CVE-2026-62774 Windows Graphics Kernel Elevation of Privilege Vulnerability

...

CVE-2026-62766 Windows Kerberos Elevation of Privilege Vulnerability

...

CVE-2026-62737 Windows Kernel Elevation of Privilege Vulnerability

...

CVE-2026-62729 Windows Telephony Service Elevation of Privilege Vulnerability

...

CVE-2026-62748 Windows Telephony Service Elevation of Privilege Vulnerability

...

CVE-2026-62723 Windows Telephony Service Elevation of Privilege Vulnerability

...

CVE-2026-62724 Windows Telephony Service Elevation of Privilege Vulnerability

...

CVE-2026-62719

CVE-2026-62719 describes a heap-based buffer overflow in Windows Message Queuing that allows an authorized, locally-authenticated attacker to escalate privileges. The CVSS 3.1 score is 7.8 (HIGH) with Local attack vector, Low attack complexity, and privileges required. The impact is Conf and Inte...

CVE-2026-62707 Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability

...

CVE-2026-62713 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

...

CVE-2026-62703

CVE-2026-62703: Out-of-bounds read in Windows DWM Core Library. An authenticated, local attacker can disclose information. Affected component: Windows DWM Core Library. Impact aligns with CVSS: Confidentiality High; Privileges Required Low; User Interaction None; Attack Vector Local. The provided...

CVE-2026-62690 Windows Push Notifications Elevation of Privilege Vulnerability

...

EUVD-2026-56337

Access of resource using incompatible type 'type confusion' in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...

CVE-2026-62692 Windows Remote Desktop Services Elevation of Privilege Vulnerability

...

CVE-2026-61925 Windows Installer Elevation of Privilege Vulnerability

...

CVE-2026-61366

Affected component: Windows Network Connection Broker. Vulnerability: double free allows local privilege escalation by an authorized user. Root cause: double-free in the broker when handling network connection objects. Impact: high; local attacker with low privileges and no user interaction can e...

CVE-2026-61346

CVE-2026-61346 describes a use-after-free in the Windows Graphics Kernel that can allow an authorized local attacker to elevate privileges. The available documents confirm the vulnerable component is the Windows Graphics Kernel and indicate a local, high-impact risk (CVSSv3.1: AV=L/AC=H/PR=L/UI=N...

CVE-2026-61345

CVE-2026-61345: A null pointer dereference in the Microsoft Remote Registry Service can allow an authenticated network attacker to cause Denial of Service. CVSSv3.1 base score 6.5 (NETWORK, LOW complexity, LOW privileges, NO user interaction, Availability Impact HIGH). Affected component: Microso...

CVE-2026-59137 Windows Event Logging Service Information Disclosure Vulnerability

...

CVE-2026-20789

Improper access control for some IntelR PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow an escalation of privilege. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable local code execution. This result may...