CVE-2026-70223

A Use after free vulnerability exists in the Windows Console Driver . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability has a CVSS 3.1 base score of 7.0 (High) , with impacts affecting confidentiality, integrity, and availability. Remediation is ava...

CVE-2026-70225

A type confusion vulnerability exists in the Windows Ancillary Function Driver for WinSock . This flaw allows an authorized attacker to achieve local privilege escalation . The impact includes high levels of confidentiality, integrity, and availability compromise. Remediation is provided via an o...

CVE-2026-70218

The Windows StateRepository API is affected by an insufficient granularity of access control vulnerability. This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-1220 and CWE-285 . No specific exploitation details or patch version...

CVE-2026-70253

A use after free vulnerability exists in the Windows Win32 Kernel Subsystem . This flaw allows an authorized attacker to achieve local privilege escalation . No specific affected versions, root cause details, or remediation steps are provided in the documents beyond the identification of the subs...

CVE-2026-70234

A buffer over-read vulnerability exists in the Desktop Window Manager component. This flaw allows an authorized attacker to perform a local information disclosure , potentially exposing sensitive data. No specific exploit details or in-the-wild exploitation information are provided in the documen...

CVE-2026-70247

An out-of-bounds read vulnerability exists in the Windows HTTP.sys component. This flaw allows an authorized attacker to achieve local code execution . The vulnerability is assigned a High base severity score of 7.8. No specific exploit links or detailed remediation versions are provided in the d...

CVE-2026-70233

A heap-based buffer overflow exists in the Windows Common Log File System Driver . This vulnerability allows an authorized attacker to achieve local privilege elevation . The CVSS 3.1 score is 7.8 (HIGH) , reflecting high impact on confidentiality, integrity, and availability. No specific exploit...

CVE-2026-70245

A type confusion vulnerability exists in the Windows Ancillary Function Driver for WinSock . This flaw allows an authorized attacker to achieve local privilege escalation . While the CVSS v3.1 score indicates a High severity (7.8) with impacts on confidentiality, integrity, and availability, spec...

CVE-2026-70177

A numeric truncation error within the Microsoft Windows Search Component allows an authorized attacker to achieve local privilege escalation . The vulnerability is caused by improper input validation (CWE-20) and numeric truncation (CWE-197). While the specific affected versions are not detailed ...

CVE-2026-70176

A Use after free vulnerability exists in the Windows Win32 Kernel Subsystem . This flaw allows an authorized attacker to achieve local privilege elevation . Exploitation details are not provided in the documents. Remediation is available via an official fix from Microsoft.

CVE-2026-70173

The Microsoft Windows Search Component contains an out-of-bounds read vulnerability. This flaw allows an authorized attacker to perform a local information disclosure , potentially accessing data they are not normally permitted to view. While the vulnerability is confirmed with a CVSS 3.1 base sc...

CVE-2026-70168

A Use after free vulnerability exists in the Windows Ancillary Function Driver for WinSock . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability has a CVSS 3.1 base score of 7.0 (HIGH) . No specific exploit details or remediation steps are provided in...

CVE-2026-70169

A race condition exists in the Windows Connected Devices Platform Service due to concurrent execution using a shared resource with improper synchronization. This vulnerability allows an authorized attacker to achieve local privilege escalation . While the specific root cause components are not de...

CVE-2026-70156

A Use after free vulnerability exists in the Microsoft Windows Search Component . This flaw allows an authorized attacker to achieve local privilege escalation . While the underlying technical root cause is not detailed in the provided documents, the vulnerability has a CVSS 3.1 score of 7.0 (Hig...

CVE-2026-70198

A Use after free vulnerability exists in Windows Push Notifications , which could allow an authorized attacker to elevate privileges locally . The impact includes high levels of confidentiality, integrity, and availability. While the vulnerability is confirmed, specific exploit details are not pr...

CVE-2026-70205

A type confusion vulnerability exists in the Windows Ancillary Function Driver for WinSock . This flaw allows an authorized attacker to achieve local privilege escalation . The impact includes high consequences for confidentiality, integrity, and availability. While the documents do not provide s...

CVE-2026-70195

A use after free vulnerability exists in the Windows Ancillary Function Driver for WinSock . This flaw allows an authorized attacker to perform a local information disclosure . The vulnerability is associated with CWE-416 (Use After Free) and CWE-362 (Race Condition). While the vulnerability is c...

CVE-2026-70142

The Windows Update Service is affected by an Untrusted Search Path vulnerability (CWE-426 ). This flaw allows an authorized attacker to achieve local privilege escalation . The impact includes high levels of risk to confidentiality , integrity , and availability . Remediation is available via an ...

CVE-2026-70132

A Heap-based buffer overflow exists in the Windows Portable Device File System Driver . This vulnerability allows an authorized attacker to achieve local privilege elevation . Official remediation is available via a patch, and the vulnerability is confirmed with a HIGH base severity score of 7.8....

CVE-2026-70136

A Use after free vulnerability exists in the Microsoft Windows Search Component . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability's CVSS 3.1 score is 7.0 (High) , with an attack complexity rated as high and requiring low privileges for exploitatio...