CVE-2026-95635

Photoshop Desktop is affected by a Double Free (CWE-415) vulnerability. This flaw could allow an attacker to achieve arbitrary code execution within the context of the current user. Successful exploitation requires user interaction , specifically when a victim opens a malicious file. No specific ...

drmemory

Dr. Memory: the memory debugger About Dr. Memory Dr. Memory is a memory monitoring tool capable of identifying memory-related programming errors such as accesses of uninitialized memory, accesses to unaddressable memory including outside of allocated heap units and heap underflow and overflow,...

CVE-2026-108132

A Double free vulnerability exists in Windows Kerberos that allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-415 . While no specific exploit links or internal component paths are provided in the documents, the vulnerability has a High b...

CVE-2026-97830

A double free vulnerability in Windows Internet Information Services allows an unauthorized attacker to perform a denial of service over a network. The vulnerability is associated with CWE-415 and has a CVSS 3.1 base score of 7.5 (High). No specific exploit information or direct remediation steps...

CVE-2026-97811

A double free vulnerability exists in OpenSSH for Windows , which allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-415 (Double Free) and CWE-400 (Uncontrolled Resource Consumption). While the impact is categorized as high for confident...

CVE-2026-97812

A double free vulnerability exists in the Windows Update Orchestrator Service . This flaw allows an authorized attacker to perform a local privilege escalation . The CVSS 3.1 score is 7.0 (High) , with an attack vector of Local and high impact on confidentiality, integrity, and availability. No s...

CVE-2026-97772

A double free vulnerability in Microsoft Office Excel allows an unauthorized attacker to achieve remote code execution over a network. The issue is classified with a CVSS 3.1 score of 8.8 (High) . Microsoft has released security updates to address this vulnerability; users are advised to install ...

CVE-2026-95943

A double free vulnerability exists in the Connected Devices Platform Service (Cdpsvc) . This flaw allows an authorized attacker to achieve local privilege escalation . The CVSS 3.1 score is 7.0 (High) , indicating high impact on confidentiality, integrity, and availability. An official fix is ava...

CVE-2026-88171

A double free vulnerability in the Windows DHCP Server allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is categorized under CWE-415 . While the severity is high, the exploit code maturity is currently listed as unproven . No specific exploit link...

CVE-2026-88149

A double free vulnerability exists in the Windows Ancillary Function Driver for WinSock . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability has a high severity rating with a CVSS 3.1 score of 7.0. No specific exploit details or direct links to in-th...

CVE-2026-83634

A double free vulnerability in Windows BitLocker allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-415 . While the specific component or file is not detailed in the provided documents, the impact involves high consequences for confidenti...

CVE-2026-97767

A double free vulnerability exists in Microsoft Office Excel , which could allow an unauthorized attacker to achieve remote code execution over a network. The impact is rated as HIGH with a CVSS 3.1 score of 8.8 . Microsoft has released updates to address this vulnerability; users are encouraged ...

CVE-2026-97749

A double free vulnerability in Microsoft Office Outlook allows an unauthorized attacker to achieve remote code execution over a network. This vulnerability has a CRITICAL CVSSv3.1 base score of 9.8 . Microsoft has released updates to address this issue; users are recommended to install the latest...

CVE-2026-96864

A double free vulnerability exists in the Microsoft Failover Cluster Virtual Driver . This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is classified as CRITICAL with a CVSS 3.1 score of 9.8 . While the documents confirm the impact is the...

CVE-2026-88071

A double free vulnerability exists in Windows Hyper-V , which can be exploited by an authorized attacker to achieve local privilege escalation . While the CVSS 3.1 score indicates a High severity (7.8), the documents do not provide specific details regarding the affected component, file, or speci...

CVE-2026-85936

A Double free vulnerability in the Windows Shell allows an unauthorized attacker to execute arbitrary code over a network. This vulnerability is categorized under CWE-415 (Double Free) and CWE-122 (Heap-based Buffer Overflow). The issue results in High severity impacts on confidentiality, integri...

CVE-2026-85829

A double free vulnerability exists in the Windows Wired AutoConfig Service . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-415 . No specific exploitation details or remediation steps are provided in the documents beyond th...

CVE-2026-84012

A double free vulnerability exists in the Remote Desktop Gateway Service . This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is associated with CWE-415 . While the specific software versions and detailed root causes are not explicitly lis...

CVE-2026-83916

A double free vulnerability in Windows Error Reporting allows an authorized attacker to achieve local code execution . The vulnerability is characterized by a CWE-415 flaw, which can lead to significant impacts on confidentiality, integrity, and availability . An official fix is available, and sp...

CVE-2026-83842

A double free vulnerability exists within the Windows TCP/IP stack. This flaw allows an authorized attacker to achieve local privilege escalation . Exploitation details and specific affected versions are not provided in the documents. Remediation involves applying the official fix from Microsoft.