CVE-2026-97790

Improper link resolution before file access 'link following' in Windows Container Isolation FS Filter Driver unionfs.sys allows an authorized attacker to perform tampering locally...

CVE-2026-96316

Improper access control in Windows Routing and Remote Access Service RRAS allows an authorized attacker to perform tampering locally...

CVE-2026-96311

Improper authorization in Windows Network List Service allows an authorized attacker to perform tampering locally...

CVE-2026-96218

Improper access control in Windows Update Stack allows an authorized attacker to perform tampering locally...

CVE-2026-88162

Improper authorization in Windows Encrypting File System EFS allows an authorized attacker to perform tampering locally...

CVE-2026-87709

Improper access control in Windows Host Guardian Service allows an authorized attacker to perform tampering locally...

CVE-2026-84009

Time-of-check time-of-use toctou race condition in Windows Projected File System allows an authorized attacker to perform tampering locally...

CVE-2026-83697

Time-of-check time-of-use toctou race condition in Windows Modern Device Management MDM allows an authorized attacker to perform tampering locally...

CVE-2026-83681

Weak authentication in Microsoft PowerToys allows an authorized attacker to perform tampering locally...

CVE-2026-83657

Weak authentication in Windows Modern Device Management MDM allows an authorized attacker to perform tampering locally...

CVE-2026-70083

Incorrect authorization in DNS Server allows an authorized attacker to perform tampering locally...

CVE-2026-103560

Improper authorization in DNS Server allows an authorized attacker to perform tampering locally...

CVE-2026-97790

The Windows Container Isolation FS Filter Driver (unionfs.sys) is vulnerable to an improper link resolution before file access (link following) flaw. This vulnerability allows an authorized attacker to perform local tampering . No specific exploit information or remediation details are provided i...

EUVD-2026-100237

Missing authentication for critical function in Windows Security Account Manager allows an authorized attacker to perform tampering locally...

EUVD-2026-100075

Improper access control in Windows Host Guardian Service allows an authorized attacker to perform tampering locally...

CVE-2026-87709

A vulnerability exists in the Windows Host Guardian Service due to improper access control . This flaw allows an authorized attacker to perform tampering locally . The vulnerability is associated with CWE-250 (Execution with Unnecessary Privileges) . While the technical root cause is not detailed...

CVE-2026-83697

A Time-of-check time-of-use (TOCTOU) race condition exists in Windows Modern Device Management (MDM) . This vulnerability allows an authorized attacker to perform tampering locally . No specific exploit details or remediation steps are provided in the documents.

EUVD-2026-99955

Time-of-check time-of-use toctou race condition in Windows Modern Device Management MDM allows an authorized attacker to perform tampering locally...

CVE-2026-62879

A missing authentication vulnerability in Windows SmartScreen (CWE-306) allows an authorized attacker to perform tampering locally . The vulnerability impacts the integrity of the system by enabling unauthorized modifications to critical functions. No specific exploit details or in-the-wild explo...

CVE-2026-96855

Improper access control in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally . The vulnerability is associated with CWE-862 (Missing Authorization) . No specific exploit details or in-the-wild exploitation records are provided in the documents. Reme...