CVE-2026-97803

A heap-based buffer overflow exists within the Windows Kernel , which could allow an authorized attacker to perform a local privilege escalation . The vulnerability has been assigned a HIGH base severity score of 7.8. No specific exploit details or in-the-wild exploitation information are provide...

CVE-2026-97812

A double free vulnerability exists in the Windows Update Orchestrator Service . This flaw allows an authorized attacker to perform a local privilege escalation . The CVSS 3.1 score is 7.0 (High) , with an attack vector of Local and high impact on confidentiality, integrity, and availability. No s...

CVE-2026-97807

A Use after free vulnerability exists in the Windows Broadcast DVR User Service . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-416 . No specific exploit details or remediation steps are provided in the documents.

CVE-2026-97806

A Use after free vulnerability exists in the Windows Broadcast DVR User Service . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-416 and has a CVSS 3.1 base score of 7.8 (High) . No specific exploit details or remediation v...

CVE-2026-97808

A Use after free vulnerability exists in the Windows Broadcast DVR User Service . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability has a high severity score of 7.0, with the impact affecting confidentiality, integrity, and availability. While the s...

CVE-2026-97809

A Use after free vulnerability (CWE-416) exists in the Windows Broadcast DVR User Service . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability has a base severity score of 7.8 (High) and an official fix is available. No specific exploit code or in-th...

CVE-2026-97811

A double free vulnerability exists in OpenSSH for Windows , which allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-415 (Double Free) and CWE-400 (Uncontrolled Resource Consumption). While the impact is categorized as high for confident...

CVE-2026-97805

The Windows Partition Management Driver contains an out-of-bounds read vulnerability (CWE-125) caused by improper input validation (CWE-20). This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is rated as CRITICAL with a CVSS 3.1 score of 9...

EUVD-2026-100405

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally...

EUVD-2026-100412

Heap-based buffer overflow in Windows Container Isolation FS Filter Driver unionfs.sys allows an authorized attacker to elevate privileges locally...

EUVD-2026-100413

Double free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally...

EUVD-2026-100411

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-100414

Double free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-100400

Improper neutralization of argument delimiters in a command 'argument injection' in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

CVE-2026-97798

The Windows Error Reporting service is vulnerable to an argument injection vulnerability (CWE-88) caused by improper neutralization of argument delimiters in a command. An authorized attacker can leverage this flaw to achieve local privilege escalation . The official fix is available via the prov...

CVE-2026-97799

The Windows Audio Service is vulnerable to a Local Privilege Escalation flaw due to improper verification of cryptographic signatures (CWE-347). An authorized attacker can exploit this weakness to elevate privileges locally. A high-severity OFFICIAL_FIX is available. No specific exploit details o...

CVE-2026-105008

A vulnerability in Windows Schannel allows an unauthorized attacker to perform spoofing over a network. This issue can lead to an attacker acting as another user with a CVSSv3.1 score of 9.0 (CRITICAL) . Exploitation requires high complexity and no prior authentication or user interaction. System...

CVE-2026-105009

A local privilege escalation vulnerability exists in the Windows Server Update Service due to incorrect default permissions (CWE-276). An authorized attacker can exploit this flaw to elevate privileges locally. While the CVSS 3.1 score reflects a High severity (7.5), the attack requires low privi...

EUVD-2026-100401

Improper verification of cryptographic signature in Windows Audio Service allows an authorized attacker to elevate privileges locally...

CVE-2026-105010

A Use after free vulnerability exists in the Microsoft Windows Search Component . This flaw allows an unauthorized attacker to achieve privilege elevation over a network. The vulnerability has been assigned a CRITICAL CVSS v3.1 base score of 9.8 and is associated with CWE-416 . Official remediati...