CVE-2026-69763

A Use after free vulnerability in Windows Storage allows an authorized attacker to achieve local privilege escalation . The vulnerability is categorized under CWE-416 (Use After Free) and CWE-366 (Race Condition). Exploitation details and specific affected versions are not provided in the documen...

CVE-2026-69850

A vulnerability exists in Windows Certificates due to an untrusted pointer dereference . This flaw allows an authorized attacker to perform a local privilege escalation . The provided documents do not specify the exact component, file, or specific software version affected, nor do they provide de...

CVE-2026-69914

The Windows AppX Deployment Service is vulnerable to an out-of-bounds read vulnerability. This flaw allows an authorized attacker to disclose information locally , potentially leading to access to sensitive data . While the root cause is identified as an out-of-bounds read, specific details regar...

CVE-2026-69840

A Use after free vulnerability in Windows Certificates allows an authorized attacker to achieve local privilege elevation . The vulnerability's base score is 7.0 (HIGH) . No specific affected versions, root causes, or exploitation details are provided in the documents beyond the general vulnerabi...

CVE-2026-69905

The Windows AppX Deployment Service is vulnerable to a missing authorization flaw. This issue allows an authorized attacker to perform tampering locally on the affected system. The vulnerability has been assigned a CVSSv3.1 score of 5.5 (Medium) and is associated with CWE-862 .

CVE-2026-69935

A Use after free vulnerability exists in Windows Storage , which could allow an authorized attacker to elevate privileges locally . The vulnerability is associated with CWE-416 and CWE-362 (Race Condition). No specific exploit details or patch versions are provided in the documents. Information r...

CVE-2026-69898

A heap-based buffer overflow exists in the Windows Kernel . This vulnerability allows an authorized attacker to perform a local privilege escalation . Information regarding specific affected versions, the root cause component, or a specific patch is not provided in the documents. No exploit detai...

CVE-2026-108461

A Use after free vulnerability in the Windows Broadcast DVR User Service allows an authorized attacker to achieve local privilege escalation . The vulnerability is categorized under CWE-416 and has a CVSS 3.1 base score of 7.0 (High) . While the documents confirm the existence of the vulnerabilit...

CVE-2026-108460

A Use after free vulnerability exists in Windows Message Queuing , which could allow an unauthorized attacker to execute code over a network. The CVSS 3.1 score is 8.1 (HIGH) , reflecting high impacts on confidentiality, integrity, and availability. While specific technical root causes or affecte...

CVE-2026-108462

A Windows Kernel information disclosure vulnerability (CVE-2026-108462) allows an authorized attacker to disclose sensitive system information locally . The root cause is the exposure of sensitive system information to an unauthorized control sphere. The vulnerability has a Medium severity and a ...

CVE-2026-69363

A heap-based buffer overflow exists in Windows Error Reporting , which allows an authorized attacker to achieve privilege escalation over a network. The vulnerability is associated with CWE-122 and has a CVSS 3.1 base score of 8.0 (HIGH) . Remediation is available through an official fix .

CVE-2026-49785

A vulnerability in Windows UEFI involving improper resource shutdown or release allows an authorized attacker to bypass a security feature locally. This issue specifically impacts the UEFI Secure Boot security feature. The CVSS 3.1 score is 7.8 (High) , with a local attack vector and low complexi...

CVE-2026-69639

A heap-based buffer overflow vulnerability exists in Windows Libarchive , which allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is assigned a CVSS v3.1 score of 9.8 , indicating a critical risk level. Microsoft has released updates to address thi...

CVE-2026-108465

A Use after free vulnerability in Windows Update Delivery Optimization allows an authorized attacker to achieve local privilege escalation . The flaw leads to a HIGH base severity impact on confidentiality, integrity, and availability. While the specific technical root cause or affected file is n...

CVE-2026-108466

An out-of-bounds read vulnerability exists in the Windows Kernel . This flaw allows an unauthorized attacker to cause a denial of service over a network. The vulnerability is associated with CWE-125 and has a CVSS 3.1 base score of 5.3 (Medium), where the attack complexity is high and user intera...

CVE-2026-70566

A null pointer dereference vulnerability exists in Windows Schannel , which could allow an authorized attacker to achieve local privilege elevation . The vulnerability is categorized under CWE-476 . While the specific component or file is not detailed in the provided documents, the impact is rate...

CVE-2026-61931

A use after free vulnerability exists in the Windows Perception Simulation Service . This flaw allows an authorized attacker to achieve local privilege escalation . While the specific component or root cause is not detailed beyond the memory corruption type, the impact includes potential high con...

CVE-2026-72968

A use after free vulnerability exists in the Windows Program Compatibility Assistant Service . This flaw allows an authorized attacker to perform a local privilege escalation . Exploitation details are not provided in the documentation, but the vulnerability is associated with CWE-416 .

CVE-2026-108399

A heap-based buffer overflow exists in Windows Hyper-V , which could allow an authorized attacker to achieve local privilege elevation . The vulnerability is listed with a CVSS 3.1 score of 7.2 (High) , indicating that while it requires local access and high privileges to exploit, it can have a s...

CVE-2026-105733

A vulnerability exists in Windows Hyper-V due to improper access control . This flaw allows an authorized attacker to achieve local code execution . The vulnerability is associated with CWE-1419 (Incorrect Initialization of Resource) and carries a HIGH severity rating. No specific exploit details...