CVE-2026-100201

A heap-based buffer overflow vulnerability exists in the Windows Client License Service . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-122 (Heap-based Buffer Overflow) and CWE-197 (Numeric Truncation Error). Details regar...

CVE-2026-96958

Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network...

CVE-2026-96959

Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network...

CVE-2026-96960

Asymmetric resource consumption amplification in .NET allows an unauthorized attacker to deny service over a network...

EUVD-2026-100281

Asymmetric resource consumption amplification in .NET allows an unauthorized attacker to deny service over a network...

CVE-2026-96959

The .NET framework is vulnerable to a Denial-of-Service attack due to the allocation of resources without limits or throttling . An unauthorized attacker can exploit this flaw over a network to disrupt service. This vulnerability is part of a broader set of issues identified in Microsoft Develope...

CVE-2026-96960

Asymmetric resource consumption amplification in .NET allows an unauthorized attacker to deny service over a network...

CVE-2026-96958

Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network...

CVE-2026-95943

A double free vulnerability exists in the Connected Devices Platform Service (Cdpsvc) . This flaw allows an authorized attacker to achieve local privilege escalation . The CVSS 3.1 score is 7.0 (High) , indicating high impact on confidentiality, integrity, and availability. An official fix is ava...

CVE-2026-96958

A Denial-of-Service vulnerability exists in .NET due to inefficient algorithmic complexity . This flaw allows an unauthorized attacker to disrupt services over a network. The vulnerability is associated with Microsoft Developer Tools and has a CVSS base score of 7.5 .

CVE-2026-96960

The .NET framework is affected by an asymmetric resource consumption (amplification) vulnerability, which allows an unauthorized attacker to perform a Denial-of-Service (DoS) attack over a network. The vulnerability is categorized under CWE-405 and has a CVSS 3.1 score of 7.5 (High severity). Whi...

CVE-2026-96932

A race condition vulnerability exists in the Windows Embedded Mode Service due to improper synchronization during concurrent execution using a shared resource. This flaw allows an authorized attacker to perform a local privilege elevation . While the documents confirm the vulnerability type and i...

EUVD-2026-100256

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Embedded Mode Service allows an authorized attacker to elevate privileges locally...

CVE-2026-96933

The Windows COM+ Event System Service is vulnerable to an untrusted pointer dereference . This security flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is assigned a CVSS v3.1 score of 7.8 (High) , indicating significant impact on confidentiality, integ...

CVE-2026-96923

A Use after free vulnerability exists in the Windows Workstation Service . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-416 and has a CVSS 3.1 base score of 7.0 . No specific exploit details or in-the-wild exploitation inf...

EUVD-2026-100252

Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally...

CVE-2026-96919

A Use after free vulnerability exists in the Windows Broadcast DVR User Service . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-416 (Use After Free) and CWE-362 (Race Condition). Exploitation details are not provided in th...

CVE-2026-96912

A Use after free vulnerability in the Windows Client License Service allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-416 and has a CVSS 3.1 base score of 7.8 . While the documents confirm the impact of privilege elevation, no specific...

CVE-2026-96854

A type confusion vulnerability exists in the Windows Device Association Service . This flaw allows an authorized attacker to perform an information disclosure locally by accessing a resource using an incompatible type. The vulnerability is associated with CWE-843 and has a CVSS 3.1 base score of ...

CVE-2026-96300

The RPC Endpoint Mapper Service is susceptible to an uncontrolled resource consumption vulnerability. This flaw allows an unauthorized attacker to perform a denial of service (DoS) attack over a network. The vulnerability is associated with CWE-770 , which involves the allocation of resources wit...