CVE-2026-70170

A vulnerability exists in the Windows Kernel due to an untrusted pointer dereference . This flaw allows an authorized attacker to cause a denial of service (DoS) over a network. No specific exploitation details or patch versions are provided in the documents.

CVE-2026-70185

A protection mechanism failure in Windows PowerShell allows an authorized attacker to bypass a security feature locally. The vulnerability is associated with CWE-639 (Authorization Bypass Through User-Controlled Key). The impact includes potential high consequences for confidentiality, integrity,...

CVE-2026-70210

A heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to achieve elevation of privilege over a network. The vulnerability (CWE-122, CWE-125) has a CVSS 3.1 base score of 8.8 . Exploitation details are not provided in the documents. Remediation via an official fix is indic...

CVE-2026-70172

A vulnerability in Windows NTFS involves an untrusted pointer dereference , which could allow an authorized attacker to achieve local privilege elevation . The CVSS 3.1 score is 7.8, indicating a high severity impact on confidentiality, integrity, and availability. No specific exploit details or ...

CVE-2026-70238

A heap-based buffer overflow exists in the Windows Storage Spaces Controller . This vulnerability allows an authorized attacker to achieve local privilege elevation . No specific version numbers, underlying code files, or remediation steps are provided in the documents. Exploitation details are n...

CVE-2026-88168

A heap-based buffer overflow exists in the Windows Bind Filter Driver . This vulnerability enables an authorized attacker to achieve local privilege elevation . While the technical root cause is identified as a heap overflow, specific details regarding the vulnerable function or file are not prov...

CVE-2026-70048

A heap-based buffer overflow exists in the Windows Resilient File System (ReFS) . This vulnerability allows an authorized attacker to achieve local privilege elevation . The technical root cause is a memory management issue within the ReFS component. Information regarding specific affected versio...

CVE-2026-88162

A vulnerability exists in the Windows Encrypting File System (EFS) due to improper authorization (CWE-863 ). This flaw allows an authorized attacker to perform local tampering . The vulnerability has been confirmed by Microsoft with a base score of 5.5 and an official fix is available. No specifi...

CVE-2026-88160

A race condition vulnerability exists in the Microsoft Windows Search Component due to concurrent execution using a shared resource with improper synchronization. This flaw allows an authorized attacker to achieve local privilege elevation . Remediation is available via an official fix provided b...

CVE-2026-70052

An integer overflow or wraparound vulnerability exists in Windows PowerShell . This flaw allows an authorized attacker to achieve local code execution . While the technical root cause is identified as an integer overflow or wraparound, specific affected versions or files are not detailed in the p...

CVE-2026-69934

A vulnerability in Windows Spaceport.sys involves an integer overflow or wraparound (CWE-190) combined with improper input validation (CWE-20). This flaw enables an authorized attacker to achieve local privilege escalation . The impact is categorized as high for confidentiality, integrity, and av...

CVE-2026-88173

A Use after free vulnerability in the Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network . The vulnerability is associated with CWE-416 (Use After Free) and CWE-367 (Time-of-check Time-of-use Race Condition). The impact includes h...

CVE-2026-69916

A vulnerability in Windows NTFS caused by an integer overflow or wraparound allows an authorized attacker to achieve local privilege elevation . No specific affected versions, root cause details, or remediation steps are provided in the documents. Exploitation details are not provided.

CVE-2026-70041

A buffer over-read vulnerability exists in the Windows CD-ROM Driver . This flaw allows an authorized attacker to disclose information locally on the affected system. The CVSS 3.1 score is 5.5 (Medium) , reflecting a local attack vector requiring low privileges. Specific details regarding the und...

CVE-2026-88159

A Use after free vulnerability exists in the Windows Background Intelligent Transfer Service (BITS) . This flaw allows an unauthorized attacker to execute code over a network . The vulnerability is associated with CWE-125 (Out-of-bounds Read). No specific exploit details or in-the-wild exploitati...

CVE-2026-88091

A vulnerability in Windows Management Instrumentation allows an authorized attacker to achieve local privilege escalation . The root cause is the deserialization of untrusted data . This flaw poses a high risk to system integrity and confidentiality for users with low-level privileges. No specifi...

CVE-2026-87711

A stack-based buffer overflow in Windows Installer allows an authorized attacker to achieve local privilege escalation . The vulnerability enables an attacker with local access to elevate their privileges on the affected system. No specific exploit information or exploit links are provided in the...

CVE-2026-88096

A race condition vulnerability exists in the Windows DCOM Server due to concurrent execution using a shared resource with improper synchronization. This flaw allows an authorized attacker to achieve local privilege elevation . No specific details regarding affected versions or exploit availabilit...

CVE-2026-88124

A Use after free vulnerability in Windows Installer allows an authorized attacker to achieve local privilege elevation . The vulnerability is rated as HIGH severity with a CVSS 3.1 score of 7.0. No specific exploit links or in-the-wild exploitation details are provided in the documents.

CVE-2026-88080

A Use after free vulnerability in Windows Installer allows an authorized attacker to achieve local privilege elevation . The vulnerability is confirmed with a CVSS 3.1 score of 7.8. No specific versions, exploit links, or detailed remediation steps are provided in the documents, though an officia...