EUVD-2026-99675

Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network...

CVE-2026-70113

The Windows Client for NFS is vulnerable to an integer overflow or wraparound condition. This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability has a CVSS 3.1 base score of 7.8 (High) . Official remediation is available via Microsoft security updates.

CVE-2026-69940

An out-of-bounds read vulnerability exists in the Windows Client for NFS . This flaw allows an unauthorized attacker to perform information disclosure over a network. The vulnerability is characterized by a Medium severity rating (CVSS 3.1: 6.5), with a network attack vector and low complexity. N...

CVE-2026-69955

An out-of-bounds read vulnerability exists in the Windows Client for NFS . This flaw allows an unauthorized attacker to disclose information over a network. The vulnerability is associated with CWE-125 and has a CVSS 3.1 score of 6.5 (Medium) . While the risk is categorized as information disclos...

CVE-2026-69977

A Use after free vulnerability exists in the Quality Windows Audio/Video Experience (QWAVE) service. This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is categorized under CWE-416 . No specific exploit code or in-the-wild exploitation details are pr...

CVE-2026-69949

A heap-based buffer overflow vulnerability exists in Windows Client for NFS . This flaw allows an authorized attacker to perform a local privilege escalation . The provided documents do not specify the exact component or file involved, nor do they provide specific remediation steps or exploit det...

CVE-2026-70008

An integer overflow or wraparound vulnerability exists in the Windows IP Over USB Service . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is confirmed with a CVSS v3.1 base score of 7.8 (High) . No specific exploit code or in-the-wild exploitati...

CVE-2026-88143

A heap-based buffer overflow exists in the Windows Storage Spaces Controller . This vulnerability allows an authorized attacker to perform a local privilege escalation . The technical root cause is associated with CWE-122 (Heap-based Buffer Overflow) and CWE-191 (Integer Underflow). No specific e...

CVE-2026-88146

A race condition vulnerability exists in the Windows Background Intelligent Transfer Service (BITS) due to concurrent execution using a shared resource with improper synchronization. This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated wit...

CVE-2026-88140

An out-of-bounds read vulnerability exists in the Windows Key Storage Provider . This flaw allows an authorized attacker to perform a local information disclosure by reading data outside of the intended memory boundaries. The vulnerability is assigned a CVSS 3.1 base score of 5.5 (Medium) with a ...

CVE-2026-69923

A vulnerability exists in Windows AI due to an uncontrolled search path element (CWE-427). This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability has a CVSS 3.1 base score of 7.8 (High) . No specific exploit links or technical remediation versions are pr...

CVE-2026-88107

A Use after free vulnerability exists in the Windows Cloud Files Mini Filter Driver . This flaw allows an authorized attacker to perform a local privilege escalation . The vulnerability is associated with CWE-416 (Use After Free) and CWE-362 (Race Condition). Official remediation is available via...

CVE-2026-88106

A use after free vulnerability exists in the Windows Cloud Files Mini Filter Driver . This flaw allows an authorized attacker to achieve local privilege elevation . No specific software versions or remediation details are provided in the documents, and there are no reports of active exploits.

CVE-2026-88102

A Use after free vulnerability exists in Windows Failover Cluster , which allows an unauthorized attacker to execute arbitrary code over a network. This vulnerability has a CRITICAL CVSS score of 9.80 . No specific exploit details, affected versions, or remediation steps are provided in the docum...

CVE-2026-88098

A vulnerability exists in the Windows Security Support Provider Interface due to an untrusted pointer dereference . This flaw allows an authorized attacker to perform a local elevation of privilege . The CVSS v3.1 score is 7.0 (High) , indicating high impact on confidentiality, integrity, and ava...

CVE-2026-88099

An uncaught exception in the Windows Failover Cluster allows an unauthorized attacker to perform a denial of service (DoS) over a network. The vulnerability is associated with CWE-248 . While the specific software versions and root cause files are not detailed in the provided documents, an offici...

CVE-2026-88100

A Use after free vulnerability exists in the Windows Storage Spaces Controller . This flaw allows an authorized attacker to achieve local privilege escalation . While the vulnerability is confirmed with a CVSSv3.1 base score of 7.8 , no specific exploit details or in-the-wild exploitation reports...

CVE-2026-88074

An integer overflow or wraparound vulnerability exists within the Windows Virtualization-Based Security (VBS) Enclave . This flaw allows an authorized attacker to perform a local privilege escalation . No specific exploit details or patch versions are provided in the documents, but the official M...

CVE-2026-88071

A double free vulnerability exists in Windows Hyper-V , which can be exploited by an authorized attacker to achieve local privilege escalation . While the CVSS 3.1 score indicates a High severity (7.8), the documents do not provide specific details regarding the affected component, file, or speci...

CVE-2026-87713

A Use after free vulnerability exists in the Windows Bluetooth Port Driver . This flaw allows an unauthorized attacker to elevate privileges over an adjacent network. No specific software versions or exploit details are provided in the documents. Remediation is indicated as an official fix via th...