CVE-2026-70138

A heap-based buffer overflow exists in Windows OLE , which could allow an authorized attacker to achieve local privilege elevation . The vulnerability is categorized under CWE-122 . While the specific root cause is not detailed in the provided documents, the impact is rated as High with the poten...

CVE-2026-70135

An out-of-bounds read vulnerability exists in the Windows Remote POS Driver . This flaw allows an authorized attacker to perform a local information disclosure. The root cause is categorized as CWE-125 (Out-of-bounds Read). While the vulnerability is confirmed, no specific exploit details or proo...

CVE-2026-70140

A Use after free vulnerability exists in the Windows Audio Service , which could allow an authorized attacker to achieve local privilege escalation . The vulnerability's base score is 7.0, categorized as HIGH severity, with impacts on confidentiality, integrity, and availability. Technical detail...

CVE-2026-70141

An out-of-bounds read vulnerability exists in the Microsoft Windows Search Component . This flaw allows an authorized attacker to perform a local information disclosure by reading data outside the intended memory boundaries. No specific exploit details or in-the-wild exploitation reports are prov...

CVE-2026-70118

A Use after free vulnerability exists in the Windows Audio Service . This flaw allows an authorized attacker to achieve local privilege escalation . While the specific technical root cause is not detailed in the provided documents, the vulnerability is confirmed by Microsoft and carries a CVSS 3....

CVE-2026-70115

A Use after free vulnerability exists in the Microsoft Windows Search Component . This flaw allows an authorized attacker to perform a local privilege escalation . No specific exploit details or patch versions are provided in the documents.

CVE-2026-70093

A heap-based buffer overflow exists in the Windows Rich Text Edit Control . This vulnerability allows an authorized attacker to achieve local privilege elevation . No specific exploit information or workaround details are provided in the documents.

CVE-2026-70117

A Heap-based buffer overflow exists in the Windows Win32 Kernel Subsystem . This vulnerability allows an authorized attacker to achieve local privilege escalation . No specific exploit details or exploitation in-the-wild are provided in the documents, but an official fix is available.

CVE-2026-70104

A vulnerability in the Windows Win32 Kernel Subsystem involves an untrusted pointer dereference . This flaw enables an authorized attacker to achieve local privilege escalation . The official remediation is an official fix provided by Microsoft.

CVE-2026-70103

A heap-based buffer overflow vulnerability exists in Windows Error Reporting . This flaw allows an authorized attacker to achieve local privilege escalation . The CVSS 3.1 score is 7.8 (High) , with impacts affecting confidentiality, integrity, and availability. Official remediation is available ...

CVE-2026-70114

A Heap-based buffer overflow vulnerability exists in the Windows Kernel . This flaw allows an authorized attacker to achieve local privilege escalation . Specific details regarding the vulnerable component, root cause, or exploit code are not provided in the documents. Remediation is available vi...

CVE-2026-70139

A heap-based buffer overflow exists in the Windows Update Service . This vulnerability allows an authorized attacker to achieve local privilege escalation . While the specific root cause component is not detailed beyond the service name, the impact includes high levels of confidentiality, integri...

CVE-2026-70121

A Heap-based buffer overflow exists in the Windows Kernel . This vulnerability allows an authorized attacker to achieve local privilege elevation . No specific component, file, or version is identified in the provided documents, and no exploit details or remediation steps are currently available.

CVE-2026-70123

A numeric truncation error exists in the Microsoft Graphics Component , which can be exploited by an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-197 (Numeric Truncation Error) and CWE-122 (Heap-based Buffer Overflow). The impact includes hi...

CVE-2026-70090

A vulnerability in Windows Netlogon involves the use of uninitialized resource (CWE-908). This flaw allows an authorized attacker to perform a local information disclosure . The CVSS 3.1 score is 5.5 (Medium) , indicating a local attack vector with low complexity and low privileges required. No s...

CVE-2026-70060

A heap-based buffer overflow exists in the Windows Win32 Kernel Subsystem . This vulnerability allows an authorized attacker to perform a local privilege escalation . No specific exploit details or remediation steps are provided in the documents beyond the identification of the root cause and the...

CVE-2026-70097

A race condition exists in the Windows Virtualization-Based Security (VBS) Enclave due to concurrent execution using a shared resource with improper synchronization. This vulnerability allows an authorized attacker to perform spoofing locally . The impact is categorized as having high integrity c...

CVE-2026-70064

An Integer underflow (wrap or wraparound) vulnerability exists in Windows Kerberos . This flaw allows an authorized attacker to achieve local privilege elevation . While the specific affected components are not detailed beyond the Kerberos service, the vulnerability is confirmed as a high-severit...

CVE-2026-70063

A vulnerability exists in the Windows Kernel involving an out-of-bounds read (CWE-125). This flaw allows an authorized attacker to perform a local information disclosure , potentially exposing sensitive system data. The vulnerability has a CVSS 3.1 base score of 4.7 (Medium) , characterized by a ...

CVE-2026-70083

A vulnerability in the DNS Server results from incorrect authorization , which allows an authorized attacker to perform tampering locally . This flaw impacts the integrity of the system. No specific software versions, root causes, or remediation steps are provided in the documents. Exploitation d...