CVE-2026-96917

A heap-based buffer overflow exists in the Windows PCI Bus Driver . This vulnerability allows an authorized attacker to achieve local privilege elevation . The impact includes high levels of risk to confidentiality, integrity, and availability . An official fix is available via the provided Micro...

CVE-2026-96913

A heap-based buffer overflow exists in the Windows Kernel , which could allow an authorized attacker to achieve local privilege escalation . The vulnerability is assigned a CVSS 3.1 score of 8.8 (High) , indicating significant impact on confidentiality, integrity, and availability. No specific so...

CVE-2026-96909

A heap-based buffer overflow in Windows BitLocker allows an unauthorized attacker to achieve remote code execution over a network. This vulnerability is classified with a CRITICAL CVSS score of 9.80 . While specific technical details regarding the underlying component or file are not provided bey...

CVE-2026-96918

An improper access control vulnerability exists in Windows NTFS , which allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-863 (Incorrect Authorization) and carries a HIGH base severity score of 7.8. Remediation involves an official fix ...

CVE-2026-96914

An integer overflow or wraparound vulnerability exists within the Windows Virtualization-Based Security (VBS) Enclave . This flaw allows an authorized attacker to achieve local privilege escalation . While the vulnerability is confirmed and has a high severity score (8.8), specific details regard...

CVE-2026-96911

The Microsoft Windows Search Component is vulnerable to an improper link resolution before file access (link following) vulnerability. This flaw allows an authorized attacker to achieve local privilege escalation . The CVSS 3.1 score is 7.8 (High), with high impacts on confidentiality, integrity,...

CVE-2026-96324

A Use after free vulnerability in the Microsoft Windows Search Component allows an authorized attacker to achieve local privilege escalation . This issue (tracked as CWE-416 ) impacts the integrity, confidentiality, and availability of the system. While the root cause is identified as a memory ma...

CVE-2026-96325

The Windows SMB Server is affected by a vulnerability caused by a missing reference to an active allocated resource (CWE-771). This flaw allows an unauthorized attacker to perform a denial of service (DoS) attack over the network. The vulnerability has a CVSS 3.1 base score of 7.5 and is categori...

CVE-2026-96850

A vulnerability in Windows Modern Device Management (MDM) involving the use of uninitialized resource (CWE-908) and improper null termination (CWE-170) allows an authorized attacker to disclose information locally . The vulnerability has a CVSS 3.1 base score of 5.5 with a local attack vector and...

CVE-2026-96852

A Use after free vulnerability exists in Windows TCP/IP that allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-416 . While the CVSS 3.1 score indicates a High severity (7.0), specific technical details regarding the vulnerable component ...

CVE-2026-96854

A type confusion vulnerability exists in the Windows Device Association Service . This flaw allows an authorized attacker to perform an information disclosure locally by accessing a resource using an incompatible type. The vulnerability is associated with CWE-843 and has a CVSS 3.1 base score of ...

CVE-2026-96853

A Time-of-check time-of-use (TOCTOU) race condition exists in the Windows Win32 Kernel Subsystem . This vulnerability allows an authorized attacker to perform a local information disclosure . While the technical details of the root cause are limited to the TOCTOU classification (CWE-367), the imp...

CVE-2026-96320

A heap-based buffer overflow vulnerability exists in the Windows DHCP Server . This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is rated as CRITICAL with a CVSS score of 9.80 , as it can be exploited without prior authentication or user ...

CVE-2026-96253

A Use after free vulnerability in the Windows USB Print Driver allows an authorized attacker to achieve local privilege escalation . The vulnerability has a CVSS 3.1 base score of 7.0 (High) . While the documents confirm the existence of the flaw and its impact on local privileges, no specific te...

CVE-2026-96310

A use after free vulnerability exists in the Windows USB Print Driver . This flaw allows an authorized attacker to achieve local privilege elevation . No specific version numbers, root causes, or exploit details are provided in the documents. Remediation is categorized as an official fix .

CVE-2026-96323

A Use after free vulnerability in Windows Update allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-416 and has a High base severity score of 7.0. No specific exploit links or remediation details are provided in the documents beyond the m...

CVE-2026-96304

A Use after free vulnerability exists in the Windows USB Print Driver . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is classified with a CVSS 3.1 base score of 7.0 (High) . While the technical root cause is specified as Use after free, no spec...

CVE-2026-96301

A Use after free vulnerability in the Windows USB Print Driver allows an authorized attacker to perform a local elevation of privilege . The vulnerability is associated with CWE-416 . While the root cause is identified as a memory management issue, specific technical details regarding the affecte...

CVE-2026-96322

A Use after free vulnerability in the Windows Remote Desktop Protocol allows an authorized attacker to elevate privileges locally . The vulnerability has a CVSS 3.1 base score of 7.0 (HIGH) . While specific affected versions and the exact component/file are not detailed in the provided documents,...

CVE-2026-96254

A Use after free vulnerability exists in the Windows USB Print Driver . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-416 and has been assigned a High base severity score of 7.0. While the root cause is identified as a Use...