CVE-2026-70280

A Windows Hello security feature bypass vulnerability exists due to incorrect authorization . This flaw allows an authorized attacker to bypass a security feature locally. The vulnerability is associated with CWE-863 and has a CVSS 3.1 base score of 4.4 (Medium) , indicating high confidentiality ...

CVE-2026-70274

A Use after free vulnerability exists in the Windows Bind Filter Driver . This flaw allows an authorized attacker to achieve local privilege escalation . No specific exploit details, affected versions, or remediation steps are provided in the documents.

CVE-2026-70278

A Heap-based buffer overflow exists in Microsoft Windows Media Foundation . This vulnerability allows an authorized attacker to achieve local privilege escalation . While the specific component or function is not detailed in the provided documents, the impact is categorized as high for confidenti...

CVE-2026-70218

The Windows StateRepository API is affected by an insufficient granularity of access control vulnerability. This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-1220 and CWE-285 . No specific exploitation details or patch version...

CVE-2026-70249

A Use after free vulnerability exists in the Windows Win32 Kernel Subsystem . This flaw allows an authorized attacker to achieve local privilege escalation . While the vulnerability is confirmed with a High severity rating, specific details regarding the underlying function or file are not provid...

CVE-2026-70253

A use after free vulnerability exists in the Windows Win32 Kernel Subsystem . This flaw allows an authorized attacker to achieve local privilege escalation . No specific affected versions, root cause details, or remediation steps are provided in the documents beyond the identification of the subs...

CVE-2026-70225

A type confusion vulnerability exists in the Windows Ancillary Function Driver for WinSock . This flaw allows an authorized attacker to achieve local privilege escalation . The impact includes high levels of confidentiality, integrity, and availability compromise. Remediation is provided via an o...

CVE-2026-70223

A Use after free vulnerability exists in the Windows Console Driver . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability has a CVSS 3.1 base score of 7.0 (High) , with impacts affecting confidentiality, integrity, and availability. Remediation is ava...

CVE-2026-70233

A heap-based buffer overflow exists in the Windows Common Log File System Driver . This vulnerability allows an authorized attacker to achieve local privilege elevation . The CVSS 3.1 score is 7.8 (HIGH) , reflecting high impact on confidentiality, integrity, and availability. No specific exploit...

CVE-2026-70247

An out-of-bounds read vulnerability exists in the Windows HTTP.sys component. This flaw allows an authorized attacker to achieve local code execution . The vulnerability is assigned a High base severity score of 7.8. No specific exploit links or detailed remediation versions are provided in the d...

CVE-2026-70173

The Microsoft Windows Search Component contains an out-of-bounds read vulnerability. This flaw allows an authorized attacker to perform a local information disclosure , potentially accessing data they are not normally permitted to view. While the vulnerability is confirmed with a CVSS 3.1 base sc...

CVE-2026-70168

A Use after free vulnerability exists in the Windows Ancillary Function Driver for WinSock . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability has a CVSS 3.1 base score of 7.0 (HIGH) . No specific exploit details or remediation steps are provided in...

CVE-2026-70176

A Use after free vulnerability exists in the Windows Win32 Kernel Subsystem . This flaw allows an authorized attacker to achieve local privilege elevation . Exploitation details are not provided in the documents. Remediation is available via an official fix from Microsoft.

CVE-2026-70177

A numeric truncation error within the Microsoft Windows Search Component allows an authorized attacker to achieve local privilege escalation . The vulnerability is caused by improper input validation (CWE-20) and numeric truncation (CWE-197). While the specific affected versions are not detailed ...

CVE-2026-70150

A Use after free vulnerability in the Microsoft Windows Search Component allows an authorized attacker to achieve local privilege escalation . This vulnerability is tracked as CVE-2026-70150 and has a CVSS 3.1 base score of 7.0. Specific details regarding the internal root cause or affected versi...

CVE-2026-70245

A type confusion vulnerability exists in the Windows Ancillary Function Driver for WinSock . This flaw allows an authorized attacker to achieve local privilege escalation . While the CVSS v3.1 score indicates a High severity (7.8) with impacts on confidentiality, integrity, and availability, spec...

CVE-2026-70195

A use after free vulnerability exists in the Windows Ancillary Function Driver for WinSock . This flaw allows an authorized attacker to perform a local information disclosure . The vulnerability is associated with CWE-416 (Use After Free) and CWE-362 (Race Condition). While the vulnerability is c...

CVE-2026-70156

A Use after free vulnerability exists in the Microsoft Windows Search Component . This flaw allows an authorized attacker to achieve local privilege escalation . While the underlying technical root cause is not detailed in the provided documents, the vulnerability has a CVSS 3.1 score of 7.0 (Hig...

CVE-2026-70142

The Windows Update Service is affected by an Untrusted Search Path vulnerability (CWE-426 ). This flaw allows an authorized attacker to achieve local privilege escalation . The impact includes high levels of risk to confidentiality , integrity , and availability . Remediation is available via an ...

CVE-2026-70169

A race condition exists in the Windows Connected Devices Platform Service due to concurrent execution using a shared resource with improper synchronization. This vulnerability allows an authorized attacker to achieve local privilege escalation . While the specific root cause components are not de...