27111 matches found
Microsoft Windows: CVE-2026-70288: Win32k Information Disclosure Vulnerability
Time-of-check time-of-use toctou race condition in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally...
CVE-2026-87700: Use After Free
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...
CVE-2026-88071: Double Free
Double free in Windows Hyper-V allows an authorized attacker to elevate privileges locally...
CVE-2026-70113: Integer Overflow or Wraparound
Integer overflow or wraparound in Windows Client for NFS allows an authorized attacker to elevate privileges locally...
CVE-2026-69926: Access of Resource Using Incompatible Type
Access of resource using incompatible type 'type confusion' in Desktop Window Manager allows an authorized attacker to elevate privileges locally...
CVE-2026-70056: Use After Free
Use after free in Windows Update Service allows an authorized attacker to elevate privileges locally...
CVE-2026-70260: Exposure of Sensitive System Information to an Unauthorized Control Sphere
Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an authorized attacker to disclose information locally...
CVE-2026-85361: Use After Free
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...
CVE-2026-85354: Use After Free
Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
CVE-2026-85835: Buffer Over-read
Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information locally...
CVE-2026-83735: Release of Invalid Pointer or Reference
Release of invalid pointer or reference in Windows Kernel allows an authorized attacker to elevate privileges locally...
CVE-2026-69867: Out-of-bounds Read
Out-of-bounds read in SQLite allows an authorized attacker to elevate privileges locally...
CVE-2026-102207: Concurrent Execution using Shared Resource with Improper Synchronization
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Kernel allows an authorized attacker to elevate privileges locally...
CVE-2026-96911: Improper Link Resolution Before File Access
Improper link resolution before file access 'link following' in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
CVE-2026-96916: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally...
CVE-2026-96305: Use After Free
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...
CVE-2026-96247: Use of Uninitialized Resource
Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally...
CVE-2026-96220: Improper Control of Generation of Code
Improper control of generation of code 'code injection' in Windows Assigned Access allows an authorized attacker to elevate privileges locally...