CVE-2026-69853

CVE-2026-69853 is an information disclosure vulnerability in Windows Win32K caused by use of an uninitialized resource. An authorized local attacker with low privileges can exploit it to disclose sensitive information , with no impact on integrity or availability. The CVSS 3.1 score is 4.7 (MEDIU...

EUVD-2026-73611

Use of uninitialized resource in Windows Win32K allows an authorized attacker to disclose information locally...

CVE-2026-69792

CVE-2026-69792 is a race condition in Windows Win32K caused by concurrent execution of a shared resource with improper synchronization. An authorized local attacker with low privileges and high attack complexity can bypass a security feature , resulting in a HIGH integrity impact with no confiden...

EUVD-2026-73610

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Win32K allows an authorized attacker to bypass a security feature locally...

EUVD-2026-73606

Time-of-check time-of-use toctou race condition in Windows Win32K allows an authorized attacker to elevate privileges locally...

CVE-2026-69779

CVE-2026-69779 is a time-of-check time-of-use (TOCTOU) race condition in the Windows Win32K component that allows an attacker with an existing low-privilege account to escalate privileges locally. The CVSS v3.1 score is 7.0 (HIGH) , with a local attack vector, high complexity, no user interaction...

CVE-2026-69706

CVE-2026-69706 is a use-after-free vulnerability in the Windows Win32K kernel component that allows an authorized attacker to elevate privileges over a network . The CVSS 3.1 score is 7.1 (HIGH) (AV:N/AC:H/PR:L/UI:R), meaning exploitation requires network access, high attack complexity, low exist...

EUVD-2026-73601

Use after free in Windows Win32K allows an authorized attacker to elevate privileges over a network...

EUVD-2026-73585

Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally...

CVE-2026-69844

CVE-2026-69844 is an out-of-bounds read vulnerability in the Windows Win32K component (the kernel-mode driver that handles the graphical subsystem). An authorized local attacker with low privileges can exploit it to elevate privileges on the affected system. Microsoft rates the severity as HIGH (...

CVE-2026-69652

CVE-2026-69652 is a use-after-free vulnerability in Windows Win32K that allows an authorized attacker to elevate privileges locally . The CVSS v3.1 base score is 7.0 (HIGH) , with a local attack vector, high complexity, low privileges required, no user interaction, and high impact to confidential...

EUVD-2026-73579

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally...

CVE-2026-69610

A buffer over-read in Windows Win32K (the kernel-mode component handling graphical subsystem operations) allows an authorized attacker with low privileges to achieve local privilege escalation . The vulnerability requires local access , has high attack complexity , and does not require user inter...

EUVD-2026-73559

Buffer over-read in Windows Win32K allows an authorized attacker to elevate privileges locally...

EUVD-2026-73558

Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally...

CVE-2026-69630

CVE-2026-69630 is an out-of-bounds read vulnerability in the Windows Win32K kernel driver that allows a locally authenticated attacker to escalate privileges . The CVSS v3.1 score is 7.0 (HIGH) with vector AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, reflecting the high complexity and required low-privil...

CVE-2026-69498

Windows Win32K contains a use-after-free vulnerability that allows an authorized local attacker to escalate privileges . The CVSS 3.1 score is 7.0 (High) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating high attack complexity but low privileges required and no user interaction . T...

EUVD-2026-73527

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally...

EUVD-2026-73487

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally...

CVE-2026-69410

CVE-2026-69410 is a use-after-free vulnerability in Windows Win32K that allows an authorized attacker to escalate privileges locally . The CVSS 3.1 score is 7.0 (HIGH) , with a local attack vector, high attack complexity, low privileges required, no user interaction, and high impact on confidenti...