CVE-2026-70209

A Use after free vulnerability exists in the Windows Win32 Kernel Subsystem . This flaw allows an authorized attacker to achieve local privilege elevation . No specific details regarding the vulnerable component, version, or exploit availability are provided in the documents beyond the general su...

CVE-2026-70237

A Use after free vulnerability exists in the Windows Ancillary Function Driver for WinSock . This flaw allows an authorized attacker to achieve local privilege elevation . While the CVSS v3.1 score reflects a High severity (7.0) with potential for high impact on confidentiality, integrity, and av...

CVE-2026-70236

A Use after free vulnerability exists in the Windows Win32 Kernel Subsystem . This flaw allows an authorized attacker to achieve local privilege escalation . While the documents do not specify the exact component or file involved, the vulnerability results in significant impacts on confidentialit...

CVE-2026-70232

The Windows Kernel is affected by a vulnerability that allows for the exposure of sensitive system information to an unauthorized control sphere. An authorized attacker can exploit this flaw to disclose information locally . The vulnerability is associated with CWE-497 and carries a CVSS 3.1 base...

CVE-2026-70208

An out-of-bounds read vulnerability exists in Windows HTTP.sys . This flaw allows an authorized attacker to perform a local information disclosure. The vulnerability is rated as MEDIUM severity (CVSS 3.1 score of 5.5) with a focus on high confidentiality impact. Remediation involves an official f...

CVE-2026-70199

The Windows Kernel is affected by an information disclosure vulnerability (CVE-2026-70199 ) where sensitive system information is exposed to an unauthorized control sphere. This flaw allows an authorized attacker to disclose information locally . The vulnerability is associated with CWE-497 . Whi...

CVE-2026-70074

A vulnerability in Windows DNS involves an out-of-bounds read (CWE-125) that allows an authorized attacker to disclose information locally. The impact is characterized as a local information disclosure with a Medium severity rating (CVSS 3.1 score of 5.5). An official fix is available, and no spe...

CVE-2026-70075

A Time-of-check time-of-use (TOCTOU) race condition exists in the Windows Virtualization-Based Security (VBS) Enclave . This vulnerability allows an authorized attacker to perform a local security feature bypass . The impact is characterized as a high integrity impact with a Medium base severity ...

CVE-2026-70201

An out-of-bounds read vulnerability exists in the Windows DHCP Server . This flaw allows an authorized attacker to perform a local denial of service (DoS). The vulnerability is associated with CWE-125 (Out-of-bounds Read) and CWE-416 (Use After Free). Official remediation is available through a M...

CVE-2026-70230

A Use after free vulnerability exists in the Windows Audio Service . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is categorized as CWE-416 and has a CVSS 3.1 base score of 7.0 (High) . While the root cause is identified as a use after free, sp...

CVE-2026-70055

A vulnerability in Windows Cryptographic Services allows an authorized attacker to perform a local information disclosure . The flaw results in the exposure of sensitive system information to an unauthorized control sphere. This vulnerability is associated with CWE-497 . While a specific root cau...

CVE-2026-70066

A use after free vulnerability exists in the Windows DHCP Server . This flaw allows an authorized attacker to perform a local elevation of privilege . The vulnerability is classified with a CVSS 3.1 score of 7.0, indicating a high impact on confidentiality, integrity, and availability. No specifi...

CVE-2026-69999

An out-of-bounds read vulnerability exists in Windows Update (CWE-125). This flaw allows an authorized attacker to perform a local information disclosure , potentially exposing sensitive data. The vulnerability has a CVSS 3.1 base score of 5.5 (Medium) . No specific exploit details or evidence of...

CVE-2026-70051

A type confusion vulnerability in Windows SmartScreen allows an authorized attacker to achieve local privilege escalation . The root cause involves the access of resources using incompatible types, which can lead to high impact on confidentiality, integrity, and availability. The CVSS 3.1 score i...

CVE-2026-70067

A use after free vulnerability exists in the Windows Win32 Kernel Subsystem . This flaw allows an authorized attacker to achieve local privilege elevation . While the vulnerability is confirmed, specific technical details regarding the affected component, file, or root cause are not provided in t...

CVE-2026-70071

The DNS Server is affected by a vulnerability involving the improper verification of cryptographic signatures . This flaw allows an authorized attacker to perform tampering locally . The vulnerability is categorized under CWE-347 . While the documents confirm the root cause and impact, specific d...

CVE-2026-69931

A race condition vulnerability exists in Windows Storage due to concurrent execution using a shared resource with improper synchronization. This flaw allows an authorized attacker to achieve local privilege escalation . No specific affected versions, exploit details, or remediation instructions a...

CVE-2026-69880

A type confusion vulnerability exists in the Desktop Window Manager , where an authorized attacker can access resources using an incompatible type. This flaw allows for local privilege elevation . No specific exploit details or patch versions are provided in the documents.

CVE-2026-69856

A Use after free vulnerability exists in Windows Storage , which may allow an authorized attacker to elevate privileges locally . The vulnerability is associated with CWE-416 (Use After Free) and CWE-362 (Race Condition). No specific exploit information or in-the-wild exploitation details are pro...

CVE-2026-62687

The Windows Backup Engine is susceptible to an Improper Link Resolution Before File Access (link following) vulnerability. This issue allows an authorized attacker to perform a local information disclosure , potentially accessing sensitive data. No specific exploit details or affected versions ar...