CVE-2026-100216

Stack-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally...

CVE-2026-100201

Heap-based buffer overflow in Windows Client License Service allows an authorized attacker to elevate privileges locally...

CVE-2026-108471

Windows Virtualization-Based Security (VBS) Enclave is susceptible to an untrusted pointer dereference vulnerability. This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is characterized by a high severity base score of 8.8 , with significant impacts ...

CVE-2026-108133

A release of invalid pointer or reference vulnerability exists in Windows Modern Device Management (MDM) . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is categorized under CWE-763 and carries a High base severity score of 7.8. No specific expl...

CVE-2026-108130

A heap-based buffer overflow exists in the Windows Virtualization-Based Security (VBS) Enclave . This vulnerability allows an authorized attacker to achieve local privilege elevation . No specific exploit information or remediation details are provided in the documents beyond the confirmation of ...

CVE-2026-97810

A heap-based buffer overflow vulnerability exists in the Windows Container Isolation FS Filter Driver (unionfs.sys) . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is tracked as CVE-2026-97810 with a CVSS 3.1 base score of 7.0 (High) . No specif...

CVE-2026-97804

A heap-based buffer overflow vulnerability exists in the HID class driver . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability's base score is 7.8 (High) , with impacts on confidentiality, integrity, and availability. No specific exploit information ...

CVE-2026-97811

A double free vulnerability exists in OpenSSH for Windows , which allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-415 (Double Free) and CWE-400 (Uncontrolled Resource Consumption). While the impact is categorized as high for confident...

CVE-2026-97812

A double free vulnerability exists in the Windows Update Orchestrator Service . This flaw allows an authorized attacker to perform a local privilege escalation . The CVSS 3.1 score is 7.0 (High) , with an attack vector of Local and high impact on confidentiality, integrity, and availability. No s...

CVE-2026-97806

A Use after free vulnerability exists in the Windows Broadcast DVR User Service . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-416 and has a CVSS 3.1 base score of 7.8 (High) . No specific exploit details or remediation v...

EUVD-2026-100410

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-100411

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally...

CVE-2026-105010

A Use after free vulnerability exists in the Microsoft Windows Search Component . This flaw allows an unauthorized attacker to achieve privilege elevation over a network. The vulnerability has been assigned a CRITICAL CVSS v3.1 base score of 9.8 and is associated with CWE-416 . Official remediati...

CVE-2026-105007

An elevation of privilege vulnerability exists in the Network Driver Interface Specification (NDIS) because ndis.sys fails to validate buffer length before copying memory. In a local attack scenario, an attacker with the ability to execute a malicious application could run a specially crafted app...

CVE-2026-103578

A vulnerability in the Windows Kernel involves an untrusted pointer dereference (CWE-822). This flaw allows an unauthorized attacker to achieve privilege elevation via a physical attack . No specific component or file is identified, and no exploit details or specific remediation versions are prov...

CVE-2026-105004

A high-severity out-of-bounds read vulnerability exists in the Windows Overlay Filter . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is characterized by CWE-125 and carries a CVSS 3.1 base score of 7.8 . Specific details regarding the impacted ...

CVE-2026-105006

A use after free vulnerability exists in the HID class driver . This flaw allows an unauthorized attacker to perform a physical attack to achieve privilege elevation . The vulnerability is associated with CWE-416 . No specific affected versions or exploit links are provided in the documentation; ...

CVE-2026-102869

The .NET framework and Visual Studio are affected by a type confusion vulnerability (CWE-843 ), where an access of resource using incompatible type allows an unauthorized attacker to elevate privileges over a network. This vulnerability has a CVSS v3.1 score of 8.8 , indicating a High severity im...

CVE-2026-102226

A path traversal vulnerability exists in Dynamics Business Central due to an improper limitation of a pathname to a restricted directory. This flaw allows an authorized attacker to elevate privileges over a network. The vulnerability has a CVSS 3.1 base score of 8.8 (High), with impacts on confid...

CVE-2026-102217

A vulnerability exists in WebDAV due to improper resolution of path equivalence . This flaw allows an authorized attacker to achieve privilege elevation over a network. The vulnerability is associated with CWE-41 and has been assigned a HIGH base severity score of 8.8 under CVSS v3.1. No specific...