CVE-2026-70139

Heap-based buffer overflow in Windows Update Service allows an authorized attacker to elevate privileges locally...

CVE-2026-70056

Use after free in Windows Update Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69999

Out-of-bounds read in Windows Update allows an authorized attacker to disclose information locally...

CVE-2026-69882

Untrusted search path in Windows Update allows an authorized attacker to elevate privileges locally...

CVE-2026-69783

External control of file name or path in Windows Update allows an authorized attacker to elevate privileges locally...

CVE-2026-69633

Heap-based buffer overflow in Windows Update allows an authorized attacker to elevate privileges locally...

CVE-2026-108465

Use after free in Windows Update Delivery Optimization allows an authorized attacker to elevate privileges locally...

CVE-2026-100203

Heap-based buffer overflow in Windows Update Service allows an authorized attacker to elevate privileges locally...

CVE-2026-100200

Use after free in Windows Update Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-100414

Double free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally...

CVE-2026-97812

A double free vulnerability exists in the Windows Update Orchestrator Service . This flaw allows an authorized attacker to perform a local privilege escalation . The CVSS 3.1 score is 7.0 (High) , with an attack vector of Local and high impact on confidentiality, integrity, and availability. No s...

CVE-2026-100203

A heap-based buffer overflow exists in the Windows Update Service , which could allow an authorized attacker to achieve local privilege escalation . The vulnerability is classified as High severity with a CVSS 3.1 score of 7.0. While the root cause is identified as a heap overflow, specific file ...

CVE-2026-100200

A use after free vulnerability exists in the Windows Update Service , allowing an authorized attacker to achieve local privilege escalation . The vulnerability is categorized under CWE-416 and has a base severity score of 7.0 . While the specific root cause and affected versions are not detailed ...

CVE-2026-96323

A Use after free vulnerability in Windows Update allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-416 and has a High base severity score of 7.0. No specific exploit links or remediation details are provided in the documents beyond the m...

CVE-2026-83933

The Windows Update Orchestrator Service is vulnerable to an improper link resolution before file access (link following) vulnerability. This flaw allows an authorized attacker to perform a local information disclosure . No specific software versions, exploit links, or remediation steps are provid...

CVE-2026-83930

A Use after free vulnerability exists in the Windows Update Orchestrator Service . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is assigned a High base severity score of 7.0. No specific details regarding the root cause, affected versions, or a...

CVE-2026-83507

The Windows Update Orchestrator Service is vulnerable to an improper link resolution before file access (link following) flaw. This vulnerability allows an authorized attacker to perform a local information disclosure . No specific exploit details or remediation steps are provided in the document...

CVE-2026-69783

A vulnerability in Windows Update allows an authorized attacker to achieve local privilege escalation . The root cause is identified as external control of file name or path (CWE-73). Impact includes potential high levels of confidentiality, integrity, and availability compromise. No specific ver...

CVE-2026-69733

Windows Update is affected by an untrusted search path vulnerability (CWE-426). This flaw allows an authorized attacker to achieve local privilege escalation . The base severity score is 7.8 (High) , indicating significant impacts on confidentiality, integrity, and availability. No specific explo...

CVE-2026-69999

An out-of-bounds read vulnerability exists in Windows Update (CWE-125). This flaw allows an authorized attacker to perform a local information disclosure , potentially exposing sensitive data. The vulnerability has a CVSS 3.1 base score of 5.5 (Medium) . No specific exploit details or evidence of...