CVE-2026-96308

A Use after free vulnerability exists in Windows Installer , which allows an authorized attacker to achieve local privilege escalation . The vulnerability is classified with a High base severity score of 7.8. No specific exploit details or patch versions are provided in the documents.

CVE-2026-96302

A Use after free vulnerability exists in the Windows Installer component. This flaw allows an authorized attacker to perform a local privilege escalation on the affected system. The vulnerability is assigned a CVSS 3.1 base score of 7.0 (High) . No specific exploit details or in-the-wild exploita...

CVE-2026-96307

A Use after free vulnerability exists in Windows Installer . This flaw allows an authorized attacker to achieve local privilege elevation . The CVSS 3.1 base score is 7.0 (High) , reflecting impacts on confidentiality, integrity, and availability. No specific exploit code or detailed remediation ...

CVE-2026-96305

A Use after free vulnerability exists in Windows Installer . This flaw allows an authorized attacker to achieve local privilege elevation . While the vulnerability's technical root cause is identified as CWE-416 , specific details regarding the affected component or function are not provided. No ...

CVE-2026-96248

A stack-based buffer overflow exists in the Windows Host Guardian Service , which could allow an unauthorized attacker to perform a denial of service (DoS) attack over a network. The vulnerability is categorized under CWE-121 and has been assigned a High base severity score of 7.5. Remediation is...

CVE-2026-96247

A vulnerability exists in Windows Kernel-Mode Drivers due to the use of uninitialized resources (CWE-908). This flaw allows an authorized attacker to perform a local information disclosure . No specific versions or detailed remediation steps are provided in the documents beyond the existence of a...

CVE-2026-96306

An out-of-bounds read vulnerability exists in the Windows Sysmain Service . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-125 . No specific exploit details or in-the-wild exploitation information are provided in the documen...

CVE-2026-96244

A use after free vulnerability exists in Windows Internal System User Profile , which allows an authorized attacker to achieve local privilege elevation . The vulnerability is rated as HIGH severity (CVSS 3.1 score of 7.8). No specific exploit details or information regarding in-the-wild exploita...

CVE-2026-96311

A vulnerability exists in the Windows Network List Service due to improper authorization . This flaw allows an authorized attacker to perform local tampering . The impact is categorized as a high integrity compromise with a base score of 5.5. No specific exploit details or in-the-wild exploitatio...

CVE-2026-96223

A Use after free vulnerability exists in Windows Hyper-V , allowing an authorized attacker to achieve local privilege escalation . The vulnerability impacts the Hyper-V hypervisor component. While the CVSS score indicates a High severity (7.8) with high impacts on confidentiality, integrity, and ...

CVE-2026-96219

A critical out-of-bounds write vulnerability exists in the Windows Local Security Authority Subsystem Service (LSASS) . This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is assigned a CVSS v3.1 score of 9.80 , indicating a high severity l...

CVE-2026-96217

A heap-based buffer overflow exists in Windows NTFS that allows an authorized attacker to elevate privileges locally . The vulnerability is associated with CWE-122 (Heap-based Buffer Overflow) and CWE-190 (Integer Overflow or Wraparound). No specific exploit information or details on in-the-wild ...

CVE-2026-96220

The Windows Assigned Access feature contains an improper control of generation of code (code injection) vulnerability. This flaw allows an authorized attacker to perform a local privilege escalation . The vulnerability is associated with CWE-94 . No specific exploit links or exploit details are p...

CVE-2026-96216

A Use after free vulnerability exists in the Windows Kernel (associated with CWE-416 and CWE-822 ). This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is rated with a High base severity (CVSS 3.1 score of 7.0). No specific exploit details or in-the-wi...

CVE-2026-96218

A vulnerability exists in the Windows Update Stack due to improper access control . This flaw allows an authorized attacker to perform tampering locally . The vulnerability is associated with CWE-15 (External Control of System or Configuration Setting) and carries a MEDIUM base severity (CVSS 3.1...

CVE-2026-96215

A race condition exists in Windows Autopilot due to concurrent execution using a shared resource with improper synchronization. This vulnerability allows an authorized attacker to achieve local privilege escalation . While the CVSS v3.1 score indicates a High severity (7.0) with impacts on confid...

CVE-2026-70116

A stack-based buffer overflow vulnerability exists in the Windows Resilient File System (ReFS) . This flaw allows an unauthorized attacker to perform a security feature bypass through a physical attack vector. The CVSS 3.1 score is 4.2 (Medium), with a high complexity and a high impact on integri...

CVE-2026-70149

The Windows Client Side Caching driver (csc.sys) is affected by a vulnerability that allows an authorized attacker to disclose sensitive information locally. The underlying cause is attributed to Heap-based Buffer Overflow and Integer Overflow or Wraparound issues. The impact includes high levels...

CVE-2026-70044

An out-of-bounds read vulnerability exists in Microsoft Windows Media Foundation . This flaw allows an unauthorized attacker to disclose information locally on an affected system. While the specific component or root cause is not detailed beyond the out-of-bounds read, the vulnerability has a MED...

CVE-2026-70045

A Use after free vulnerability in Windows Work Folders allows an authorized attacker to achieve local privilege escalation . The vulnerability's impact includes high levels of confidentiality, integrity, and availability. An official fix is available, as indicated by the remediation level. No spe...