Microsoft Windows: CVE-2026-96323: Windows Update Elevation of Privilege Vulnerability

Use after free in Windows Update allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-96249: Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally...

Microsoft SharePoint: CVE-2026-88166: Microsoft Office SharePoint Remote Code Execution Vulnerability

Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

Microsoft Windows: CVE-2026-70160: Windows Kernel Elevation of Privilege Vulnerability

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-69884: Windows GDI Elevation of Privilege Vulnerability

Buffer over-read in Windows GDI allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-88180: Windows DWM Core Library Elevation of Privilege Vulnerability

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-87715: Windows Installer Elevation of Privilege Vulnerability

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-69798: Windows Wired AutoConfig Service Elevation of Privilege Vulnerability

Use after free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83925: Windows Kernel Information Disclosure Vulnerability

Use of uninitialized resource in Windows Kernel allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-85910: Windows StateRepository API Information Disclosure Vulnerability

Buffer over-read in Windows StateRepository API allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-85909: Windows Universal Disk Format File System Driver (UDFS) Information Disclosure Vulnerability

Out-of-bounds read in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-85901: Windows Graphics Component Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83899: Windows Installer Elevation of Privilege Vulnerability

Improper privilege management in Windows Installer allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83889: Windows DNS Server Remote Code Execution Vulnerability

Release of invalid pointer or reference in DNS Server allows an authorized attacker to execute code over a network...

Microsoft Windows: CVE-2026-69635: Windows Installer Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges with a physical attack...

Microsoft Windows: CVE-2026-69733: Windows Update Elevation of Privilege Vulnerability

Untrusted search path in Windows Update allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-70295: Win32k Information Disclosure Vulnerability

Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-70292: Win32k Information Disclosure Vulnerability

Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-70236: Windows Win32k Elevation of Privilege Vulnerability

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-70232: Windows Kernel Information Disclosure Vulnerability

Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally...