CVE-2026-49785

A vulnerability in Windows UEFI involving improper resource shutdown or release allows an authorized attacker to bypass a security feature locally. This issue specifically impacts the UEFI Secure Boot security feature. The CVSS 3.1 score is 7.8 (High) , with a local attack vector and low complexi...

CVE-2026-72968

A use after free vulnerability exists in the Windows Program Compatibility Assistant Service . This flaw allows an authorized attacker to perform a local privilege escalation . Exploitation details are not provided in the documentation, but the vulnerability is associated with CWE-416 .

CVE-2026-61931

A use after free vulnerability exists in the Windows Perception Simulation Service . This flaw allows an authorized attacker to achieve local privilege escalation . While the specific component or root cause is not detailed beyond the memory corruption type, the impact includes potential high con...

CVE-2026-70566

A null pointer dereference vulnerability exists in Windows Schannel , which could allow an authorized attacker to achieve local privilege elevation . The vulnerability is categorized under CWE-476 . While the specific component or file is not detailed in the provided documents, the impact is rate...

CVE-2026-69363

A heap-based buffer overflow exists in Windows Error Reporting , which allows an authorized attacker to achieve privilege escalation over a network. The vulnerability is associated with CWE-122 and has a CVSS 3.1 base score of 8.0 (HIGH) . Remediation is available through an official fix .

CVE-2026-108460

A Use after free vulnerability exists in Windows Message Queuing , which could allow an unauthorized attacker to execute code over a network. The CVSS 3.1 score is 8.1 (HIGH) , reflecting high impacts on confidentiality, integrity, and availability. While specific technical root causes or affecte...

CVE-2026-108465

A Use after free vulnerability in Windows Update Delivery Optimization allows an authorized attacker to achieve local privilege escalation . The flaw leads to a HIGH base severity impact on confidentiality, integrity, and availability. While the specific technical root cause or affected file is n...

CVE-2026-108461

A Use after free vulnerability in the Windows Broadcast DVR User Service allows an authorized attacker to achieve local privilege escalation . The vulnerability is categorized under CWE-416 and has a CVSS 3.1 base score of 7.0 (High) . While the documents confirm the existence of the vulnerabilit...

CVE-2026-108466

An out-of-bounds read vulnerability exists in the Windows Kernel . This flaw allows an unauthorized attacker to cause a denial of service over a network. The vulnerability is associated with CWE-125 and has a CVSS 3.1 base score of 5.3 (Medium), where the attack complexity is high and user intera...

CVE-2026-69639

A heap-based buffer overflow vulnerability exists in Windows Libarchive , which allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is assigned a CVSS v3.1 score of 9.8 , indicating a critical risk level. Microsoft has released updates to address thi...

CVE-2026-69898

A heap-based buffer overflow exists in the Windows Kernel . This vulnerability allows an authorized attacker to perform a local privilege escalation . Information regarding specific affected versions, the root cause component, or a specific patch is not provided in the documents. No exploit detai...

CVE-2026-108462

A Windows Kernel information disclosure vulnerability (CVE-2026-108462) allows an authorized attacker to disclose sensitive system information locally . The root cause is the exposure of sensitive system information to an unauthorized control sphere. The vulnerability has a Medium severity and a ...

CVE-2026-70235

A vulnerability in Windows Event Tracing due to improper authentication allows an authorized attacker to perform spoofing locally . The security impact is categorized as high integrity with a CVSS 3.1 base score of 5.5 . Official remediation is available via Microsoft updates.

CVE-2026-105733

A vulnerability exists in Windows Hyper-V due to improper access control . This flaw allows an authorized attacker to achieve local code execution . The vulnerability is associated with CWE-1419 (Incorrect Initialization of Resource) and carries a HIGH severity rating. No specific exploit details...

CVE-2026-105722

A Use after free vulnerability exists in the Windows Broadcast DVR User Service . This flaw allows an authorized attacker to achieve local privilege escalation . The official CVSS 3.1 score is 7.0, reflecting a high severity with significant impacts on confidentiality, integrity, and availability...

CVE-2026-108399

A heap-based buffer overflow exists in Windows Hyper-V , which could allow an authorized attacker to achieve local privilege elevation . The vulnerability is listed with a CVSS 3.1 score of 7.2 (High) , indicating that while it requires local access and high privileges to exploit, it can have a s...

CVE-2026-105723

The Windows Distributed File System (DFS) is susceptible to an untrusted pointer dereference vulnerability. This flaw allows an unauthorized attacker to achieve elevation of privilege over a network. The vulnerability has a HIGH base severity score of 7.5 (CVSS 3.1). While the specific root cause...

CVE-2026-97800

A vulnerability in Windows Mobile Broadband arises from an incorrect permission assignment for a critical resource. This flaw allows an authorized attacker to achieve local privilege elevation . While the CVSS 3.1 score reflects a High severity (7.8), specific details regarding the affected compo...

EUVD-2026-99066

Incorrect permission assignment for critical resource in Windows Mobile Broadband allows an authorized attacker to elevate privileges locally...

CVE-2026-96183

A vulnerability exists in the Windows Health and Optimized Experiences Service due to missing authentication for a critical function. This flaw allows an authorized attacker to perform a local information disclosure . The vulnerability is assigned CWE-306 and has an official fix available. No spe...