CVE-2026-42906 Windows Shell Information Disclosure Vulnerability

...

CVE-2026-42906

CVE-2026-42906 is a Windows Shell information-disclosure vulnerability. The Windows Shell component exposes sensitive information to an unauthorized actor via a local attack with low privileges required and no user interaction. The impact is confidentiality loss (C:H) while integrity/availability...

CVE-2026-42905

The CVE-2026-42905 entry describes a use-after-free vulnerability in the Windows DWM Core Library that allows an authorized attacker to escalate privileges locally. Affected component: Windows DWM Core Library. Root cause: use-after-free condition leading to local privilege escalation. Impact: el...

CVE-2026-42905 Windows DWM Core Library Elevation of Privilege Vulnerability

...

CVE-2026-42905 Windows DWM Core Library Elevation of Privilege Vulnerability

...

EUVD-2026-35593

Heap-based buffer overflow in Windows TCP/IP allows an unauthorized attacker to elevate privileges over an adjacent network...

CVE-2026-42903 Windows Kerberos Denial of Service Vulnerability

...

CVE-2026-42904

CVE-2026-42904 is a Windows TCP/IP heap-based buffer overflow vulnerability that allows an unauthenticated attacker on an adjacent network to elevate privileges. The issue affects the Windows TCP/IP stack and is identified as a 9.6 (CRITICAL) CVSSv3.1 Base Score with attacker-friendly characteris...

CVE-2026-42904 Windows TCP/IP Elevation of Privilege Vulnerability

...

CVE-2026-42903 Windows Kerberos Denial of Service Vulnerability

...

CVE-2026-42904 Windows TCP/IP Elevation of Privilege Vulnerability

...

CVE-2026-42903

Windows Kerberos in Windows is affected by CVE-2026-42903, a null pointer dereference that can be exploited by an authorized attacker over the network to cause a denial of service. The CVSS data indicates network access with low attack complexity, low privileges required, no user interaction, and...

CVE-2026-42836 Windows Function Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability

...

EUVD-2026-35591

Buffer over-read in Windows Projected File System Filter Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-42836 Windows Function Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability

...

CVE-2026-42837 Windows Projected File System Elevation of Privilege Vulnerability

...

CVE-2026-42837 Windows Projected File System Elevation of Privilege Vulnerability

...

CVE-2026-50507 Windows BitLocker Security Feature Bypass Vulnerability

...

EUVD-2026-35589

Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack...

CVE-2026-50507 Windows BitLocker Security Feature Bypass Vulnerability

...