EUVD-2026-122065

Authentication bypass using an alternate path or channel in Windows Kerberos allows an unauthorized attacker to elevate privileges over a network...

EUVD-2026-122063

Integer overflow or wraparound in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally...

EUVD-2026-122062

Insufficiently protected credentials in Microsoft Authentication Library MSAL for Node.js allows an unauthorized attacker to disclose information over a network...

EUVD-2026-122060

An elevation of privilege vulnerability exists when the Windows Cryptography Next Generation CNG Key Isolation service improperly handles memory. An attacker who successfully exploited this vulnerability could run processes in an elevated context. To exploit this vulnerability, an attacker would...

EUVD-2026-122061

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Authentication Library for JavaScript allows an unauthorized attacker to perform spoofing over a network...

EUVD-2026-122059

Heap-based buffer overflow in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally...

EUVD-2026-122058

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...

EUVD-2026-122056

Heap-based buffer overflow in Windows Redirected Drive Buffering allows an authorized attacker to elevate privileges locally...

EUVD-2026-122057

Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-122055

Stack-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally...

EUVD-2026-122053

Integer overflow or wraparound in Windows DNS allows an unauthorized attacker to disclose information over a network...

EUVD-2026-122054

Heap-based buffer overflow in Windows Management Instrumentation allows an unauthorized attacker to execute code locally...

EUVD-2026-122052

Integer overflow or wraparound in Microsoft JScript allows an unauthorized attacker to execute code over a network...

EUVD-2026-122051

Access of resource using incompatible type 'type confusion' in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...

EUVD-2026-122050

Use after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...

EUVD-2026-122049

Out-of-bounds read in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally...

EUVD-2026-122047

Use after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...

EUVD-2026-122048

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Kernel allows an authorized attacker to elevate privileges locally...

EUVD-2026-122046

Release of invalid pointer or reference in Windows DHCP Server allows an authorized attacker to execute code over a network...

EUVD-2026-122045

No cwe for this issue in Windows Active Directory allows an authorized attacker to deny service over a network...

EUVD-2026-122044

Heap-based buffer overflow in Windows Deployment Services allows an authorized attacker to execute code over a network...

EUVD-2026-122043

Exposure of sensitive system information to an unauthorized control sphere in Windows DHCP Server allows an unauthorized attacker to disclose information over a network...

EUVD-2026-122042

Stack-based buffer overflow in Windows Filtering Platform WFP allows an authorized attacker to elevate privileges locally...

EUVD-2026-122040

Heap-based buffer overflow in Windows NetBIOS allows an unauthorized attacker to elevate privileges over a network...

EUVD-2026-122039

Out-of-bounds read in Windows Smart Card allows an authorized attacker to disclose information with a physical attack...

EUVD-2026-122041

An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory. To exploit this vulnerability, an authenticated attacker could run a specially crafted application. An attacker who successfully exploited this vulnerability could obtain information t...

EUVD-2026-122037

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally...

EUVD-2026-122038

Double free in Windows Setup and Deployment allows an authorized attacker to elevate privileges locally...

EUVD-2026-122036

An elevation of privilege vulnerability exists in the Windows Installer when the Windows Installer fails to properly sanitize input leading to an insecure library loading behavior. A locally authenticated attacker could run arbitrary code with elevated system privileges. An attacker could then...

EUVD-2026-122035

Null pointer dereference in Windows Installer allows an authorized attacker to elevate privileges locally...

EUVD-2026-122034

Untrusted pointer dereference in Windows NTFS allows an unauthorized attacker to execute code over a network...

EUVD-2026-122033

Use of out-of-range pointer offset in Windows Audio Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-122032

Incorrect resource transfer between spheres in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

EUVD-2026-122031

Use of uninitialized resource in Mailslot File System allows an authorized attacker to disclose information locally...

EUVD-2026-122030

Release of invalid pointer or reference in Windows COM allows an authorized attacker to elevate privileges locally...

EUVD-2026-122029

Improper link resolution before file access 'link following' in Windows Installer allows an authorized attacker to elevate privileges locally...

EUVD-2026-122028

External control of file name or path in Windows Print Spooler Components allows an authorized attacker to disclose information locally...

EUVD-2026-122027

Use after free in Windows System Events Broker allows an authorized attacker to disclose information locally...

EUVD-2026-122026

Weak authentication in Windows Storage allows an authorized attacker to elevate privileges locally...

EUVD-2026-122024

Untrusted pointer dereference in Windows Encrypting File System EFS allows an authorized attacker to deny service locally...

EUVD-2026-122025

Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally...

EUVD-2026-122023

Double free in Winsock allows an authorized attacker to elevate privileges locally...

EUVD-2026-122022

Integer overflow or wraparound in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally...

EUVD-2026-122021

Weak authentication in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally...

EUVD-2026-122019

Improper link resolution before file access 'link following' in Windows DNS allows an authorized attacker to elevate privileges over a network...

EUVD-2026-122020

Use after free in Winlogon allows an authorized attacker to elevate privileges locally...

EUVD-2026-122017

Buffer over-read in Windows Message Queuing allows an unauthorized attacker to deny service over a network...

EUVD-2026-122018

Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network...

EUVD-2026-122015

Integer underflow wrap or wraparound in Microsoft QUIC allows an unauthorized attacker to deny service over a network...

EUVD-2026-122016

An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions. To exploit the vulnerability, a locally authenticated attacker could run a specially...