CVE-2026-62723 Windows Telephony Service Elevation of Privilege Vulnerability

...

CVE-2026-62722 Microsoft Brokering File System Elevation of Privilege Vulnerability

...

CVE-2026-62722

The CVE-2026-62722 issue affects the Windows Bind Filter Driver and is caused by a heap-based buffer overflow, enabling an authorized local attacker to achieve privilege escalation. The provided sources confirm the vulnerability and its local, high-severity impact (CVE-2026-62722 with CVSS 3.1: A...

CVE-2026-62713 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

...

CVE-2026-62690 Windows Push Notifications Elevation of Privilege Vulnerability

...

CVE-2026-62695 Windows Storage Elevation of Privilege Vulnerability

...

CVE-2026-61934 Windows Bind Filter Driver Elevation of Privilege Vulnerability

...

CVE-2026-61928 Windows Hello Tampering Vulnerability

...

CVE-2026-61925 Windows Installer Elevation of Privilege Vulnerability

...

CVE-2026-61925

CVE-2026-61925 describes an elevation of privilege vulnerability in Windows Installer caused by incorrect authorization checks. An authenticated local attacker can exploit this to gain higher privileges on the host. CVSS v3.1 metrics indicate a HIGH-severity, local attacker, no user interaction, ...

EUVD-2026-56322

Use after free in Windows DHCP Client allows an authorized attacker to execute code locally...

EUVD-2026-56323

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

CVE-2026-61348

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

EUVD-2026-56313

Weak authentication in Microsoft Windows Search Component allows an authorized attacker to disclose information locally...

CVE-2026-59128

Out-of-bounds read in Windows Encrypting File System EFS allows an authorized attacker to disclose information locally...

EUVD-2025-210686

Weak permissions in the Vitis™ Unified installation path on local Windows machines could allow a low-privileged user to create arbitrary code, potentially resulting in binary hijacking...

CVE-2026-68272

A flaw was found in the Linux kernel's drm/amdgpu component. An unprivileged local attacker can exploit this vulnerability by submitting a specially crafted command with a zero-length chunk size for CPGFXSHADOW. This leads to improper memory access within the kernel, causing a system crash and a...

EUVD-2026-56508

Improper authentication for some IntelR PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow an escalation of privilege. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable local code execution. This result may...

UBUNTU-CVE-2026-6726

An information leakage vulnerability was reported in the TCG TPM 2.0 reference code that could allow a local attacker with elevated privileges to obtain a credential from a TPM-aware CA for a falsified TPM key such as an Attestation Key, DevID Key or TLS authentication key and falsify other TPM 2...

EUVD-2026-56224

An information leakage vulnerability was reported in the TCG TPM 2.0 reference code that could allow a local attacker with elevated privileges to obtain a credential from a TPM-aware CA for a falsified TPM key such as an Attestation Key, DevID Key or TLS authentication key and falsify other TPM 2...