CVE-2026-119025

A flaw was found in the open package. This vulnerability allows an attacker to achieve arbitrary code execution on systems running Windows or Windows Subsystem for Linux WSL. The issue occurs because the package fails to properly sanitize input URLs before passing them to PowerShell. By providing...

CVE-2026-96309

Use after free in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally...

CVE-2026-96206

Use of uninitialized resource in Windows Subsystem for Linux allows an authorized attacker to disclose information locally...

CVE-2026-85879

Time-of-check time-of-use toctou race condition in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally...

CVE-2026-85879

Time-of-check time-of-use toctou race condition in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally...

CVE-2026-70027

Heap-based buffer overflow in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally...

CVE-2026-96206

A use of uninitialized resource (CWE-908) within the Windows Subsystem for Linux allows an authorized attacker to perform a local information disclosure . The vulnerability has a CVSS 3.1 score of 6.5 (Medium), with a high confidentiality impact. No specific component details, exploit links, or p...

EUVD-2026-100195

Use of uninitialized resource in Windows Subsystem for Linux allows an authorized attacker to disclose information locally...

CVE-2026-85879

A Time-of-check time-of-use (TOCTOU) race condition exists in the Windows Subsystem for Linux . This vulnerability allows an authorized attacker to achieve local privilege elevation . The impact includes high levels of confidentiality, integrity, and availability. Official fixes are available; ho...

EUVD-2026-100064

Time-of-check time-of-use toctou race condition in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally...

CVE-2026-96309

A Use after free vulnerability in the Windows Subsystem for Linux allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-416 and has a CVSS 3.1 base score of 7.8 . No specific exploit code or in-the-wild exploitation details are provided in ...

EUVD-2026-99765

Use after free in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally...

CVE-2026-70027

A heap-based buffer overflow exists in the Windows Subsystem for Linux (WSL) . This vulnerability allows an authorized attacker to achieve local privilege elevation . While the specific component or root cause is not detailed in the provided documents, the impact includes unauthorized access to h...

EUVD-2026-99138

Heap-based buffer overflow in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally...

Windows Subsystem for Linux Elevation of Privilege Vulnerability

Time-of-check time-of-use toctou race condition in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally...

Windows Subsystem for Linux Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally...

Windows Subsystem for Linux Information Disclosure Vulnerability

Use of uninitialized resource in Windows Subsystem for Linux allows an authorized attacker to disclose information locally...

Windows Subsystem for Linux Elevation of Privilege Vulnerability

Use after free in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally...

CVE-2026-96206: Use of Uninitialized Resource

Use of uninitialized resource in Windows Subsystem for Linux allows an authorized attacker to disclose information locally...

CVE-2026-85879: Time-of-check Time-of-use (TOCTOU) Race Condition

Time-of-check time-of-use toctou race condition in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally...