EUVD-2026-100258

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally...

EUVD-2026-100257

Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally...

EUVD-2026-100263

Heap-based buffer overflow in Windows Distributed File System DFS allows an authorized attacker to elevate privileges locally...

CVE-2026-96938

A Heap-based buffer overflow exists in the Windows Distributed File System (DFS) . This vulnerability allows an authorized attacker to achieve local privilege escalation . The CVSS 3.1 score is 6.7 (Medium) , with high impact on confidentiality, integrity, and availability. Official fixes are ava...

CVE-2026-96933

The Windows COM+ Event System Service is vulnerable to an untrusted pointer dereference . This security flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is assigned a CVSS v3.1 score of 7.8 (High) , indicating significant impact on confidentiality, integ...

EUVD-2026-100253

Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally...

EUVD-2026-100252

Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally...

CVE-2026-96924

A critical untrusted pointer dereference vulnerability exists in Windows OLE , allowing an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a CVSS v3.1 score of 9.8 and is categorized under CWE-822 . According to the NCSC, this vulnerability allows for ...

CVE-2026-96923

A Use after free vulnerability exists in the Windows Workstation Service . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-416 and has a CVSS 3.1 base score of 7.0 . No specific exploit details or in-the-wild exploitation inf...

CVE-2026-96927

An out-of-bounds read vulnerability exists in the Windows NTFS file system. This flaw allows an authorized attacker to perform a local information disclosure , potentially accessing data they are not permitted to view. The vulnerability is categorized under CWE-125 and has a CVSS 3.1 base score o...

CVE-2026-96930

An out-of-bounds read vulnerability exists in the Windows Universal Disk Format File System Driver (UDFS) . This flaw allows an authorized attacker to perform a local information disclosure , potentially exposing sensitive data. No specific exploit details or patch versions are provided in the do...

CVE-2026-96925

An integer underflow (wrap or wraparound) vulnerability exists in Windows NTFS . This flaw allows an authorized attacker to perform a local information disclosure . The vulnerability is associated with CWE-191 . No specific exploit information or remediation details are provided in the documents.

CVE-2026-96919

A Use after free vulnerability exists in the Windows Broadcast DVR User Service . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-416 (Use After Free) and CWE-362 (Race Condition). Exploitation details are not provided in th...

EUVD-2026-100254

Out-of-bounds read in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to disclose information locally...

EUVD-2026-100250

Integer underflow wrap or wraparound in Windows NTFS allows an authorized attacker to disclose information locally...

CVE-2026-96913

A heap-based buffer overflow exists in the Windows Kernel , which could allow an authorized attacker to achieve local privilege escalation . The vulnerability is assigned a CVSS 3.1 score of 8.8 (High) , indicating significant impact on confidentiality, integrity, and availability. No specific so...

CVE-2026-96912

A Use after free vulnerability in the Windows Client License Service allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-416 and has a CVSS 3.1 base score of 7.8 . While the documents confirm the impact of privilege elevation, no specific...

CVE-2026-96858

A missing authentication vulnerability in the Windows Security Account Manager allows an authorized attacker to perform tampering locally . The root cause is identified as CWE-306 . While no specific exploit code is provided, the vulnerability has an official fix available via Microsoft. Detailed...

CVE-2026-96909

A heap-based buffer overflow in Windows BitLocker allows an unauthorized attacker to achieve remote code execution over a network. This vulnerability is classified with a CRITICAL CVSS score of 9.80 . While specific technical details regarding the underlying component or file are not provided bey...

CVE-2026-96918

An improper access control vulnerability exists in Windows NTFS , which allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-863 (Incorrect Authorization) and carries a HIGH base severity score of 7.8. Remediation involves an official fix ...