CVE-2026-70108

A heap-based buffer overflow vulnerability exists in the Windows Win32 Kernel Subsystem . This flaw allows an authorized attacker to achieve local privilege escalation . No specific exploit details or in-the-wild exploitation information are provided in the documents. Remediation is indicated as ...

CVE-2026-70095

A heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a CVSS 3.1 base score of 7.5 (High) , where the attack vector is network-based, requires high complexity, and necessitates user interaction. While t...

CVE-2026-70096

A heap-based buffer overflow exists in the Windows Rich Text Edit Control , which could allow an unauthorized attacker to achieve Remote Code Execution (RCE) over a network. This vulnerability is rated with a CRITICAL CVSS score of 9.8 . Microsoft has released official updates to address this iss...

CVE-2026-70106

A heap-based buffer overflow vulnerability exists in the Windows Kernel . This flaw allows an authorized attacker to achieve local privilege elevation . While the vulnerability is confirmed, specific technical details regarding the affected component or root cause are not provided. No exploit det...

CVE-2026-70062

A double free vulnerability exists in Windows Libarchive , which could allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability is characterized by a high base score of 8.1 with a network attack vector and high complexity. No specific exploit details or re...

CVE-2026-70077

A Use after free vulnerability exists in the Windows Kernel , which allows an authorized attacker to perform a local information disclosure . The vulnerability is assigned a CVSS v3.1 base score of 4.7 (Medium) , with an attack vector of Local and high complexity. No specific details regarding af...

CVE-2026-70090

A vulnerability in Windows Netlogon involves the use of uninitialized resource (CWE-908). This flaw allows an authorized attacker to perform a local information disclosure . The CVSS 3.1 score is 5.5 (Medium) , indicating a local attack vector with low complexity and low privileges required. No s...

CVE-2026-70060

A heap-based buffer overflow exists in the Windows Win32 Kernel Subsystem . This vulnerability allows an authorized attacker to perform a local privilege escalation . No specific exploit details or remediation steps are provided in the documents beyond the identification of the root cause and the...

CVE-2026-70082

An uncaught exception in Windows DNS allows an unauthorized attacker to perform a Denial of Service (DoS) over the network. The vulnerability is categorized under CWE-248 and has a CVSS 3.1 base score of 7.5 . While the documents confirm the impact is a high availability risk, specific details re...

CVE-2026-70097

A race condition exists in the Windows Virtualization-Based Security (VBS) Enclave due to concurrent execution using a shared resource with improper synchronization. This vulnerability allows an authorized attacker to perform spoofing locally . The impact is categorized as having high integrity c...

CVE-2026-70063

A vulnerability exists in the Windows Kernel involving an out-of-bounds read (CWE-125). This flaw allows an authorized attacker to perform a local information disclosure , potentially exposing sensitive system data. The vulnerability has a CVSS 3.1 base score of 4.7 (Medium) , characterized by a ...

CVE-2026-70079

A vulnerability in Windows DNS exists due to the improper enforcement of behavioral workflow . This flaw allows an unauthorized attacker to perform a denial of service over a network. The CVSS 3.1 score is 7.5 (High) , with an attack vector of Network and Low attack complexity. No specific exploi...

CVE-2026-70064

An Integer underflow (wrap or wraparound) vulnerability exists in Windows Kerberos . This flaw allows an authorized attacker to achieve local privilege elevation . While the specific affected components are not detailed beyond the Kerberos service, the vulnerability is confirmed as a high-severit...

CVE-2026-70076

A Use after free vulnerability exists in the Windows Win32 Kernel Subsystem . This flaw allows an authorized attacker to achieve local privilege escalation . While the specific component or file causing the issue is not detailed, the impact is significant for local security boundaries. Remediatio...

CVE-2026-70025

A Use after free vulnerability in Windows Netlogon allows an authorized attacker to perform a denial of service over a network. The vulnerability is confirmed with a CVSS 3.1 base score of 5.3 (Medium severity). While the attack vector is network-based, it requires low privileges and has high att...

CVE-2026-70014

A Use after free vulnerability in Windows Cryptographic Services allows an authorized attacker to execute code over a network. The vulnerability results in Remote Code Execution (RCE) and is characterized by a high base severity score. Specific details regarding the impacted component or file are...

CVE-2026-70026

A Use after free vulnerability exists in Windows Secure Kernel Mode , which could allow an authorized attacker to achieve local privilege escalation . Technical details regarding the specific component or root cause are not provided in the documents. No exploits or in-the-wild exploitation inform...

CVE-2026-70027

A heap-based buffer overflow exists in the Windows Subsystem for Linux (WSL) . This vulnerability allows an authorized attacker to achieve local privilege elevation . While the specific component or root cause is not detailed in the provided documents, the impact includes unauthorized access to h...

CVE-2026-70056

A Use after free vulnerability exists in the Windows Update Service . This flaw allows an authorized attacker to achieve local privilege escalation . The CVSS 3.1 score is 7.0 (High) , indicating significant impact on confidentiality, integrity, and availability. No specific exploit details or re...

CVE-2026-70057

The Windows Routing and Remote Access Service (RRAS) is impacted by an incorrect authorization vulnerability (CWE-863). This flaw allows an authorized attacker to bypass a security feature through local access . The vulnerability carries a MEDIUM base severity (CVSS 3.1 score of 5.5), specificall...