CVE-2026-97806

A Use after free vulnerability exists in the Windows Broadcast DVR User Service . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-416 and has a CVSS 3.1 base score of 7.8 (High) . No specific exploit details or remediation v...

EUVD-2026-100414

Double free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-100412

Heap-based buffer overflow in Windows Container Isolation FS Filter Driver unionfs.sys allows an authorized attacker to elevate privileges locally...

EUVD-2026-100411

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-100410

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-100409

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-100408

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-100405

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally...

EUVD-2026-100413

Double free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally...

CVE-2026-97803

A heap-based buffer overflow exists within the Windows Kernel , which could allow an authorized attacker to perform a local privilege escalation . The vulnerability has been assigned a HIGH base severity score of 7.8. No specific exploit details or in-the-wild exploitation information are provide...

CVE-2026-97808

A Use after free vulnerability exists in the Windows Broadcast DVR User Service . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability has a high severity score of 7.0, with the impact affecting confidentiality, integrity, and availability. While the s...

CVE-2026-97809

A Use after free vulnerability (CWE-416) exists in the Windows Broadcast DVR User Service . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability has a base severity score of 7.8 (High) and an official fix is available. No specific exploit code or in-th...

CVE-2026-97807

A Use after free vulnerability exists in the Windows Broadcast DVR User Service . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-416 . No specific exploit details or remediation steps are provided in the documents.

CVE-2026-97812

A double free vulnerability exists in the Windows Update Orchestrator Service . This flaw allows an authorized attacker to perform a local privilege escalation . The CVSS 3.1 score is 7.0 (High) , with an attack vector of Local and high impact on confidentiality, integrity, and availability. No s...

CVE-2026-97811

A double free vulnerability exists in OpenSSH for Windows , which allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-415 (Double Free) and CWE-400 (Uncontrolled Resource Consumption). While the impact is categorized as high for confident...

CVE-2026-97804

A heap-based buffer overflow vulnerability exists in the HID class driver . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability's base score is 7.8 (High) , with impacts on confidentiality, integrity, and availability. No specific exploit information ...

CVE-2026-97798

The Windows Error Reporting service is vulnerable to an argument injection vulnerability (CWE-88) caused by improper neutralization of argument delimiters in a command. An authorized attacker can leverage this flaw to achieve local privilege escalation . The official fix is available via the prov...

EUVD-2026-100401

Improper verification of cryptographic signature in Windows Audio Service allows an authorized attacker to elevate privileges locally...

CVE-2026-105007

An elevation of privilege vulnerability exists in the Network Driver Interface Specification (NDIS) because ndis.sys fails to validate buffer length before copying memory. In a local attack scenario, an attacker with the ability to execute a malicious application could run a specially crafted app...

CVE-2026-105009

A local privilege escalation vulnerability exists in the Windows Server Update Service due to incorrect default permissions (CWE-276). An authorized attacker can exploit this flaw to elevate privileges locally. While the CVSS 3.1 score reflects a High severity (7.5), the attack requires low privi...