CVE-2026-39908

OpenBullet2 through version 0.3.2 on Windows contains a credential disclosure vulnerability that allows remote attackers to capture the NTLMv2 hash of the process user by configuring a job proxy source with a UNC path pointing to an attacker-controlled server. When the job starts, the application...

EUVD-2026-35527

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...

EUVD-2026-35529

Exposure of sensitive information to an unauthorized actor in Windows NTLM allows an unauthorized attacker to perform spoofing over a network...

EUVD-2026-35522

Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally...

EUVD-2026-35526

Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally...

EUVD-2026-35525

Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally...

EUVD-2026-35524

Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally...

EUVD-2026-35523

Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally...

EUVD-2026-35521

Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally...

EUVD-2026-35517

Out-of-bounds read in Windows Hyper-V allows an unauthorized attacker to execute code locally...

EUVD-2026-35515

Untrusted search path in Windows Storage allows an authorized attacker to elevate privileges locally...

EUVD-2026-35697

Use after free in Windows Kernel allows an unauthorized attacker to execute code over a network...

EUVD-2026-35501

Integer overflow or wraparound in Windows HTTP.sys allows an unauthorized attacker to execute code over a network...

EUVD-2026-35699

Integer overflow or wraparound in Windows Kerberos allows an authorized attacker to execute code over an adjacent network...

EUVD-2026-35696

Protection mechanism failure in Windows UEFI allows an authorized attacker to bypass a security feature locally...

EUVD-2026-35684

Use after free in Windows Bluetooth Port Driver allows an authorized attacker to elevate privileges locally...

EUVD-2026-35682

Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-35686

Out-of-bounds read in Windows Hyper-V allows an unauthorized attacker to execute code locally...

EUVD-2026-35688

Out-of-bounds read in Windows DHCP Server allows an authorized attacker to disclose information locally...

EUVD-2026-35687

Out-of-bounds read in Windows Hyper-V allows an unauthorized attacker to execute code locally...