CVE-2026-70227

An out-of-bounds read vulnerability exists in the Windows Device Association Service . This flaw allows an authorized attacker to perform a local information disclosure, potentially revealing sensitive data. No specific exploit code or in-the-wild exploitation details are provided in the document...

CVE-2026-70148

The Windows Broadcast DVR User Service is susceptible to an improper authorization vulnerability (CWE-441). This flaw allows an authorized attacker to perform a local information disclosure . The vulnerability has a CVSS 3.1 base score of 6.5 and is categorized as a MEDIUM severity issue. No spec...

CVE-2026-70084

An improper access control vulnerability exists in the Windows Projected File System . This flaw allows an authorized attacker to perform a local information disclosure . The root cause is categorized under CWE-22 (Path Traversal). No specific details regarding affected versions, exploit code, or...

CVE-2026-69915

A Use after free vulnerability in Windows NTFS allows an authorized attacker to achieve local privilege elevation . The vulnerability is categorized under CWE-416 and carries a High severity base score of 7.0. Technical details regarding specific impacted components or files are not provided in t...

CVE-2026-70143

A heap-based buffer overflow exists in the Windows Network File System , which may allow an authorized attacker to achieve local code execution . The vulnerability is associated with CWE-122 and carries a High base severity score of 7.8. No specific exploit details or remediation steps are provid...

CVE-2026-70122

A Time-of-check time-of-use (TOCTOU) race condition exists in the Windows Broadcast DVR User Service . This vulnerability allows an authorized attacker to achieve local privilege escalation . The vulnerability is tracked under CWE-367 . Remediation is available via an official fix provided by Mic...

CVE-2026-70112

A heap-based buffer overflow vulnerability exists in the Windows Spaceport.sys component. This flaw allows an authorized attacker to achieve local code execution . The vulnerability is characterized by high impacts on confidentiality, integrity, and availability, with a CVSS 3.1 base score of 7.8...

CVE-2026-70054

A heap-based buffer overflow exists in Windows NetBIOS that allows an authorized attacker to achieve local privilege escalation . The vulnerability results in high impacts on confidentiality, integrity, and availability. An official fix is available, and no specific exploit code or in-the-wild ex...

CVE-2026-88181

An out-of-bounds read vulnerability exists in the Windows DWM Core Library . This flaw allows an authorized attacker to perform a local privilege elevation attack. The vulnerability is categorized under CWE-125 . Specific details regarding the root cause, affected versions, or available exploits ...

CVE-2026-88179

An out-of-bounds read vulnerability exists in the Windows DWM Core Library . This flaw allows an authorized attacker to perform a local elevation of privilege . The vulnerability is associated with CWE-125 . No specific exploit details or in-the-wild exploitation information are provided in the d...

CVE-2026-88177

The Windows DWM Core Library contains an out-of-bounds read vulnerability (CWE-125). This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is rated as High severity with a CVSS 3.1 score of 7.8. Remediation is available via an official fix from Microsof...

CVE-2026-88189

An out-of-bounds read vulnerability exists in the Windows DWM Core Library . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is assigned a High severity base score of 7.8. No specific exploit details or remediation steps are provided in the docume...

CVE-2026-88191

The Microsoft Windows Search Component is vulnerable to an improper link resolution before file access (link following) flaw. This vulnerability allows an authorized attacker to achieve local privilege escalation . While the specific root cause details are limited to the link-following mechanism,...

CVE-2026-88194

An out-of-bounds read vulnerability exists in the Windows DWM Core Library . This flaw allows an authorized attacker to perform a local privilege escalation . The vulnerability is categorized under CWE-125 and has been assigned a CVSS 3.1 score of 7.8 (High) . No specific exploit details or proof...

CVE-2026-88182

A Use after free vulnerability exists in the Microsoft Windows Search Component . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability has been assigned a High severity rating (CVSS 3.1 score of 7.8) with an official fix available. No specific exploit ...

CVE-2026-88188

The Windows DWM Core Library is affected by an out-of-bounds read vulnerability (CWE-125). This flaw allows an authorized attacker to perform a local privilege escalation . The severity is rated as High with a CVSS 3.1 score of 7.8. Remediation is available via an official fix provided by Microso...

CVE-2026-88180

An out-of-bounds read vulnerability exists in the Windows DWM Core Library . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-125 and has a CVSS 3.1 base score of 7.8 (High). Remediation is available via an official fix from M...

CVE-2026-69884

A buffer over-read vulnerability exists in Windows GDI . This flaw allows an authorized attacker to perform a local privilege elevation . The vulnerability is associated with CWE-126 . While the documents confirm the impact is high for confidentiality, integrity, and availability, no specific exp...

CVE-2026-69902

A vulnerability exists in Windows NTFS due to an untrusted pointer dereference . This flaw allows an authorized attacker to achieve local code execution . The vulnerability is associated with CWE-822 . While the CVSS score indicates a Medium severity, the potential impact includes high levels of ...

CVE-2026-88139

A Use after free vulnerability exists in the Windows Kernel . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is categorized under CWE-416 and has a CVSS 3.1 base score of 7.0 . No specific software versions, root causes, or exploit links are provi...