CVE-2026-65780

Double free in Windows Autopilot allows an authorized attacker to elevate privileges locally...

CVE-2026-65778

Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally...

CVE-2026-65783

Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally...

CVE-2026-65779

Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally...

CVE-2026-65781

Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally...

CVE-2026-65782

Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally...

CVE-2026-65775

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally...

CVE-2026-65773

Improper access control in Windows Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-65776

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally...

CVE-2026-65774

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-65671

Heap-based buffer overflow in Windows Remote Access API allows an authorized attacker to elevate privileges locally...

CVE-2026-65672

Heap-based buffer overflow in Windows Remote Access API allows an authorized attacker to elevate privileges locally...

CVE-2026-65678

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally...

CVE-2026-64921

Missing authentication for critical function in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...

CVE-2026-63522

Incorrect permission assignment for critical resource in Azure SQL Database allows an authorized attacker to elevate privileges locally...

CVE-2026-63519

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally...

CVE-2026-62911

Authentication bypass by capture-replay in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-62909

Uncaught exception in .NET allows an authorized attacker to elevate privileges locally...

CVE-2026-62908

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Backup Engine allows an authorized attacker to elevate privileges locally...

CVE-2026-62910

Improper control of resource identifiers 'resource injection' in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...