CVE-2026-56175 Windows NTFS Elevation of Privilege Vulnerability

...

CVE-2026-56175

CVE-2026-56175 describes a heap-based buffer overflow in Windows NTFS that allows an authorized, local attacker to elevate privileges. Connected sources (Microsoft MSRC update, NVD, NTFS/CIRCL sightings) confirm the vulnerability is in Windows NTFS, with local-privilege-escalation potential and a...

CVE-2026-56176 Windows Win32k Elevation of Privilege Vulnerability

...

CVE-2026-56176 Windows Win32k Elevation of Privilege Vulnerability

...

CVE-2026-56176

CVE-2026-56176 – Windows Win32K GRFX: Affected component is the Win32K GRFX subsystem. The vulnerability is an out-of-bounds read that allows an authorized local attacker to elevate privileges on Windows. The CVE is backed by multiple sources in connected documents (NVD/NCSC and MS advisories) co...

CVE-2026-56168 Windows SMB Server Denial of Service Vulnerability

...

CVE-2026-56168

CVE-2026-56168 : Null pointer dereference in Windows SMB Server can allow an authorized attacker to cause a Network-based Denial of Service. It targets the Windows SMB Server component and has a CVSS v3.1 base vector of Network, Low Attack Complexity, Privileges Required: Low, No User Interaction...

CVE-2026-56168 Windows SMB Server Denial of Service Vulnerability

...

CVE-2026-56173 Windows WebView Elevation of Privilege Vulnerability

...

CVE-2026-56173

CVE-2026-56173 is a use-after-free vulnerability in Windows WebView that allows an authorized local attacker to escalate privileges. The issue is tied to the Windows WebView component and is listed with a high impact (local elevation of privileges) in the CVE entry. Connected sources corroborate ...

CVE-2026-56173 Windows WebView Elevation of Privilege Vulnerability

...

EUVD-2026-44234

Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network...

CVE-2026-54126 Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability

...

CVE-2026-54126 Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability

...

CVE-2026-54128 Windows DHCP Client Remote Code Execution Vulnerability

...

CVE-2026-54126

CVE-2026-54126 is a Windows RDP information-disclosure vulnerability (out-of-bounds read). It is triggered over the network and requires user interaction, with no privileges required by the attacker; impact is disclosure of confidential information. The CVSS v3.1 vector (AV:N/AC:L/PR:N/UI:R/S:U/C...

EUVD-2026-44149

Use after free in Windows DHCP Client allows an unauthorized attacker to execute code locally...

CVE-2026-54128 Windows DHCP Client Remote Code Execution Vulnerability

...

CVE-2026-54128

CVE-2026-54128 is a Windows DHCP Client use-after-free vulnerability that could allow an unauthenticated local attacker to execute code. The issue, described in the NVD entry and echoed by TALOS, affects the Windows DHCP Client component and is known to have been exploited in the wild (per CIRCL ...

CVE-2026-50690

CVE-2026-50690 is a Windows SMB information-disclosure vulnerability described as caused by the use of an uninitialized resource within Windows SMB that can allow an authorized local attacker to disclose information. The CVE is linked to Microsoft advisories and MSRC updates addressing the issue,...