CVE-2026-66799

Heap-based buffer overflow in Windows Key Guard allows an authorized attacker to elevate privileges locally...

CVE-2026-62726

Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally...

CVE-2026-62725

Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally...

CVE-2026-66802

CVE-2026-66802 describes a race condition in Microsoft Azure Attestation service and Device Health Attestation Service caused by improper synchronization of a shared resource. This concurrency issue allows an unauthenticated, network-based attacker to execute code on affected systems, with high i...

CVE-2026-65797 Windows DNS Elevation of Privilege Vulnerability

...

CVE-2026-65799

CVE-2026-65799 is an integer overflow or wraparound vulnerability in the Windows DNS service that allows an authorized local attacker to elevate privileges . The FSTEC BDU further characterizes the root cause as a buffer overflow in dynamic memory . Microsoft rates it CVSS 6.7 (MEDIUM) with high ...

CVE-2026-65799 Windows DNS Elevation of Privilege Vulnerability

...

CVE-2026-65790 Windows Message Queuing Elevation of Privilege Vulnerability

...

CVE-2026-65781

CVE-2026-65781 is a Windows Autopilot use-after-free causing local privilege escalation for an authorized attacker. Documents do not specify affected build numbers, exact vulnerable component/file, or root-cause details beyond the use-after-free description. No exploitation status or patch/versio...

CVE-2026-65778

CVE-2026-65778 is a Windows Autopilot use-after-free vulnerability that enables local privilege escalation for an authorized attacker with low privileges and no user interaction. The CVSS 3.1 vector (Local, High impact, Privileges Required: Low, Confidentiality/Integrity/Availability: High) indic...

CVE-2026-65778 Windows Autopilot Elevation of Privilege Vulnerability

...

CVE-2026-65779 Windows Autopilot Elevation of Privilege Vulnerability

...

CVE-2026-65774 Windows Installer Elevation of Privilege Vulnerability

...

CVE-2026-65681 Windows iSCSI Target Service Denial of Service Vulnerability

...

CVE-2026-62881

The CVE-2026-62881 entry describes a numeric truncation flaw in Windows DNS that allows an authenticated, local attacker to elevate privileges. Affected component is the Windows DNS service; root cause is a numeric truncation error. Exploitation is local with high privileges required and no user ...

CVE-2026-62881 Windows DNS Elevation of Privilege Vulnerability

...

CVE-2026-62799 Windows SMB Client Elevation of Privilege Vulnerability

...

CVE-2026-62799 Windows SMB Client Elevation of Privilege Vulnerability

...

CVE-2026-62768 Windows Installer Elevation of Privilege Vulnerability

...

CVE-2026-62768

CVE-2026-62768 describes a stack-based buffer overflow in Windows Installer that can allow an authorized, locally authenticated user to elevate privileges. Affected component is Windows Installer; root cause is a buffer overflow in processing certain installer data, leading to high impact on conf...