CVE-2026-71339

CVE-2026-71339 is a heap-based buffer overflow in Windows Installer that allows an authorized local attacker to elevate privileges . The CVSS 3.1 score is 6.7 (MEDIUM) with a vector of AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H, indicating that while high privileges are required, the impact on confident...

CVE-2026-71340

CVE-2026-71340 is a Use After Free vulnerability in Windows File History Service that allows an authorized attacker to locally elevate privileges . The flaw requires low privileges , high attack complexity , and no user interaction , yet yields high impact across confidentiality, integrity, and a...

CVE-2026-71338

CVE-2026-71338 is a double free vulnerability in Windows Failover Cluster that allows an authorized attacker to elevate privileges locally . The underlying cause is a double-free memory error within the Failover Cluster component. Per the CVSS 3.1 vector (AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H), the...

CVE-2026-71334

CVE-2026-71334 is a heap-based buffer overflow in the Windows NFS Portmapper component that allows an authorized local attacker to elevate privileges. The Microsoft-assigned CVSS 3.1 base score is 7.8 (High) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, reflecting low privilege requiremen...

CVE-2026-71332

CVE-2026-71332 is a use-after-free vulnerability in Windows Secure Socket Tunneling Protocol (SSTP) that allows an authorized attacker to perform a local privilege escalation . The CVSS 3.1 score is 7.0 (HIGH) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a high-attack-complexi...

CVE-2026-71333

CVE-2026-71333 is a use-after-free vulnerability in Windows Remote Access Connection Manager that allows an authorized local attacker with low privileges to escalate privileges. The attack requires high complexity, no user interaction, and has a CVSS 3.1 score of 7.0 (HIGH) with high impact on co...

CVE-2026-71337

CVE-2026-71337 is a stack-based buffer overflow in the Windows Storage Management Provider that allows a locally authenticated attacker with low privileges to achieve local privilege escalation . The CVSS 3.1 score is 7.8 (HIGH) , reflecting local attack vector, low complexity, and high impact to...

CVE-2026-71336

Windows Work Folder Service is vulnerable to an integer overflow or wraparound flaw that allows an authorized attacker to achieve remote code execution over the network. The CVSS 3.1 base score is 8.8 (HIGH) with vector AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating network-attackable exploitati...

CVE-2026-71330

CVE-2026-71330 is an information disclosure vulnerability in Windows Services for NFS ONCRPC XDR Driver . An unauthorized network-based attacker with no privileges can expose sensitive system information over the network, resulting in a High confidentiality impact (CVSS 3.1: 7.5 ). CISA's SSVC as...

CVE-2026-71329

CVE-2026-71329 is a heap-based buffer overflow in Windows NTFS that allows an unauthorized attacker to execute code via a physical attack vector. The vulnerability requires low complexity and no privileges or user interaction, but demands physical access to the target system. The CVSS 3.1 base sc...

CVE-2026-70587

CVE-2026-70587 is an information disclosure vulnerability in Windows Remote Desktop Protocol (RDP) caused by improper null termination . An unauthenticated remote attacker can exploit this over a network to disclose sensitive information , with no user interaction required. The CVSS 3.1 base scor...

CVE-2026-70586

CVE-2026-70586 is a heap-based buffer overflow in Windows Paint that allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability requires user interaction (e.g., opening a crafted file) but no prior privileges. Microsoft rates it CVSS 8.8 (HIGH) with high im...

CVE-2026-70584

Windows Core Messaging is affected by a type confusion vulnerability (access of resource using incompatible type) that allows a locally authenticated attacker to escalate privileges. The impact is rated HIGH (CVSS 3.1 base score 7.8, full confidentiality, integrity, and availability impact) with ...

CVE-2026-70585

CVE-2026-70585 is a use-after-free vulnerability in the Windows Services for NFS ONCRPC XDR Driver . An authorized local attacker with low privileges can exploit it to achieve code execution , with high impact on confidentiality, integrity, and availability (CVSS 3.1 score 7.0 HIGH ; vector AV:L/...

CVE-2026-70582

Windows Management Instrumentation (WMI) is affected by a race condition caused by concurrent execution using a shared resource with improper synchronization. An authorized local attacker can leverage this to elevate privileges . The CVSS 3.1 base score is 6.4 (MEDIUM) , reflecting a local attack...

CVE-2026-70564

A heap-based buffer overflow in Windows Print Spooler Components allows an authorized local attacker to elevate privileges. The flaw requires low privileges and no user interaction, with high impact to confidentiality, integrity, and availability (CVSS 7.8, HIGH ). A reference to the Microsoft Se...

CVE-2026-70562

CVE-2026-70562 is a double free vulnerability in the Windows Audio Service that allows a low-privilege (authorized) local attacker to elevate privileges . The CVSS 3.1 score is 7.0 (HIGH) with vector AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H , reflecting a local attack vector with high complexity. No e...

CVE-2026-72923

Microsoft.OpenApi.YamlReader (versions 2.0.0-preview.11 through 2.12.0 and 3.0.0 through 3.10.0) and Microsoft.OpenApi.Readers (prior to 1.6.30) are vulnerable to a denial of service via YAML alias expansion. The root cause lies in how SharpYaml represents aliases as shared nodes in a directed ac...

CVE-2026-70563

CVE-2026-70563 is an improper link resolution before file access ("link following") vulnerability in Windows Shell that allows an unauthorized attacker to perform spoofing over a network . The assigned CVSS 3.1 score is 8.1 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N, indicating h...

CVE-2026-70351

CVE-2026-70351 is an integer overflow or wraparound in Microsoft WebP Image Extension that allows an unauthorized attacker to achieve remote code execution over a network. The CVSS 3.1 base score is 8.8 (High) , with low attack complexity and no privileges required, though user interaction is req...

CVE-2026-58600

CVE-2026-58600 is a heap-based buffer overflow in the HEVC Video Extensions component of the Microsoft Windows Codecs Library . An unauthorized attacker with local access can leverage this flaw to elevate privileges , achieving high impact on confidentiality, integrity, and availability (CVSS 3.1...

CVE-2026-70342

CVE-2026-70342 affects the Windows Ancillary Function Driver for WinSock (AFD). The vulnerability is a use after free flaw that allows an unauthorized attacker to elevate privileges over a network. The CVSS 3.1 score is 8.1 (HIGH) , with a vector of network-based, high complexity, no privileges r...

CVE-2026-70289

CVE-2026-70289 is a heap-based buffer overflow in the Windows Win32 Kernel Subsystem (Win32k) that allows an authorized (low-privilege) attacker to elevate privileges locally . The vulnerability is rated CVSS 7.8 (HIGH) with local attack vector, low complexity, and high impact to confidentiality,...

CVE-2026-70334

Visual Studio Code contains a security feature bypass caused by an incomplete list of disallowed inputs , allowing a local, unprivileged attacker (with user interaction) to circumvent a security control. The CVSS 3.1 score is 7.8 (HIGH) , reflecting high impact to confidentiality, integrity, and ...

CVE-2026-69890

CVE-2026-69890 is a Use-After-Free vulnerability in Windows Virtual Trusted Platform Module (vTPM) that allows an authorized local attacker to escalate privileges. The attack requires high privileges and high complexity , with no user interaction needed, but results in a scope change and high imp...

CVE-2026-69740

Windows Hello contains a use-after-free flaw that allows an authorized local attacker to elevate privileges . The vulnerability is rated CVSS 8.8 (HIGH) with a changed scope, indicating the impact extends beyond the vulnerable component itself, resulting in high confidentiality, integrity, and av...

CVE-2026-69712

CVE-2026-69712 is a use-after-free vulnerability in Windows Key Distribution Center that allows an authorized attacker to execute code over a network. The CVSS 3.1 score is 8.8 (HIGH) with an attack vector of network , low privileges required, no user interaction, and high impact to confidentiali...

CVE-2026-69676

CVE-2026-69676 is an authentication bypass by capture-replay vulnerability in Windows Kerberos that allows an authorized attacker to achieve remote code execution over a network. The underlying mechanism involves replaying captured Kerberos authentication traffic, enabling privilege escalation be...

CVE-2026-69730

CVE-2026-69730 is a use-after-free vulnerability in Windows DNS that allows an unauthorized, remote attacker to execute arbitrary code over the network without any user interaction or prior privileges. Microsoft rates it CVSS 9.8 (Critical) , with high impact on confidentiality, integrity, and av...

CVE-2026-69770

CVE-2026-69770 is an information disclosure vulnerability in the Windows Spaceport.sys kernel driver, caused by the use of an uninitialized resource . An authorized attacker with local access and low privileges can exploit it to disclose sensitive information (high confidentiality impact, no inte...

CVE-2026-69860

CVE-2026-69860 is a heap-based buffer overflow in Windows Imaging Component that allows an unauthorized attacker to execute code over a network. The CVSS 3.1 score is 8.8 (HIGH) , with a vector of AV:N/AC:L/PR:N/UI:R, meaning the attack is network-based, requires user interaction , and needs no p...

CVE-2026-69822

CVE-2026-69822 is a local privilege escalation vulnerability in Windows Kerberos caused by a numeric truncation error . An authorized attacker with low privileges can exploit this to achieve full confidentiality, integrity, and availability impact (CVSS 3.1: 7.8 HIGH , vector AV:L/AC:L/PR:L/UI:N/...

CVE-2026-69732

CVE-2026-69732 is a heap-based buffer overflow in Windows Link Layer Topology Discovery Protocol (LLTD) that allows an unauthorized attacker to execute code over a network. The vulnerability carries a CVSS 3.1 score of 8.1 (HIGH) , with high impact on confidentiality, integrity, and availability,...

CVE-2026-69771

CVE-2026-69771 is a security feature bypass in the Windows Container Manager Service , caused by improper link resolution before file access (link following). A local, authorized attacker with low privileges can exploit this to gain high confidentiality impact , with no stated integrity or availa...

CVE-2026-69758

A heap-based buffer overflow in the Windows Universal Disk Format File System (UDFS) Driver allows a locally authenticated attacker to elevate privileges . The flaw is rated CVSS 7.8 (High) with full impact to confidentiality, integrity, and availability (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). CIS...

CVE-2026-69775

CVE-2026-69775 is a use-after-free vulnerability in the Windows DWM Core Library that allows an authorized attacker to elevate privileges over a network. The CVSS 3.1 score is 7.1 (HIGH) , with a vector of AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H, indicating that exploitation requires network access, ...

CVE-2026-69772

CVE-2026-69772 is a heap-based buffer overflow in Windows Network File System (NFS) that allows an unauthorized attacker to execute code over a network, achieving full remote code execution. The Microsoft-assigned CVSS 3.1 score is 8.8 (HIGH) with vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indic...

CVE-2026-69839

CVE-2026-69839 is a denial-of-service vulnerability in the Windows iSCSI Target Service , caused by an uncaught exception that allows an authorized attacker (low privileges) to deny service over the network. The CVSS v3.1 score is 6.5 (Medium) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H,...

CVE-2026-69838

CVE-2026-69838 is a use-after-free vulnerability in Windows Print Spooler Components that allows an authorized attacker to achieve local privilege escalation . The attack vector is local, requires low privileges, and has high complexity with no user interaction needed. The CVSS 3.1 score is 7.0 (...

CVE-2026-69808

CVE-2026-69808 is an out-of-bounds read vulnerability in the Windows Win32K component that allows an authorized attacker with local access to disclose information . The CVSS 3.1 base score is 5.5 (MEDIUM) , reflecting a local attack vector, low complexity, low privileges required, no user interac...

CVE-2026-69691

CVE-2026-69691 is a heap-based buffer overflow in the Windows Spaceport.sys driver that allows an authorized local attacker to elevate privileges . The CVSS 3.1 score is 7.8 (HIGH) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating low attack complexity, low privileges required, and...

CVE-2026-69832

CVE-2026-69832 is an information disclosure vulnerability in Windows Win32K , a kernel-mode component handling graphics and input processing. Exposure of sensitive system information to an unauthorized control sphere allows a low-privilege local attacker to read sensitive data. The CVSS 3.1 score...

CVE-2026-69862

CVE-2026-69862 is an out-of-bounds read in the Windows Wireless Wide Area Network Service that allows an authorized local attacker to disclose information . The CVSS v3.1 score is 5.5 (Medium) with High confidentiality impact, no integrity or availability impact, and requires low privileges over ...

CVE-2026-69744

Windows Kerberos is affected by a null pointer dereference that allows an unauthenticated attacker to trigger a denial of service over a network . The CVSS 3.1 score is 7.5 (HIGH) , with the vector indicating low attack complexity, no privileges required, and no user interaction. The primary impa...

CVE-2026-69762

CVE-2026-69762 is a stack-based buffer overflow in Windows Win32K that allows an authorized attacker with low privileges to elevate privileges over a network , requiring user interaction. The CVSS 3.1 base score is 8.0 (HIGH) , reflecting high impact to confidentiality, integrity, and availabilit...

CVE-2026-69819

CVE-2026-69819 is a CRITICAL (CVSS 3.1: 9.8) vulnerability in the Microsoft RPC Runtime Library , caused by an out-of-bounds write that allows an unauthenticated, remote attacker to execute arbitrary code over a network with no user interaction required. The attack vector is network-based with lo...

CVE-2026-69741

Windows Spaceport.sys is affected by an out-of-bounds read vulnerability that allows a locally authenticated attacker with low privileges to disclose information . The CVSS 3.1 score is 5.5 (Medium) with a local attack vector, low complexity, no user interaction, and a high confidentiality impact...

CVE-2026-69735

A use after free vulnerability in the Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally . The flaw resides in the service's memory management, where a freed object is referenced again, enabling a local user with low privileges to escalate to higher acc...

CVE-2026-69896

CVE-2026-69896 is a use after free vulnerability in Windows Error Reporting that allows an authorized, low-privilege attacker to perform a local privilege escalation . The attack requires local access, involves high complexity, and does not require user interaction. The CVSS 3.1 base score is 7.0...

CVE-2026-69681

CVE-2026-69681 is a heap-based buffer overflow in the Virtual Hard Disk (VHD) Miniport Driver that allows an authorized attacker to elevate privileges over a network . The CVSS 3.1 score is 8.0 (HIGH) with a vector of AV:N/AC:L/PR:L/UI:R, indicating a network attack with low complexity, low privi...