EUVD-2026-22515

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows SSDP Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-22501

Double free in Windows Projected File System allows an authorized attacker to elevate privileges locally...

EUVD-2026-22489

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows SSDP Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-22497

Improper authentication in Windows Active Directory allows an unauthorized attacker to perform spoofing locally...

EUVD-2026-22463

Untrusted pointer dereference in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges locally...

EUVD-2026-22473

Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally...

EUVD-2026-22430

Buffer over-read in Windows Projected File System allows an authorized attacker to elevate privileges locally...

EUVD-2026-22446

Use after free in Windows TDI Translation Driver tdx.sys allows an authorized attacker to elevate privileges locally...

EUVD-2026-22445

Integer underflow wrap or wraparound in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally...

CVE-2026-32070

Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-26184

Buffer over-read in Windows Projected File System allows an authorized attacker to elevate privileges locally...

CVE-2026-26161

Untrusted pointer dereference in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally...

CVE-2026-26153

Out-of-bounds read in Windows Encrypting File System EFS allows an authorized attacker to elevate privileges locally...

CVE-2026-26143

Improper input validation in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature locally...

CVE-2026-20930

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Management Services allows an authorized attacker to elevate privileges locally...

CVE-2026-33101

Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally...

CVE-2026-33825

Insufficient granularity of access control in Microsoft Defender allows an authorized attacker to elevate privileges locally...

CVE-2026-32184

Deserialization of untrusted data in Microsoft High Performance Compute Pack HPC allows an authorized attacker to elevate privileges locally...

Connected User Experiences and Telemetry Service Denial of Service Vulnerability

Improper privilege management in Microsoft Windows allows an authorized attacker to deny service locally...

Windows Push Notifications Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Push Notifications allows an authorized attacker to elevate privileges locally...