CVE-2026-65786: Heap-based Buffer Overflow

Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally...

CVE-2026-66799: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Key Guard allows an authorized attacker to elevate privileges locally...

CVE-2026-62911: Authentication Bypass by Capture-replay

Authentication bypass by capture-replay in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-62909: Unchecked Return Value

Uncaught exception in .NET allows an authorized attacker to elevate privileges locally...

CVE-2026-62910: Improper Control of Resource Identifiers

Improper control of resource identifiers 'resource injection' in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-62892: Use After Free

Use after free in Capability Access Management Service camsvc allows an authorized attacker to elevate privileges locally...

CVE-2026-65776: Use After Free

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally...

CVE-2026-70326: Server-Side Request Forgery (SSRF)

Server-side request forgery ssrf in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...

CVE-2026-62768: Stack-based Buffer Overflow

Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-62752: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally...

CVE-2026-62780: Use After Free

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-70340: Missing Authorization

Missing authorization in Azure CycleCloud allows an authorized attacker to elevate privileges over a network...

CVE-2026-70335: Improper Neutralization of Special Elements used in an OS Command

Improper neutralization of special elements used in an os command 'os command injection' in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to elevate privileges locally...

CVE-2026-62701: Use After Free

Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally...

CVE-2026-70330: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally...

CVE-2026-62779: Use After Free

Use after free in Windows Schannel allows an authorized attacker to elevate privileges locally...

CVE-2026-62777: Missing Authentication for Critical Function

Missing authentication for critical function in Windows License Manager allows an authorized attacker to elevate privileges locally...

CVE-2026-62755: Stack-based Buffer Overflow

Stack-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges locally...

CVE-2026-62724: Use After Free

Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally...

CVE-2026-62693: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...