Windows Imaging Component Information Disclosure Vulnerability

Use of uninitialized resource in Windows Imaging Component allows an authorized attacker to disclose information locally...

Windows Push Notifications Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Push Notifications allows an authorized attacker to elevate privileges locally...

Windows MIDI Service Module Elevation of Privileges Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...

Windows Event Logging Service Information Disclosure Vulnerability

Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose information locally...

Microsoft COM for Windows Information Disclosure Vulnerability

Use of uninitialized resource in Microsoft COM for Windows allows an authorized attacker to disclose information locally...

Remote Desktop Client Remote Code Execution Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

Microsoft Excel Information Disclosure Vulnerability

Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...

Windows Telephony Service Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Telephony Service allows an authorized attacker to elevate privileges locally...

Microsoft Office Information Disclosure Vulnerability

Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose information locally...

Microsoft Brokering File System Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally...

Remote Procedure Call Denial of Service Vulnerability

Allocation of resources without limits or throttling in Windows Kernel allows an unauthorized attacker to deny service over a network...

Windows DNS Server Remote Code Execution Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows DNS allows an unauthorized attacker to execute code over a network...

Windows Telephony Service Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Telephony Service allows an authorized attacker to elevate privileges locally...

Windows DHCP Client Denial of Service Vulnerability

Uncontrolled resource consumption in Windows DHCP Client allows an unauthorized attacker to deny service over an adjacent network...

Microsoft Exchange Server Elevation of Privilege Vulnerability

Improper control of resource identifiers 'resource injection' in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...

Windows Telephony Service Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Telephony Service allows an authorized attacker to elevate privileges locally...

Windows GDI+ Information Disclosure Vulnerability

Use of uninitialized resource in Windows GDI+ allows an authorized attacker to disclose information locally...

CVE-2026-68298

A flaw was found in the Linux kernel's drm/xe/vm module. During the creation of a virtual machine VM, an error in resource allocation could lead to a Shared Virtual Memory SVM resource leak. This occurs because the kernel's resource deallocation functions are not consistently called when an error...

CVE-2026-68227

A flaw was found in the cx231xx media driver within the Linux kernel. This vulnerability arises from incorrect management of device-managed resources, where their lifetime is tied to the parent Universal Serial Bus USB device instead of the USB interface. This can lead to memory leaks when driver...

CVE-2026-68220

A flaw was found in the Linux kernel's NXP i.MX8 Image Sensor Interface ISI component. This flaw occurs because the system fails to properly free allocated memory when certain subdevice modules are removed. This oversight can lead to a memory leak, potentially impacting system stability and...