CVE-2026-96309

Use after free in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally...

CVE-2026-96206

Use of uninitialized resource in Windows Subsystem for Linux allows an authorized attacker to disclose information locally...

CVE-2026-85879

Time-of-check time-of-use toctou race condition in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally...

CVE-2026-70027

Heap-based buffer overflow in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally...

CVE-2026-96206

A use of uninitialized resource (CWE-908) within the Windows Subsystem for Linux allows an authorized attacker to perform a local information disclosure . The vulnerability has a CVSS 3.1 score of 6.5 (Medium), with a high confidentiality impact. No specific component details, exploit links, or p...

CVE-2026-85879

A Time-of-check time-of-use (TOCTOU) race condition exists in the Windows Subsystem for Linux . This vulnerability allows an authorized attacker to achieve local privilege elevation . The impact includes high levels of confidentiality, integrity, and availability. Official fixes are available; ho...

CVE-2026-96309

A Use after free vulnerability in the Windows Subsystem for Linux allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-416 and has a CVSS 3.1 base score of 7.8 . No specific exploit code or in-the-wild exploitation details are provided in ...

CVE-2026-70027

A heap-based buffer overflow exists in the Windows Subsystem for Linux (WSL) . This vulnerability allows an authorized attacker to achieve local privilege elevation . While the specific component or root cause is not detailed in the provided documents, the impact includes unauthorized access to h...

Windows Subsystem for Linux Elevation of Privilege Vulnerability

Time-of-check time-of-use toctou race condition in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally...

Windows Subsystem for Linux Elevation of Privilege Vulnerability

Use after free in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally...

Windows Subsystem for Linux Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally...

PT-2026-113074

Name of the Vulnerable Software and Affected Versions Windows Subsystem for Linux affected versions not specified Description A use-after-free condition exists that allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occurs when an...

CVE-2026-85879: Time-of-check Time-of-use (TOCTOU) Race Condition

Time-of-check time-of-use toctou race condition in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally...

CVE-2026-96309: Use After Free

Use after free in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally...

CVE-2026-96206: Use of Uninitialized Resource

Use of uninitialized resource in Windows Subsystem for Linux allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-96309: Windows Subsystem for Linux Elevation of Privilege Vulnerability

Use after free in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-70027: Windows Subsystem for Linux Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally...

CVE-2026-70027: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally...

Malicious code in streak-day-primitives (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c4f0cfff000aa550229c0148bf96c70335e4d37048fa9f8fda3d4391ea2249b The package advertises itself as dependency-free calendar-day arithmetic, but index.mjs contains top-level code that runs on import. All sensitive...

MAL-2026-12463 Malicious code in streak-day-primitives (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c4f0cfff000aa550229c0148bf96c70335e4d37048fa9f8fda3d4391ea2249b The package advertises itself as dependency-free calendar-day arithmetic, but index.mjs contains top-level code that runs on import. All sensitive...