exposure of sensitive system information to an unauthorized control sphere in Windows MIDI Service Module allows an authorized attacker to disclose information locally...

CVE-2026-68832

Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally...

CVE-2026-68830

Improper link resolution before file access 'link following' in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to disclose information locally...

CVE-2026-68825

Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-68787

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally...

CVE-2026-58600

Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to elevate privileges locally...

CVE-2026-58599

Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally...

CVE-2026-56177

Use after free in Windows Server allows an authorized attacker to elevate privileges locally...

CVE-2026-58820

In multiple locations, there is a possible memory safety issue due to integer overflow. This could lead to local escalation of privilege with no additional execution privileges required...

CVE-2026-28644

In startNextMatchingActivity of ActivityTaskManagerService.java, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28626

In onCreate of SetupPassthroughActivity.java, there is a possible way to launch arbitrary activity due to Intent redirection . This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...