CVE-2026-83518

A heap-based buffer overflow exists in the RPC Runtime , which allows an authorized attacker to perform a local privilege escalation . The vulnerability is associated with a HIGH severity rating (CVSS 3.1 score of 7.8). No specific exploit code or in-the-wild exploitation details are provided in ...

CVE-2026-69633

A heap-based buffer overflow vulnerability exists in Windows Update . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is categorized under CWE-122 . Remediation involves applying the official fix provided by Microsoft. No specific exploit details ...

CVE-2026-81969

The Windows Server Update Service is affected by a vulnerability involving insufficient granularity of access control . This flaw allows an authorized attacker to perform a local privilege escalation . The vulnerability is characterized by a HIGH base severity score of 7.8 and is associated with ...

CVE-2026-69882

A vulnerability in Windows Update involving an untrusted search path allows an authorized attacker to achieve local privilege elevation . The flaw is associated with CWE-426 . The risk is categorized as HIGH with a CVSS 3.1 base score of 7.8 . No specific software versions or exploit details are ...

CVE-2026-72934

A Use after free vulnerability exists in the Windows Program Compatibility Assistant Service . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is confirmed with a HIGH base severity score of 7.0. No specific technical root cause details or remedia...

CVE-2026-72955

A Use after free vulnerability in the Windows Application Compatibility Cache allows an authorized attacker to achieve local privilege elevation . The vulnerability is categorized under CWE-416 and has a CVSS 3.1 base score of 7.0 . While the root cause is identified as a use after free error, sp...

CVE-2026-70285

A Heap-based buffer overflow exists in the Windows Win32 Kernel Subsystem , which could allow an authorized attacker to elevate privileges locally . While the specific affected versions and remediation steps are not detailed in the provided documents, the vulnerability is confirmed with a High ba...

CVE-2026-70274

A Use after free vulnerability exists in the Windows Bind Filter Driver . This flaw allows an authorized attacker to achieve local privilege escalation . No specific exploit details, affected versions, or remediation steps are provided in the documents.

CVE-2026-70255

A heap-based buffer overflow vulnerability exists in the Desktop Window Manager , which allows an authorized attacker to perform a local privilege elevation . The CVSS 3.1 score of 7.8 reflects high impact across confidentiality, integrity, and availability. No specific exploit information or rem...

CVE-2026-68836

A heap-based buffer overflow exists in Windows kernel32.dll , which can be exploited by an authorized attacker to achieve local privilege escalation . The vulnerability impacts the core Windows operating system. Documentation indicates that an official fix is available, but specific patch version...

CVE-2026-70218

The Windows StateRepository API is affected by an insufficient granularity of access control vulnerability. This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-1220 and CWE-285 . No specific exploitation details or patch version...

CVE-2026-70223

A Use after free vulnerability exists in the Windows Console Driver . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability has a CVSS 3.1 base score of 7.0 (High) , with impacts affecting confidentiality, integrity, and availability. Remediation is ava...

CVE-2026-70233

A heap-based buffer overflow exists in the Windows Common Log File System Driver . This vulnerability allows an authorized attacker to achieve local privilege elevation . The CVSS 3.1 score is 7.8 (HIGH) , reflecting high impact on confidentiality, integrity, and availability. No specific exploit...

CVE-2026-70142

The Windows Update Service is affected by an Untrusted Search Path vulnerability (CWE-426 ). This flaw allows an authorized attacker to achieve local privilege escalation . The impact includes high levels of risk to confidentiality , integrity , and availability . Remediation is available via an ...

CVE-2026-70168

A Use after free vulnerability exists in the Windows Ancillary Function Driver for WinSock . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability has a CVSS 3.1 base score of 7.0 (HIGH) . No specific exploit details or remediation steps are provided in...

CVE-2026-70115

A Use after free vulnerability exists in the Microsoft Windows Search Component . This flaw allows an authorized attacker to perform a local privilege escalation . No specific exploit details or patch versions are provided in the documents.

CVE-2026-70140

A Use after free vulnerability exists in the Windows Audio Service , which could allow an authorized attacker to achieve local privilege escalation . The vulnerability's base score is 7.0, categorized as HIGH severity, with impacts on confidentiality, integrity, and availability. Technical detail...

CVE-2026-70118

A Use after free vulnerability exists in the Windows Audio Service . This flaw allows an authorized attacker to achieve local privilege escalation . While the specific technical root cause is not detailed in the provided documents, the vulnerability is confirmed by Microsoft and carries a CVSS 3....

CVE-2026-70103

A heap-based buffer overflow vulnerability exists in Windows Error Reporting . This flaw allows an authorized attacker to achieve local privilege escalation . The CVSS 3.1 score is 7.8 (High) , with impacts affecting confidentiality, integrity, and availability. Official remediation is available ...

CVE-2026-70114

A Heap-based buffer overflow vulnerability exists in the Windows Kernel . This flaw allows an authorized attacker to achieve local privilege escalation . Specific details regarding the vulnerable component, root cause, or exploit code are not provided in the documents. Remediation is available vi...