CVE-2026-77894

CVE-2026-77894 is a local privilege escalation vulnerability in Windows Installer caused by a race condition — specifically, concurrent execution of a shared resource with improper synchronization. An authorized attacker with low privileges can exploit this to gain high integrity over confidentia...

EUVD-2026-73283

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Installer allows an authorized attacker to elevate privileges locally...

EUVD-2026-73245

Time-of-check time-of-use toctou race condition in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

CVE-2026-69804

A time-of-check time-of-use (TOCTOU) race condition in Microsoft Office SharePoint allows an authorized attacker (low privileges required) to achieve remote code execution over the network. The vulnerability is rated CVSS 7.5 (HIGH) with high impact to confidentiality, integrity, and availability...

EUVD-2026-73083

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally...

CVE-2026-70582

Windows Management Instrumentation (WMI) is affected by a race condition caused by concurrent execution using a shared resource with improper synchronization. An authorized local attacker can leverage this to elevate privileges . The CVSS 3.1 base score is 6.4 (MEDIUM) , reflecting a local attack...

EUVD-2026-73038

Time-of-check time-of-use toctou race condition in Windows USB Audio Class driver usbaudio.sys allows an authorized attacker to elevate privileges locally...

EUVD-2026-72974

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69448

CVE-2026-69448 is a local privilege escalation vulnerability in the Windows Bluetooth Service , caused by a race condition due to concurrent execution using a shared resource with improper synchronization. An authorized attacker can exploit this to elevate privileges locally, with a CVSS 3.1 scor...

CVE-2026-69404

CVE-2026-69404 is a race condition in Windows TCP/IP caused by concurrent execution using a shared resource with improper synchronization, allowing an authorized local attacker (low privileges required) to elevate privileges . The CVSS 3.1 score is 7.0 (HIGH) with a local attack vector, high comp...

EUVD-2026-73238

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows TCP/IP allows an authorized attacker to elevate privileges locally...

EUVD-2026-73191

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally...

CVE-2026-68824

A race condition (concurrent execution using a shared resource with improper synchronization) in Windows Connected User Experiences and Telemetry allows an authorized local attacker to escalate privileges. The vulnerability is rated CVSS 7.0 (High) with local attack vector, high complexity, and f...

EUVD-2026-73179

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

CVE-2026-50349

A race condition (concurrent execution using a shared resource with improper synchronization) in the Windows Ancillary Function Driver for WinSock allows an authorized attacker with low privileges to escalate privileges locally. The vulnerability is rated CVSS 3.1 7.0 (HIGH) with high impact on c...

CVE-2026-69782

Windows DNS Server is affected by a race condition caused by concurrent execution using a shared resource with improper synchronization. This flaw allows an unauthorized attacker to achieve remote code execution over the network with no privileges required , though the attack complexity is rated ...

EUVD-2026-73172

Concurrent execution using shared resource with improper synchronization 'race condition' in DNS Server allows an unauthorized attacker to execute code over a network...

EUVD-2026-73171

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows DNS allows an unauthorized attacker to deny service over a network...

CVE-2026-70091

CVE-2026-70091 is a race condition in Windows DNS caused by concurrent execution using a shared resource with improper synchronization. An unauthorized, network-based attacker can exploit this to cause a denial of service . The vulnerability is rated CVSS 5.9 (MEDIUM) with a network attack vector...

CVE-2026-82056 Race Condition in MongoDB Server Text Index Query Parsing Leads to Heap Use-After-Free and Denial of Service

A race condition in MongoDB server's text index query parsing can cause a heap use-after-free read when handling upsert retry paths. Under certain concurrent index lifecycle operations, a raw pointer to internal text index metadata may be dereferenced after the underlying structures have been...