651072 matches found
CVE-2026-72931
Missing release of resource after effective lifetime in Windows Secure Socket Tunneling Protocol SSTP allows an authorized attacker to deny service locally...
CVE-2026-72923
In Microsoft.OpenApi.YamlReader from 2.0.0-preview.11 until 2.12.0 and from 3.0.0 until 3.10.0, and in Microsoft.OpenApi.Readers prior to 1.6.30, a small YAML OpenAPI document containing nested anchors and aliases can cause uncontrolled resource consumption when parsed through the public YAML...
CVE-2026-71340
Use after free in Windows File History Service allows an authorized attacker to elevate privileges locally...
CVE-2026-71336
Integer overflow or wraparound in Windows Work Folder Service allows an authorized attacker to execute code over a network...
CVE-2026-70575
Null pointer dereference in Windows Schannel allows an authorized attacker to deny service over a network...
CVE-2026-70573
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
CVE-2026-70581
Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
CVE-2026-70572
Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
CVE-2026-70568
Heap-based buffer overflow in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally...
CVE-2026-70567
Double free in Windows Display Enhancement Service allows an authorized attacker to elevate privileges locally...
CVE-2026-70562
Double free in Windows Audio Service allows an authorized attacker to elevate privileges locally...
CVE-2026-70065
Missing release of memory after effective lifetime in Windows DHCP Server allows an unauthorized attacker to deny service over a network...
CVE-2026-70091
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows DNS allows an unauthorized attacker to deny service over a network...
CVE-2026-69900
Untrusted pointer dereference in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-69889
Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally...
CVE-2026-69881
Null pointer dereference in Windows IKE Extension allows an unauthorized attacker to deny service over a network...
CVE-2026-69862
Out-of-bounds read in Windows Wireless Wide Area Network Service allows an authorized attacker to disclose information locally...
CVE-2026-69866
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally...