CVE-2026-83897

Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally...

CVE-2026-70293

A use of uninitialized resource vulnerability exists in the Windows Win32 Kernel Subsystem . This flaw allows an authorized attacker to perform a local information disclosure . No specific software versions or remediation steps are provided in the documents, though the CVE is confirmed by Microso...

CVE-2026-83909

The Windows Win32 Kernel Subsystem is affected by an information disclosure vulnerability. An authorized attacker can exploit this flaw to disclose sensitive system information locally. This vulnerability is associated with CWE-497 (Exposure of Sensitive System Information to an Unauthorized Cont...

Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an unauthorized attacker to elevate privileges with a physical attack...

Windows Win32 Kernel Subsystem Information Disclosure Vulnerability

Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally...

CVE-2026-70290

Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally...

CVE-2026-70290

CVE-2026-70290 is an information disclosure vulnerability in the Windows Win32 Kernel Subsystem (Win32k) caused by the use of an uninitialized resource . An authorized local attacker with low privileges can leverage this to read sensitive kernel information, with no user interaction required. The...

PT-2026-87795

Name of the Vulnerable Software and Affected Versions Windows Win32 Kernel Subsystem affected versions not specified Description Use of an uninitialized resource in the Windows Win32 Kernel Subsystem allows an authorized attacker to disclose sensitive information locally. Recommendations At the...

CVE-2025-49733

Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally...

CVE-2025-24044

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally...

PT-2025-10799

Name of the Vulnerable Software and Affected Versions: Windows Win32 Kernel Subsystem affected versions not specified Description: The issue is related to a use after free condition in the Windows Win32 Kernel Subsystem, which allows an authorized attacker to elevate privileges locally...

CVE-2025-24983

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

CVE-2025-24983: Use After Free

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally...

CVE-2025-24044: Use After Free

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally...

CVE-2024-49046

Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability...

CVE-2024-49046

CVE-2024-49046 affects the Windows Win32 Kernel Subsystem and is categorized as an Elevation of Privilege vulnerability. The CVSS 3.1 vector indicates LOCAL exploitability with LOW attack complexity and LOW privileges required, but HIGH impact to confidentiality, integrity, and availability under...

CVE-2024-38252: Use After Free

Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability...

CVE-2024-38253: Use After Free

Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability...

CVE-2024-30086: Use After Free

Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability...

KLA67433 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, cause denial of service, obtain sensitive information, bypass security restrictions. Below is a complete list of vulnerabilities: 1. A remote cod...