CVE-2026-70114

A Heap-based buffer overflow vulnerability exists in the Windows Kernel . This flaw allows an authorized attacker to achieve local privilege escalation . Specific details regarding the vulnerable component, root cause, or exploit code are not provided in the documents. Remediation is available vi...

CVE-2026-70123

A numeric truncation error exists in the Microsoft Graphics Component , which can be exploited by an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-197 (Numeric Truncation Error) and CWE-122 (Heap-based Buffer Overflow). The impact includes hi...

CVE-2026-70063

A vulnerability exists in the Windows Kernel involving an out-of-bounds read (CWE-125). This flaw allows an authorized attacker to perform a local information disclosure , potentially exposing sensitive system data. The vulnerability has a CVSS 3.1 base score of 4.7 (Medium) , characterized by a ...

CVE-2026-70083

A vulnerability in the DNS Server results from incorrect authorization , which allows an authorized attacker to perform tampering locally . This flaw impacts the integrity of the system. No specific software versions, root causes, or remediation steps are provided in the documents. Exploitation d...

CVE-2026-70076

A Use after free vulnerability exists in the Windows Win32 Kernel Subsystem . This flaw allows an authorized attacker to achieve local privilege escalation . While the specific component or file causing the issue is not detailed, the impact is significant for local security boundaries. Remediatio...

CVE-2026-70064

An Integer underflow (wrap or wraparound) vulnerability exists in Windows Kerberos . This flaw allows an authorized attacker to achieve local privilege elevation . While the specific affected components are not detailed beyond the Kerberos service, the vulnerability is confirmed as a high-severit...

CVE-2026-70085

A missing authorization vulnerability exists in the DNS Server , which allows an authorized attacker to perform tampering locally . The vulnerability is associated with CWE-862 . The CVSS 3.1 score is 5.5 (Medium) , with a high impact on integrity . No specific exploit information or patch versio...

CVE-2026-70087

A vulnerability in the DNS Server stems from incorrect authorization , which allows an authorized attacker to locally bypass a security feature . The impact is categorized as a high level of integrity loss (CVSS 3.1 score of 5.5). While technical details regarding the specific component or root c...

CVE-2026-70060

A heap-based buffer overflow exists in the Windows Win32 Kernel Subsystem . This vulnerability allows an authorized attacker to perform a local privilege escalation . No specific exploit details or remediation steps are provided in the documents beyond the identification of the root cause and the...

CVE-2026-70097

A race condition exists in the Windows Virtualization-Based Security (VBS) Enclave due to concurrent execution using a shared resource with improper synchronization. This vulnerability allows an authorized attacker to perform spoofing locally . The impact is categorized as having high integrity c...

CVE-2026-70090

A vulnerability in Windows Netlogon involves the use of uninitialized resource (CWE-908). This flaw allows an authorized attacker to perform a local information disclosure . The CVSS 3.1 score is 5.5 (Medium) , indicating a local attack vector with low complexity and low privileges required. No s...

CVE-2026-70077

A Use after free vulnerability exists in the Windows Kernel , which allows an authorized attacker to perform a local information disclosure . The vulnerability is assigned a CVSS v3.1 base score of 4.7 (Medium) , with an attack vector of Local and high complexity. No specific details regarding af...

CVE-2026-70015

A Use after free vulnerability exists in the Windows Local Security Authority Subsystem Service (LSASS) . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-122 (Heap-based Buffer Overflow). Official remediation is available vi...

CVE-2026-70026

A Use after free vulnerability exists in Windows Secure Kernel Mode , which could allow an authorized attacker to achieve local privilege escalation . Technical details regarding the specific component or root cause are not provided in the documents. No exploits or in-the-wild exploitation inform...

CVE-2026-70027

A heap-based buffer overflow exists in the Windows Subsystem for Linux (WSL) . This vulnerability allows an authorized attacker to achieve local privilege elevation . While the specific component or root cause is not detailed in the provided documents, the impact includes unauthorized access to h...

CVE-2026-70059

A Heap-based buffer overflow exists in Windows OLE that can be exploited by an authorized attacker to achieve local privilege escalation . No specific software versions, root causes, or remediation details are provided in the documents beyond the impact of local privilege elevation. Exploit infor...

CVE-2026-70017

A type confusion vulnerability exists in Windows Secure Kernel Mode , where accessing a resource using an incompatible type allows an authorized attacker to perform a local information disclosure . The vulnerability is assigned CWE-843 . No specific patch versions, exploit links, or additional te...

CVE-2026-70021

A use after free vulnerability in Windows Direct Composition allows an authorized attacker to achieve local privilege escalation . While the specific component or file is not detailed, the impact is a high-severity elevation of privileges. Remediation is available via an official fix provided by ...

CVE-2026-70057

The Windows Routing and Remote Access Service (RRAS) is impacted by an incorrect authorization vulnerability (CWE-863). This flaw allows an authorized attacker to bypass a security feature through local access . The vulnerability carries a MEDIUM base severity (CVSS 3.1 score of 5.5), specificall...

CVE-2026-69966

An integer overflow or wraparound vulnerability exists in the Microsoft Streaming Service (specifically identified as the Kernel Streaming Service Driver ). This flaw allows an authorized attacker to achieve local privilege escalation . A formal official fix is available, and the vulnerability is...