CVE-2026-42984

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-42979

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Push Notifications allows an authorized attacker to elevate privileges locally...

CVE-2026-42977

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Push Notifications allows an authorized attacker to elevate privileges locally...

CVE-2026-42980

Integer underflow wrap or wraparound in Windows NT OS Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-42978

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Push Notifications allows an authorized attacker to elevate privileges locally...

CVE-2026-42970

Exposure of sensitive information to an unauthorized actor in Windows Push Notifications allows an authorized attacker to disclose information locally...

CVE-2026-42969

Use of uninitialized resource in Windows Push Notifications allows an authorized attacker to disclose information locally...

CVE-2026-42971

Exposure of sensitive information to an unauthorized actor in Windows Push Notifications allows an authorized attacker to disclose information locally...

CVE-2026-42912

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Telephony Service allows an authorized attacker to elevate privileges locally...

CVE-2026-42916

Integer overflow or wraparound in Windows NT OS Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-42907

Exposure of sensitive information to an unauthorized actor in Windows Shell allows an authorized attacker to disclose information over a network...

CVE-2026-42835

Improper neutralization of special elements in output used by a downstream component 'injection' in Microsoft Teams for Android allows an authorized attacker to disclose information over a network...

CVE-2026-42903

Null pointer dereference in Windows Kerberos allows an authorized attacker to deny service over a network...

CVE-2026-42828

Buffer over-read in Windows Projected File System Filter Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-41092

Improper access control in Microsoft Kinect allows an authorized attacker to elevate privileges locally...

CVE-2026-41098

Improper neutralization of input during web page generation 'cross-site scripting' in Azure Stack Edge allows an authorized attacker to perform spoofing over a network...

CVE-2026-40371

Improper handling of insufficient permissions or privileges in Microsoft Dynamics 365 on-premises allows an authorized attacker to elevate privileges over a network...

EUVD-2026-35761

Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...

CVE-2026-44813

CVE-2026-44813 is a Windows vulnerability described as a use-after-free in the Windows DWM Core Library that enables an authorized local attacker to elevate privileges. The NVD/MSRC entries identify the affected component as the Windows DWM Core Library with an impact profile including local priv...

CVE-2026-44808

Affects: Windows DWM Core Library. Issue: Use-after-free in DWM Core Library leading to local privilege escalation by an authorized attacker. Impact: CVSS 3.1 base score 7.8 (HIGH) with LOCAL exploit, low attack complexity, and privileges required. Root cause: use-after-free vulnerability. Exploi...