CVE-2026-72964: Missing Authentication for Critical Function

Missing authentication for critical function in Windows Internet Connection Sharing ICS allows an authorized attacker to perform tampering locally...

CVE-2026-72957: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Deployment Services allows an authorized attacker to execute code locally...

CVE-2026-69784: Use After Free

Use after free in Windows Hello allows an authorized attacker to elevate privileges locally...

CVE-2026-80097: Improper Authentication

Improper authentication in Microsoft Authenticator allows an unauthorized attacker to elevate privileges locally...

CVE-2026-80083: Untrusted Pointer Dereference

Untrusted pointer dereference in Windows Hyper-V allows an authorized attacker to execute code locally...

CVE-2026-77899: Use After Free

Use after free in Windows Security Center allows an authorized attacker to elevate privileges locally...

CVE-2026-80075: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Work Folders allows an authorized attacker to elevate privileges locally...

CVE-2026-77894: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-85983: Improper Control of Generation of Code

The Auth0 AD/LDAP Connector improperly processes a configuration value during service startup. This allows a low-privileged user on the host system to modify the connector's configuration. When the service restarts, the modified configuration can lead to code execution with the privileges of the...

CVE-2026-52486: Improper Verification of Cryptographic Signature

An issue in OpenDDS 3.33.x allows a local attacker to cause a denial of service via the verify function in the SIgnedDocument module...

CVE-2026-58611: Improper Authorization

Improper authorization in XBox Gaming Services allows an authorized attacker to elevate privileges locally...

CVE-2026-56177: Use After Free

Use after free in Windows Server allows an authorized attacker to elevate privileges locally...

CVE-2026-83975: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

CVE-2026-83986: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69492: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-77887: Out-of-bounds Read

Out-of-bounds read in Windows DHCP Server allows an authorized attacker to execute code locally...

CVE-2026-77503: Out-of-bounds Read

Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally...

CVE-2026-77500: Release of Invalid Pointer or Reference

Release of invalid pointer or reference in Windows Device Association Service allows an authorized attacker to elevate privileges locally...

CVE-2026-77492: Out-of-bounds Read

Out-of-bounds read in Storage Port Driver allows an authorized attacker to disclose information locally...

CVE-2026-72980: Uncontrolled Search Path Element

Uncontrolled search path element in Windows Hello allows an authorized attacker to bypass a security feature locally...