CVE-2026-68281

A flaw was found in the Linux kernel's graphics driver for Imagination GPUs. This vulnerability occurs because the system incorrectly manages dependencies between certain graphics processing tasks. This mismanagement can lead to the system miscalculating available resources, causing tasks to fail...

CVE-2026-68347

A flaw was found in the Linux kernel's AMD IOMMU Input/Output Memory Management Unit driver. This vulnerability is caused by an unsafe lock order during the allocation of graphics domains gdom and within the IOMMUDESTROY free path. This issue could lead to a system crash or a denial of service Do...

CVE-2026-68392

A flaw was found in the Linux kernel's Bluetooth management subsystem. This vulnerability occurs due to incorrect locking when handling memory pointers during device unpairing and disconnection. An attacker could exploit this to trigger a Use-After-Free UAF condition, which is a type of memory...

CVE-2026-70348

Improper link resolution before file access 'link following' in Windows Management Services allows an authorized attacker to deny service locally...

CVE-2026-68821

Improper privilege management in Windows Package Manager allows an authorized attacker to elevate privileges locally...

CVE-2026-62738

Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose information locally...

CVE-2026-20770

Protection mechanism failure for some Cluster Management Toolkit for Kubernetes software before version v0.8.5 within Ring 3: User Applications may allow an escalation of privilege. System software adversary with a privileged user combined with a low complexity attack may enable escalation of...

CVE-2026-62738 Windows Management Instrumentation Information Disclosure Vulnerability

...

EUVD-2026-56772

Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose information locally...

CVE-2026-42976

This CVE concerns Windows RPC API: missing authentication for a critical function allows an authorized attacker to escalate privileges locally. Affected component: Windows RPC server/remote procedure call surface; root cause: lack of authentication on a sensitive function. Impact described as loc...

CVE-2026-42976 Remote Access Management service/API (RPC server) Elevation of Privilege Vulnerability

...

CVE-2026-42976 Remote Access Management service/API (RPC server) Elevation of Privilege Vulnerability

...

CVE-2026-70348 Windows Management Services Denial of Service Vulnerability

...

EUVD-2026-56601

Improper link resolution before file access 'link following' in Windows Management Services allows an authorized attacker to deny service locally...

CVE-2026-70348

CVE-2026-70348 describes an issue in Windows Management Services where improper link resolution before file access (link following) can allow an authenticated local attacker to cause a Denial of Service . The available sources state the vulnerability enables local DoS; no exploitable details or p...

CVE-2026-70348 Windows Management Services Denial of Service Vulnerability

...

EUVD-2026-56469

Improper privilege management in Windows Package Manager allows an authorized attacker to elevate privileges locally...

CVE-2026-62892 Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability

...

CVE-2026-62892 Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability

...

CVE-2026-62892

CVE-2026-62892 is a use-after-free vulnerability in the Capability Access Management Service (camsvc) that could allow an authorized attacker to elevate privileges locally. The publicly available data identifies a local attack vector with high impact (confidentiality, integrity, and availability)...