3137 matches found
CVE-2026-96218
A vulnerability exists in the Windows Update Stack due to improper access control . This flaw allows an authorized attacker to perform tampering locally . The vulnerability is associated with CWE-15 (External Control of System or Configuration Setting) and carries a MEDIUM base severity (CVSS 3.1...
CVE-2026-83886
A Use after free vulnerability exists in the Windows Update Orchestrator Service . This flaw allows an authorized attacker to achieve local privilege elevation . While the specific technical root cause is not detailed in the provided documents, the impact includes high levels of confidentiality, ...
CVE-2026-83793
A vulnerability in the Windows Update Orchestrator Service involves improper link resolution before file access (link following). This flaw allows an authorized attacker to achieve local privilege escalation . The impact includes high levels of confidentiality, integrity, and availability loss. N...
CVE-2026-83798
The Windows Update Stack is vulnerable to a flaw involving the improper verification of cryptographic signatures . This vulnerability allows an authorized attacker to perform spoofing locally . The issue is associated with CWE-347 (Improper Verification of Cryptographic Signature) and CWE-20 (Imp...
CVE-2026-81964
The Windows Update Orchestrator Service is affected by a security feature bypass vulnerability. This issue is caused by the use of hard-coded credentials , which allows an authorized attacker to perform the bypass locally . The vulnerability is associated with CWE-798 . While the impact on integr...
CVE-2026-69633
A heap-based buffer overflow vulnerability exists in Windows Update . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is categorized under CWE-122 . Remediation involves applying the official fix provided by Microsoft. No specific exploit details ...
CVE-2026-69718
A command injection vulnerability exists in Windows Update due to the improper neutralization of special elements used in a command. This flaw allows an authorized attacker to achieve local privilege escalation . No specific exploit information or code is provided in the documents. Remediation in...
CVE-2026-69673
A vulnerability exists in Windows Update due to improper link resolution before file access (link following). This flaw allows an authorized attacker to perform a local elevation of privilege attack. The vulnerability is associated with CWE-59 . No specific exploit details or links are provided i...
CVE-2026-69882
A vulnerability in Windows Update involving an untrusted search path allows an authorized attacker to achieve local privilege elevation . The flaw is associated with CWE-426 . The risk is categorized as HIGH with a CVSS 3.1 base score of 7.8 . No specific software versions or exploit details are ...
CVE-2026-70142
The Windows Update Service is affected by an Untrusted Search Path vulnerability (CWE-426 ). This flaw allows an authorized attacker to achieve local privilege escalation . The impact includes high levels of risk to confidentiality , integrity , and availability . Remediation is available via an ...
CVE-2026-70139
A heap-based buffer overflow exists in the Windows Update Service . This vulnerability allows an authorized attacker to achieve local privilege escalation . While the specific root cause component is not detailed beyond the service name, the impact includes high levels of confidentiality, integri...
CVE-2026-70056
A Use after free vulnerability exists in the Windows Update Service . This flaw allows an authorized attacker to achieve local privilege escalation . The CVSS 3.1 score is 7.0 (High) , indicating significant impact on confidentiality, integrity, and availability. No specific exploit details or re...
CVE-2026-108465
A Use after free vulnerability in Windows Update Delivery Optimization allows an authorized attacker to achieve local privilege escalation . The flaw leads to a HIGH base severity impact on confidentiality, integrity, and availability. While the specific technical root cause or affected file is n...
July 14, 2026âKB5099536 (OS Build 26100.33158)
None None...
July 14, 2026âKB5099539 (OS Builds 19045.7548 and 19044.7548)
None None...
Windows Update Elevation of Privilege Vulnerability
Use after free in Windows Update allows an authorized attacker to elevate privileges locally...
Windows Update Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Update Service allows an authorized attacker to elevate privileges locally...
Windows Update Service Elevation of Privilege Vulnerability
Use after free in Windows Update Service allows an authorized attacker to elevate privileges locally...
Windows Update Orchestrator Service Elevation of Privilege Vulnerability
Double free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally...
Windows Update Orchestrator Service Elevation of Privilege Vulnerability
Improper link resolution before file access 'link following' in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally...