CVE-2026-96953

A null pointer dereference vulnerability exists in the Windows Universal Disk Format File System Driver (UDFS) . This flaw allows an authorized attacker to achieve local code execution . The vulnerability has a CVSS 3.1 base score of 7.8, categorized as HIGH severity, with significant impacts on ...

CVE-2026-96947

A Use after free vulnerability in the Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to achieve local privilege elevation . The vulnerability is characterized by a HIGH base severity score of 7.8 . Official remediation is available through a confirmed fix, a...

CVE-2026-96946

A use after free vulnerability exists in the Windows Universal Disk Format File System Driver (UDFS) . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability has a CVSS 3.1 base score of 7.8 and is categorized as High severity. No specific exploit detail...

CVE-2026-96950

A Use after free vulnerability exists in the Windows Universal Disk Format File System Driver (UDFS) . This flaw allows an authorized attacker to achieve local privilege escalation . No specific exploit code or exploitation details are provided in the documents, though the CVSS score indicates a ...

CVE-2026-69675

An out-of-bounds read vulnerability exists in the Windows Network File System . This flaw allows an authorized attacker to perform a local information disclosure, potentially exposing sensitive data on the system. The vulnerability is associated with CWE-125 . No specific exploit code or in-the-w...

CVE-2026-96938

A Heap-based buffer overflow exists in the Windows Distributed File System (DFS) . This vulnerability allows an authorized attacker to achieve local privilege escalation . The CVSS 3.1 score is 6.7 (Medium) , with high impact on confidentiality, integrity, and availability. Official fixes are ava...

CVE-2026-96933

The Windows COM+ Event System Service is vulnerable to an untrusted pointer dereference . This security flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is assigned a CVSS v3.1 score of 7.8 (High) , indicating significant impact on confidentiality, integ...

CVE-2026-96930

An out-of-bounds read vulnerability exists in the Windows Universal Disk Format File System Driver (UDFS) . This flaw allows an authorized attacker to perform a local information disclosure , potentially exposing sensitive data. No specific exploit details or patch versions are provided in the do...

CVE-2026-70084

An improper access control vulnerability exists in the Windows Projected File System . This flaw allows an authorized attacker to perform a local information disclosure . The root cause is categorized under CWE-22 (Path Traversal). No specific details regarding affected versions, exploit code, or...

CVE-2026-70143

A heap-based buffer overflow exists in the Windows Network File System , which may allow an authorized attacker to achieve local code execution . The vulnerability is associated with CWE-122 and carries a High base severity score of 7.8. No specific exploit details or remediation steps are provid...

CVE-2026-85909

An out-of-bounds read vulnerability exists in the Windows Universal Disk Format File System Driver (UDFS) . This flaw allows an authorized attacker to perform a local information disclosure . While specific exploit details are not provided, the vulnerability is associated with CWE-822 (Untrusted ...

CVE-2026-83881

A Heap-based buffer overflow exists in the Windows exFAT File System , which could allow an authorized attacker to perform a local privilege escalation . The vulnerability is confirmed with a CVSS 3.1 score of 7.8. No specific exploit information or version-specific details are provided in the do...

CVE-2026-83857

A use after free vulnerability exists in the Windows Universal Disk Format File System Driver (UDFS) . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-121 (Stack-based Buffer Overflow) . Details regarding specific affected v...

CVE-2026-83835

A buffer over-read vulnerability exists in the Windows Common Log File System Driver . This flaw allows an authorized attacker to disclose information locally on the affected system. The vulnerability is associated with CWE-126 and CWE-497 . No specific exploit information or remediation details ...

CVE-2026-83830

A heap-based buffer overflow exists in the Windows COM+ Event System Service . This vulnerability allows an authorized attacker to achieve local privilege escalation . No specific details regarding the root cause, affected versions, or available exploits are provided in the documents. Remediation...

CVE-2026-83785

A Use after free vulnerability exists in the Windows COM+ Event System Service . This flaw allows an authorized attacker to achieve local privilege escalation . No specific software versions or exploit links are provided in the documents; however, a remediation level of OFFICIAL_FIX is indicated.

CVE-2026-83763

A type confusion vulnerability in the Windows Input System allows an authorized attacker to achieve local privilege elevation . The root cause involves the access of a resource using an incompatible type. While specific affected versions are not detailed in the provided documents, remediation is ...

CVE-2026-83683

A vulnerability in Windows Encrypting File System (EFS) allows an authorized attacker to perform an absolute path traversal to disclose information over a network. The impact is categorized as high confidentiality impact with a CVSS 3.1 base score of 6.5 . While specific exploit details are not p...

CVE-2026-83664

The Windows Portable Device File System Driver is vulnerable to a type confusion issue (CWE-843). This flaw allows an authorized attacker to perform a local information disclosure , potentially exposing sensitive data. No specific exploit details or in-the-wild exploitation instances are provided...

CVE-2026-83565

A buffer over-read vulnerability exists in the Windows Encrypting File System (EFS) . This flaw allows an authorized attacker to perform a local information disclosure , potentially exposing sensitive data. The vulnerability is associated with CWE-126 . While the documents confirm the existence o...