CVE-2026-102192

A vulnerability exists in Windows Failover Cluster due to an integer underflow (wrap or wraparound) . This flaw allows an unauthorized attacker to perform a denial of service (DoS) attack over a network. The CVSS 3.1 score is 7.5 (High) , indicating a significant impact on availability. No specif...

CVE-2026-102201

A Use after free vulnerability in Microsoft Windows Media Foundation allows an authorized attacker to achieve local privilege escalation . The vulnerability is classified as HIGH severity with a CVSS 3.1 score of 7.8. Exploitation details and specific affected versions are not provided in the doc...

CVE-2026-102196

A use after free vulnerability exists in the Windows Broadcast DVR User Service . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-416 and has a CVSS 3.1 base score of 7.8 . No specific software versions, root cause details, ...

CVE-2026-102195

A use after free vulnerability in the Windows Broadcast DVR User Service allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-416 and has a CVSS v3.1 base score of 7.0 . No specific exploit information or remediation details are provided in...

CVE-2026-102202

A vulnerability exists in the Windows Container Isolation FS Filter Driver (unionfs.sys) due to improper access control . This flaw allows an authorized attacker to perform a local privilege elevation . The vulnerability is associated with CWE-59 (Improper Link Resolution Before File Access). No ...

CVE-2026-102206

A heap-based buffer overflow exists in the Windows Portable Device MTP Driver . This vulnerability allows an unauthorized attacker to achieve privilege escalation via a physical attack . The CVSS 3.1 score is 6.8 (Medium) , with a physical attack vector and no user interaction required. No specif...

CVE-2026-102193

A use after free vulnerability exists in the Windows Broadcast DVR User Service . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability has a CVSS 3.1 base score of 7.0 (High) . No specific exploit details or patch versions are provided in the documents,...

CVE-2026-102198

An out-of-bounds read vulnerability exists in the Windows Remote Desktop Protocol , which allows an authorized attacker to disclose information over a network. The vulnerability is classified as CWE-125 and carries a medium severity score of 5.3 . While the documents confirm the existence of the ...

CVE-2026-102199

A stack-based buffer overflow exists in the Microsoft Windows Codecs Library , which could allow an unauthorized attacker to cause a denial of service (DoS) over a network. The vulnerability requires user interaction to trigger. Documentation regarding specific affected versions or an official pa...

CVE-2026-70212

The Windows Security Center is affected by a vulnerability involving the improper restriction of communication channels to intended endpoints. This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is categorized under CWE-923 . While the impact is high ...

CVE-2026-88226

An out-of-bounds read vulnerability exists in the Windows Storage Port Driver . This flaw allows an unauthorized attacker to disclose information, but it requires a physical attack to exploit. The vulnerability is associated with CWE-125 . No specific exploit details or in-the-wild exploitation i...

CVE-2026-96209

An out-of-bounds read vulnerability exists in the Windows Network File System . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is classified as CWE-125 and has been assigned a CVSS 3.1 base score of 7.0 (High) . No specific exploit links or techni...

CVE-2026-102187

A vulnerability exists in the Windows Kernel due to the use of uninitialized resource (CWE-908). This flaw allows an authorized attacker to perform a local information disclosure . The CVSS 3.1 score is 5.5 (Medium) , with a high confidentiality impact. An official fix is available as indicated b...

CVE-2026-102188

The Windows Storage Port Driver is vulnerable to an untrusted pointer dereference (CWE-822). This flaw allows an unauthorized attacker to achieve privilege elevation through a physical attack . While the CVSS v3.1 score indicates a base severity of Medium (6.8) , the impact includes high confiden...

CVE-2026-102189

A heap-based buffer overflow vulnerability exists in Windows Storage . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability has a CVSS 3.1 score of 7.0 and is categorized under CWE-122 . No specific exploit information or technical remediation details ...

CVE-2026-102191

A heap-based buffer overflow exists in Windows Storage , which could allow an authorized attacker to achieve local privilege escalation . The vulnerability is assigned a CVSS 3.1 base score of 7.0 (HIGH) . While the documents do not provide specific exploit links or a detailed root cause analysis...

CVE-2026-102186

The Windows Network File System is susceptible to an untrusted pointer dereference vulnerability (CWE-822). This flaw allows an authorized attacker to perform a local information disclosure . The vulnerability has a CVSS 3.1 base score of 4.7 (Medium) , characterized by high attack complexity and...

CVE-2026-69506

The Windows Key Storage Provider is vulnerable to an out-of-bounds read (CWE-125). This vulnerability allows an authorized attacker to disclose information locally . The vulnerability is assigned a CVSS 3.1 base score of 4.7 (Medium) , characterized by a LOCAL attack vector and HIGH confidentiali...

CVE-2026-70023

A use after free vulnerability in Windows Hyper-V allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-416 . While the specific component and root cause are not detailed in the provided documents, the impact includes high confidentiality, i...

CVE-2026-100225

A heap-based buffer overflow vulnerability exists in Windows Storage . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is classified as HIGH severity with an official fix available via Microsoft. No specific exploit details or in-the-wild exploitat...