EUVD-2026-73507

Time-of-check time-of-use toctou race condition in Windows Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-69466

CVE-2026-69466 is a Time-of-Check Time-of-Use (TOCTOU) race condition in the Windows Kernel that allows a low-privileged local attacker to elevate privileges . The vulnerability carries a CVSS 3.1 score of 7.0 (High) , with high impact to confidentiality, integrity, and availability, though explo...

EUVD-2026-73505

Time-of-check time-of-use toctou race condition in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...

CVE-2026-69440

CVE-2026-69440 is a Time-of-Check Time-of-Use (TOCTOU) race condition in the Windows MIDI Service Module that allows an authorized low-privilege attacker to achieve local privilege escalation . The vulnerability is scored CVSS 3.1: 7.0 (High) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H ,...

CVE-2026-69398

CVE-2026-69398 is a local privilege escalation vulnerability in the Windows Bluetooth Service , caused by a race condition (concurrent execution using a shared resource with improper synchronization). An authorized local attacker with low privileges can exploit this to gain high confidentiality, ...

EUVD-2026-73488

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69385

CVE-2026-69385 is a local elevation of privilege vulnerability in Windows TCP/IP caused by a race condition (improper synchronization of a shared resource during concurrent execution). An authorized attacker with low privileges can exploit this to gain higher privileges on the target system. The ...

EUVD-2026-73482

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows TCP/IP allows an authorized attacker to elevate privileges locally...

EUVD-2026-73477

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Print Spooler Components allows an authorized attacker to elevate privileges over a network...

CVE-2026-69364

CVE-2026-69364 is an elevation of privilege vulnerability in Windows Print Spooler Components caused by a race condition (concurrent execution using a shared resource with improper synchronization). An authorized attacker (low privileges) can exploit it over a network to gain higher privileges, t...

EUVD-2026-73453

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows USB Video Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-69319

CVE-2026-69319 is a local privilege elevation vulnerability in the Windows USB Video Driver , caused by a race condition — concurrent execution using a shared resource with improper synchronization. An attacker with low local privileges and no user interaction can exploit this under conditions of...

CVE-2026-68840

CVE-2026-68840 is a local privilege escalation vulnerability in the Windows USB Driver , caused by a race condition (concurrent execution using a shared resource with improper synchronization). An authorized attacker (low privileges, no user interaction) can exploit it locally with high complexit...

EUVD-2026-73404

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows USB Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-69827

CVE-2026-69827 affects Windows DNS Server and is caused by a race condition due to improper synchronization of a shared resource during concurrent execution. An unauthorized attacker can exploit this flaw to achieve remote code execution over the network. The Microsoft-assigned CVSS 3.1 score is ...

EUVD-2026-73342

Concurrent execution using shared resource with improper synchronization 'race condition' in DNS Server allows an unauthorized attacker to execute code over a network...

CVE-2026-77894

CVE-2026-77894 is a local privilege escalation vulnerability in Windows Installer caused by a race condition — specifically, concurrent execution of a shared resource with improper synchronization. An authorized attacker with low privileges can exploit this to gain high integrity over confidentia...

EUVD-2026-73283

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Installer allows an authorized attacker to elevate privileges locally...

EUVD-2026-73245

Time-of-check time-of-use toctou race condition in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

CVE-2026-69804

A time-of-check time-of-use (TOCTOU) race condition in Microsoft Office SharePoint allows an authorized attacker (low privileges required) to achieve remote code execution over the network. The vulnerability is rated CVSS 7.5 (HIGH) with high impact to confidentiality, integrity, and availability...