CVE-2026-70218

The Windows StateRepository API is affected by an insufficient granularity of access control vulnerability. This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-1220 and CWE-285 . No specific exploitation details or patch version...

CVE-2026-70223

A Use after free vulnerability exists in the Windows Console Driver . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability has a CVSS 3.1 base score of 7.0 (High) , with impacts affecting confidentiality, integrity, and availability. Remediation is ava...

CVE-2026-70233

A heap-based buffer overflow exists in the Windows Common Log File System Driver . This vulnerability allows an authorized attacker to achieve local privilege elevation . The CVSS 3.1 score is 7.8 (HIGH) , reflecting high impact on confidentiality, integrity, and availability. No specific exploit...

CVE-2026-70168

A Use after free vulnerability exists in the Windows Ancillary Function Driver for WinSock . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability has a CVSS 3.1 base score of 7.0 (HIGH) . No specific exploit details or remediation steps are provided in...

CVE-2026-70142

The Windows Update Service is affected by an Untrusted Search Path vulnerability (CWE-426 ). This flaw allows an authorized attacker to achieve local privilege escalation . The impact includes high levels of risk to confidentiality , integrity , and availability . Remediation is available via an ...

CVE-2026-70118

A Use after free vulnerability exists in the Windows Audio Service . This flaw allows an authorized attacker to achieve local privilege escalation . While the specific technical root cause is not detailed in the provided documents, the vulnerability is confirmed by Microsoft and carries a CVSS 3....

CVE-2026-70140

A Use after free vulnerability exists in the Windows Audio Service , which could allow an authorized attacker to achieve local privilege escalation . The vulnerability's base score is 7.0, categorized as HIGH severity, with impacts on confidentiality, integrity, and availability. Technical detail...

CVE-2026-70115

A Use after free vulnerability exists in the Microsoft Windows Search Component . This flaw allows an authorized attacker to perform a local privilege escalation . No specific exploit details or patch versions are provided in the documents.

CVE-2026-70093

A heap-based buffer overflow exists in the Windows Rich Text Edit Control . This vulnerability allows an authorized attacker to achieve local privilege elevation . No specific exploit information or workaround details are provided in the documents.

CVE-2026-70103

A heap-based buffer overflow vulnerability exists in Windows Error Reporting . This flaw allows an authorized attacker to achieve local privilege escalation . The CVSS 3.1 score is 7.8 (High) , with impacts affecting confidentiality, integrity, and availability. Official remediation is available ...

CVE-2026-70114

A Heap-based buffer overflow vulnerability exists in the Windows Kernel . This flaw allows an authorized attacker to achieve local privilege escalation . Specific details regarding the vulnerable component, root cause, or exploit code are not provided in the documents. Remediation is available vi...

CVE-2026-70117

A Heap-based buffer overflow exists in the Windows Win32 Kernel Subsystem . This vulnerability allows an authorized attacker to achieve local privilege escalation . No specific exploit details or exploitation in-the-wild are provided in the documents, but an official fix is available.

CVE-2026-70139

A heap-based buffer overflow exists in the Windows Update Service . This vulnerability allows an authorized attacker to achieve local privilege escalation . While the specific root cause component is not detailed beyond the service name, the impact includes high levels of confidentiality, integri...

CVE-2026-70076

A Use after free vulnerability exists in the Windows Win32 Kernel Subsystem . This flaw allows an authorized attacker to achieve local privilege escalation . While the specific component or file causing the issue is not detailed, the impact is significant for local security boundaries. Remediatio...

CVE-2026-70027

A heap-based buffer overflow exists in the Windows Subsystem for Linux (WSL) . This vulnerability allows an authorized attacker to achieve local privilege elevation . While the specific component or root cause is not detailed in the provided documents, the impact includes unauthorized access to h...

CVE-2026-70015

A Use after free vulnerability exists in the Windows Local Security Authority Subsystem Service (LSASS) . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-122 (Heap-based Buffer Overflow). Official remediation is available vi...

CVE-2026-70021

A use after free vulnerability in Windows Direct Composition allows an authorized attacker to achieve local privilege escalation . While the specific component or file is not detailed, the impact is a high-severity elevation of privileges. Remediation is available via an official fix provided by ...

CVE-2026-69966

An integer overflow or wraparound vulnerability exists in the Microsoft Streaming Service (specifically identified as the Kernel Streaming Service Driver ). This flaw allows an authorized attacker to achieve local privilege escalation . A formal official fix is available, and the vulnerability is...

CVE-2026-70010

A heap-based buffer overflow vulnerability exists in Windows NTFS . This flaw allows an authorized attacker to achieve local privilege escalation . No specific exploit details or remediation versions are provided in the documents, but a high-severity OFFICIAL_FIX is noted in the security metrics.

CVE-2026-69945

The Windows AppX Deployment Extensions component is vulnerable to a local elevation of privilege due to missing authorization . An authorized attacker can exploit this flaw to obtain elevated privileges on the system. The vulnerability has a CVSS 3.1 score of 8.8 (HIGH) and is officially document...