CVE-2026-70161

Improper limitation of a pathname to a restricted directory 'path traversal' in .NET allows an authorized attacker to elevate privileges locally...

CVE-2026-70165

Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...

CVE-2026-70190

Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...

CVE-2026-70110

A stack-based buffer overflow vulnerability exists in the Microsoft PostScript Printer Driver . This flaw allows an unauthorized attacker to achieve local privilege escalation . The CVSS 3.1 base score is 7.8 (High) , indicating significant impacts on confidentiality, integrity, and availability....

CVE-2026-70109

A heap-based buffer overflow exists in the Microsoft PostScript Printer Driver , which allows an unauthorized attacker to achieve local privilege elevation . The vulnerability is classified as a High severity issue (CVSS 3.1 score of 7.8). Official remediation is available via a Microsoft securit...

CVE-2026-70149

The Windows Client Side Caching driver (csc.sys) is affected by a vulnerability that allows an authorized attacker to disclose sensitive information locally. The underlying cause is attributed to Heap-based Buffer Overflow and Integer Overflow or Wraparound issues. The impact includes high levels...

CVE-2026-70092

A heap-based buffer overflow vulnerability exists in the Microsoft PostScript Printer Driver . This flaw allows an unauthorized attacker to achieve local privilege escalation . The provided documents do not specify the exact component, file, or function responsible for the overflow, nor do they d...

CVE-2026-70011

The Windows IP Over USB Service is affected by an out-of-bounds read vulnerability (CWE-125). This flaw allows an authorized attacker to disclose information locally . The vulnerability has a CVSS 3.1 base score of 5.5 (Medium) , with a high impact on confidentiality. No specific exploit informat...

CVE-2026-70131

A heap-based buffer overflow exists in Microsoft Windows Media Foundation . This vulnerability allows an unauthorized attacker to achieve local privilege elevation . While the specific component or file causing the overflow is not detailed in the provided documents, the impact is categorized as H...

CVE-2026-70134

A Use after free vulnerability exists in Windows Event Tracing . This flaw allows an authorized attacker to perform a local privilege escalation . No specific exploit code or in-the-wild exploitation details are provided in the documents, though the CVSS 3.1 score indicates a High severity (7.0) ...

CVE-2026-70137

A vulnerability in Windows Remote Access Connection Manager involves improper access control , which allows an authorized attacker to perform a local information disclosure . The CVSS 3.1 score is 5.5 (Medium) , with a high impact on confidentiality. No specific exploit details or versions are pr...

CVE-2026-70044

An out-of-bounds read vulnerability exists in Microsoft Windows Media Foundation . This flaw allows an unauthorized attacker to disclose information locally on an affected system. While the specific component or root cause is not detailed beyond the out-of-bounds read, the vulnerability has a MED...

CVE-2026-70045

A Use after free vulnerability in Windows Work Folders allows an authorized attacker to achieve local privilege escalation . The vulnerability's impact includes high levels of confidentiality, integrity, and availability. An official fix is available, as indicated by the remediation level. No spe...

CVE-2026-70102

A Use after free vulnerability exists in Windows Spaceport.sys . This flaw allows an authorized attacker to achieve local privilege escalation . No specific exploit details or technical root cause files are provided, but the impact is classified as high regarding confidentiality, integrity, and a...

CVE-2026-69949

A heap-based buffer overflow vulnerability exists in Windows Client for NFS . This flaw allows an authorized attacker to perform a local privilege escalation . The provided documents do not specify the exact component or file involved, nor do they provide specific remediation steps or exploit det...

CVE-2026-70113

The Windows Client for NFS is vulnerable to an integer overflow or wraparound condition. This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability has a CVSS 3.1 base score of 7.8 (High) . Official remediation is available via Microsoft security updates.

CVE-2026-70008

An integer overflow or wraparound vulnerability exists in the Windows IP Over USB Service . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is confirmed with a CVSS v3.1 base score of 7.8 (High) . No specific exploit code or in-the-wild exploitati...

CVE-2026-69977

A Use after free vulnerability exists in the Quality Windows Audio/Video Experience (QWAVE) service. This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is categorized under CWE-416 . No specific exploit code or in-the-wild exploitation details are pr...

CVE-2026-88146

A race condition vulnerability exists in the Windows Background Intelligent Transfer Service (BITS) due to concurrent execution using a shared resource with improper synchronization. This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated wit...

CVE-2026-88140

An out-of-bounds read vulnerability exists in the Windows Key Storage Provider . This flaw allows an authorized attacker to perform a local information disclosure by reading data outside of the intended memory boundaries. The vulnerability is assigned a CVSS 3.1 base score of 5.5 (Medium) with a ...