CVE-2026-88162: Incorrect Authorization

Improper authorization in Windows Encrypting File System EFS allows an authorized attacker to perform tampering locally...

CVE-2026-85870: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-85868: Use After Free

Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-85824: Use After Free

Use after free in Windows Composite Image File System allows an authorized attacker to elevate privileges locally...

CVE-2026-85825: Concurrent Execution using Shared Resource with Improper Synchronization

Use after free in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...

CVE-2026-85822: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate privileges locally...

CVE-2026-85820: Heap-based Buffer Overflow

Use after free in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...

CVE-2026-85823: Use After Free

Use after free in Windows Composite Image File System allows an authorized attacker to elevate privileges locally...

CVE-2026-85821: Out-of-bounds Read

Out-of-bounds read in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to disclose information locally...

CVE-2026-102215: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...

CVE-2026-102218: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...

CVE-2026-90530: Improper Limitation of a Pathname to a Restricted Directory

ColdFusion RDS is affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope...

CVE-2026-78628: Improper Input Validation

The Okta Credential Provider for Windows does not validate a serialized credential buffer before interpreting it as a Kerberos logon structure. The buffer size and packed string offsets are not checked. Processing a malformed buffer can cause the credential provider process to terminate...

CVE-2026-103820: Improper Limitation of a Pathname to a Restricted Directory

CAI Content Credential is affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could result in an arbitrary file system write. An attacker could leverage this vulnerability to write to unauthorized files or directories outside of intended...

CVE-2026-83513: Heap-based Buffer Overflow

Use after free in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...

CVE-2026-83565: Buffer Over-read

Buffer over-read in Windows Encrypting File System EFS allows an authorized attacker to disclose information locally...

CVE-2026-83683: Absolute Path Traversal

Absolute path traversal in Windows Encrypting File System EFS allows an authorized attacker to disclose information over a network...

CVE-2026-83664: Access of Resource Using Incompatible Type

Access of resource using incompatible type 'type confusion' in Windows Portable Device File System Driver allows an authorized attacker to disclose information locally...

CVE-2026-96244: Use After Free

Use after free in Windows Internal System User Profile allows an authorized attacker to elevate privileges locally...

CVE-2026-96857: Files or Directories Accessible to External Parties

Files or directories accessible to external parties in Windows Projected File System allows an authorized attacker to disclose information locally...