CVE-2026-97810

A heap-based buffer overflow vulnerability exists in the Windows Container Isolation FS Filter Driver (unionfs.sys) . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is tracked as CVE-2026-97810 with a CVSS 3.1 base score of 7.0 (High) . No specif...

CVE-2026-97808

A Use after free vulnerability exists in the Windows Broadcast DVR User Service . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability has a high severity score of 7.0, with the impact affecting confidentiality, integrity, and availability. While the s...

CVE-2026-97812

A double free vulnerability exists in the Windows Update Orchestrator Service . This flaw allows an authorized attacker to perform a local privilege escalation . The CVSS 3.1 score is 7.0 (High) , with an attack vector of Local and high impact on confidentiality, integrity, and availability. No s...

CVE-2026-105008

A vulnerability in Windows Schannel allows an unauthorized attacker to perform spoofing over a network. This issue can lead to an attacker acting as another user with a CVSSv3.1 score of 9.0 (CRITICAL) . Exploitation requires high complexity and no prior authentication or user interaction. System...

CVE-2026-105009

A local privilege escalation vulnerability exists in the Windows Server Update Service due to incorrect default permissions (CWE-276). An authorized attacker can exploit this flaw to elevate privileges locally. While the CVSS 3.1 score reflects a High severity (7.5), the attack requires low privi...

CVE-2026-105010

A Use after free vulnerability exists in the Microsoft Windows Search Component . This flaw allows an unauthorized attacker to achieve privilege elevation over a network. The vulnerability has been assigned a CRITICAL CVSS v3.1 base score of 9.8 and is associated with CWE-416 . Official remediati...

EUVD-2026-100400

Improper neutralization of argument delimiters in a command 'argument injection' in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

EUVD-2026-100401

Improper verification of cryptographic signature in Windows Audio Service allows an authorized attacker to elevate privileges locally...

CVE-2026-97799

The Windows Audio Service is vulnerable to a Local Privilege Escalation flaw due to improper verification of cryptographic signatures (CWE-347). An authorized attacker can exploit this weakness to elevate privileges locally. A high-severity OFFICIAL_FIX is available. No specific exploit details o...

CVE-2026-97798

The Windows Error Reporting service is vulnerable to an argument injection vulnerability (CWE-88) caused by improper neutralization of argument delimiters in a command. An authorized attacker can leverage this flaw to achieve local privilege escalation . The official fix is available via the prov...

CVE-2026-103569

The Windows IKE Extension is vulnerable to an out-of-bounds read (CWE-125). This flaw allows an unauthorized attacker to disclose information over a network. The vulnerability is rated as High severity with a CVSS v3.1 score of 7.5 . No specific versions, exploit details, or direct remediation st...

CVE-2026-103568

A race condition vulnerability exists in Windows Credential Providers due to concurrent execution using a shared resource with improper synchronization. This flaw allows an authorized attacker to achieve local privilege elevation . Exploitation details and specific affected versions are not provi...

CVE-2026-105005

An out-of-bounds write vulnerability exists in Windows Schannel , which could allow an unauthorized attacker to execute code over a network . The vulnerability is associated with CWE-787 and has a CVSS v3.1 base score of 8.1 (High) . While the documents confirm the impact and root cause type, spe...

CVE-2026-105004

A high-severity out-of-bounds read vulnerability exists in the Windows Overlay Filter . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is characterized by CWE-125 and carries a CVSS 3.1 base score of 7.8 . Specific details regarding the impacted ...

CVE-2026-103578

A vulnerability in the Windows Kernel involves an untrusted pointer dereference (CWE-822). This flaw allows an unauthorized attacker to achieve privilege elevation via a physical attack . No specific component or file is identified, and no exploit details or specific remediation versions are prov...

CVE-2026-103567

A buffer over-read vulnerability exists in the Windows Broadcast DVR User Service . This flaw allows an authorized attacker to disclose information locally on the affected system. The vulnerability is categorized under CWE-126 . No specific exploit code or evidence of in-the-wild exploitation is ...

CVE-2026-103565

A Use after free vulnerability in the Windows Broadcast DVR User Service allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-416 . No specific exploit links or detailed remediation instructions are provided in the documents, though an offi...

EUVD-2026-100374

Out-of-bounds read in Windows Text Shaping allows an unauthorized attacker to execute code over a network...

CVE-2026-103558

A deadlock vulnerability (CWE-833) exists in the Windows Routing and Remote Access Service (RRAS) . This flaw allows an unauthorized attacker to cause a denial of service (DoS) over the network. The vulnerability has a CVSS 3.1 base score of 7.5, indicating a high severity impact on availability....

CVE-2026-103553

An out-of-bounds read vulnerability exists in the Windows Partition Management Driver . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-125 . While no specific exploit links or proof-of-concept code are provided in the docume...