CVE-2026-95904

A buffer over-read vulnerability exists in the Windows Event Logging Service . This flaw allows an authorized attacker to perform a local information disclosure. The vulnerability is assigned a Medium severity (CVSS 3.1 score of 5.5) and is characterized by low attack complexity and low privilege...

CVE-2026-96928

An out-of-bounds read vulnerability exists in Windows NTFS that allows an authorized attacker to achieve local privilege elevation . The vulnerability impacts the NTFS file system component. While the specific root cause is not detailed in the provided documents, the impact includes high confiden...

CVE-2026-96995

A stack-based buffer overflow exists in Microsoft Office Word , which allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-121 (Stack-based Buffer Overflow) and CWE-197 (Numeric Truncation Error). Microsoft has released updates to address ...

CVE-2026-96108

A Use after free vulnerability exists in the Desktop Window Manager . This flaw allows an authorized attacker to perform a local privilege escalation . The vulnerability is assigned a CVSS 3.1 score of 7.8 (High) . No specific exploit code or in-the-wild exploitation details are provided in the d...

CVE-2026-96920

A heap-based buffer overflow exists in the Windows Program Compatibility Assistant Service . This vulnerability allows an authorized attacker to achieve local privilege escalation . While the specific component or function is not detailed, the issue impacts local security boundaries. No specific ...

CVE-2026-96996

A heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally . The vulnerability's impact is categorized as Arbitrary code execution with a CVSS 3.1 base score of 7.8. To successfully exploit this vulnerability, an attacker typically requires the v...

CVE-2026-96855

Improper access control in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally . The vulnerability is associated with CWE-862 (Missing Authorization) . No specific exploit details or in-the-wild exploitation records are provided in the documents. Reme...

CVE-2026-96857

The Windows Projected File System is affected by an information disclosure vulnerability where certain files or directories are accessible to external parties. This flaw allows an authorized attacker to disclose information locally . The vulnerability is classified as CWE-552 and has a MEDIUM bas...

CVE-2026-96865

A vulnerability in Windows Secure Kernel Mode allows an authorized attacker to disclose sensitive system information locally. This issue is characterized by the exposure of information to an unauthorized control sphere (CWE-497). The vulnerability has a CVSS 3.1 base score of 5.6 (Medium) with a ...

CVE-2026-96862

An out-of-bounds read vulnerability exists in Windows Spaceport.sys . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is confirmed by Microsoft and has a CVSS 3.1 base score of 7.8 (High). No specific exploit information or in-the-wild exploitatio...

CVE-2026-96860

The Windows USB Print Driver contains an out-of-bounds read vulnerability (CWE-125, CWE-170). This flaw allows an authorized attacker to perform a local information disclosure . No specific versions, root causes, or remediation steps are provided in the documents, and no exploits or in-the-wild e...

CVE-2026-96856

A heap-based buffer overflow exists in Windows Management Instrumentation , which allows an authorized attacker to achieve local privilege elevation . The vulnerability is categorized as HIGH severity with a CVSS 3.1 score of 7.8 . No specific exploit details or evidence of in-the-wild exploitati...

CVE-2026-96859

An out-of-bounds read vulnerability exists in the Windows Imaging Component . This flaw allows an authorized attacker to disclose information locally on the affected system. The vulnerability is associated with CWE-125 . While the impact is categorized as high for confidentiality, no specific exp...

CVE-2026-96868

A heap-based buffer overflow exists in the Windows Kernel , which could allow an authorized attacker to achieve local privilege escalation . The vulnerability is characterized by high complexity and requires local access. No specific exploit details or information regarding in-the-wild exploitati...

CVE-2026-96867

A vulnerability exists in Windows NTFS involving an out-of-bounds read (CWE-125). This flaw allows an authorized attacker to achieve local code execution . The vulnerability is rated as HIGH severity with a CVSS 3.1 score of 7.8. Remediation is available via an official fix provided by Microsoft....

CVE-2026-96312

A heap-based buffer overflow exists in the Windows Kernel that enables an authorized attacker to perform a local privilege escalation . The vulnerability is categorized under CWE-122 . While the specific component or function is not detailed in the provided documents, the impact involves a high s...

CVE-2026-96318

A Heap-based buffer overflow in Windows Resume allows an authorized attacker to elevate privileges locally . The vulnerability has a CVSS 3.1 base score of 7.8 (High) and is categorized under CWE-122 . While the specific component or file is not detailed, the impact includes high levels of confid...

CVE-2026-96309

A Use after free vulnerability in the Windows Subsystem for Linux allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-416 and has a CVSS 3.1 base score of 7.8 . No specific exploit code or in-the-wild exploitation details are provided in ...

CVE-2026-96317

A use after free vulnerability exists in the Windows Kernel . This flaw allows an authorized attacker to perform a local privilege escalation . While the impact includes high levels of confidentiality, integrity, and availability, the documents do not provide specific details regarding the vulner...

CVE-2026-96851

A buffer over-read vulnerability exists in Windows Management Instrumentation . This flaw allows an authorized attacker to disclose information locally on the affected system. The vulnerability is classified as an information disclosure issue with a CVSS 3.1 score of 5.5 (Medium) . While the docu...