CVE-2026-96948

The Windows Client Side Caching driver (csc.sys) is vulnerable to an information disclosure flaw (CWE-497). An authorized attacker can exploit this vulnerability to disclose sensitive information locally on the system. No specific exploit code or in-the-wild exploitation details are provided in t...

CVE-2026-96945

An uncaught exception in Windows Failover Cluster allows an unauthorized attacker to perform a denial of service over a network. The vulnerability is associated with CWE-248 . While specific affected versions and remediation steps are not detailed in the provided documents, the issue carries a Hi...

EUVD-2026-100269

Use after free in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...

CVE-2026-96946

A use after free vulnerability exists in the Windows Universal Disk Format File System Driver (UDFS) . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability has a CVSS 3.1 base score of 7.8 and is categorized as High severity. No specific exploit detail...

CVE-2026-96949

A use after free vulnerability exists in the Windows Universal Disk Format File System Driver (UDFS) . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is categorized under CWE-362 (Race Condition). While the impact includes high levels of confiden...

CVE-2026-96950

A Use after free vulnerability exists in the Windows Universal Disk Format File System Driver (UDFS) . This flaw allows an authorized attacker to achieve local privilege escalation . No specific exploit code or exploitation details are provided in the documents, though the CVSS score indicates a ...

CVE-2026-96947

A Use after free vulnerability in the Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to achieve local privilege elevation . The vulnerability is characterized by a HIGH base severity score of 7.8 . Official remediation is available through a confirmed fix, a...

CVE-2026-96951

The Windows Shell is vulnerable to a security feature bypass (CVE-2026-96951) caused by improper neutralization of special elements used in a command (command injection). This flaw affects Windows 10 , Windows 11 , and certain Server versions , and was also identified in Outlook.com cloud service...

CVE-2026-85866

This vulnerability exists in Windows ALPC , where the exposure of sensitive system information to an unauthorized control sphere allows an authorized attacker to disclose information locally . The root cause is associated with CWE-497 . The base CVSS 3.1 score is 4.7 (Medium) , reflecting a high ...

CVE-2026-69675

An out-of-bounds read vulnerability exists in the Windows Network File System . This flaw allows an authorized attacker to perform a local information disclosure, potentially exposing sensitive data on the system. The vulnerability is associated with CWE-125 . No specific exploit code or in-the-w...

CVE-2026-96929

A heap-based buffer overflow exists in the Windows Kernel , which allows an authorized attacker to perform a local privilege elevation . The vulnerability is confirmed and impacts the integrity, confidentiality, and availability of the system. Official remediation is available, and the CVSS v3.1 ...

EUVD-2026-100258

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-96931

A vulnerability exists in Windows NTFS involving an untrusted pointer dereference . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is assigned CWE-822 and has a CVSS 3.1 base score of 7.8 (High) . Official remediation is available via a patch fro...

EUVD-2026-100257

Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally...

CVE-2026-96934

A Use after free vulnerability in the Windows DHCP Server allows an unauthorized attacker to execute arbitrary code over a network. This vulnerability has a CRITICAL base score of 9.8 . While the specific root cause is identified as a use after free, detailed exploit information or specific patch...

EUVD-2026-100262

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

EUVD-2026-100256

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Embedded Mode Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-100263

Heap-based buffer overflow in Windows Distributed File System DFS allows an authorized attacker to elevate privileges locally...

CVE-2026-96937

A Use after free vulnerability exists in the Microsoft Windows Search Component . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is characterized by a CVSS 3.1 base score of 7.0 (High) , with impacts on confidentiality, integrity, and availability...

CVE-2026-96932

A race condition vulnerability exists in the Windows Embedded Mode Service due to improper synchronization during concurrent execution using a shared resource. This flaw allows an authorized attacker to perform a local privilege elevation . While the documents confirm the vulnerability type and i...