CVE-2026-69440: Time-of-check Time-of-use (TOCTOU) Race Condition

Time-of-check time-of-use toctou race condition in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...

CVE-2026-69449: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows BitLocker allows an authorized attacker to execute code locally...

CVE-2026-69475: Untrusted Pointer Dereference

Untrusted pointer dereference in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally...

CVE-2026-69407: Integer Overflow or Wraparound

Integer overflow or wraparound in Volume Manager Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-69398: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally...

CVE-2026-68896: Absolute Path Traversal

Absolute path traversal in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

CVE-2026-72964: Missing Authentication for Critical Function

Missing authentication for critical function in Windows Internet Connection Sharing ICS allows an authorized attacker to perform tampering locally...

CVE-2026-72957: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Deployment Services allows an authorized attacker to execute code locally...

CVE-2026-69784: Use After Free

Use after free in Windows Hello allows an authorized attacker to elevate privileges locally...

CVE-2026-80097: Improper Authentication

Improper authentication in Microsoft Authenticator allows an unauthorized attacker to elevate privileges locally...

CVE-2026-80083: Untrusted Pointer Dereference

Untrusted pointer dereference in Windows Hyper-V allows an authorized attacker to execute code locally...

CVE-2026-77899: Use After Free

Use after free in Windows Security Center allows an authorized attacker to elevate privileges locally...

CVE-2026-80075: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Work Folders allows an authorized attacker to elevate privileges locally...

CVE-2026-77894: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-85983: Improper Control of Generation of Code

The Auth0 AD/LDAP Connector improperly processes a configuration value during service startup. This allows a low-privileged user on the host system to modify the connector's configuration. When the service restarts, the modified configuration can lead to code execution with the privileges of the...

CVE-2026-52486: Improper Verification of Cryptographic Signature

An issue in OpenDDS 3.33.x allows a local attacker to cause a denial of service via the verify function in the SIgnedDocument module...

CVE-2026-58611: Improper Authorization

Improper authorization in XBox Gaming Services allows an authorized attacker to elevate privileges locally...

CVE-2026-56177: Use After Free

Use after free in Windows Server allows an authorized attacker to elevate privileges locally...

CVE-2026-83975: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

CVE-2026-83986: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...