CVE-2026-83719: Buffer Over-read

Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information locally...

CVE-2026-83713: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Out-of-bounds read in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to disclose information locally...

CVE-2026-83654: Missing Authentication for Critical Function

Missing authentication for critical function in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges locally...

CVE-2026-83652: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally...

CVE-2026-83518: Heap-based Buffer Overflow

Heap-based buffer overflow in RPC Runtime allows an authorized attacker to elevate privileges locally...

CVE-2026-83499: Insufficient Granularity of Access Control

Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69718: Improper Neutralization of Special Elements used in a Command

Improper neutralization of special elements used in a command 'command injection' in Windows Update allows an authorized attacker to elevate privileges locally...

CVE-2026-69673: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in Windows Update allows an authorized attacker to elevate privileges locally...

CVE-2026-70580: Missing Authentication for Critical Function

Missing authentication for critical function in Windows Credential Guard allows an authorized attacker to perform spoofing locally...

CVE-2026-70284: Use of Uninitialized Resource

Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally...

CVE-2026-70247: Out-of-bounds Read

Out-of-bounds read in Windows HTTP.sys allows an authorized attacker to execute code locally...

CVE-2026-70155: Missing Release of Memory after Effective Lifetime

Missing release of memory after effective lifetime in Windows DNS allows an unauthorized attacker to deny service over a network...

CVE-2026-70133: Allocation of Resources Without Limits or Throttling

Allocation of resources without limits or throttling in Windows SMB Server allows an unauthorized attacker to deny service over a network...

CVE-2026-70138: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally...

CVE-2026-70135: Out-of-bounds Read

Out-of-bounds read in Windows Remote POS Driver allows an authorized attacker to disclose information locally...

CVE-2026-70079: Improper Enforcement of Behavioral Workflow

Improper enforcement of behavioral workflow in Windows DNS allows an unauthorized attacker to deny service over a network...

CVE-2026-69974: Out-of-bounds Read

Out-of-bounds read in Desktop Window Manager allows an authorized attacker to disclose information locally...

CVE-2026-69971: Incorrect Authorization

Incorrect authorization in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally...

CVE-2026-69958: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Overlay Filter allows an unauthorized attacker to execute code with a physical attack...

CVE-2026-69942: Buffer Over-read

Buffer over-read in Windows Overlay Filter allows an authorized attacker to execute code locally...