CVE-2026-96920

A heap-based buffer overflow exists in the Windows Program Compatibility Assistant Service . This vulnerability allows an authorized attacker to achieve local privilege escalation . While the specific component or function is not detailed, the issue impacts local security boundaries. No specific ...

CVE-2026-96935

A vulnerability in Windows NTFS allows an authorized attacker to perform a local information disclosure . The flaw results in the exposure of sensitive system information to an unauthorized control sphere. This issue is categorized under CWE-497 . While the base severity is Medium (CVSS 3.1 score...

EUVD-2026-99792

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally...

CVE-2026-95904

A buffer over-read vulnerability exists in the Windows Event Logging Service . This flaw allows an authorized attacker to perform a local information disclosure. The vulnerability is assigned a Medium severity (CVSS 3.1 score of 5.5) and is characterized by low attack complexity and low privilege...

EUVD-2026-99794

Integer overflow or wraparound in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network...

CVE-2026-96855

Improper access control in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally . The vulnerability is associated with CWE-862 (Missing Authorization) . No specific exploit details or in-the-wild exploitation records are provided in the documents. Reme...

CVE-2026-96857

The Windows Projected File System is affected by an information disclosure vulnerability where certain files or directories are accessible to external parties. This flaw allows an authorized attacker to disclose information locally . The vulnerability is classified as CWE-552 and has a MEDIUM bas...

CVE-2026-96868

A heap-based buffer overflow exists in the Windows Kernel , which could allow an authorized attacker to achieve local privilege escalation . The vulnerability is characterized by high complexity and requires local access. No specific exploit details or information regarding in-the-wild exploitati...

CVE-2026-96867

A vulnerability exists in Windows NTFS involving an out-of-bounds read (CWE-125). This flaw allows an authorized attacker to achieve local code execution . The vulnerability is rated as HIGH severity with a CVSS 3.1 score of 7.8. Remediation is available via an official fix provided by Microsoft....

CVE-2026-96862

An out-of-bounds read vulnerability exists in Windows Spaceport.sys . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is confirmed by Microsoft and has a CVSS 3.1 base score of 7.8 (High). No specific exploit information or in-the-wild exploitatio...

CVE-2026-96863

A heap-based buffer overflow vulnerability exists in the Windows Storage Port Driver . This flaw allows an unauthorized attacker to elevate privileges via a physical attack . The provided documents do not specify the exact affected versions or the specific function/file involved. No information r...

CVE-2026-96865

A vulnerability in Windows Secure Kernel Mode allows an authorized attacker to disclose sensitive system information locally. This issue is characterized by the exposure of information to an unauthorized control sphere (CWE-497). The vulnerability has a CVSS 3.1 base score of 5.6 (Medium) with a ...

CVE-2026-96859

An out-of-bounds read vulnerability exists in the Windows Imaging Component . This flaw allows an authorized attacker to disclose information locally on the affected system. The vulnerability is associated with CWE-125 . While the impact is categorized as high for confidentiality, no specific exp...

CVE-2026-96860

The Windows USB Print Driver contains an out-of-bounds read vulnerability (CWE-125, CWE-170). This flaw allows an authorized attacker to perform a local information disclosure . No specific versions, root causes, or remediation steps are provided in the documents, and no exploits or in-the-wild e...

CVE-2026-96856

A heap-based buffer overflow exists in Windows Management Instrumentation , which allows an authorized attacker to achieve local privilege elevation . The vulnerability is categorized as HIGH severity with a CVSS 3.1 score of 7.8 . No specific exploit details or evidence of in-the-wild exploitati...

CVE-2026-96318

A Heap-based buffer overflow in Windows Resume allows an authorized attacker to elevate privileges locally . The vulnerability has a CVSS 3.1 base score of 7.8 (High) and is categorized under CWE-122 . While the specific component or file is not detailed, the impact includes high levels of confid...

CVE-2026-96313

A missing authentication flaw in Windows Push Notifications allows an authorized attacker to perform a local privilege escalation . The root cause is identified as CWE-307 (Missing Authentication for Critical Function). The vulnerability has a High severity base score of 7.0, indicating significa...

CVE-2026-96316

The Windows Routing and Remote Access Service (RRAS) is affected by an improper access control vulnerability (CWE-862). This flaw allows an authorized attacker to perform tampering locally on the system. The vulnerability is categorized with a Medium severity, specifically impacting integrity. Wh...

CVE-2026-96319

A Use after free vulnerability exists in the Windows USB Print Driver . This flaw allows an authorized attacker to achieve local privilege escalation . While the root cause is identified as a memory management issue, specific technical details regarding the affected component or file are not prov...

CVE-2026-96317

A use after free vulnerability exists in the Windows Kernel . This flaw allows an authorized attacker to perform a local privilege escalation . While the impact includes high levels of confidentiality, integrity, and availability, the documents do not provide specific details regarding the vulner...