CVE-2026-72935

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally...

CVE-2026-72929

Improper validation of integrity check value in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-72926

Use after free in Windows Internet Connection Sharing ICS allows an authorized attacker to elevate privileges locally...

CVE-2026-71353

Double free in Windows Routing and Remote Access Service RRAS allows an authorized attacker to elevate privileges locally...

CVE-2026-72927

Heap-based buffer overflow in Winsock allows an authorized attacker to elevate privileges locally...

CVE-2026-71351

Double free in Windows Routing and Remote Access Service RRAS allows an authorized attacker to elevate privileges locally...

CVE-2026-71342

Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally...

CVE-2026-71338

Double free in Windows Failover Cluster allows an authorized attacker to elevate privileges locally...

CVE-2026-71340

Use after free in Windows File History Service allows an authorized attacker to elevate privileges locally...

CVE-2026-71334

Heap-based buffer overflow in Windows NFS Portmapper allows an authorized attacker to elevate privileges locally...

CVE-2026-71337

Stack-based buffer overflow in Windows Storage Management Provider allows an authorized attacker to elevate privileges locally...

CVE-2026-71339

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-71332

Use after free in Windows Secure Socket Tunneling Protocol SSTP allows an authorized attacker to elevate privileges locally...

CVE-2026-71333

Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally...

CVE-2026-70583

Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges locally...

CVE-2026-70582

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally...

CVE-2026-70584

Access of resource using incompatible type 'type confusion' in Windows Core Messaging allows an authorized attacker to elevate privileges locally...

CVE-2026-70577

Use after free in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges locally...

CVE-2026-70574

Out-of-bounds read in Virtual Hard Disk VHD Miniport Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-70578

Heap-based buffer overflow in Windows Credential Guard allows an authorized attacker to elevate privileges locally...