CVE-2026-62749 Windows Kernel Elevation of Privilege Vulnerability

...

EUVD-2026-56647

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Telephony Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-56646

Heap-based buffer overflow in Windows Telephony Service allows an authorized attacker to elevate privileges locally...

CVE-2026-62743

CVE-2026-62743 describes an out-of-bounds read in Windows Win32K that can lead to local information disclosure by an authorized attacker. The vulnerability affects the Win32K component and is exploitable with low privileges and no user interaction, with a local attack vector. The CVSS3.1 base sco...

EUVD-2026-56641

Time-of-check time-of-use toctou race condition in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-62721

Technical details about CVE-2026-62721 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2026-62725 Windows Telephony Service Elevation of Privilege Vulnerability

...

EUVD-2026-56634

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally...

CVE-2026-62711 Windows Win32k Elevation of Privilege Vulnerability

...

CVE-2026-62710 Windows Device Association Service Elevation of Privilege Vulnerability

...

CVE-2026-62708 Windows Kernel Elevation of Privilege Vulnerability

...

CVE-2026-62700

CVE-2026-62700 describes a heap-based buffer overflow in Windows NTFS that allows an authenticated, local attacker to elevate privileges. The vulnerability affects the NTFS component on Windows and is rated CVSSv3.1#3.1 with a base score of 7.8 (HIGH) and local attack vector/low complexity, requi...

CVE-2026-61938 Windows Installer Elevation of Privilege Vulnerability

...

CVE-2026-61938 Windows Installer Elevation of Privilege Vulnerability

...

CVE-2026-61926

CVE-2026-61926 : Heap-based buffer overflow in the Windows USB Driver allows an authorized local attacker to perform a local privilege escalation . Exploitation details are not provided beyond the CVSS metrics (LOCAL, LOW complexity, LOW privileges, NONE user interaction; high impact to confident...

CVE-2026-61349

Use after free in Windows Work Folder Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-56610

Use after free in Virtual Hard Disk VHD Miniport Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-59119 PowerShell Elevation of Privilege Vulnerability

...

CVE-2026-42976

Missing authentication for critical function in Windows RPC API allows an authorized attacker to elevate privileges locally...

CVE-2026-70304

Windows DNS contains a heap-based buffer overflow exploitable by an authorized local attacker to elevate privileges. NVD rates it HIGH (7.8, PR:L); Microsoft's CVSS rates MEDIUM (6.7, PR:H). No in-the-wild exploitation reported. Patch via August 2026 Microsoft security updates (KB5121000, KB51202...