CVE-2026-70049

Improper neutralization of special elements used in an sql command 'sql injection' in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over an adjacent network...

CVE-2026-70027

Heap-based buffer overflow in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally...

CVE-2026-70023

Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally...

CVE-2026-70026

Use after free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally...

CVE-2026-70010

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally...

CVE-2026-69970

Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69957

Integer overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate privileges locally...

CVE-2026-69963

Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69953

Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally...

CVE-2026-69934

Integer overflow or wraparound in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally...

CVE-2026-69918

Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges locally...

CVE-2026-69909

Heap-based buffer overflow in Microsoft COM for Windows allows an authorized attacker to elevate privileges locally...

CVE-2026-69915

Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally...

CVE-2026-69916

Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally...

CVE-2026-69884

Buffer over-read in Windows GDI allows an authorized attacker to elevate privileges locally...

CVE-2026-69795

Null pointer dereference in Windows Clipboard Server allows an authorized attacker to elevate privileges locally...

CVE-2026-69783

External control of file name or path in Windows Update allows an authorized attacker to elevate privileges locally...

CVE-2026-69763

Use after free in Windows Storage allows an authorized attacker to elevate privileges locally...

CVE-2026-69633

Heap-based buffer overflow in Windows Update allows an authorized attacker to elevate privileges locally...

CVE-2026-69635

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges with a physical attack...