CVE-2026-70292

An out-of-bounds read vulnerability exists in the Windows Win32 Kernel Subsystem . This flaw allows an authorized attacker to disclose information locally. The vulnerability is categorized under CWE-125 and carries a medium severity score of 5.5. No specific exploit details or remediation version...

CVE-2026-70232

The Windows Kernel is affected by a vulnerability that allows for the exposure of sensitive system information to an unauthorized control sphere. An authorized attacker can exploit this flaw to disclose information locally . The vulnerability is associated with CWE-497 and carries a CVSS 3.1 base...

CVE-2026-70237

A Use after free vulnerability exists in the Windows Ancillary Function Driver for WinSock . This flaw allows an authorized attacker to achieve local privilege elevation . While the CVSS v3.1 score reflects a High severity (7.0) with potential for high impact on confidentiality, integrity, and av...

CVE-2026-70258

A heap-based buffer overflow exists in Microsoft Windows Media Foundation , which could allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability is associated with CWE-122 (Heap-based Buffer Overflow) and CWE-190 (Integer Overflow or Wraparound). No specif...

CVE-2026-70236

A Use after free vulnerability exists in the Windows Win32 Kernel Subsystem . This flaw allows an authorized attacker to achieve local privilege escalation . While the documents do not specify the exact component or file involved, the vulnerability results in significant impacts on confidentialit...

CVE-2026-70209

A Use after free vulnerability exists in the Windows Win32 Kernel Subsystem . This flaw allows an authorized attacker to achieve local privilege elevation . No specific details regarding the vulnerable component, version, or exploit availability are provided in the documents beyond the general su...

CVE-2026-70288

A Time-of-check time-of-use (TOCTOU) race condition exists within the Windows Win32 Kernel Subsystem . This vulnerability allows an authorized attacker to perform a local information disclosure . No specific software versions, root cause files, or exploit details are provided in the documentation...

CVE-2026-70208

An out-of-bounds read vulnerability exists in Windows HTTP.sys . This flaw allows an authorized attacker to perform a local information disclosure. The vulnerability is rated as MEDIUM severity (CVSS 3.1 score of 5.5) with a focus on high confidentiality impact. Remediation involves an official f...

CVE-2026-70230

A Use after free vulnerability exists in the Windows Audio Service . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is categorized as CWE-416 and has a CVSS 3.1 base score of 7.0 (High) . While the root cause is identified as a use after free, sp...

CVE-2026-70072

A vulnerability in Windows Netlogon allows an authorized attacker to perform a denial of service over a network. The root cause is the allocation of resources without limits or throttling (CWE-770). The impact is high availability disruption. Remediation via an official fix is available through M...

CVE-2026-70199

The Windows Kernel is affected by an information disclosure vulnerability (CVE-2026-70199 ) where sensitive system information is exposed to an unauthorized control sphere. This flaw allows an authorized attacker to disclose information locally . The vulnerability is associated with CWE-497 . Whi...

CVE-2026-70075

A Time-of-check time-of-use (TOCTOU) race condition exists in the Windows Virtualization-Based Security (VBS) Enclave . This vulnerability allows an authorized attacker to perform a local security feature bypass . The impact is characterized as a high integrity impact with a Medium base severity ...

CVE-2026-70157

A Heap-based buffer overflow vulnerability exists in the Windows System Information Console . This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is classified as CRITICAL with a CVSS score of 9.8, impacting confidentiality, integrity, and ...

CVE-2026-70074

A vulnerability in Windows DNS involves an out-of-bounds read (CWE-125) that allows an authorized attacker to disclose information locally. The impact is characterized as a local information disclosure with a Medium severity rating (CVSS 3.1 score of 5.5). An official fix is available, and no spe...

CVE-2026-70201

An out-of-bounds read vulnerability exists in the Windows DHCP Server . This flaw allows an authorized attacker to perform a local denial of service (DoS). The vulnerability is associated with CWE-125 (Out-of-bounds Read) and CWE-416 (Use After Free). Official remediation is available through a M...

CVE-2026-70144

A Use after free vulnerability exists in the Windows Win32 Kernel Subsystem . This flaw allows an authorized attacker to achieve local privilege elevation . While the vulnerability is confirmed, the provided documents do not specify the exact file or function involved, nor do they provide details...

CVE-2026-70211

An out-of-bounds read vulnerability exists in the Windows Win32 Kernel Subsystem . This flaw allows an authorized attacker to perform a local information disclosure . The vulnerability is classified as CWE-125 and has a CVSS 3.1 base score of 5.5 (Medium) . No specific exploit details or in-the-w...

CVE-2026-70051

A type confusion vulnerability in Windows SmartScreen allows an authorized attacker to achieve local privilege escalation . The root cause involves the access of resources using incompatible types, which can lead to high impact on confidentiality, integrity, and availability. The CVSS 3.1 score i...

CVE-2026-69992

A Use after free vulnerability exists in Windows Remote Desktop Services , which could allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a High severity rating with a CVSS 3.1 score of 7.5 . While the documents do not specify the exact file or f...

CVE-2026-70055

A vulnerability in Windows Cryptographic Services allows an authorized attacker to perform a local information disclosure . The flaw results in the exposure of sensitive system information to an unauthorized control sphere. This vulnerability is associated with CWE-497 . While a specific root cau...