CVE-2026-83644: Use After Free

Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally...

CVE-2026-83583: Missing Authorization

Improper access control in Windows Geotag Broker allows an authorized attacker to elevate privileges locally...

CVE-2026-83518: Heap-based Buffer Overflow

Heap-based buffer overflow in RPC Runtime allows an authorized attacker to elevate privileges locally...

CVE-2026-83499: Insufficient Granularity of Access Control

Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69718: Improper Neutralization of Special Elements used in a Command

Improper neutralization of special elements used in a command 'command injection' in Windows Update allows an authorized attacker to elevate privileges locally...

CVE-2026-69673: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in Windows Update allows an authorized attacker to elevate privileges locally...

CVE-2026-70580: Missing Authentication for Critical Function

Missing authentication for critical function in Windows Credential Guard allows an authorized attacker to perform spoofing locally...

CVE-2026-69644: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Exposure of sensitive system information to an unauthorized control sphere in Windows iSCSI allows an authorized attacker to disclose information locally...

CVE-2026-70284: Use of Uninitialized Resource

Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally...

CVE-2026-70247: Out-of-bounds Read

Out-of-bounds read in Windows HTTP.sys allows an authorized attacker to execute code locally...

CVE-2026-70155: Missing Release of Memory after Effective Lifetime

Missing release of memory after effective lifetime in Windows DNS allows an unauthorized attacker to deny service over a network...

CVE-2026-70133: Allocation of Resources Without Limits or Throttling

Allocation of resources without limits or throttling in Windows SMB Server allows an unauthorized attacker to deny service over a network...

CVE-2026-70138: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally...

CVE-2026-70135: Out-of-bounds Read

Out-of-bounds read in Windows Remote POS Driver allows an authorized attacker to disclose information locally...

CVE-2026-70083: Incorrect Authorization

Incorrect authorization in DNS Server allows an authorized attacker to perform tampering locally...

CVE-2026-70079: Improper Enforcement of Behavioral Workflow

Improper enforcement of behavioral workflow in Windows DNS allows an unauthorized attacker to deny service over a network...

CVE-2026-69974: Out-of-bounds Read

Out-of-bounds read in Desktop Window Manager allows an authorized attacker to disclose information locally...

CVE-2026-69971: Incorrect Authorization

Incorrect authorization in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally...

CVE-2026-69958: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Overlay Filter allows an unauthorized attacker to execute code with a physical attack...

CVE-2026-69942: Buffer Over-read

Buffer over-read in Windows Overlay Filter allows an authorized attacker to execute code locally...