CVE-2026-96218

A vulnerability exists in the Windows Update Stack due to improper access control . This flaw allows an authorized attacker to perform tampering locally . The vulnerability is associated with CWE-15 (External Control of System or Configuration Setting) and carries a MEDIUM base severity (CVSS 3.1...

CVE-2026-96215

A race condition exists in Windows Autopilot due to concurrent execution using a shared resource with improper synchronization. This vulnerability allows an authorized attacker to achieve local privilege escalation . While the CVSS v3.1 score indicates a High severity (7.0) with impacts on confid...

CVE-2026-96223

A Use after free vulnerability exists in Windows Hyper-V , allowing an authorized attacker to achieve local privilege escalation . The vulnerability impacts the Hyper-V hypervisor component. While the CVSS score indicates a High severity (7.8) with high impacts on confidentiality, integrity, and ...

CVE-2026-96217

A heap-based buffer overflow exists in Windows NTFS that allows an authorized attacker to elevate privileges locally . The vulnerability is associated with CWE-122 (Heap-based Buffer Overflow) and CWE-190 (Integer Overflow or Wraparound). No specific exploit information or details on in-the-wild ...

CVE-2026-70116

A stack-based buffer overflow vulnerability exists in the Windows Resilient File System (ReFS) . This flaw allows an unauthorized attacker to perform a security feature bypass through a physical attack vector. The CVSS 3.1 score is 4.2 (Medium), with a high complexity and a high impact on integri...

CVE-2026-70149

The Windows Client Side Caching driver (csc.sys) is affected by a vulnerability that allows an authorized attacker to disclose sensitive information locally. The underlying cause is attributed to Heap-based Buffer Overflow and Integer Overflow or Wraparound issues. The impact includes high levels...

CVE-2026-70044

An out-of-bounds read vulnerability exists in Microsoft Windows Media Foundation . This flaw allows an unauthorized attacker to disclose information locally on an affected system. While the specific component or root cause is not detailed beyond the out-of-bounds read, the vulnerability has a MED...

CVE-2026-70102

A Use after free vulnerability exists in Windows Spaceport.sys . This flaw allows an authorized attacker to achieve local privilege escalation . No specific exploit details or technical root cause files are provided, but the impact is classified as high regarding confidentiality, integrity, and a...

CVE-2026-70134

A Use after free vulnerability exists in Windows Event Tracing . This flaw allows an authorized attacker to perform a local privilege escalation . No specific exploit code or in-the-wild exploitation details are provided in the documents, though the CVSS 3.1 score indicates a High severity (7.0) ...

CVE-2026-70038

A Use after free vulnerability exists in Windows iSCSI that allows an unauthorized attacker to execute arbitrary code over a network. The vulnerability is associated with CWE-416 (Use After Free) and CWE-122 (Heap-based Buffer Overflow). Exploitation details are not provided in the documents. Rem...

CVE-2026-70031

A heap-based buffer overflow vulnerability exists in Windows iSCSI , which could allow an unauthorized attacker to cause a denial of service over a network. The vulnerability has a CVSS 3.1 base score of 7.5, reflecting a high impact on availability. No specific exploit details or exploit code ar...

EUVD-2026-99675

Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network...

EUVD-2026-99674

Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to deny service over a network...

CVE-2026-70024

A stack-based buffer overflow exists in Windows Internet Information Services (IIS), which could allow an unauthorized attacker to execute arbitrary code over a network. The vulnerability is characterized by improper input validation (CWE-20) and has a CRITICAL severity score of 9.80. This flaw a...

CVE-2026-70013

A Use after free vulnerability in Windows iSCSI allows an unauthorized attacker to execute code over a network. The vulnerability has a High base severity score of 8.1. While the documents do not provide specific file paths or technical root causes, the impact includes potential Remote Code Execu...

CVE-2026-70011

The Windows IP Over USB Service is affected by an out-of-bounds read vulnerability (CWE-125). This flaw allows an authorized attacker to disclose information locally . The vulnerability has a CVSS 3.1 base score of 5.5 (Medium) , with a high impact on confidentiality. No specific exploit informat...

CVE-2026-70068

A heap-based buffer overflow exists in the Windows Client-Side Caching (CSC) Service . This vulnerability allows an unauthorized attacker to elevate privileges over a network. The issue involves a heap-based buffer overflow (CWE-122) and an untrusted pointer dereference (CWE-822). Exploitation de...

CVE-2026-70131

A heap-based buffer overflow exists in Microsoft Windows Media Foundation . This vulnerability allows an unauthorized attacker to achieve local privilege elevation . While the specific component or file causing the overflow is not detailed in the provided documents, the impact is categorized as H...

CVE-2026-70137

A vulnerability in Windows Remote Access Connection Manager involves improper access control , which allows an authorized attacker to perform a local information disclosure . The CVSS 3.1 score is 5.5 (Medium) , with a high impact on confidentiality. No specific exploit details or versions are pr...

CVE-2026-70045

A Use after free vulnerability in Windows Work Folders allows an authorized attacker to achieve local privilege escalation . The vulnerability's impact includes high levels of confidentiality, integrity, and availability. An official fix is available, as indicated by the remediation level. No spe...