CVE-2026-69471

A heap-based buffer overflow exists in the Windows Installer component. This vulnerability allows an authorized attacker to achieve local privilege escalation . The documentation identifies the root cause as a heap-based buffer overflow (CWE-122) and an out-of-bounds read (CWE-125). While the CVS...

CVE-2026-69596

A Use after free vulnerability exists in the Windows Program Compatibility Assistant Service . This flaw allows an authorized attacker to achieve local privilege escalation . No specific exploit details or remediation steps are provided in the documents beyond the official fix status.

CVE-2026-69783

A vulnerability in Windows Update allows an authorized attacker to achieve local privilege escalation . The root cause is identified as external control of file name or path (CWE-73). Impact includes potential high levels of confidentiality, integrity, and availability compromise. No specific ver...

CVE-2026-69733

Windows Update is affected by an untrusted search path vulnerability (CWE-426). This flaw allows an authorized attacker to achieve local privilege escalation . The base severity score is 7.8 (High) , indicating significant impacts on confidentiality, integrity, and availability. No specific explo...

CVE-2026-70237

A Use after free vulnerability exists in the Windows Ancillary Function Driver for WinSock . This flaw allows an authorized attacker to achieve local privilege elevation . While the CVSS v3.1 score reflects a High severity (7.0) with potential for high impact on confidentiality, integrity, and av...

CVE-2026-70067

A use after free vulnerability exists in the Windows Win32 Kernel Subsystem . This flaw allows an authorized attacker to achieve local privilege elevation . While the vulnerability is confirmed, specific technical details regarding the affected component, file, or root cause are not provided in t...

CVE-2026-69880

A type confusion vulnerability exists in the Desktop Window Manager , where an authorized attacker can access resources using an incompatible type. This flaw allows for local privilege elevation . No specific exploit details or patch versions are provided in the documents.

EUVD-2026-99831

Time-of-check time-of-use toctou race condition in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally...

CVE-2026-97794

A heap-based buffer overflow exists in the Windows Container Isolation FS Filter Driver (unionfs.sys) . This vulnerability allows an authorized attacker to achieve local privilege escalation . While the CVSS 3.1 score indicates a High severity (7.8), no specific exploit details or in-the-wild exp...

CVE-2026-96928

An out-of-bounds read vulnerability exists in Windows NTFS that allows an authorized attacker to achieve local privilege elevation . The vulnerability impacts the NTFS file system component. While the specific root cause is not detailed in the provided documents, the impact includes high confiden...

CVE-2026-96995

A stack-based buffer overflow exists in Microsoft Office Word , which allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-121 (Stack-based Buffer Overflow) and CWE-197 (Numeric Truncation Error). Microsoft has released updates to address ...

CVE-2026-69452

A Use after free vulnerability in Windows Enterprise App Management allows an authorized attacker to elevate privileges over a network. The vulnerability is associated with CWE-416 and has a CVSS 3.1 base score of 7.1 (High). No specific exploit code or details on in-the-wild exploitation are pro...

CVE-2026-96863

A heap-based buffer overflow vulnerability exists in the Windows Storage Port Driver . This flaw allows an unauthorized attacker to elevate privileges via a physical attack . The provided documents do not specify the exact affected versions or the specific function/file involved. No information r...

CVE-2026-96868

A heap-based buffer overflow exists in the Windows Kernel , which could allow an authorized attacker to achieve local privilege escalation . The vulnerability is characterized by high complexity and requires local access. No specific exploit details or information regarding in-the-wild exploitati...

CVE-2026-96856

A heap-based buffer overflow exists in Windows Management Instrumentation , which allows an authorized attacker to achieve local privilege elevation . The vulnerability is categorized as HIGH severity with a CVSS 3.1 score of 7.8 . No specific exploit details or evidence of in-the-wild exploitati...

CVE-2026-96318

A Heap-based buffer overflow in Windows Resume allows an authorized attacker to elevate privileges locally . The vulnerability has a CVSS 3.1 base score of 7.8 (High) and is categorized under CWE-122 . While the specific component or file is not detailed, the impact includes high levels of confid...

CVE-2026-96307

A Use after free vulnerability exists in Windows Installer . This flaw allows an authorized attacker to achieve local privilege elevation . The CVSS 3.1 base score is 7.0 (High) , reflecting impacts on confidentiality, integrity, and availability. No specific exploit code or detailed remediation ...

EUVD-2026-99743

Server-side request forgery ssrf in Azure Arc allows an authorized attacker to elevate privileges over a network...

CVE-2026-96220

The Windows Assigned Access feature contains an improper control of generation of code (code injection) vulnerability. This flaw allows an authorized attacker to perform a local privilege escalation . The vulnerability is associated with CWE-94 . No specific exploit links or exploit details are p...

CVE-2026-96204

A Server-side request forgery (SSRF) vulnerability exists in Azure Arc . This flaw allows an authorized attacker to achieve privilege escalation over a network. The vulnerability is associated with CWE-918 . Microsoft has provided updates to address this issue, and users are encouraged to install...