253971 matches found
CVE-2026-96306
An out-of-bounds read vulnerability exists in the Windows Sysmain Service . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-125 . No specific exploit details or in-the-wild exploitation information are provided in the documen...
CVE-2026-96247
A vulnerability exists in Windows Kernel-Mode Drivers due to the use of uninitialized resources (CWE-908). This flaw allows an authorized attacker to perform a local information disclosure . No specific versions or detailed remediation steps are provided in the documents beyond the existence of a...
CVE-2026-96248
A stack-based buffer overflow exists in the Windows Host Guardian Service , which could allow an unauthorized attacker to perform a denial of service (DoS) attack over a network. The vulnerability is categorized under CWE-121 and has been assigned a High base severity score of 7.5. Remediation is...
CVE-2026-96308
A Use after free vulnerability exists in Windows Installer , which allows an authorized attacker to achieve local privilege escalation . The vulnerability is classified with a High base severity score of 7.8. No specific exploit details or patch versions are provided in the documents.
CVE-2026-96307
A Use after free vulnerability exists in Windows Installer . This flaw allows an authorized attacker to achieve local privilege elevation . The CVSS 3.1 base score is 7.0 (High) , reflecting impacts on confidentiality, integrity, and availability. No specific exploit code or detailed remediation ...
CVE-2026-96311
A vulnerability exists in the Windows Network List Service due to improper authorization . This flaw allows an authorized attacker to perform local tampering . The impact is categorized as a high integrity compromise with a base score of 5.5. No specific exploit details or in-the-wild exploitatio...
CVE-2026-96305
A Use after free vulnerability exists in Windows Installer . This flaw allows an authorized attacker to achieve local privilege elevation . While the vulnerability's technical root cause is identified as CWE-416 , specific details regarding the affected component or function are not provided. No ...
CVE-2026-96245
An out-of-bounds read vulnerability exists in the Windows Routing and Remote Access Service (RRAS) . This flaw allows an unauthorized attacker to disclose information over a network. While the root cause is identified as an out-of-bounds read (CWE-125), the specific component or file is not speci...
CVE-2026-96244
A use after free vulnerability exists in Windows Internal System User Profile , which allows an authorized attacker to achieve local privilege elevation . The vulnerability is rated as HIGH severity (CVSS 3.1 score of 7.8). No specific exploit details or information regarding in-the-wild exploita...
CVE-2026-96302
A Use after free vulnerability exists in the Windows Installer component. This flaw allows an authorized attacker to perform a local privilege escalation on the affected system. The vulnerability is assigned a CVSS 3.1 base score of 7.0 (High) . No specific exploit details or in-the-wild exploita...
CVE-2026-96215
A race condition exists in Windows Autopilot due to concurrent execution using a shared resource with improper synchronization. This vulnerability allows an authorized attacker to achieve local privilege escalation . While the CVSS v3.1 score indicates a High severity (7.0) with impacts on confid...
CVE-2026-96217
A heap-based buffer overflow exists in Windows NTFS that allows an authorized attacker to elevate privileges locally . The vulnerability is associated with CWE-122 (Heap-based Buffer Overflow) and CWE-190 (Integer Overflow or Wraparound). No specific exploit information or details on in-the-wild ...
CVE-2026-96220
The Windows Assigned Access feature contains an improper control of generation of code (code injection) vulnerability. This flaw allows an authorized attacker to perform a local privilege escalation . The vulnerability is associated with CWE-94 . No specific exploit links or exploit details are p...
CVE-2026-96223
A Use after free vulnerability exists in Windows Hyper-V , allowing an authorized attacker to achieve local privilege escalation . The vulnerability impacts the Hyper-V hypervisor component. While the CVSS score indicates a High severity (7.8) with high impacts on confidentiality, integrity, and ...
CVE-2026-96219
A critical out-of-bounds write vulnerability exists in the Windows Local Security Authority Subsystem Service (LSASS) . This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is assigned a CVSS v3.1 score of 9.80 , indicating a high severity l...
CVE-2026-96218
A vulnerability exists in the Windows Update Stack due to improper access control . This flaw allows an authorized attacker to perform tampering locally . The vulnerability is associated with CWE-15 (External Control of System or Configuration Setting) and carries a MEDIUM base severity (CVSS 3.1...
CVE-2026-96216
A Use after free vulnerability exists in the Windows Kernel (associated with CWE-416 and CWE-822 ). This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is rated with a High base severity (CVSS 3.1 score of 7.0). No specific exploit details or in-the-wi...
CVE-2026-70116
A stack-based buffer overflow vulnerability exists in the Windows Resilient File System (ReFS) . This flaw allows an unauthorized attacker to perform a security feature bypass through a physical attack vector. The CVSS 3.1 score is 4.2 (Medium), with a high complexity and a high impact on integri...
CVE-2026-70149
The Windows Client Side Caching driver (csc.sys) is affected by a vulnerability that allows an authorized attacker to disclose sensitive information locally. The underlying cause is attributed to Heap-based Buffer Overflow and Integer Overflow or Wraparound issues. The impact includes high levels...
