CVE-2026-70025

Use after free in Windows Netlogon allows an authorized attacker to deny service over a network...

CVE-2026-70021

Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally...

CVE-2026-70024

Stack-based buffer overflow in Windows Internet Information Services allows an unauthorized attacker to execute code over a network...

CVE-2026-70026

Use after free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally...

CVE-2026-70017

Access of resource using incompatible type 'type confusion' in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally...

CVE-2026-70023

Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally...

CVE-2026-70010

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally...

CVE-2026-70011

Out-of-bounds read in Windows IP Over USB Service allows an authorized attacker to disclose information locally...

CVE-2026-70015

Use after free in Windows Local Security Authority Subsystem Service LSASS allows an authorized attacker to elevate privileges locally...

CVE-2026-70014

Use after free in Windows Cryptographic Services allows an authorized attacker to execute code over a network...

CVE-2026-70013

Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network...

CVE-2026-70008

Integer overflow or wraparound in Windows IP Over USB Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69999

Out-of-bounds read in Windows Update allows an authorized attacker to disclose information locally...

CVE-2026-69992

Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network...

CVE-2026-69985

Heap-based buffer overflow in Windows Libarchive allows an unauthorized attacker to execute code over a network...

CVE-2026-69978

Null pointer dereference in Windows VMSwitch allows an authorized attacker to deny service locally...

CVE-2026-69979

Improper protection of alternate path in Windows AppX Deployment Service allows an authorized attacker to bypass a security feature locally...

CVE-2026-69977

Use after free in Quality Windows Audio/Video Experience QWAVE service allows an authorized attacker to elevate privileges locally...

CVE-2026-69967

Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to disclose information locally...

CVE-2026-69969

Improper link resolution before file access 'link following' in Windows AppX Deployment Service allows an authorized attacker to disclose information locally...