42 matches found
CVE-2026-70290
Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally...
EUVD-2026-73358
Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally...
CVE-2026-70290
CVE-2026-70290 is an information disclosure vulnerability in the Windows Win32 Kernel Subsystem (Win32k) caused by the use of an uninitialized resource . An authorized local attacker with low privileges can leverage this to read sensitive kernel information, with no user interaction required. The...
CVE-2026-70289
CVE-2026-70289 is a heap-based buffer overflow in the Windows Win32 Kernel Subsystem (Win32k) that allows an authorized (low-privilege) attacker to elevate privileges locally . The vulnerability is rated CVSS 7.8 (HIGH) with local attack vector, low complexity, and high impact to confidentiality,...
EUVD-2026-73075
Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally...
CVE-2026-70289: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally...
PT-2026-87794
Name of the Vulnerable Software and Affected Versions Windows Win32 Kernel Subsystem affected versions not specified Description A heap-based buffer overflow occurs in the Windows Win32 Kernel Subsystem. This issue allows an authorized attacker to elevate privileges locally on the system. A...
CVE-2026-70290: Use of Uninitialized Resource
Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally...
PT-2026-87795
Name of the Vulnerable Software and Affected Versions Windows Win32 Kernel Subsystem affected versions not specified Description Use of an uninitialized resource in the Windows Win32 Kernel Subsystem allows an authorized attacker to disclose sensitive information locally. Recommendations At the...
CVE-2026-58632
CVE-2026-58632 is a Windows Win32K use-after-free vulnerability in the Win32 Kernel Subsystem that could allow a locally authenticated attacker to escalate privileges. The CVE is described as a local elevation of privilege (no remote code execution). Public sources in the connected set consistent...
CVE-2026-33840 Win32k Elevation of Privilege Vulnerability
...
CVE-2026-20870 Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
...
EUVD-2024-43916
Malicious code in bioql PyPI...
CVE-2025-49733
Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally...
CVE-2025-49667 Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
...
CVE-2025-49667 Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
...
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
Double free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally...
CVE-2025-24983
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally...
Patch Tuesday - March 2025
Microsoft is addressing 57 vulnerabilities this March 2025 Patch Tuesday, which is a similar volume to last month. However, Microsoft has evidence of in-the-wild exploitation for as many as six of the vulnerabilities published today, and CISA KEV already lists all of them. Microsoft is also aware...