CVE-2026-70233

A heap-based buffer overflow exists in the Windows Common Log File System Driver . This vulnerability allows an authorized attacker to achieve local privilege elevation . The CVSS 3.1 score is 7.8 (HIGH) , reflecting high impact on confidentiality, integrity, and availability. No specific exploit...

CVE-2026-70142

The Windows Update Service is affected by an Untrusted Search Path vulnerability (CWE-426 ). This flaw allows an authorized attacker to achieve local privilege escalation . The impact includes high levels of risk to confidentiality , integrity , and availability . Remediation is available via an ...

CVE-2026-70156

A Use after free vulnerability exists in the Microsoft Windows Search Component . This flaw allows an authorized attacker to achieve local privilege escalation . While the underlying technical root cause is not detailed in the provided documents, the vulnerability has a CVSS 3.1 score of 7.0 (Hig...

CVE-2026-70169

A race condition exists in the Windows Connected Devices Platform Service due to concurrent execution using a shared resource with improper synchronization. This vulnerability allows an authorized attacker to achieve local privilege escalation . While the specific root cause components are not de...

CVE-2026-70168

A Use after free vulnerability exists in the Windows Ancillary Function Driver for WinSock . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability has a CVSS 3.1 base score of 7.0 (HIGH) . No specific exploit details or remediation steps are provided in...

CVE-2026-70177

A numeric truncation error within the Microsoft Windows Search Component allows an authorized attacker to achieve local privilege escalation . The vulnerability is caused by improper input validation (CWE-20) and numeric truncation (CWE-197). While the specific affected versions are not detailed ...

CVE-2026-70245

A type confusion vulnerability exists in the Windows Ancillary Function Driver for WinSock . This flaw allows an authorized attacker to achieve local privilege escalation . While the CVSS v3.1 score indicates a High severity (7.8) with impacts on confidentiality, integrity, and availability, spec...

CVE-2026-70173

The Microsoft Windows Search Component contains an out-of-bounds read vulnerability. This flaw allows an authorized attacker to perform a local information disclosure , potentially accessing data they are not normally permitted to view. While the vulnerability is confirmed with a CVSS 3.1 base sc...

CVE-2026-70150

A Use after free vulnerability in the Microsoft Windows Search Component allows an authorized attacker to achieve local privilege escalation . This vulnerability is tracked as CVE-2026-70150 and has a CVSS 3.1 base score of 7.0. Specific details regarding the internal root cause or affected versi...

CVE-2026-70195

A use after free vulnerability exists in the Windows Ancillary Function Driver for WinSock . This flaw allows an authorized attacker to perform a local information disclosure . The vulnerability is associated with CWE-416 (Use After Free) and CWE-362 (Race Condition). While the vulnerability is c...

CVE-2026-70176

A Use after free vulnerability exists in the Windows Win32 Kernel Subsystem . This flaw allows an authorized attacker to achieve local privilege elevation . Exploitation details are not provided in the documents. Remediation is available via an official fix from Microsoft.

CVE-2026-70198

A Use after free vulnerability exists in Windows Push Notifications , which could allow an authorized attacker to elevate privileges locally . The impact includes high levels of confidentiality, integrity, and availability. While the vulnerability is confirmed, specific exploit details are not pr...

CVE-2026-70205

A type confusion vulnerability exists in the Windows Ancillary Function Driver for WinSock . This flaw allows an authorized attacker to achieve local privilege escalation . The impact includes high consequences for confidentiality, integrity, and availability. While the documents do not provide s...

CVE-2026-70138

A heap-based buffer overflow exists in Windows OLE , which could allow an authorized attacker to achieve local privilege elevation . The vulnerability is categorized under CWE-122 . While the specific root cause is not detailed in the provided documents, the impact is rated as High with the poten...

CVE-2026-70140

A Use after free vulnerability exists in the Windows Audio Service , which could allow an authorized attacker to achieve local privilege escalation . The vulnerability's base score is 7.0, categorized as HIGH severity, with impacts on confidentiality, integrity, and availability. Technical detail...

CVE-2026-70155

A memory leak vulnerability exists in Windows DNS due to a missing release of memory after its effective lifetime (CWE-401). An unauthorized attacker can exploit this over a network to cause a denial of service (DoS) . The CVSS 3.1 score is 7.5, reflecting a High severity with a network attack ve...

CVE-2026-70136

A Use after free vulnerability exists in the Microsoft Windows Search Component . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability's CVSS 3.1 score is 7.0 (High) , with an attack complexity rated as high and requiring low privileges for exploitatio...

CVE-2026-70118

A Use after free vulnerability exists in the Windows Audio Service . This flaw allows an authorized attacker to achieve local privilege escalation . While the specific technical root cause is not detailed in the provided documents, the vulnerability is confirmed by Microsoft and carries a CVSS 3....

CVE-2026-70135

An out-of-bounds read vulnerability exists in the Windows Remote POS Driver . This flaw allows an authorized attacker to perform a local information disclosure. The root cause is categorized as CWE-125 (Out-of-bounds Read). While the vulnerability is confirmed, no specific exploit details or proo...

CVE-2026-70132

A Heap-based buffer overflow exists in the Windows Portable Device File System Driver . This vulnerability allows an authorized attacker to achieve local privilege elevation . Official remediation is available via a patch, and the vulnerability is confirmed with a HIGH base severity score of 7.8....