CVE-2026-72969

A Use after free vulnerability exists in the Windows Program Compatibility Assistant Service . This flaw allows an authorized attacker to achieve local privilege elevation . While the vulnerability is confirmed, specific technical details regarding the root cause component or specific file are no...

CVE-2026-69743

A Use after free vulnerability exists in the Windows Program Compatibility Assistant Service . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-401 (Use After Free) and has a HIGH base severity score of 7.0. No specific exploi...

CVE-2026-69721

An out-of-bounds read vulnerability exists in Windows iSCSI , which could allow an authorized attacker to disclose information locally . The vulnerability is associated with CWE-125 and has been assigned a CVSS v3.1 base score of 5.5 (Medium), reflecting high confidentiality impact with low compl...

CVE-2026-69644

A vulnerability in Windows iSCSI allows an authorized attacker to disclose sensitive system information locally. This issue is characterized as an exposure of information to an unauthorized control sphere (CWE-497). The base severity is medium (5.5), requiring local access and low privileges to e...

CVE-2026-69387

A Use after free vulnerability exists in Windows Error Reporting , which could allow an authorized attacker to elevate privileges locally . The vulnerability is categorized with a CVSS 3.1 base score of 7.0 (High) . No specific exploit details or remediation steps are provided in the documents be...

CVE-2026-72934

A Use after free vulnerability exists in the Windows Program Compatibility Assistant Service . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is confirmed with a HIGH base severity score of 7.0. No specific technical root cause details or remedia...

CVE-2026-72955

A Use after free vulnerability in the Windows Application Compatibility Cache allows an authorized attacker to achieve local privilege elevation . The vulnerability is categorized under CWE-416 and has a CVSS 3.1 base score of 7.0 . While the root cause is identified as a use after free error, sp...

CVE-2026-70580

A missing authentication vulnerability exists in a critical function within Windows Credential Guard . This flaw allows an authorized attacker to perform spoofing locally . The vulnerability has a HIGH base severity score of 8.8 and is categorized under CWE-306 . Official remediation is available...

CVE-2026-70271

A Use after free vulnerability exists in the Windows Win32 Kernel Subsystem . This flaw allows an authorized attacker to achieve local privilege elevation . While specific version numbers and exploit details are not provided in the documents, the vulnerability is confirmed by Microsoft and the NV...

CVE-2026-70284

The Windows Win32 Kernel Subsystem contains a vulnerability involving the use of uninitialized resource (CWE-908). This flaw allows an authorized attacker to perform a local information disclosure attack. While the impact is classified as high for confidentiality, it does not affect integrity or ...

CVE-2026-70285

A Heap-based buffer overflow exists in the Windows Win32 Kernel Subsystem , which could allow an authorized attacker to elevate privileges locally . While the specific affected versions and remediation steps are not detailed in the provided documents, the vulnerability is confirmed with a High ba...

CVE-2026-70255

A heap-based buffer overflow vulnerability exists in the Desktop Window Manager , which allows an authorized attacker to perform a local privilege elevation . The CVSS 3.1 score of 7.8 reflects high impact across confidentiality, integrity, and availability. No specific exploit information or rem...

CVE-2026-70278

A Heap-based buffer overflow exists in Microsoft Windows Media Foundation . This vulnerability allows an authorized attacker to achieve local privilege escalation . While the specific component or function is not detailed in the provided documents, the impact is categorized as high for confidenti...

CVE-2026-70272

A use after free vulnerability in Windows Installer allows an authorized attacker to achieve local privilege escalation . The vulnerability's base severity is rated as High (CVSS 3.1 score of 7.0), with potential impacts on confidentiality, integrity, and availability. No specific exploit details...

CVE-2026-68836

A heap-based buffer overflow exists in Windows kernel32.dll , which can be exploited by an authorized attacker to achieve local privilege escalation . The vulnerability impacts the core Windows operating system. Documentation indicates that an official fix is available, but specific patch version...

CVE-2026-70252

A use after free vulnerability exists in the Virtual Hard Disk (VHD) Miniport Driver . This flaw allows an authorized attacker to achieve local privilege escalation . While the specific technical root cause or affected versions are not detailed beyond the driver name, the vulnerability is categor...

CVE-2026-70280

A Windows Hello security feature bypass vulnerability exists due to incorrect authorization . This flaw allows an authorized attacker to bypass a security feature locally. The vulnerability is associated with CWE-863 and has a CVSS 3.1 base score of 4.4 (Medium) , indicating high confidentiality ...

CVE-2026-70273

A Use after free vulnerability exists in the Windows Win32 Kernel Subsystem . This flaw allows an authorized attacker to achieve local privilege escalation . While the vulnerability is confirmed with a CVSS3.1 base score of 7.0 (High) , the provided documents do not specify the exact root cause, ...

CVE-2026-70274

A Use after free vulnerability exists in the Windows Bind Filter Driver . This flaw allows an authorized attacker to achieve local privilege escalation . No specific exploit details, affected versions, or remediation steps are provided in the documents.

CVE-2026-70234

A buffer over-read vulnerability exists in the Desktop Window Manager component. This flaw allows an authorized attacker to perform a local information disclosure , potentially exposing sensitive data. No specific exploit details or in-the-wild exploitation information are provided in the documen...