CVE-2026-70133: Allocation of Resources Without Limits or Throttling

Allocation of resources without limits or throttling in Windows SMB Server allows an unauthorized attacker to deny service over a network...

CVE-2026-70138: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally...

CVE-2026-70135: Out-of-bounds Read

Out-of-bounds read in Windows Remote POS Driver allows an authorized attacker to disclose information locally...

CVE-2026-70079: Improper Enforcement of Behavioral Workflow

Improper enforcement of behavioral workflow in Windows DNS allows an unauthorized attacker to deny service over a network...

CVE-2026-69974: Out-of-bounds Read

Out-of-bounds read in Desktop Window Manager allows an authorized attacker to disclose information locally...

CVE-2026-69971: Incorrect Authorization

Incorrect authorization in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally...

CVE-2026-69958: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Overlay Filter allows an unauthorized attacker to execute code with a physical attack...

CVE-2026-69942: Buffer Over-read

Buffer over-read in Windows Overlay Filter allows an authorized attacker to execute code locally...

CVE-2026-69905: Missing Authorization

Missing authorization in Windows AppX Deployment Service allows an authorized attacker to perform tampering locally...

CVE-2026-69766: Use After Free

Use after free in Windows Storage allows an authorized attacker to elevate privileges locally...

CVE-2026-97800: Incorrect Permission Assignment for Critical Resource

Incorrect permission assignment for critical resource in Windows Mobile Broadband allows an authorized attacker to elevate privileges locally...

CVE-2026-78556: Improper Certificate Validation

A vulnerability has been identified in Industrial Edge App Publisher All versions V1.27.9. The affected software does not properly validate the server certificate when initiating a TLS connection. This allows an attacker to intercept and relay communication Man-in-the-Middle attack and to spoof a...

CVE-2026-96235: Out-of-bounds Write

Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network...

CVE-2026-96224: Out-of-bounds Write

Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network...

CVE-2026-70161: Improper Limitation of a Pathname to a Restricted Directory

Improper limitation of a pathname to a restricted directory 'path traversal' in .NET allows an authorized attacker to elevate privileges locally...

CVE-2026-95127

An issue in libass v.0.17.5 allows a remote attacker to cause a denial of service via the assoutlineconstruct in libass/assrender.c...

CVE-2026-83568: Missing Authorization

Improper access control in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83875: Windows Human Interface Device Information Disclosure Vulnerability

Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally...

CVE-2026-83841: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Win32K allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-96317: Windows Kernel Elevation of Privilege Vulnerability

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...