EUVD-2026-2126

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

EUVD-2026-2135

Untrusted pointer dereference in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...

EUVD-2026-2122

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows SMB Server allows an authorized attacker to elevate privileges over a network...

EUVD-2026-2138

Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally...

EUVD-2026-2168

Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally...

EUVD-2026-2163

Improper input validation in Windows Server Update Service allows an unauthorized attacker to execute code over a network...

EUVD-2026-2182

Incorrect privilege assignment in Windows Hello allows an unauthorized attacker to perform tampering locally...

EUVD-2026-2177

Out-of-bounds read in Capability Access Management Service camsvc allows an unauthorized attacker to disclose information locally...

EUVD-2026-2146

Exposure of sensitive information to an unauthorized actor in Windows Shell allows an authorized attacker to perform spoofing over a network...

EUVD-2026-2162

Improper access control in Windows Client-Side Caching CSC Service allows an authorized attacker to disclose information locally...

EUVD-2026-2157

Out-of-bounds read in Capability Access Management Service camsvc allows an authorized attacker to disclose information locally...

EUVD-2026-2153

Use of a broken or risky cryptographic algorithm in Windows Kerberos allows an authorized attacker to disclose information locally...

EUVD-2026-2187

Time-of-check time-of-use toctou race condition in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

EUVD-2026-2193

Out-of-bounds read in Windows TPM allows an authorized attacker to disclose information locally...

EUVD-2026-2205

Concurrent execution using shared resource with improper synchronization 'race condition' in Tablet Windows User Interface TWINUI Subsystem allows an authorized attacker to elevate privileges locally...

EUVD-2026-2199

Protection mechanism failure in Windows Remote Assistance allows an unauthorized attacker to bypass a security feature locally...

EUVD-2026-2198

Concurrent execution using shared resource with improper synchronization 'race condition' in Graphics Kernel allows an authorized attacker to elevate privileges locally...

EUVD-2026-2100

Windows Secure Boot stores Microsoft certificates in the UEFI KEK and DB. These original certificates are approaching expiration, and devices containing affected certificate versions must update them to maintain Secure Boot functionality and avoid compromising security by losing security fixes...

EUVD-2026-2189

A vulnerability affecting HPE Networking Instant On Access Points has been identified where a device processing a specially crafted packet could enter a non-responsive state, in some cases requiring a hard reset to re-establish services. A malicious actor could leverage this vulnerability to...

EUVD-2026-2192

A vulnerability in the router mode configuration of HPE Instant On Access Points exposed certain network configuration details to unintended interfaces. A malicious actor could gain knowledge of internal network configuration details through inspecting impacted packets...