CVE-2026-108136

A Use after free vulnerability exists in the Microsoft Windows Search Component . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is classified with a CVSS 3.1 base score of 7.8, indicating a High severity. No specific exploit code or in-the-wild e...

CVE-2026-108134

A use after free vulnerability in Windows Autopilot allows an authorized attacker to perform a local privilege escalation . The vulnerability is associated with CWE-416 and has a CVSS 3.1 base score of 7.0 (High) . The documentation does not provide specific details regarding the underlying compo...

CVE-2026-108132

A Double free vulnerability exists in Windows Kerberos that allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-415 . While no specific exploit links or internal component paths are provided in the documents, the vulnerability has a High b...

EUVD-2026-100431

Double free in Windows Internet Information Services allows an unauthorized attacker to deny service over a network...

CVE-2026-97830

A double free vulnerability in Windows Internet Information Services allows an unauthorized attacker to perform a denial of service over a network. The vulnerability is associated with CWE-415 and has a CVSS 3.1 base score of 7.5 (High). No specific exploit information or direct remediation steps...

CVE-2026-97816

A Use after free vulnerability in OpenSSH for Windows allows an unauthorized attacker to execute arbitrary code over a network. The vulnerability has a CVSS 3.1 score of 9.8 and is classified as CRITICAL . Exploitation of this flaw does not require prior authentication or user interaction. While ...

EUVD-2026-100414

Double free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally...

CVE-2026-97807

A Use after free vulnerability exists in the Windows Broadcast DVR User Service . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-416 . No specific exploit details or remediation steps are provided in the documents.

CVE-2026-97806

A Use after free vulnerability exists in the Windows Broadcast DVR User Service . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-416 and has a CVSS 3.1 base score of 7.8 (High) . No specific exploit details or remediation v...

CVE-2026-97809

A Use after free vulnerability (CWE-416) exists in the Windows Broadcast DVR User Service . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability has a base severity score of 7.8 (High) and an official fix is available. No specific exploit code or in-th...

CVE-2026-97811

A double free vulnerability exists in OpenSSH for Windows , which allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-415 (Double Free) and CWE-400 (Uncontrolled Resource Consumption). While the impact is categorized as high for confident...

EUVD-2026-100413

Double free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally...

CVE-2026-97808

A Use after free vulnerability exists in the Windows Broadcast DVR User Service . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability has a high severity score of 7.0, with the impact affecting confidentiality, integrity, and availability. While the s...

EUVD-2026-100410

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-100411

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-100408

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-100409

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally...

CVE-2026-97812

A double free vulnerability exists in the Windows Update Orchestrator Service . This flaw allows an authorized attacker to perform a local privilege escalation . The CVSS 3.1 score is 7.0 (High) , with an attack vector of Local and high impact on confidentiality, integrity, and availability. No s...

CVE-2026-105010

A Use after free vulnerability exists in the Microsoft Windows Search Component . This flaw allows an unauthorized attacker to achieve privilege elevation over a network. The vulnerability has been assigned a CRITICAL CVSS v3.1 base score of 9.8 and is associated with CWE-416 . Official remediati...

CVE-2026-103575

A Use after free vulnerability exists in the Remote Desktop Client , which may allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a CVSS 3.1 base score of 8.8 (High) . While the impact includes high confidentiality, integrity, and availability, u...