CVE-2026-69721

Out-of-bounds read in Windows iSCSI allows an authorized attacker to disclose information locally...

CVE-2026-69736

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Credential Manager allows an authorized attacker to elevate privileges locally...

CVE-2026-69733

Untrusted search path in Windows Update allows an authorized attacker to elevate privileges locally...

CVE-2026-69743

Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69763

Use after free in Windows Storage allows an authorized attacker to elevate privileges locally...

CVE-2026-69675

Out-of-bounds read in Windows Network File System allows an authorized attacker to disclose information locally...

CVE-2026-69718

Improper neutralization of special elements used in a command 'command injection' in Windows Update allows an authorized attacker to elevate privileges locally...

CVE-2026-69644

Exposure of sensitive system information to an unauthorized control sphere in Windows iSCSI allows an authorized attacker to disclose information locally...

CVE-2026-69650

Improper verification of cryptographic signature in Windows Key Distribution Center allows an authorized attacker to elevate privileges locally...

CVE-2026-69596

Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69633

Heap-based buffer overflow in Windows Update allows an authorized attacker to elevate privileges locally...

CVE-2026-69471

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-69506

Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally...

CVE-2026-69354

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

CVE-2026-69387

Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

CVE-2026-62687

Improper link resolution before file access 'link following' in Windows Backup Engine allows an authorized attacker to disclose information locally...

CVE-2026-61931

Use after free in Windows Perception Simulation Service allows an authorized attacker to elevate privileges locally...

CVE-2026-62879

Missing authentication for critical function in Windows SmartScreen allows an authorized attacker to perform tampering locally...

CVE-2026-49785

Improper resource shutdown or release in Windows UEFI allows an authorized attacker to bypass a security feature locally...

CVE-2026-110234

Elio through 1.13.0 contains an insecure temporary file vulnerability that allows local users to overwrite another user's files by pre-creating symbolic links at predictable capture paths. Attackers who know the victim's Elio process ID can plant a symlink so previewing media, fonts or archives...