CVE-2026-70156

A Use after free vulnerability exists in the Microsoft Windows Search Component . This flaw allows an authorized attacker to achieve local privilege escalation . While the underlying technical root cause is not detailed in the provided documents, the vulnerability has a CVSS 3.1 score of 7.0 (Hig...

CVE-2026-70169

A race condition exists in the Windows Connected Devices Platform Service due to concurrent execution using a shared resource with improper synchronization. This vulnerability allows an authorized attacker to achieve local privilege escalation . While the specific root cause components are not de...

CVE-2026-70173

The Microsoft Windows Search Component contains an out-of-bounds read vulnerability. This flaw allows an authorized attacker to perform a local information disclosure , potentially accessing data they are not normally permitted to view. While the vulnerability is confirmed with a CVSS 3.1 base sc...

CVE-2026-70168

A Use after free vulnerability exists in the Windows Ancillary Function Driver for WinSock . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability has a CVSS 3.1 base score of 7.0 (HIGH) . No specific exploit details or remediation steps are provided in...

CVE-2026-70245

A type confusion vulnerability exists in the Windows Ancillary Function Driver for WinSock . This flaw allows an authorized attacker to achieve local privilege escalation . While the CVSS v3.1 score indicates a High severity (7.8) with impacts on confidentiality, integrity, and availability, spec...

CVE-2026-70177

A numeric truncation error within the Microsoft Windows Search Component allows an authorized attacker to achieve local privilege escalation . The vulnerability is caused by improper input validation (CWE-20) and numeric truncation (CWE-197). While the specific affected versions are not detailed ...

CVE-2026-70176

A Use after free vulnerability exists in the Windows Win32 Kernel Subsystem . This flaw allows an authorized attacker to achieve local privilege elevation . Exploitation details are not provided in the documents. Remediation is available via an official fix from Microsoft.

CVE-2026-70205

A type confusion vulnerability exists in the Windows Ancillary Function Driver for WinSock . This flaw allows an authorized attacker to achieve local privilege escalation . The impact includes high consequences for confidentiality, integrity, and availability. While the documents do not provide s...

CVE-2026-70195

A use after free vulnerability exists in the Windows Ancillary Function Driver for WinSock . This flaw allows an authorized attacker to perform a local information disclosure . The vulnerability is associated with CWE-416 (Use After Free) and CWE-362 (Race Condition). While the vulnerability is c...

CVE-2026-70198

A Use after free vulnerability exists in Windows Push Notifications , which could allow an authorized attacker to elevate privileges locally . The impact includes high levels of confidentiality, integrity, and availability. While the vulnerability is confirmed, specific exploit details are not pr...

CVE-2026-70132

A Heap-based buffer overflow exists in the Windows Portable Device File System Driver . This vulnerability allows an authorized attacker to achieve local privilege elevation . Official remediation is available via a patch, and the vulnerability is confirmed with a HIGH base severity score of 7.8....

CVE-2026-70140

A Use after free vulnerability exists in the Windows Audio Service , which could allow an authorized attacker to achieve local privilege escalation . The vulnerability's base score is 7.0, categorized as HIGH severity, with impacts on confidentiality, integrity, and availability. Technical detail...

CVE-2026-70118

A Use after free vulnerability exists in the Windows Audio Service . This flaw allows an authorized attacker to achieve local privilege escalation . While the specific technical root cause is not detailed in the provided documents, the vulnerability is confirmed by Microsoft and carries a CVSS 3....

CVE-2026-70138

A heap-based buffer overflow exists in Windows OLE , which could allow an authorized attacker to achieve local privilege elevation . The vulnerability is categorized under CWE-122 . While the specific root cause is not detailed in the provided documents, the impact is rated as High with the poten...

CVE-2026-70136

A Use after free vulnerability exists in the Microsoft Windows Search Component . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability's CVSS 3.1 score is 7.0 (High) , with an attack complexity rated as high and requiring low privileges for exploitatio...

CVE-2026-70141

An out-of-bounds read vulnerability exists in the Microsoft Windows Search Component . This flaw allows an authorized attacker to perform a local information disclosure by reading data outside the intended memory boundaries. No specific exploit details or in-the-wild exploitation reports are prov...

CVE-2026-70115

A Use after free vulnerability exists in the Microsoft Windows Search Component . This flaw allows an authorized attacker to perform a local privilege escalation . No specific exploit details or patch versions are provided in the documents.

CVE-2026-70135

An out-of-bounds read vulnerability exists in the Windows Remote POS Driver . This flaw allows an authorized attacker to perform a local information disclosure. The root cause is categorized as CWE-125 (Out-of-bounds Read). While the vulnerability is confirmed, no specific exploit details or proo...

CVE-2026-70104

A vulnerability in the Windows Win32 Kernel Subsystem involves an untrusted pointer dereference . This flaw enables an authorized attacker to achieve local privilege escalation . The official remediation is an official fix provided by Microsoft.

CVE-2026-70121

A Heap-based buffer overflow exists in the Windows Kernel . This vulnerability allows an authorized attacker to achieve local privilege elevation . No specific component, file, or version is identified in the provided documents, and no exploit details or remediation steps are currently available.