CVE-2026-70236

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally...

CVE-2026-70235

Improper authentication in Windows Event Tracing allows an authorized attacker to perform spoofing locally...

CVE-2026-70237

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

CVE-2026-70241

Use after free in Windows Kerberos allows an authorized attacker to elevate privileges locally...

CVE-2026-70238

Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally...

CVE-2026-70228

Out-of-bounds read in Desktop Window Manager allows an authorized attacker to elevate privileges locally...

CVE-2026-70232

Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally...

CVE-2026-70234

Buffer over-read in Desktop Window Manager allows an authorized attacker to disclose information locally...

CVE-2026-70230

Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally...

CVE-2026-70233

Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-70223

Use after free in Windows Console Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-70227

Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally...

CVE-2026-70225

Access of resource using incompatible type 'type confusion' in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

CVE-2026-70214

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...

CVE-2026-70220

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally...

CVE-2026-70218

Insufficient granularity of access control in Windows StateRepository API allows an authorized attacker to elevate privileges locally...

CVE-2026-70216

Insufficient granularity of access control in Windows Mobile Device Management allows an authorized attacker to perform tampering locally...

CVE-2026-70209

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally...

CVE-2026-70211

Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally...

CVE-2026-70212

Improper restriction of communication channel to intended endpoints in Windows Security Center allows an authorized attacker to elevate privileges locally...