CVE-2026-62735 Windows HTTP.sys Elevation of Privilege Vulnerability

...

EUVD-2026-56365

Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally...

CVE-2026-62740

CVE-2026-62740 describes a vulnerability in the Windows Imaging Component where an uninitialized resource can lead to local information disclosure by an authorized attacker. The issue is reported with a CVSS v3.1 base score of 5.5 (Medium), vector: Local, low attack complexity, and low privileges...

CVE-2026-62740 Windows Imaging Component Information Disclosure Vulnerability

...

CVE-2026-62753 Windows HTTP.sys Elevation of Privilege Vulnerability

...

CVE-2026-62740 Windows Imaging Component Information Disclosure Vulnerability

...

CVE-2026-62753

CVE-2026-62753 is a heap-based buffer overflow in Windows HTTP.sys that allows local privilege escalation by an authorized attacker. Affected: Windows HTTP.sys; Impact: local high-severity compromise of confidentiality, integrity, and availability. CVSS: 7.0 (3.1) with LOCAL, LOW privileges requi...

CVE-2026-62753 Windows HTTP.sys Elevation of Privilege Vulnerability

...

EUVD-2026-56364

Use of uninitialized resource in Windows Imaging Component allows an authorized attacker to disclose information locally...

EUVD-2026-56363

Buffer over-read in Windows Win32K allows an authorized attacker to disclose information locally...

CVE-2026-62746

CVE-2026-62746 is a Windows Win32k information-disclosure vulnerability described as a buffer over-read that allows an authorized, local attacker to disclose information. Affected component: Win32k (Windows). Impact per provided metrics: confidentiality impact High; attack vector Local; attack co...

CVE-2026-62729 Windows Telephony Service Elevation of Privilege Vulnerability

...

CVE-2026-62729 Windows Telephony Service Elevation of Privilege Vulnerability

...

CVE-2026-62729

CVE-2026-62729 describes a race condition in Windows Telephony Service caused by concurrent execution on a shared resource with improper synchronization. This allows an authorized, local attacker to elevate privileges. The entry notes a local attack vector with high impact on confidentiality, int...

CVE-2026-62746 Win32k Information Disclosure Vulnerability

...

EUVD-2026-56362

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Telephony Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-56361

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Telephony Service allows an authorized attacker to elevate privileges locally...

CVE-2026-62748 Windows Telephony Service Elevation of Privilege Vulnerability

...

CVE-2026-62748 Windows Telephony Service Elevation of Privilege Vulnerability

...

CVE-2026-62748

CVE-2026-62748 affects the Windows Telephony Service. The issue is a race condition due to improper synchronization on a shared resource, enabling a locally authorized attacker to elevate privileges. The weakness is exploited locally with no user interaction and results in high impact to confiden...