CVE-2026-96243

A local elevation of privilege vulnerability exists in the Windows WalletService due to improper link resolution before file access (link following ). An authorized attacker can exploit this flaw to gain higher privileges on the local system. While the CVSS score indicates a High severity (7.8) w...

CVE-2026-96206

A use of uninitialized resource (CWE-908) within the Windows Subsystem for Linux allows an authorized attacker to perform a local information disclosure . The vulnerability has a CVSS 3.1 score of 6.5 (Medium), with a high confidentiality impact. No specific component details, exploit links, or p...

CVE-2026-96186

The Microsoft Windows Media Foundation component is vulnerable to a deserialization of untrusted data flaw (CWE-502). This vulnerability allows an authorized attacker to achieve local privilege elevation . No specific patch versions or exploit links are provided in the documents.

CVE-2026-69919

An out-of-bounds read vulnerability exists in Windows Cryptographic Services . This flaw allows an authorized attacker to perform a local attack to disclose information . The vulnerability is associated with CWE-125 . No specific exploit details or remediation instructions are provided in the doc...

CVE-2026-88120

A Use after free vulnerability in the Windows DHCP Server allows an unauthorized attacker to execute code over a network. The vulnerability has a CVSS 3.1 base score of 8.1 and is categorized as HIGH severity. While the root cause is identified as a memory management issue, specific component det...

CVE-2026-88117

A Use after free vulnerability in the Windows DHCP Server allows an unauthorized attacker to execute arbitrary code over a network. The vulnerability is categorized under CWE-416 and has a HIGH base severity score of 8.1. While the impact includes high confidentiality, integrity, and availability...

CVE-2026-88119

A Use after free vulnerability exists in the Windows DHCP Server , which could allow an unauthorized attacker to execute code over a network . The vulnerability is associated with CWE-416 and has a CVSS 3.1 base score of 8.1 (High) . No specific exploit information or affected versions are provid...

CVE-2026-70160

A Use after free vulnerability in the Windows Kernel allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-416 and has a CVSS 3.1 base score of 7.0 . No specific component, version, or remediation details are provided in the documents, and ...

CVE-2026-70158

The Windows Routing and Remote Access Service (RRAS) is vulnerable to Remote Code Execution (RCE) . This vulnerability is caused by a Double Free (CWE-415) condition, which could allow an attacker to gain unauthorized access to a victim's machine. The issue is rated as High severity with a CVSS 3...

CVE-2026-70184

The Windows Backup Engine is vulnerable to an Improper Resolution of Path Equivalence (CWE-41) vulnerability. This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability has a HIGH base severity score of 7.8. While the impact involves high confidentiality, int...

CVE-2026-70111

An untrusted pointer dereference vulnerability exists in the Windows Kernel . This flaw allows an unauthorized attacker to elevate privileges over a network. The vulnerability is associated with CWE-822 and carries a CVSS 3.1 base score of 8.1 (High) . While the vulnerability is confirmed, no spe...

CVE-2026-70227

An out-of-bounds read vulnerability exists in the Windows Device Association Service . This flaw allows an authorized attacker to perform a local information disclosure, potentially revealing sensitive data. No specific exploit code or in-the-wild exploitation details are provided in the document...

CVE-2026-70250

A Use after free vulnerability in the Windows DHCP Client allows an unauthorized attacker to execute code over an adjacent network . The vulnerability is associated with CWE-416 (Use After Free) and CWE-362 (Race Condition). While the specific root cause is linked to concurrent execution using sh...

EUVD-2026-100133

Use after free in Windows DHCP Client allows an unauthorized attacker to execute code over an adjacent network...

CVE-2026-69915

A Use after free vulnerability in Windows NTFS allows an authorized attacker to achieve local privilege elevation . The vulnerability is categorized under CWE-416 and carries a High severity base score of 7.0. Technical details regarding specific impacted components or files are not provided in t...

CVE-2026-70122

A Time-of-check time-of-use (TOCTOU) race condition exists in the Windows Broadcast DVR User Service . This vulnerability allows an authorized attacker to achieve local privilege escalation . The vulnerability is tracked under CWE-367 . Remediation is available via an official fix provided by Mic...

CVE-2026-70148

The Windows Broadcast DVR User Service is susceptible to an improper authorization vulnerability (CWE-441). This flaw allows an authorized attacker to perform a local information disclosure . The vulnerability has a CVSS 3.1 base score of 6.5 and is categorized as a MEDIUM severity issue. No spec...

CVE-2026-70084

An improper access control vulnerability exists in the Windows Projected File System . This flaw allows an authorized attacker to perform a local information disclosure . The root cause is categorized under CWE-22 (Path Traversal). No specific details regarding affected versions, exploit code, or...

CVE-2026-70112

A heap-based buffer overflow vulnerability exists in the Windows Spaceport.sys component. This flaw allows an authorized attacker to achieve local code execution . The vulnerability is characterized by high impacts on confidentiality, integrity, and availability, with a CVSS 3.1 base score of 7.8...

CVE-2026-70143

A heap-based buffer overflow exists in the Windows Network File System , which may allow an authorized attacker to achieve local code execution . The vulnerability is associated with CWE-122 and carries a High base severity score of 7.8. No specific exploit details or remediation steps are provid...