CVE-2026-72969

A Use after free vulnerability exists in the Windows Program Compatibility Assistant Service . This flaw allows an authorized attacker to achieve local privilege elevation . While the vulnerability is confirmed, specific technical details regarding the root cause component or specific file are no...

CVE-2026-81969

The Windows Server Update Service is affected by a vulnerability involving insufficient granularity of access control . This flaw allows an authorized attacker to perform a local privilege escalation . The vulnerability is characterized by a HIGH base severity score of 7.8 and is associated with ...

CVE-2026-69718

A command injection vulnerability exists in Windows Update due to the improper neutralization of special elements used in a command. This flaw allows an authorized attacker to achieve local privilege escalation . No specific exploit information or code is provided in the documents. Remediation in...

CVE-2026-69673

A vulnerability exists in Windows Update due to improper link resolution before file access (link following). This flaw allows an authorized attacker to perform a local elevation of privilege attack. The vulnerability is associated with CWE-59 . No specific exploit details or links are provided i...

CVE-2026-69882

A vulnerability in Windows Update involving an untrusted search path allows an authorized attacker to achieve local privilege elevation . The flaw is associated with CWE-426 . The risk is categorized as HIGH with a CVSS 3.1 base score of 7.8 . No specific software versions or exploit details are ...

CVE-2026-70580

A missing authentication vulnerability exists in a critical function within Windows Credential Guard . This flaw allows an authorized attacker to perform spoofing locally . The vulnerability has a HIGH base severity score of 8.8 and is categorized under CWE-306 . Official remediation is available...

CVE-2026-69387

A Use after free vulnerability exists in Windows Error Reporting , which could allow an authorized attacker to elevate privileges locally . The vulnerability is categorized with a CVSS 3.1 base score of 7.0 (High) . No specific exploit details or remediation steps are provided in the documents be...

CVE-2026-69721

An out-of-bounds read vulnerability exists in Windows iSCSI , which could allow an authorized attacker to disclose information locally . The vulnerability is associated with CWE-125 and has been assigned a CVSS v3.1 base score of 5.5 (Medium), reflecting high confidentiality impact with low compl...

CVE-2026-72934

A Use after free vulnerability exists in the Windows Program Compatibility Assistant Service . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is confirmed with a HIGH base severity score of 7.0. No specific technical root cause details or remedia...

CVE-2026-72955

A Use after free vulnerability in the Windows Application Compatibility Cache allows an authorized attacker to achieve local privilege elevation . The vulnerability is categorized under CWE-416 and has a CVSS 3.1 base score of 7.0 . While the root cause is identified as a use after free error, sp...

CVE-2026-69644

A vulnerability in Windows iSCSI allows an authorized attacker to disclose sensitive system information locally. This issue is characterized as an exposure of information to an unauthorized control sphere (CWE-497). The base severity is medium (5.5), requiring local access and low privileges to e...

CVE-2026-70255

A heap-based buffer overflow vulnerability exists in the Desktop Window Manager , which allows an authorized attacker to perform a local privilege elevation . The CVSS 3.1 score of 7.8 reflects high impact across confidentiality, integrity, and availability. No specific exploit information or rem...

CVE-2026-70278

A Heap-based buffer overflow exists in Microsoft Windows Media Foundation . This vulnerability allows an authorized attacker to achieve local privilege escalation . While the specific component or function is not detailed in the provided documents, the impact is categorized as high for confidenti...

CVE-2026-70274

A Use after free vulnerability exists in the Windows Bind Filter Driver . This flaw allows an authorized attacker to achieve local privilege escalation . No specific exploit details, affected versions, or remediation steps are provided in the documents.

CVE-2026-70271

A Use after free vulnerability exists in the Windows Win32 Kernel Subsystem . This flaw allows an authorized attacker to achieve local privilege elevation . While specific version numbers and exploit details are not provided in the documents, the vulnerability is confirmed by Microsoft and the NV...

CVE-2026-70284

The Windows Win32 Kernel Subsystem contains a vulnerability involving the use of uninitialized resource (CWE-908). This flaw allows an authorized attacker to perform a local information disclosure attack. While the impact is classified as high for confidentiality, it does not affect integrity or ...

CVE-2026-70285

A Heap-based buffer overflow exists in the Windows Win32 Kernel Subsystem , which could allow an authorized attacker to elevate privileges locally . While the specific affected versions and remediation steps are not detailed in the provided documents, the vulnerability is confirmed with a High ba...

CVE-2026-68836

A heap-based buffer overflow exists in Windows kernel32.dll , which can be exploited by an authorized attacker to achieve local privilege escalation . The vulnerability impacts the core Windows operating system. Documentation indicates that an official fix is available, but specific patch version...

CVE-2026-70272

A use after free vulnerability in Windows Installer allows an authorized attacker to achieve local privilege escalation . The vulnerability's base severity is rated as High (CVSS 3.1 score of 7.0), with potential impacts on confidentiality, integrity, and availability. No specific exploit details...

CVE-2026-70252

A use after free vulnerability exists in the Virtual Hard Disk (VHD) Miniport Driver . This flaw allows an authorized attacker to achieve local privilege escalation . While the specific technical root cause or affected versions are not detailed beyond the driver name, the vulnerability is categor...