CVE-2026-102215: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...

CVE-2026-102218: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...

CVE-2026-90530: Improper Limitation of a Pathname to a Restricted Directory

ColdFusion RDS is affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope...

CVE-2026-78628: Improper Input Validation

The Okta Credential Provider for Windows does not validate a serialized credential buffer before interpreting it as a Kerberos logon structure. The buffer size and packed string offsets are not checked. Processing a malformed buffer can cause the credential provider process to terminate...

CVE-2026-83513: Heap-based Buffer Overflow

Use after free in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...

CVE-2026-83565: Buffer Over-read

Buffer over-read in Windows Encrypting File System EFS allows an authorized attacker to disclose information locally...

CVE-2026-83683: Absolute Path Traversal

Absolute path traversal in Windows Encrypting File System EFS allows an authorized attacker to disclose information over a network...

CVE-2026-83664: Access of Resource Using Incompatible Type

Access of resource using incompatible type 'type confusion' in Windows Portable Device File System Driver allows an authorized attacker to disclose information locally...

CVE-2026-96244: Use After Free

Use after free in Windows Internal System User Profile allows an authorized attacker to elevate privileges locally...

CVE-2026-96857: Files or Directories Accessible to External Parties

Files or directories accessible to external parties in Windows Projected File System allows an authorized attacker to disclose information locally...

CVE-2026-83586: Weak Authentication

Weak authentication in Windows Resilient File System ReFS Deduplication Service allows an authorized attacker to elevate privileges locally...

CVE-2026-85798: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Distributed File System DFS allows an authorized attacker to execute code over a network...

CVE-2026-85355: Inclusion of Functionality from Untrusted Control Sphere

Inclusion of functionality from untrusted control sphere in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-85328: Weak Authentication

Weak authentication in Windows Projected File System allows an authorized attacker to elevate privileges locally...

CVE-2026-70143: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Network File System allows an authorized attacker to execute code locally...

CVE-2026-70084: Improper Limitation of a Pathname to a Restricted Directory

Improper access control in Windows Projected File System allows an authorized attacker to disclose information locally...

CVE-2026-96209: Out-of-bounds Read

Out-of-bounds read in Windows Network File System allows an authorized attacker to elevate privileges locally...

CVE-2026-96930: Out-of-bounds Read

Out-of-bounds read in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to disclose information locally...

CVE-2026-96933: Untrusted Pointer Dereference

Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-96946: Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

Use after free in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...