CVE-2026-69890

CVE-2026-69890 is a Use-After-Free vulnerability in Windows Virtual Trusted Platform Module (vTPM) that allows an authorized local attacker to escalate privileges. The attack requires high privileges and high complexity , with no user interaction needed, but results in a scope change and high imp...

CVE-2026-70564

A heap-based buffer overflow in Windows Print Spooler Components allows an authorized local attacker to elevate privileges. The flaw requires low privileges and no user interaction, with high impact to confidentiality, integrity, and availability (CVSS 7.8, HIGH ). A reference to the Microsoft Se...

CVE-2026-70573

CVE-2026-70573 is a heap-based buffer overflow in Windows Biometric Service that allows a local attacker with low privileges to achieve privilege escalation . The vulnerability is rated CVSS 3.1: 7.0 (HIGH) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a local attack vector wit...

CVE-2026-71337

CVE-2026-71337 is a stack-based buffer overflow in the Windows Storage Management Provider that allows a locally authenticated attacker with low privileges to achieve local privilege escalation . The CVSS 3.1 score is 7.8 (HIGH) , reflecting local attack vector, low complexity, and high impact to...

CVE-2026-77892

CVE-2026-77892 is a privilege escalation vulnerability in Windows Boot Manager . An unauthorized attacker with physical access to the system can elevate privileges, with high impact on confidentiality, integrity, and availability (CVSS 3.1: 6.8 MEDIUM ). The vulnerability requires no prior privil...

CVE-2026-69286

CVE-2026-69286 is an out-of-bounds read in the Windows USB Audio Class driver (usbaudio.sys) that allows an authorized local attacker to disclose information . The vulnerability is rated CVSS 3.1: 5.5 (MEDIUM) with a local attack vector, low complexity, and high confidentiality impact but no inte...

CVE-2026-69287

Windows Remote Desktop Services contains a use-after-free flaw that allows an authorized local attacker to elevate privileges . The CVSS 3.1 score is 7.0 (HIGH) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, meaning exploitation requires local access , high attack complexity , and low prio...

CVE-2026-69412

Windows DHCP Server is vulnerable to a stack-based buffer overflow that allows an authorized attacker (low privileges, no user interaction) to achieve remote code execution over an adjacent network . The vulnerability is scored CVSS 3.1: 8.0 (HIGH) with high impact to confidentiality, integrity, ...

CVE-2026-69571

CVE-2026-69571 is a heap-based buffer overflow in the Windows USB Audio Class driver (usbaudio.sys) that allows an authorized local attacker to elevate privileges. The vulnerability is scored CVSS 3.1: 7.8 (HIGH) with a vector of local attack, low complexity, low privileges required, no user inte...

CVE-2026-69881

CVE-2026-69881 is a null pointer dereference in the Windows Internet Key Exchange (IKE) Extension that allows an unauthenticated, network-based attacker to trigger a denial of service. The CVSS 3.1 score is 7.5 (HIGH) with vector AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H , meaning the impact is limited...

CVE-2026-70563

CVE-2026-70563 is an improper link resolution before file access ("link following") vulnerability in Windows Shell that allows an unauthorized attacker to perform spoofing over a network . The assigned CVSS 3.1 score is 8.1 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N, indicating h...

CVE-2026-73021

CVE-2026-73021 is a heap-based buffer overflow in Windows Biometric Service that allows an authorized attacker to achieve local privilege escalation . The CVSS 3.1 base score is 7.8 (HIGH) with a local attack vector, low complexity, and low privileges required, impacting confidentiality, integrit...

CVE-2026-78451

CVE-2026-78451 is an untrusted pointer dereference in the Microsoft Windows SCSI Class System File that enables an unauthorized attacker to escalate privileges via a physical attack vector (CVSS AV:P). The vulnerability carries a CVSS 3.1 base score of 6.8 (Medium) with high impact to confidentia...

CVE-2026-83992

CVE-2026-83992 is a heap-based buffer overflow in Windows Imaging Component that allows an unauthorized attacker to execute code over a network. The vulnerability carries a CVSS 3.1 base score of 8.8 (HIGH) with vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating network reachability with low ...

CVE-2026-68841

Windows NTFS is affected by a heap-based buffer overflow that allows an authorized, local attacker with low privileges to elevate privileges without user interaction. The vulnerability is classified with a CVSS 3.1 score of 7.8 (HIGH) — AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H — indicating high impact...

CVE-2026-69423

A heap-based buffer overflow in the Windows USB Video Driver allows an attacker with low privileges to escalate privileges over a network, requiring user interaction. The vulnerability is rated CVSS 8.0 (HIGH) with high impact to confidentiality, integrity, and availability. No public exploit or ...

CVE-2026-69473

CVE-2026-69473 is a use-after-free vulnerability in the Windows Kernel that allows an authorized local attacker to escalate privileges . The CVSS 3.1 score is 7.0 (HIGH) , with a local attack vector, high complexity, low privileges required, and no user interaction. Impact is rated high for confi...

CVE-2026-69504

CVE-2026-69504 is an out-of-bounds read in Windows NTFS that allows a local, authenticated attacker to disclose information . The vulnerability scores CVSS 3.1 5.5 (MEDIUM) with a local attack vector, low complexity, low privileges required, no user interaction, and high confidentiality impact bu...

CVE-2026-69548

CVE-2026-69548 is a heap-based buffer overflow in Windows RNDIS that allows an unauthorized attacker to disclose information via a physical attack . The CVSS 3.1 score is 4.6 (MEDIUM) with a vector of AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N, reflecting high confidentiality impact but no integrity or ...

CVE-2026-70587

CVE-2026-70587 is an information disclosure vulnerability in Windows Remote Desktop Protocol (RDP) caused by improper null termination . An unauthenticated remote attacker can exploit this over a network to disclose sensitive information , with no user interaction required. The CVSS 3.1 base scor...

CVE-2026-71339

CVE-2026-71339 is a heap-based buffer overflow in Windows Installer that allows an authorized local attacker to elevate privileges . The CVSS 3.1 score is 6.7 (MEDIUM) with a vector of AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H, indicating that while high privileges are required, the impact on confident...

CVE-2026-71341

CVE-2026-71341 is an out-of-bounds read in the Windows Partition Management Driver that allows a locally authenticated attacker with low privileges to disclose information. The vulnerability requires no user interaction and has low attack complexity. It carries a CVSS 3.1 score of 5.5 (Medium) wi...

CVE-2026-72993

CVE-2026-72993 is a heap-based buffer overflow in Windows Biometric Service that allows an authorized attacker to elevate privileges locally . The vulnerability is rated HIGH (CVSS 3.1: 7.8) with an attack vector of local , low complexity , and low privileges required , with high impact on confid...

CVE-2026-77502

CVE-2026-77502 is an out-of-bounds read in Windows DHCP Server that allows an unauthorized attacker to cause denial of service over a network. The vulnerability requires no prior authentication or user interaction, and carries a CVSS 3.1 score of 7.5 (HIGH) with high impact to availability. No co...

CVE-2026-78457

CVE-2026-78457 is a use-after-free vulnerability in Windows Security Health Service that enables a locally authenticated attacker to achieve privilege escalation . The CVSS 3.1 score is 7.0 (HIGH) , with a local attack vector, high complexity, low privileges required, and no user interaction. Imp...

CVE-2026-83971

CVE-2026-83971 is a heap-based buffer overflow in Windows Biometric Service that allows a locally authenticated attacker to elevate privileges . Microsoft rates it CVSS 3.1 7.8 (High) , with local attack vector, low complexity, low privileges required, no user interaction, and high impact on conf...

CVE-2026-71338

CVE-2026-71338 is a double free vulnerability in Windows Failover Cluster that allows an authorized attacker to elevate privileges locally . The underlying cause is a double-free memory error within the Failover Cluster component. Per the CVSS 3.1 vector (AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H), the...

CVE-2026-77895

CVE-2026-77895 is an out-of-bounds read vulnerability in Windows DHCP Server that allows an unauthorized attacker to cause denial of service over a network . The CVSS 3.1 score is 7.5 (HIGH) with a vector of network access, low complexity, no privileges required, and no user interaction, resultin...

CVE-2026-68830

CVE-2026-68830 is an information disclosure vulnerability in Windows Universal Plug and Play (UPnP) Device Host , caused by improper link resolution before file access ('link following'). An authorized local attacker (low privileges, no user interaction) can exploit this to disclose information, ...

CVE-2026-69860

CVE-2026-69860 is a heap-based buffer overflow in Windows Imaging Component that allows an unauthorized attacker to execute code over a network. The CVSS 3.1 score is 8.8 (HIGH) , with a vector of AV:N/AC:L/PR:N/UI:R, meaning the attack is network-based, requires user interaction , and needs no p...

CVE-2026-70562

CVE-2026-70562 is a double free vulnerability in the Windows Audio Service that allows a low-privilege (authorized) local attacker to elevate privileges . The CVSS 3.1 score is 7.0 (HIGH) with vector AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H , reflecting a local attack vector with high complexity. No e...

CVE-2026-73022

CVE-2026-73022 is a use-after-free vulnerability in Windows Modern Device Management (MDM) that allows an authorized attacker to escalate privileges locally . The CVSS 3.1 score is 7.0 (HIGH) with a local attack vector, high complexity, low privileges required, and no user interaction, resulting ...

CVE-2026-83981

A heap-based buffer overflow in Windows Biometric Service allows an authorized (low-privilege) local attacker to elevate privileges , with high impact to confidentiality, integrity, and availability (CVSS 3.1 score 7.8 HIGH ). The attack requires local access , low privileges , and no user intera...

CVE-2026-69527

An out-of-bounds read vulnerability in the Windows USB Mass Storage Class Driver allows an authorized local attacker to disclose information. The CVSS v3.1 score is 5.5 (Medium) with a local attack vector, low privileges required, and high confidentiality impact. CISA's SSVC assessment indicates ...

CVE-2026-69844

CVE-2026-69844 is an out-of-bounds read vulnerability in the Windows Win32K component (the kernel-mode driver that handles the graphical subsystem). An authorized local attacker with low privileges can exploit it to elevate privileges on the affected system. Microsoft rates the severity as HIGH (...

CVE-2026-77501

CVE-2026-77501 is an out-of-bounds read vulnerability in Windows DHCP Server that allows an unauthorized, network-based attacker to cause a denial of service . The CVSS v3.1 base score is 7.5 (HIGH) with vector AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H, reflecting remote, unauthenticated exploitation w...

CVE-2026-83980

CVE-2026-83980 is a heap-based buffer overflow in the Windows Biometric Service that allows a local, low-privilege attacker to escalate privileges without user interaction. The CVSS 3.1 score is 7.8 (HIGH) , with high impact on confidentiality, integrity, and availability. The vulnerability is ra...