CVE-2026-96995

A stack-based buffer overflow exists in Microsoft Office Word , which allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-121 (Stack-based Buffer Overflow) and CWE-197 (Numeric Truncation Error). Microsoft has released updates to address ...

CVE-2026-96920

A heap-based buffer overflow exists in the Windows Program Compatibility Assistant Service . This vulnerability allows an authorized attacker to achieve local privilege escalation . While the specific component or function is not detailed, the issue impacts local security boundaries. No specific ...

CVE-2026-96856

A heap-based buffer overflow exists in Windows Management Instrumentation , which allows an authorized attacker to achieve local privilege elevation . The vulnerability is categorized as HIGH severity with a CVSS 3.1 score of 7.8 . No specific exploit details or evidence of in-the-wild exploitati...

CVE-2026-96855

Improper access control in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally . The vulnerability is associated with CWE-862 (Missing Authorization) . No specific exploit details or in-the-wild exploitation records are provided in the documents. Reme...

CVE-2026-96857

The Windows Projected File System is affected by an information disclosure vulnerability where certain files or directories are accessible to external parties. This flaw allows an authorized attacker to disclose information locally . The vulnerability is classified as CWE-552 and has a MEDIUM bas...

CVE-2026-96865

A vulnerability in Windows Secure Kernel Mode allows an authorized attacker to disclose sensitive system information locally. This issue is characterized by the exposure of information to an unauthorized control sphere (CWE-497). The vulnerability has a CVSS 3.1 base score of 5.6 (Medium) with a ...

CVE-2026-96862

An out-of-bounds read vulnerability exists in Windows Spaceport.sys . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is confirmed by Microsoft and has a CVSS 3.1 base score of 7.8 (High). No specific exploit information or in-the-wild exploitatio...

CVE-2026-96860

The Windows USB Print Driver contains an out-of-bounds read vulnerability (CWE-125, CWE-170). This flaw allows an authorized attacker to perform a local information disclosure . No specific versions, root causes, or remediation steps are provided in the documents, and no exploits or in-the-wild e...

CVE-2026-96859

An out-of-bounds read vulnerability exists in the Windows Imaging Component . This flaw allows an authorized attacker to disclose information locally on the affected system. The vulnerability is associated with CWE-125 . While the impact is categorized as high for confidentiality, no specific exp...

CVE-2026-96868

A heap-based buffer overflow exists in the Windows Kernel , which could allow an authorized attacker to achieve local privilege escalation . The vulnerability is characterized by high complexity and requires local access. No specific exploit details or information regarding in-the-wild exploitati...

CVE-2026-96867

A vulnerability exists in Windows NTFS involving an out-of-bounds read (CWE-125). This flaw allows an authorized attacker to achieve local code execution . The vulnerability is rated as HIGH severity with a CVSS 3.1 score of 7.8. Remediation is available via an official fix provided by Microsoft....

CVE-2026-96312

A heap-based buffer overflow exists in the Windows Kernel that enables an authorized attacker to perform a local privilege escalation . The vulnerability is categorized under CWE-122 . While the specific component or function is not detailed in the provided documents, the impact involves a high s...

CVE-2026-96318

A Heap-based buffer overflow in Windows Resume allows an authorized attacker to elevate privileges locally . The vulnerability has a CVSS 3.1 base score of 7.8 (High) and is categorized under CWE-122 . While the specific component or file is not detailed, the impact includes high levels of confid...

CVE-2026-96309

A Use after free vulnerability in the Windows Subsystem for Linux allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-416 and has a CVSS 3.1 base score of 7.8 . No specific exploit code or in-the-wild exploitation details are provided in ...

CVE-2026-96317

A use after free vulnerability exists in the Windows Kernel . This flaw allows an authorized attacker to perform a local privilege escalation . While the impact includes high levels of confidentiality, integrity, and availability, the documents do not provide specific details regarding the vulner...

CVE-2026-96851

A buffer over-read vulnerability exists in Windows Management Instrumentation . This flaw allows an authorized attacker to disclose information locally on the affected system. The vulnerability is classified as an information disclosure issue with a CVSS 3.1 score of 5.5 (Medium) . While the docu...

CVE-2026-96848

A buffer over-read vulnerability exists in the Windows Win32 Kernel Subsystem . This flaw allows an authorized attacker to perform a local information disclosure , potentially exposing sensitive data. While the CVSS v3.1 score is 5.5 (Medium) , the vulnerability has a high confidentiality impact....

CVE-2026-96314

An out-of-bounds read vulnerability exists in the Windows Audio Service . This flaw allows an authorized attacker to perform a local information disclosure, potentially exposing sensitive data. The vulnerability is assigned CWE-125 . No specific exploit details or in-the-wild exploitation informa...

CVE-2026-96315

A missing authorization vulnerability exists in the Windows Overlay Filter , which allows an authorized attacker to perform tampering locally . The vulnerability is associated with CWE-862 . No specific details regarding affected versions, root causes, or exploit links are provided in the documen...

CVE-2026-96313

A missing authentication flaw in Windows Push Notifications allows an authorized attacker to perform a local privilege escalation . The root cause is identified as CWE-307 (Missing Authentication for Critical Function). The vulnerability has a High severity base score of 7.0, indicating significa...