CVE-2026-96946

A use after free vulnerability exists in the Windows Universal Disk Format File System Driver (UDFS) . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability has a CVSS 3.1 base score of 7.8 and is categorized as High severity. No specific exploit detail...

EUVD-2026-100275

Null pointer dereference in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to execute code locally...

CVE-2026-96948

The Windows Client Side Caching driver (csc.sys) is vulnerable to an information disclosure flaw (CWE-497). An authorized attacker can exploit this vulnerability to disclose sensitive information locally on the system. No specific exploit code or in-the-wild exploitation details are provided in t...

EUVD-2026-100273

Use after free in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...

CVE-2026-96951

The Windows Shell is vulnerable to a security feature bypass (CVE-2026-96951) caused by improper neutralization of special elements used in a command (command injection). This flaw affects Windows 10 , Windows 11 , and certain Server versions , and was also identified in Outlook.com cloud service...

CVE-2026-96952

A Heap-based buffer overflow vulnerability exists in Microsoft Windows Media Foundation . This flaw could allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability is characterized by a CVSS v3.1 score of 8.8 (High) , indicating significant impacts on confi...

EUVD-2026-100263

Heap-based buffer overflow in Windows Distributed File System DFS allows an authorized attacker to elevate privileges locally...

CVE-2026-85866

This vulnerability exists in Windows ALPC , where the exposure of sensitive system information to an unauthorized control sphere allows an authorized attacker to disclose information locally . The root cause is associated with CWE-497 . The base CVSS 3.1 score is 4.7 (Medium) , reflecting a high ...

CVE-2026-69675

An out-of-bounds read vulnerability exists in the Windows Network File System . This flaw allows an authorized attacker to perform a local information disclosure, potentially exposing sensitive data on the system. The vulnerability is associated with CWE-125 . No specific exploit code or in-the-w...

CVE-2026-96931

A vulnerability exists in Windows NTFS involving an untrusted pointer dereference . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is assigned CWE-822 and has a CVSS 3.1 base score of 7.8 (High) . Official remediation is available via a patch fro...

CVE-2026-96929

A heap-based buffer overflow exists in the Windows Kernel , which allows an authorized attacker to perform a local privilege elevation . The vulnerability is confirmed and impacts the integrity, confidentiality, and availability of the system. Official remediation is available, and the CVSS v3.1 ...

CVE-2026-96938

A Heap-based buffer overflow exists in the Windows Distributed File System (DFS) . This vulnerability allows an authorized attacker to achieve local privilege escalation . The CVSS 3.1 score is 6.7 (Medium) , with high impact on confidentiality, integrity, and availability. Official fixes are ava...

CVE-2026-96932

A race condition vulnerability exists in the Windows Embedded Mode Service due to improper synchronization during concurrent execution using a shared resource. This flaw allows an authorized attacker to perform a local privilege elevation . While the documents confirm the vulnerability type and i...

CVE-2026-96937

A Use after free vulnerability exists in the Microsoft Windows Search Component . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is characterized by a CVSS 3.1 base score of 7.0 (High) , with impacts on confidentiality, integrity, and availability...

EUVD-2026-100257

Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally...

EUVD-2026-100258

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-96934

A Use after free vulnerability in the Windows DHCP Server allows an unauthorized attacker to execute arbitrary code over a network. This vulnerability has a CRITICAL base score of 9.8 . While the specific root cause is identified as a use after free, detailed exploit information or specific patch...

EUVD-2026-100262

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

EUVD-2026-100256

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Embedded Mode Service allows an authorized attacker to elevate privileges locally...

CVE-2026-96930

An out-of-bounds read vulnerability exists in the Windows Universal Disk Format File System Driver (UDFS) . This flaw allows an authorized attacker to perform a local information disclosure , potentially exposing sensitive data. No specific exploit details or patch versions are provided in the do...