CVE-2026-105005

An out-of-bounds write vulnerability exists in Windows Schannel , which could allow an unauthorized attacker to execute code over a network . The vulnerability is associated with CWE-787 and has a CVSS v3.1 base score of 8.1 (High) . While the documents confirm the impact and root cause type, spe...

CVE-2026-105004

A high-severity out-of-bounds read vulnerability exists in the Windows Overlay Filter . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is characterized by CWE-125 and carries a CVSS 3.1 base score of 7.8 . Specific details regarding the impacted ...

CVE-2026-103578

A vulnerability in the Windows Kernel involves an untrusted pointer dereference (CWE-822). This flaw allows an unauthorized attacker to achieve privilege elevation via a physical attack . No specific component or file is identified, and no exploit details or specific remediation versions are prov...

CVE-2026-103567

A buffer over-read vulnerability exists in the Windows Broadcast DVR User Service . This flaw allows an authorized attacker to disclose information locally on the affected system. The vulnerability is categorized under CWE-126 . No specific exploit code or evidence of in-the-wild exploitation is ...

CVE-2026-103565

A Use after free vulnerability in the Windows Broadcast DVR User Service allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-416 . No specific exploit links or detailed remediation instructions are provided in the documents, though an offi...

CVE-2026-102225

Windows is affected by an out-of-bounds read vulnerability within the Text Shaping component. This flaw could allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability is associated with CWE-125 (Out-of-bounds Read) and CWE-197 (Numeric Truncation Error). W...

CVE-2026-103558

A deadlock vulnerability (CWE-833) exists in the Windows Routing and Remote Access Service (RRAS) . This flaw allows an unauthorized attacker to cause a denial of service (DoS) over the network. The vulnerability has a CVSS 3.1 base score of 7.5, indicating a high severity impact on availability....

CVE-2026-103553

An out-of-bounds read vulnerability exists in the Windows Partition Management Driver . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-125 . While no specific exploit links or proof-of-concept code are provided in the docume...

CVE-2026-103554

A Use after free vulnerability exists in the Windows Broadcast DVR User Service . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-416 and has a CVSS 3.1 base score of 7.0 . No specific exploit code or detailed remediation ste...

EUVD-2026-100374

Out-of-bounds read in Windows Text Shaping allows an unauthorized attacker to execute code over a network...

CVE-2026-102221

A security feature bypass vulnerability exists in Windows Secure Boot (CVE-2026-102221), which allows an authorized attacker to bypass a security feature locally . The vulnerability is associated with CWE-299 (Improper Check for Certificate Revocation). The impact involves a high integrity impact...

CVE-2026-102207

A race condition vulnerability exists in the Windows Kernel due to concurrent execution using a shared resource with improper synchronization. This flaw allows an authorized attacker to achieve local privilege escalation . No specific exploit details or version-specific remediation steps are prov...

CVE-2026-102205

A heap-based buffer overflow exists in the Windows Universal Disk Format File System Driver (UDFS) . This vulnerability allows an authorized attacker to achieve local privilege elevation . No specific exploit details or patch versions are provided in the documents.

CVE-2026-102208

A Use after free vulnerability exists in the Windows Win32 Kernel Subsystem . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is assigned a CVSS 3.1 score of 7.0 (High) , with high impact on confidentiality, integrity, and availability. No specifi...

CVE-2026-102220

A use after free vulnerability in the Windows VHD miniport driver allows an authorized attacker to achieve local privilege elevation . While the technical details of the root cause are limited to the vulnerability type, the impact includes high confidentiality, integrity, and availability consequ...

CVE-2026-102211

A use after free vulnerability exists in the Windows Virtualization-Based Security (VBS) Enclave . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-416 (Use After Free) and CWE-362 (Race Condition). No specific exploit detail...

CVE-2026-102214

A Use after free vulnerability in Windows Hyper-V allows an authorized attacker to achieve local code execution . The vulnerability is categorized under CWE-416 and has a CVSS 3.1 base score of 8.8 (High) . The metrics indicate that the attack is local, requires low privileges, and has low comple...

CVE-2026-102216

A type confusion vulnerability exists in the Windows StateRepository API , where an access of resource using an incompatible type allows an authorized attacker to achieve local privilege escalation . The vulnerability has a HIGH base severity score of 7.8. No specific exploitative details or patc...

CVE-2026-102215

A heap-based buffer overflow exists in the Windows Universal Disk Format File System Driver (UDFS) . This vulnerability allows an authorized attacker to achieve local privilege elevation . No specific exploit details or remediation steps are provided in the documents.

CVE-2026-102218

A heap-based buffer overflow exists in the Windows Universal Disk Format File System Driver (UDFS) . This vulnerability allows an authorized attacker to perform a local privilege elevation . The documents do not provide specific version numbers, underlying root causes, or direct links to exploits...