EUVD-2026-2149

Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally...

EUVD-2026-2172

Use after free in Windows Clipboard Server allows an unauthorized attacker to elevate privileges locally...

EUVD-2026-2181

Use after free in Windows DWM allows an authorized attacker to elevate privileges locally...

EUVD-2026-2178

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally...

EUVD-2026-2162

Improper access control in Windows Client-Side Caching CSC Service allows an authorized attacker to disclose information locally...

EUVD-2026-2170

Concurrent execution using shared resource with improper synchronization 'race condition' in Graphics Kernel allows an authorized attacker to elevate privileges locally...

EUVD-2026-2158

Windows Remote Procedure Call Interface Definition Language IDL Elevation of Privilege Vulnerability...

EUVD-2026-2209

Exposure of sensitive information to an unauthorized actor in Windows Remote Procedure Call allows an unauthorized attacker to disclose information locally...

CVE-2026-20811 Win32k Elevation of Privilege Vulnerability

...

CVE-2026-0386

CVE-2026-0386 : Windows Deployment Services has an improper access control vulnerability that can allow an adjacent-network attacker to execute code remotely. This entry is supported by multiple sources confirming the issue and indicating Microsoft has released January 2026 security updates to ad...

CVE-2025-68707

creationtimestamp| type| source ---|---|--- 2026-01-13 17:02:46+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115888866347113178 2026-01-13 17:41:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcd3zqxsvl2q...

EUVD-2026-2216

Software installed and run as a non-privileged user may conduct improper GPU system calls to cause mismanagement of resources reference counting creating a potential use after free scenario. Improper resource management and reference counting on an internal resource caused scenario where potentia...

EUVD-2026-2076

An improper neutralization of special elements used in an os command 'os command injection' vulnerability in Fortinet FortiSIEM 7.4.0, FortiSIEM 7.3.0 through 7.3.4, FortiSIEM 7.1.0 through 7.1.8, FortiSIEM 7.0.0 through 7.0.4, FortiSIEM 6.7.0 through 6.7.10 may allow an attacker to execute...

EUVD-2026-2235

An insufficient input validation vulnerability in the NETGEAR XR1000v2 allows attackers connected to the router's LAN to execute OS command injections...

CVE-2025-71023

creationtimestamp| type| source ---|---|--- 2026-01-13 16:00:19+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115888620742037036...

EUVD-2026-2247

In the Linux kernel, the following vulnerability has been resolved: net: rose: fix invalid array index in rosekillbydevice rosekillbydevice collects sockets into a local array and then iterates over them to disconnect sockets bound to a device being brought down. The loop mistakenly indexes...

EUVD-2026-2248

In the Linux kernel, the following vulnerability has been resolved: ASoC: stm32: sai: fix OF node leak on probe The reference taken to the sync provider OF node when probing the platform device is currently only dropped if the setsync callback fails during DAI probe. Make sure to drop the referen...

EUVD-2026-2250

In the Linux kernel, the following vulnerability has been resolved: ipv6: fix a BUG in rt6getpcpuroute under PREEMPTRT On PREEMPTRT kernels, after rt6getpcpuroute returns NULL, the current task can be preempted. Another task running on the same CPU may then execute rt6makepcpuroute and successful...

EUVD-2026-2279

In the Linux kernel, the following vulnerability has been resolved: svcrdma: bound check rqpages index in inline path svcrdmacopyinlinerange indexed rqstp-rqpagesrccurpage without verifying rccurpage stays within the allocated page array. Add guards before the first use and after advancing to a n...

EUVD-2026-2307

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: fwtracer, Validate format string parameters Add validation for format string parameters in the firmware tracer to prevent potential security vulnerabilities and crashes from malformed format strings received from...