CVE-2026-95904

A buffer over-read vulnerability exists in the Windows Event Logging Service . This flaw allows an authorized attacker to perform a local information disclosure. The vulnerability is assigned a Medium severity (CVSS 3.1 score of 5.5) and is characterized by low attack complexity and low privilege...

CVE-2026-96935

A vulnerability in Windows NTFS allows an authorized attacker to perform a local information disclosure . The flaw results in the exposure of sensitive system information to an unauthorized control sphere. This issue is categorized under CWE-497 . While the base severity is Medium (CVSS 3.1 score...

EUVD-2026-99793

Exposure of sensitive system information to an unauthorized control sphere in Windows NTFS allows an authorized attacker to disclose information locally...

CVE-2026-96928

An out-of-bounds read vulnerability exists in Windows NTFS that allows an authorized attacker to achieve local privilege elevation . The vulnerability impacts the NTFS file system component. While the specific root cause is not detailed in the provided documents, the impact includes high confiden...

EUVD-2026-99794

Integer overflow or wraparound in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network...

CVE-2026-69452

A Use after free vulnerability in Windows Enterprise App Management allows an authorized attacker to elevate privileges over a network. The vulnerability is associated with CWE-416 and has a CVSS 3.1 base score of 7.1 (High). No specific exploit code or details on in-the-wild exploitation are pro...

CVE-2026-96943

A vulnerability exists in the Windows Raw Image Extension due to an integer overflow or wraparound condition. This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is associated with CWE-190 (Integer Overflow or Wraparound) and CWE-122 (Heap-...

CVE-2026-96868

A heap-based buffer overflow exists in the Windows Kernel , which could allow an authorized attacker to achieve local privilege escalation . The vulnerability is characterized by high complexity and requires local access. No specific exploit details or information regarding in-the-wild exploitati...

CVE-2026-96860

The Windows USB Print Driver contains an out-of-bounds read vulnerability (CWE-125, CWE-170). This flaw allows an authorized attacker to perform a local information disclosure . No specific versions, root causes, or remediation steps are provided in the documents, and no exploits or in-the-wild e...

CVE-2026-96863

A heap-based buffer overflow vulnerability exists in the Windows Storage Port Driver . This flaw allows an unauthorized attacker to elevate privileges via a physical attack . The provided documents do not specify the exact affected versions or the specific function/file involved. No information r...

CVE-2026-96859

An out-of-bounds read vulnerability exists in the Windows Imaging Component . This flaw allows an authorized attacker to disclose information locally on the affected system. The vulnerability is associated with CWE-125 . While the impact is categorized as high for confidentiality, no specific exp...

CVE-2026-96855

Improper access control in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally . The vulnerability is associated with CWE-862 (Missing Authorization) . No specific exploit details or in-the-wild exploitation records are provided in the documents. Reme...

CVE-2026-96862

An out-of-bounds read vulnerability exists in Windows Spaceport.sys . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is confirmed by Microsoft and has a CVSS 3.1 base score of 7.8 (High). No specific exploit information or in-the-wild exploitatio...

CVE-2026-96865

A vulnerability in Windows Secure Kernel Mode allows an authorized attacker to disclose sensitive system information locally. This issue is characterized by the exposure of information to an unauthorized control sphere (CWE-497). The vulnerability has a CVSS 3.1 base score of 5.6 (Medium) with a ...

CVE-2026-96857

The Windows Projected File System is affected by an information disclosure vulnerability where certain files or directories are accessible to external parties. This flaw allows an authorized attacker to disclose information locally . The vulnerability is classified as CWE-552 and has a MEDIUM bas...

CVE-2026-96867

A vulnerability exists in Windows NTFS involving an out-of-bounds read (CWE-125). This flaw allows an authorized attacker to achieve local code execution . The vulnerability is rated as HIGH severity with a CVSS 3.1 score of 7.8. Remediation is available via an official fix provided by Microsoft....

CVE-2026-96856

A heap-based buffer overflow exists in Windows Management Instrumentation , which allows an authorized attacker to achieve local privilege elevation . The vulnerability is categorized as HIGH severity with a CVSS 3.1 score of 7.8 . No specific exploit details or evidence of in-the-wild exploitati...

CVE-2026-96309

A Use after free vulnerability in the Windows Subsystem for Linux allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-416 and has a CVSS 3.1 base score of 7.8 . No specific exploit code or in-the-wild exploitation details are provided in ...

CVE-2026-96851

A buffer over-read vulnerability exists in Windows Management Instrumentation . This flaw allows an authorized attacker to disclose information locally on the affected system. The vulnerability is classified as an information disclosure issue with a CVSS 3.1 score of 5.5 (Medium) . While the docu...

CVE-2026-96314

An out-of-bounds read vulnerability exists in the Windows Audio Service . This flaw allows an authorized attacker to perform a local information disclosure, potentially exposing sensitive data. The vulnerability is assigned CWE-125 . No specific exploit details or in-the-wild exploitation informa...