CVE-2026-70077

A Use after free vulnerability exists in the Windows Kernel , which allows an authorized attacker to perform a local information disclosure . The vulnerability is assigned a CVSS v3.1 base score of 4.7 (Medium) , with an attack vector of Local and high complexity. No specific details regarding af...

CVE-2026-70076

A Use after free vulnerability exists in the Windows Win32 Kernel Subsystem . This flaw allows an authorized attacker to achieve local privilege escalation . While the specific component or file causing the issue is not detailed, the impact is significant for local security boundaries. Remediatio...

CVE-2026-70082

An uncaught exception in Windows DNS allows an unauthorized attacker to perform a Denial of Service (DoS) over the network. The vulnerability is categorized under CWE-248 and has a CVSS 3.1 base score of 7.5 . While the documents confirm the impact is a high availability risk, specific details re...

CVE-2026-70090

A vulnerability in Windows Netlogon involves the use of uninitialized resource (CWE-908). This flaw allows an authorized attacker to perform a local information disclosure . The CVSS 3.1 score is 5.5 (Medium) , indicating a local attack vector with low complexity and low privileges required. No s...

CVE-2026-70079

A vulnerability in Windows DNS exists due to the improper enforcement of behavioral workflow . This flaw allows an unauthorized attacker to perform a denial of service over a network. The CVSS 3.1 score is 7.5 (High) , with an attack vector of Network and Low attack complexity. No specific exploi...

CVE-2026-70064

An Integer underflow (wrap or wraparound) vulnerability exists in Windows Kerberos . This flaw allows an authorized attacker to achieve local privilege elevation . While the specific affected components are not detailed beyond the Kerberos service, the vulnerability is confirmed as a high-severit...

CVE-2026-70063

A vulnerability exists in the Windows Kernel involving an out-of-bounds read (CWE-125). This flaw allows an authorized attacker to perform a local information disclosure , potentially exposing sensitive system data. The vulnerability has a CVSS 3.1 base score of 4.7 (Medium) , characterized by a ...

CVE-2026-70062

A double free vulnerability exists in Windows Libarchive , which could allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability is characterized by a high base score of 8.1 with a network attack vector and high complexity. No specific exploit details or re...

CVE-2026-70060

A heap-based buffer overflow exists in the Windows Win32 Kernel Subsystem . This vulnerability allows an authorized attacker to perform a local privilege escalation . No specific exploit details or remediation steps are provided in the documents beyond the identification of the root cause and the...

CVE-2026-70027

A heap-based buffer overflow exists in the Windows Subsystem for Linux (WSL) . This vulnerability allows an authorized attacker to achieve local privilege elevation . While the specific component or root cause is not detailed in the provided documents, the impact includes unauthorized access to h...

CVE-2026-70026

A Use after free vulnerability exists in Windows Secure Kernel Mode , which could allow an authorized attacker to achieve local privilege escalation . Technical details regarding the specific component or root cause are not provided in the documents. No exploits or in-the-wild exploitation inform...

CVE-2026-70025

A Use after free vulnerability in Windows Netlogon allows an authorized attacker to perform a denial of service over a network. The vulnerability is confirmed with a CVSS 3.1 base score of 5.3 (Medium severity). While the attack vector is network-based, it requires low privileges and has high att...

CVE-2026-70057

The Windows Routing and Remote Access Service (RRAS) is impacted by an incorrect authorization vulnerability (CWE-863). This flaw allows an authorized attacker to bypass a security feature through local access . The vulnerability carries a MEDIUM base severity (CVSS 3.1 score of 5.5), specificall...

CVE-2026-70017

A type confusion vulnerability exists in Windows Secure Kernel Mode , where accessing a resource using an incompatible type allows an authorized attacker to perform a local information disclosure . The vulnerability is assigned CWE-843 . No specific patch versions, exploit links, or additional te...

CVE-2026-70059

A Heap-based buffer overflow exists in Windows OLE that can be exploited by an authorized attacker to achieve local privilege escalation . No specific software versions, root causes, or remediation details are provided in the documents beyond the impact of local privilege elevation. Exploit infor...

CVE-2026-70014

A Use after free vulnerability in Windows Cryptographic Services allows an authorized attacker to execute code over a network. The vulnerability results in Remote Code Execution (RCE) and is characterized by a high base severity score. Specific details regarding the impacted component or file are...

CVE-2026-70021

A use after free vulnerability in Windows Direct Composition allows an authorized attacker to achieve local privilege escalation . While the specific component or file is not detailed, the impact is a high-severity elevation of privileges. Remediation is available via an official fix provided by ...

CVE-2026-70056

A Use after free vulnerability exists in the Windows Update Service . This flaw allows an authorized attacker to achieve local privilege escalation . The CVSS 3.1 score is 7.0 (High) , indicating significant impact on confidentiality, integrity, and availability. No specific exploit details or re...

CVE-2026-70058

The Windows DHCP Server is vulnerable to an out-of-bounds write (CWE-787) that allows an unauthorized attacker to execute code over a network. The vulnerability has a CVSS 3.1 base score of 7.5 (HIGH) , with a primary impact on availability . Remediation is available via an official fix provided ...

CVE-2026-69969

The Windows AppX Deployment Service is vulnerable to an information disclosure vulnerability (CVE-2026-69969) due to improper link resolution before file access (link following). An authorized attacker can exploit this flaw to disclose information locally. Exploitation details and specific remedi...