CVE-2026-62728

The vulnerability CVE-2026-62728 affects Windows systems via the Common Log File System (CLFS) Driver. It is a time-of-check time-of-use (TOCTOU) race condition that allows an authorized, local attacker to elevate privileges. The CVSSv3.1 metrics indicate a Local attack, High impact on confidenti...

CVE-2026-62725 Windows Telephony Service Elevation of Privilege Vulnerability

...

CVE-2026-62721

Technical details about CVE-2026-62721 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2026-62721 Windows User-Mode Power Service (UMPS) Elevation of Privilege Vulnerability

...

EUVD-2026-56639

Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally...

CVE-2026-62725 Windows Telephony Service Elevation of Privilege Vulnerability

...

CVE-2026-62725

CVE-2026-62725 describes a use-after-free in the Windows Telephony Service that can allow a locally authenticated user to elevate privileges. The NVD/CVE records indicate an elevated-privilege, local-execution risk with a CVSS v3.1 base score of 7.0 (high) and impact on confidentiality, integrity...

CVE-2026-62721 Windows User-Mode Power Service (UMPS) Elevation of Privilege Vulnerability

...

EUVD-2026-56637

Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privileges locally...

CVE-2026-62714 Windows DHCP Server Information Disclosure Vulnerability

...

EUVD-2026-56636

Integer underflow wrap or wraparound in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network...

CVE-2026-62714

CVE-2026-62714 describes an integer underflow (wrap/wraparound) in Windows DHCP Server that allows an unauthorized attacker on an adjacent network to disclose information. The NVD entry confirms an ADJACENT network attack vector with LOW complexity, NONE privileges, and NONE user interaction, and...

CVE-2026-62717

Summary: CVE-2026-62717 is a heap-based buffer overflow in Windows Message Queuing that could allow an authorized local attacker to elevate privileges. This is supported by multiple sources (NVD entry and CVE records). Affected component: Windows Message Queuing. Vulnerability type & root cause: ...

CVE-2026-62717 Windows Message Queuing Elevation of Privilege Vulnerability

...

CVE-2026-62714 Windows DHCP Server Information Disclosure Vulnerability

...

CVE-2026-62717 Windows Message Queuing Elevation of Privilege Vulnerability

...

EUVD-2026-56634

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally...

CVE-2026-62711 Windows Win32k Elevation of Privilege Vulnerability

...

CVE-2026-62720 Windows DHCP Server Information Disclosure Vulnerability

...

CVE-2026-62720

The CVE-2026-62720 entry concerns an integer underflow in Windows DHCP Server that can reveal information to an attacker on an adjacent network. The vulnerability, described as a wrap/wraparound error, enables an unauthenticated attacker to disclose data without user interaction. The CVSS context...