CVE-2026-62739 Windows HTTP.sys Elevation of Privilege Vulnerability

...

EUVD-2026-56369

Integer underflow wrap or wraparound in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network...

EUVD-2026-56366

Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally...

EUVD-2026-56367

Untrusted pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-62737 Windows Kernel Elevation of Privilege Vulnerability

...

CVE-2026-62737

CVE-2026-62737 describes a local privilege escalation in Windows 11 kernel via untrusted pointer dereference in the ExecutionContext.sys path. Affected component: Windows kernel driver; vulnerability arises from insufficient validation of a kernel function pointer before dispatch to a worker thre...

CVE-2026-62735

CVE-2026-62735 is a Windows HTTP.sys vulnerability described as a heap-based buffer overflow that enables an authorized, locally interacting attacker to elevate privileges. Evidence across sources confirms a local-exploit path with high impact (C/H/I/A), CVSS 3.1 vector: LOCAL, LOW complexity, LO...

CVE-2026-62735 Windows HTTP.sys Elevation of Privilege Vulnerability

...

CVE-2026-62737 Windows Kernel Elevation of Privilege Vulnerability

...

CVE-2026-62735 Windows HTTP.sys Elevation of Privilege Vulnerability

...

CVE-2026-62740

CVE-2026-62740 describes a vulnerability in the Windows Imaging Component where an uninitialized resource can lead to local information disclosure by an authorized attacker. The issue is reported with a CVSS v3.1 base score of 5.5 (Medium), vector: Local, low attack complexity, and low privileges...

EUVD-2026-56365

Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally...

CVE-2026-62753

CVE-2026-62753 is a heap-based buffer overflow in Windows HTTP.sys that allows local privilege escalation by an authorized attacker. Affected: Windows HTTP.sys; Impact: local high-severity compromise of confidentiality, integrity, and availability. CVSS: 7.0 (3.1) with LOCAL, LOW privileges requi...

CVE-2026-62740 Windows Imaging Component Information Disclosure Vulnerability

...

CVE-2026-62753 Windows HTTP.sys Elevation of Privilege Vulnerability

...

CVE-2026-62753 Windows HTTP.sys Elevation of Privilege Vulnerability

...

CVE-2026-62740 Windows Imaging Component Information Disclosure Vulnerability

...

EUVD-2026-56364

Use of uninitialized resource in Windows Imaging Component allows an authorized attacker to disclose information locally...

EUVD-2026-56363

Buffer over-read in Windows Win32K allows an authorized attacker to disclose information locally...

CVE-2026-62746

CVE-2026-62746 is a Windows Win32k information-disclosure vulnerability described as a buffer over-read that allows an authorized, local attacker to disclose information. Affected component: Win32k (Windows). Impact per provided metrics: confidentiality impact High; attack vector Local; attack co...