CVE-2026-68830: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to disclose information locally...

CVE-2026-68875: Buffer Over-read

Buffer over-read in Windows NTFS allows an authorized attacker to execute code locally...

CVE-2026-69531: Unintended Proxy or Intermediary

Unintended proxy or intermediary 'confused deputy' in Microsoft Windows Speech allows an authorized attacker to perform tampering locally...

CVE-2026-69468: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-69513: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

CVE-2026-69406: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally...

CVE-2026-69367: Out-of-bounds Read

Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally...

CVE-2026-69359: Heap-based Buffer Overflow

Heap-based buffer overflow in Active Directory Domain Services allows an authorized attacker to elevate privileges locally...

CVE-2026-69770: Use of Uninitialized Resource

Use of uninitialized resource in Windows Spaceport.sys allows an authorized attacker to disclose information locally...

CVE-2026-69822: Numeric Truncation Error

Numeric truncation error in Windows Kerberos allows an authorized attacker to elevate privileges locally...

CVE-2026-69832: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Exposure of sensitive system information to an unauthorized control sphere in Windows Win32K allows an authorized attacker to disclose information locally...

CVE-2026-69862: Out-of-bounds Read

Out-of-bounds read in Windows Wireless Wide Area Network Service allows an authorized attacker to disclose information locally...

CVE-2026-70584: Access of Resource Using Incompatible Type

Access of resource using incompatible type 'type confusion' in Windows Core Messaging allows an authorized attacker to elevate privileges locally...

CVE-2026-69890: Use After Free

Use after free in Windows Virtual Trusted Platform Module allows an authorized attacker to elevate privileges locally...

CVE-2026-69457: Out-of-bounds Read

Out-of-bounds read in Windows USB Driver allows an authorized attacker to disclose information locally...

CVE-2026-81948: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

CVE-2026-81950: Double Free

Double free in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

CVE-2026-81949: Integer Overflow or Wraparound

Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

CVE-2026-81953: Stack-based Buffer Overflow

Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

CVE-2026-81395: Out-of-bounds Read

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...