Microsoft Windows: CVE-2026-83634: Windows BitLocker Elevation of Privilege Vulnerability

Double free in Windows BitLocker allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83587: Windows Core Messaging Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows Core Messaging allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83567: Windows NTFS Elevation of Privilege Vulnerability

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-69635: Windows Installer Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges with a physical attack...

Microsoft Windows: CVE-2026-70292: Win32k Information Disclosure Vulnerability

Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-70288: Win32k Information Disclosure Vulnerability

Time-of-check time-of-use toctou race condition in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-70074: Windows DNS Information Disclosure Vulnerability

Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-70071: Role: DNS Server Tampering Vulnerability

Improper verification of cryptographic signature in DNS Server allows an authorized attacker to perform tampering locally...

Microsoft Windows: CVE-2026-70006: Remote Desktop Client Remote Code Execution Vulnerability

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

Microsoft Windows: CVE-2026-69880: Desktop Window Manager Elevation of Privilege Vulnerability

Access of resource using incompatible type 'type confusion' in Desktop Window Manager allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-69931: Windows Storage Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Storage allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-70222: Windows Shell Elevation of Privilege Vulnerability

Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83893: Windows Clipboard User Service Information Disclosure Vulnerability

Exposure of sensitive system information to an unauthorized control sphere in Windows Clipboard User Service allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-83866: Windows Win32k Elevation of Privilege Vulnerability

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83853: Windows Hello Elevation of Privilege Vulnerability

Use after free in Windows Hello allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83832: Windows Spaceport.sys Elevation of Privilege Vulnerability

Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83798: Windows Update Stack Spoofing Vulnerability

Improper verification of cryptographic signature in Windows Update Stack allows an authorized attacker to perform spoofing locally...

Microsoft Windows: CVE-2026-83758: Windows Error Reporting Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to execute code locally...

Microsoft Windows: CVE-2026-83760: Microsoft Bluetooth Driver Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Bluetooth Driver allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-83722: Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability

Use after free in Microsoft Local Security Authority Server lsasrv allows an authorized attacker to elevate privileges locally...