CVE-2026-61365

Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally...

CVE-2026-61361

Use after free in Windows DHCP Client allows an authorized attacker to execute code locally...

CVE-2026-61364

Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally...

CVE-2026-61355

Heap-based buffer overflow in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally...

CVE-2026-61359

Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally...

CVE-2026-61356

Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally...

CVE-2026-61358

Improper link resolution before file access 'link following' in Windows Accessibility Infrastructure ATBroker.exe allows an authorized attacker to elevate privileges locally...

CVE-2026-61360

Untrusted pointer dereference in Windows GDI allows an authorized attacker to disclose information locally...

CVE-2026-61347

Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclose information locally...

CVE-2026-61353

Heap-based buffer overflow in Windows Telephony Service allows an authorized attacker to elevate privileges locally...

CVE-2026-61349

Use after free in Windows Work Folder Service allows an authorized attacker to elevate privileges locally...

CVE-2026-61348

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

CVE-2026-61350

Buffer over-read in Windows NTFS allows an unauthorized attacker to disclose information with a physical attack...

CVE-2026-59137

Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose information locally...

CVE-2026-61346

Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-59136

Use of uninitialized resource in Microsoft COM for Windows allows an authorized attacker to disclose information locally...

CVE-2026-59132

Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service over a network...

CVE-2026-59135

Weak authentication in Microsoft Windows Search Component allows an authorized attacker to disclose information locally...

CVE-2026-59128

Out-of-bounds read in Windows Encrypting File System EFS allows an authorized attacker to disclose information locally...

CVE-2026-59122

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Telephony Service allows an authorized attacker to elevate privileges locally...