Microsoft Windows: CVE-2026-70234: Desktop Window Manager Information Disclosure Vulnerability

Buffer over-read in Desktop Window Manager allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-83706: Windows NTFS Elevation of Privilege Vulnerability

Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83749: Windows Overlay Filter Elevation of Privilege Vulnerability

Use after free in Windows Overlay Filter allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83760: Microsoft Bluetooth Driver Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Bluetooth Driver allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-69718: Windows Update Elevation of Privilege Vulnerability

Improper neutralization of special elements used in a command 'command injection' in Windows Update allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-69882: Windows Update Elevation of Privilege Vulnerability

Untrusted search path in Windows Update allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83644: Windows Audio Service Elevation of Privilege Vulnerability

Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83658: Windows Error Reporting Information Disclosure Vulnerability

Improper access control in Windows Error Reporting allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-70052: Microsoft PowerShell Remote Code Execution Vulnerability

Integer overflow or wraparound in Windows PowerShell allows an authorized attacker to execute code locally...

Microsoft Windows: CVE-2026-70172: Windows NTFS Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85864: Python Elevation of Privilege Vulnerability

Improper privilege management in Python allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85831: Windows Biometric Service Information Disclosure Vulnerability

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-85851: Windows SmartScreen Elevation of Privilege Vulnerability

Use after free in Windows SmartScreen allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85367: Windows Cash Drawer Protocol Provider Elevation of Privilege Vulnerability

Use after free in Windows Cash Drawer Protocol Provider allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85830: Windows Installer Information Disclosure Vulnerability

Out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-85935: Windows USB Driver Information Disclosure Vulnerability

Buffer over-read in Windows USB Driver allows an authorized attacker to disclose information locally...

Microsoft SQL Server: CVE-2026-88085: Microsoft SQL Server Elevation of Privilege Vulnerability

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85909: Windows Universal Disk Format File System Driver (UDFS) Information Disclosure Vulnerability

Out-of-bounds read in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-83918: Windows Kernel Elevation of Privilege Vulnerability

Integer overflow or wraparound in Windows Kernel allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-70260: Microsoft Trace Data Helper Information Disclosure Vulnerability

Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an authorized attacker to disclose information locally...