CVE-2026-70271

A Use after free vulnerability exists in the Windows Win32 Kernel Subsystem . This flaw allows an authorized attacker to achieve local privilege elevation . While specific version numbers and exploit details are not provided in the documents, the vulnerability is confirmed by Microsoft and the NV...

CVE-2026-70253

A use after free vulnerability exists in the Windows Win32 Kernel Subsystem . This flaw allows an authorized attacker to achieve local privilege escalation . No specific affected versions, root cause details, or remediation steps are provided in the documents beyond the identification of the subs...

CVE-2026-70249

A Use after free vulnerability exists in the Windows Win32 Kernel Subsystem . This flaw allows an authorized attacker to achieve local privilege escalation . While the vulnerability is confirmed with a High severity rating, specific details regarding the underlying function or file are not provid...

CVE-2026-70176

A Use after free vulnerability exists in the Windows Win32 Kernel Subsystem . This flaw allows an authorized attacker to achieve local privilege elevation . Exploitation details are not provided in the documents. Remediation is available via an official fix from Microsoft.

CVE-2026-70104

A vulnerability in the Windows Win32 Kernel Subsystem involves an untrusted pointer dereference . This flaw enables an authorized attacker to achieve local privilege escalation . The official remediation is an official fix provided by Microsoft.

CVE-2026-70106

A heap-based buffer overflow vulnerability exists in the Windows Kernel . This flaw allows an authorized attacker to achieve local privilege elevation . While the vulnerability is confirmed, specific technical details regarding the affected component or root cause are not provided. No exploit det...

CVE-2026-70117

A Heap-based buffer overflow exists in the Windows Win32 Kernel Subsystem . This vulnerability allows an authorized attacker to achieve local privilege escalation . No specific exploit details or exploitation in-the-wild are provided in the documents, but an official fix is available.

CVE-2026-70121

A Heap-based buffer overflow exists in the Windows Kernel . This vulnerability allows an authorized attacker to achieve local privilege elevation . No specific component, file, or version is identified in the provided documents, and no exploit details or remediation steps are currently available.

CVE-2026-70108

A heap-based buffer overflow vulnerability exists in the Windows Win32 Kernel Subsystem . This flaw allows an authorized attacker to achieve local privilege escalation . No specific exploit details or in-the-wild exploitation information are provided in the documents. Remediation is indicated as ...

CVE-2026-70114

A Heap-based buffer overflow vulnerability exists in the Windows Kernel . This flaw allows an authorized attacker to achieve local privilege escalation . Specific details regarding the vulnerable component, root cause, or exploit code are not provided in the documents. Remediation is available vi...

CVE-2026-70063

A vulnerability exists in the Windows Kernel involving an out-of-bounds read (CWE-125). This flaw allows an authorized attacker to perform a local information disclosure , potentially exposing sensitive system data. The vulnerability has a CVSS 3.1 base score of 4.7 (Medium) , characterized by a ...

CVE-2026-70076

A Use after free vulnerability exists in the Windows Win32 Kernel Subsystem . This flaw allows an authorized attacker to achieve local privilege escalation . While the specific component or file causing the issue is not detailed, the impact is significant for local security boundaries. Remediatio...

CVE-2026-70060

A heap-based buffer overflow exists in the Windows Win32 Kernel Subsystem . This vulnerability allows an authorized attacker to perform a local privilege escalation . No specific exploit details or remediation steps are provided in the documents beyond the identification of the root cause and the...

CVE-2026-70077

A Use after free vulnerability exists in the Windows Kernel , which allows an authorized attacker to perform a local information disclosure . The vulnerability is assigned a CVSS v3.1 base score of 4.7 (Medium) , with an attack vector of Local and high complexity. No specific details regarding af...

CVE-2026-70017

A type confusion vulnerability exists in Windows Secure Kernel Mode , where accessing a resource using an incompatible type allows an authorized attacker to perform a local information disclosure . The vulnerability is assigned CWE-843 . No specific patch versions, exploit links, or additional te...

CVE-2026-70026

A Use after free vulnerability exists in Windows Secure Kernel Mode , which could allow an authorized attacker to achieve local privilege escalation . Technical details regarding the specific component or root cause are not provided in the documents. No exploits or in-the-wild exploitation inform...

CVE-2026-69971

This vulnerability exists in Windows Kernel-Mode Drivers due to incorrect authorization (CWE-863). It allows an authorized attacker to perform a local information disclosure . The impact is categorized as high for confidentiality. An official fix is available, as indicated by the remediation leve...

CVE-2026-69898

A heap-based buffer overflow exists in the Windows Kernel . This vulnerability allows an authorized attacker to perform a local privilege escalation . Information regarding specific affected versions, the root cause component, or a specific patch is not provided in the documents. No exploit detai...

CVE-2026-108466

An out-of-bounds read vulnerability exists in the Windows Kernel . This flaw allows an unauthorized attacker to cause a denial of service over a network. The vulnerability is associated with CWE-125 and has a CVSS 3.1 base score of 5.3 (Medium), where the attack complexity is high and user intera...

CVE-2026-108462

A Windows Kernel information disclosure vulnerability (CVE-2026-108462) allows an authorized attacker to disclose sensitive system information locally . The root cause is the exposure of sensitive system information to an unauthorized control sphere. The vulnerability has a Medium severity and a ...