CVE-2026-69999

An out-of-bounds read vulnerability exists in Windows Update (CWE-125). This flaw allows an authorized attacker to perform a local information disclosure , potentially exposing sensitive data. The vulnerability has a CVSS 3.1 base score of 5.5 (Medium) . No specific exploit details or evidence of...

CVE-2026-70055

A vulnerability in Windows Cryptographic Services allows an authorized attacker to perform a local information disclosure . The flaw results in the exposure of sensitive system information to an unauthorized control sphere. This vulnerability is associated with CWE-497 . While a specific root cau...

CVE-2026-69992

A Use after free vulnerability exists in Windows Remote Desktop Services , which could allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a High severity rating with a CVSS 3.1 score of 7.5 . While the documents do not specify the exact file or f...

CVE-2026-70067

A use after free vulnerability exists in the Windows Win32 Kernel Subsystem . This flaw allows an authorized attacker to achieve local privilege elevation . While the vulnerability is confirmed, specific technical details regarding the affected component, file, or root cause are not provided in t...

CVE-2026-70069

A stack-based buffer overflow vulnerability exists in the Windows DHCP Server . This flaw allows an authorized attacker to achieve remote code execution over a network. The vulnerability carries a CVSS 3.1 base score of 8.8 (High) , indicating significant impact on confidentiality, integrity, and...

CVE-2026-70066

A use after free vulnerability exists in the Windows DHCP Server . This flaw allows an authorized attacker to perform a local elevation of privilege . The vulnerability is classified with a CVSS 3.1 score of 7.0, indicating a high impact on confidentiality, integrity, and availability. No specifi...

CVE-2026-70051

A type confusion vulnerability in Windows SmartScreen allows an authorized attacker to achieve local privilege escalation . The root cause involves the access of resources using incompatible types, which can lead to high impact on confidentiality, integrity, and availability. The CVSS 3.1 score i...

CVE-2026-69856

A Use after free vulnerability exists in Windows Storage , which may allow an authorized attacker to elevate privileges locally . The vulnerability is associated with CWE-416 (Use After Free) and CWE-362 (Race Condition). No specific exploit information or in-the-wild exploitation details are pro...

CVE-2026-69931

A race condition vulnerability exists in Windows Storage due to concurrent execution using a shared resource with improper synchronization. This flaw allows an authorized attacker to achieve local privilege escalation . No specific affected versions, exploit details, or remediation instructions a...

CVE-2026-62687

The Windows Backup Engine is susceptible to an Improper Link Resolution Before File Access (link following) vulnerability. This issue allows an authorized attacker to perform a local information disclosure , potentially accessing sensitive data. No specific exploit details or affected versions ar...

CVE-2026-69985

A heap-based buffer overflow vulnerability exists in Windows Libarchive . This flaw allows an unauthorized attacker to achieve Remote Code Execution (RCE) over a network. The vulnerability is confirmed with a High base severity score (8.8). While the documents confirm the impact and root cause, s...

CVE-2026-59116

Windows Remote Desktop is susceptible to a security feature bypass due to the use of a broken or risky cryptographic algorithm (CWE-327). An unauthorized attacker can exploit this flaw over a network to bypass specific security features. The vulnerability has a CVSS 3.1 score of 6.8 (Medium) , wi...

CVE-2026-97794

A heap-based buffer overflow exists in the Windows Container Isolation FS Filter Driver (unionfs.sys) . This vulnerability allows an authorized attacker to achieve local privilege escalation . While the CVSS 3.1 score indicates a High severity (7.8), no specific exploit details or in-the-wild exp...

CVE-2026-62879

A missing authentication vulnerability in Windows SmartScreen (CWE-306) allows an authorized attacker to perform tampering locally . The vulnerability impacts the integrity of the system by enabling unauthorized modifications to critical functions. No specific exploit details or in-the-wild explo...

CVE-2026-96096

A Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute arbitrary code over a network. This vulnerability has a CRITICAL CVSS v3.1 base score of 9.8 . No specific version numbers, root causes, or remediation steps are provided in the documents beyond the ge...

EUVD-2026-99836

Heap-based buffer overflow in Windows Container Isolation FS Filter Driver unionfs.sys allows an authorized attacker to elevate privileges locally...

CVE-2026-96921

A type confusion vulnerability (CWE-843) exists in the Windows Message Queuing Queue Manager . This flaw allows an authorized attacker to perform a local information disclosure . No specific exploit details or patch versions are provided in the documents, but the vulnerability is listed as having...

CVE-2026-96920

A heap-based buffer overflow exists in the Windows Program Compatibility Assistant Service . This vulnerability allows an authorized attacker to achieve local privilege escalation . While the specific component or function is not detailed, the issue impacts local security boundaries. No specific ...

CVE-2026-96935

A vulnerability in Windows NTFS allows an authorized attacker to perform a local information disclosure . The flaw results in the exposure of sensitive system information to an unauthorized control sphere. This issue is categorized under CWE-497 . While the base severity is Medium (CVSS 3.1 score...

CVE-2026-95904

A buffer over-read vulnerability exists in the Windows Event Logging Service . This flaw allows an authorized attacker to perform a local information disclosure. The vulnerability is assigned a Medium severity (CVSS 3.1 score of 5.5) and is characterized by low attack complexity and low privilege...