CVE-2026-70299

The Windows Bind Filter Driver contains an improper access control vulnerability (CWE-863) that allows an authorized attacker to perform a local privilege escalation . The vulnerability has a High base severity score of 8.8. No specific exploit code or details regarding the underlying root cause ...

CVE-2026-70248

A null pointer dereference vulnerability exists in Windows Hyper-V . This flaw allows an authorized attacker to perform a local denial of service (DoS) attack. No specific versions or exploit links are provided in the documents, but the vulnerability has an official fix available.

CVE-2026-70286

A heap-based buffer overflow exists in the Windows Win32K - GRFX component. This vulnerability allows an authorized attacker to achieve local privilege elevation . No specific exploit details or in-the-wild exploitation instances are provided in the documents. Remediation is indicated as an offic...

CVE-2026-70128

An out-of-bounds read vulnerability exists in the HID Parser Library , which allows an authorized attacker to disclose information locally . The vulnerability results in a high confidentiality impact as it enables local information disclosure. No specific exploitation details or exploit links are...

CVE-2026-70151

A Use after free vulnerability exists in Windows Direct Composition . This flaw allows an authorized attacker to achieve local privilege elevation . While the root cause is identified as a memory management issue, the provided documents do not specify the exact component, file, or version affecte...

CVE-2026-70241

A Use after free vulnerability exists in Windows Kerberos that allows an authorized attacker to achieve local privilege escalation . The impact includes high levels of confidentiality, integrity, and availability. No specific exploit details or in-the-wild exploitation information are provided in...

CVE-2026-70222

A Relative path traversal vulnerability exists in Windows Shell . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-23 . No specific exploit information or specific internal component details are provided in the documentation.

CVE-2026-83909

The Windows Win32 Kernel Subsystem is affected by an information disclosure vulnerability. An authorized attacker can exploit this flaw to disclose sensitive system information locally. This vulnerability is associated with CWE-497 (Exposure of Sensitive System Information to an Unauthorized Cont...

CVE-2026-83892

A vulnerability exists in the HID Parser Library component of Windows , where an out-of-bounds read allows an authorized attacker to disclose information locally . The severity is rated as MEDIUM with a CVSS 3.1 score of 5.5. No specific exploit details or in-the-wild exploitation data are provid...

CVE-2026-83868

A race condition exists in the Microsoft Bluetooth Driver due to improper synchronization during concurrent execution using a shared resource. This vulnerability allows an authorized attacker to achieve local privilege escalation . The CVSS 3.1 score is 7.0 (High), reflecting high impacts on conf...

CVE-2026-83896

A heap-based buffer overflow vulnerability exists in Windows Direct Composition . This flaw allows an authorized attacker to achieve local privilege elevation . No specific details regarding the affected component versions, root cause, or exploit code are provided in the documents. Remediation is...

CVE-2026-83901

A Use after free vulnerability exists in the Windows Win32 Kernel Subsystem . This flaw allows an authorized attacker to achieve local privilege escalation . The CVSS 3.1 score of 7.0 (High) reflects high impact on confidentiality, integrity, and availability. No specific exploit code or direct l...

CVE-2026-83893

The Windows Clipboard User Service is vulnerable to an information disclosure flaw (CWE-497) that allows an authorized attacker to disclose sensitive system information locally. The vulnerability is caused by exposure to an unauthorized control sphere. Remediation is available via an official fix...

CVE-2026-83902

A heap-based buffer overflow exists in Windows Direct Composition which could allow an authorized attacker to perform a local elevation of privilege . The vulnerability is characterized by a HIGH base severity score of 7.8. No specific exploit details or in-the-wild exploitation information are p...

CVE-2026-83882

A heap-based buffer overflow vulnerability exists in the Windows Kernel . This flaw allows an authorized attacker to achieve local privilege elevation . No specific component, file, or version information is provided in the documents, and no exploit details or remediation instructions are specifi...

CVE-2026-83879

A race condition vulnerability exists in the Windows Overlay Filter due to concurrent execution using a shared resource with improper synchronization. This flaw allows an authorized attacker to achieve local privilege elevation . The CVSS 3.1 base score is 7.0 (HIGH) , with impacts noted across c...

CVE-2026-70086

A use after free vulnerability exists in the Microsoft Windows Search Component . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is confirmed with a CVSS 3.1 base score of 7.0 . Remediation is available via an official fix provided by Microsoft.

CVE-2026-83867

A heap-based buffer overflow vulnerability exists in Windows Push Notifications . This flaw allows an authorized attacker to achieve local privilege elevation . The CVSS 3.1 score of 7.8 indicates a High severity, with high impact on confidentiality, integrity, and availability. No specific explo...

CVE-2026-83885

The Windows Virtualization-Based Security (VBS) Enclave is vulnerable to a flaw characterized by inadequate encryption strength . This security weakness allows an authorized attacker to perform spoofing locally . The vulnerability is associated with CWE-326 . No specific exploit code or details r...

CVE-2026-83875

A vulnerability exists in the HID Parser Library where an out-of-bounds read occurs. This flaw allows an authorized attacker to disclose information locally . The impact is categorized as a high confidentiality loss. No specific exploit information or remediation details are provided in the docum...