CVE-2026-96209

An out-of-bounds read vulnerability exists in the Windows Network File System . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is classified as CWE-125 and has been assigned a CVSS 3.1 base score of 7.0 (High) . No specific exploit links or techni...

CVE-2026-70212

The Windows Security Center is affected by a vulnerability involving the improper restriction of communication channels to intended endpoints. This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is categorized under CWE-923 . While the impact is high ...

CVE-2026-69506

The Windows Key Storage Provider is vulnerable to an out-of-bounds read (CWE-125). This vulnerability allows an authorized attacker to disclose information locally . The vulnerability is assigned a CVSS 3.1 base score of 4.7 (Medium) , characterized by a LOCAL attack vector and HIGH confidentiali...

CVE-2026-100225

A heap-based buffer overflow vulnerability exists in Windows Storage . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is classified as HIGH severity with an official fix available via Microsoft. No specific exploit details or in-the-wild exploitat...

CVE-2026-108396

A Time-of-check time-of-use (TOCTOU) race condition exists in Windows Modern Device Management (MDM) . This vulnerability allows an authorized attacker to achieve local privilege elevation . While the documents confirm the vulnerability's existence and its classification under CWE-367 , specific ...

CVE-2026-100216

A stack-based buffer overflow exists in Windows Storage , which could allow an authorized attacker to achieve local privilege elevation . The vulnerability is characterized by a high level of attack complexity and impacts confidentiality, integrity, and availability. An official fix is available;...

EUVD-2026-100333

Heap-based buffer overflow in Windows Media Video Decoder allows an unauthorized attacker to execute code over a network...

CVE-2026-100217

A vulnerability exists in Windows Group Policy due to improper privilege management . This flaw allows an authorized attacker to perform a local privilege escalation . The issue is associated with CWE-862 (Missing Authorization) . While the documents do not provide specific technical details on t...

CVE-2026-70023

A use after free vulnerability in Windows Hyper-V allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-416 . While the specific component and root cause are not detailed in the provided documents, the impact includes high confidentiality, i...

CVE-2026-100220

A heap-based buffer overflow exists in the Windows Media Video Decoder , which may allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability is associated with CWE-122 . While the documents confirm the impact and root cause, specific exploit details or in-t...

CVE-2026-100203

A heap-based buffer overflow exists in the Windows Update Service , which could allow an authorized attacker to achieve local privilege escalation . The vulnerability is classified as High severity with a CVSS 3.1 score of 7.0. While the root cause is identified as a heap overflow, specific file ...

EUVD-2026-100315

Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network...

CVE-2026-100202

A Use after free vulnerability exists in the Windows Message Queuing Queue Manager . This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is rated as CRITICAL with a CVSS score of 9.80 . While specific exploit links are not provided, the doc...

EUVD-2026-100310

Improper link resolution before file access 'link following' in Windows Container Isolation FS Filter Driver unionfs.sys allows an authorized attacker to perform tampering locally...

CVE-2026-96118

A vulnerability in the Windows Graphics Kernel involving an out-of-bounds read (CWE-125) and integer overflow or wraparound (CWE-190) allows an authorized attacker to achieve local privilege escalation . The security impact is rated as High with an official fix available. No specific exploit code...

CVE-2026-97793

A vulnerability in Windows Setup and Deployment arises from missing authentication for a critical function . This flaw allows an authorized attacker to perform a local privilege escalation . The vulnerability is associated with CWE-306 . While a CVSS v3.1 score of 7.0 is provided, specific detail...

CVE-2026-97792

An improper access control vulnerability exists in the Windows Container Isolation FS Filter Driver (unionfs.sys) . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-732 (Incorrect Permission Assignment for Critical Resource) a...

CVE-2026-97787

A race condition vulnerability exists in the Windows Container Isolation FS Filter Driver (unionfs.sys) due to concurrent execution using a shared resource with improper synchronization. This flaw allows an authorized attacker to achieve local privilege escalation . No specific exploit details or...

CVE-2026-96071

A heap-based buffer overflow exists in Windows Media , which could allow an unauthorized attacker to execute arbitrary code over a network . The vulnerability is associated with CWE-122 . While the CVSS score indicates a HIGH severity (7.5) with potential for high impact on confidentiality, integ...

CVE-2026-100200

A use after free vulnerability exists in the Windows Update Service , allowing an authorized attacker to achieve local privilege escalation . The vulnerability is categorized under CWE-416 and has a base severity score of 7.0 . While the specific root cause and affected versions are not detailed ...