CVE-2026-96249

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally...

CVE-2026-96231

Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...

CVE-2026-96204

Server-side request forgery ssrf in Azure Arc allows an authorized attacker to elevate privileges over a network...

CVE-2026-96108

Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally...

CVE-2026-88206

Server-side request forgery ssrf in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...

CVE-2026-88198

Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...

CVE-2026-88143

Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally...

CVE-2026-88105

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally...

CVE-2026-88109

Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally...

CVE-2026-88101

Weak authentication in Microsoft Input Method Editor IME allows an authorized attacker to elevate privileges locally...

CVE-2026-88100

Use after free in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally...

CVE-2026-88094

Improper neutralization of special elements in output used by a downstream component 'injection' in Azure Storage Library allows an authorized attacker to elevate privileges over a network...

CVE-2026-88073

Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-88079

Null pointer dereference in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...

CVE-2026-88091

Deserialization of untrusted data in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally...

CVE-2026-88080

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-87715

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-88071

Double free in Windows Hyper-V allows an authorized attacker to elevate privileges locally...

CVE-2026-87711

Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-87713

Use after free in Windows Bluetooth Port Driver allows an unauthorized attacker to elevate privileges over an adjacent network...