EUVD-2026-99747

Improper access control in Windows Update Stack allows an authorized attacker to perform tampering locally...

EUVD-2026-99677

Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to disclose information locally...

CVE-2026-70137

A vulnerability in Windows Remote Access Connection Manager involves improper access control , which allows an authorized attacker to perform a local information disclosure . The CVSS 3.1 score is 5.5 (Medium) , with a high impact on confidentiality. No specific exploit details or versions are pr...

EUVD-2026-99641

Improper access control in Microsoft Local Security Authority Server lsasrv allows an authorized attacker to elevate privileges locally...

CVE-2026-87710

A vulnerability exists in the Microsoft Local Security Authority Server (lsasrv) due to improper access control . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-362 (Race Condition). No specific exploit details or mitigatio...

EUVD-2026-99633

Improper access control in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally...

CVE-2026-85938

The Windows Broadcast DVR User Service is impacted by an improper access control vulnerability (CWE-862). This flaw allows an authorized attacker to perform a local information disclosure attack. The vulnerability has been assigned a CVSS 3.1 base score of 5.5 (Medium) , with a high impact on con...

EUVD-2026-99611

Insufficient granularity of access control in Windows Mobile Device Management allows an authorized attacker to perform tampering locally...

CVE-2026-70216

A vulnerability exists in Windows Mobile Device Management due to insufficient granularity of access control . This flaw allows an authorized attacker to perform tampering locally . The vulnerability has a CVSS 3.1 score of 5.5 (Medium) and is associated with CWE-1220 . No specific details regard...

CVE-2026-85355

The Windows Common Log File System Driver is vulnerable to an elevation of privilege flaw due to the inclusion of functionality from an untrusted control sphere (CWE-829 ). An authorized attacker can exploit this issue to gain higher privileges locally. The vulnerability has been assigned a HIGH ...

EUVD-2026-99481

Inclusion of functionality from untrusted control sphere in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...

EUVD-2026-99393

Improper access control in Windows NTFS allows an authorized attacker to disclose information locally...

EUVD-2026-99390

Improper access control in Windows Notification allows an authorized attacker to disclose information locally...

CVE-2026-83854

A vulnerability exists in Windows Notification due to improper access control , which allows an authorized attacker to disclose information locally . The vulnerability is associated with CWE-306 (Missing Authentication for Critical Function). A MEDIUM severity rating of 5.5 (CVSS 3.1) is assigned...

CVE-2026-83864

The Windows NTFS file system contains an improper access control vulnerability. This flaw allows an authorized attacker to perform a local information disclosure , potentially exposing sensitive data. While the vulnerability is confirmed, the provided documents do not specify the exact component,...

EUVD-2026-99319

Improper access control in Windows Error Reporting allows an authorized attacker to disclose information locally...

CVE-2026-83658

A vulnerability exists in Windows Error Reporting due to improper access control . This flaw allows an authorized attacker to perform a local information disclosure . The impact is classified as high regarding confidentiality, with a CVSS 3.1 base score of 5.5. Remediation is available via an off...

EUVD-2026-99160

Heap-based buffer overflow in Windows Rich Text Edit Control allows an authorized attacker to elevate privileges locally...

CVE-2026-70093

A heap-based buffer overflow exists in the Windows Rich Text Edit Control . This vulnerability allows an authorized attacker to achieve local privilege elevation . No specific exploit information or workaround details are provided in the documents.

CVE-2026-70096

A heap-based buffer overflow exists in the Windows Rich Text Edit Control , which could allow an unauthorized attacker to achieve Remote Code Execution (RCE) over a network. This vulnerability is rated with a CRITICAL CVSS score of 9.8 . Microsoft has released official updates to address this iss...