CVE-2026-70260 - Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data H

CVE-2026-70259 - Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to d

CVE-2026-70258 - Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to

CVE-2026-70257 - Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute co

CVE-2026-70256 - Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute co

CVE-2026-70255 - Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privil

CVE-2026-70254 - Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a

CVE-2026-70253 - Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges

CVE-2026-70252 - Use after free in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate p

CVE-2026-70251 - Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to e

CVE-2026-70250 - Use after free in Windows DHCP Client allows an unauthorized attacker to execute code over an adjace

CVE-2026-70249 - Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges

CVE-2026-70248 - Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally.

CVE-2026-70247 - Out-of-bounds read in Windows HTTP.sys allows an authorized attacker to execute code locally.

CVE-2026-70246 - Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate priv

CVE-2026-70245 - Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver f

CVE-2026-70244 - Out-of-bounds read in DNS Server allows an unauthorized attacker to disclose information over a netw

CVE-2026-70243 - Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-70242 - Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute co

CVE-2026-70241 - Use after free in Windows Kerberos allows an authorized attacker to elevate privileges locally.

CVE-2026-70238 - Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to ele

CVE-2026-70237 - Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to ele

CVE-2026-70236 - Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges

CVE-2026-70235 - Improper authentication in Windows Event Tracing allows an authorized attacker to perform spoofing l

CVE-2026-70234 - Buffer over-read in Desktop Window Manager allows an authorized attacker to disclose information loc

CVE-2026-70233 - Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to

CVE-2026-70232 - Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows

CVE-2026-70230 - Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.

CVE-2026-70229 - Incorrect authorization in Active Directory Domain Services allows an unauthorized attacker to execu

CVE-2026-70228 - Out-of-bounds read in Desktop Window Manager allows an authorized attacker to elevate privileges loc

CVE-2026-70227 - Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose i

CVE-2026-70225 - Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver f

CVE-2026-70223 - Use after free in Windows Console Driver allows an authorized attacker to elevate privileges locally

CVE-2026-70222 - Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally

CVE-2026-70220 - Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code

CVE-2026-70219 - Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information

CVE-2026-70218 - Insufficient granularity of access control in Windows StateRepository API allows an authorized attac

CVE-2026-70217 - Improper access control in Microsoft Office SharePoint allows an authorized attacker to disclose inf

CVE-2026-70216 - Insufficient granularity of access control in Windows Mobile Device Management allows an authorized

CVE-2026-70215 - Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a

CVE-2026-70214 - Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information

CVE-2026-70213 - Origin validation error in Microsoft Power Apps allows an authorized attacker to execute code over a

CVE-2026-70212 - Improper restriction of communication channel to intended endpoints in Windows Security Center allow

CVE-2026-70211 - Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose infor

CVE-2026-70210 - Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to elevate privileges o

CVE-2026-70209 - Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges

CVE-2026-70208 - Out-of-bounds read in Windows HTTP.sys allows an authorized attacker to disclose information locally

CVE-2026-70207 - Heap-based buffer overflow in Network Policy Server (NPS) allows an authorized attacker to execute c

CVE-2026-70206 - Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information

CVE-2026-70205 - Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver f

CVE-2026-70202 - Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to e

CVE-2026-70201 - Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service locally.

CVE-2026-70199 - Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows

CVE-2026-70198 - Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges loc

CVE-2026-70197 - Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.

CVE-2026-70196 - Inefficient algorithmic complexity in ASP.NET Core allows an unauthorized attacker to deny service o

CVE-2026-70195 - Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to dis

CVE-2026-70194 - Improper certificate validation in .NET Framework allows an unauthorized attacker to bypass a securi

CVE-2026-70190 - Improper link resolution before file access ('link following') in .NET allows an authorized attacker

CVE-2026-70188 - Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core all

CVE-2026-70187 - Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code ove

CVE-2026-70186 - Deadlock in ASP.NET Core allows an unauthorized attacker to deny service over a network.

CVE-2026-70185 - Protection mechanism failure in Windows PowerShell allows an authorized attacker to bypass a securit

CVE-2026-70184 - Improper resolution of path equivalence in Windows Backup Engine allows an authorized attacker to el

CVE-2026-70183 - Concurrent execution using shared resource with improper synchronization ('race condition') in ASP.N

CVE-2026-70181 - Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker

CVE-2026-70179 - Authentication bypass by spoofing in ASP.NET Core allows an authorized attacker to elevate privilege

CVE-2026-70177 - Numeric truncation error in Microsoft Windows Search Component allows an authorized attacker to elev

CVE-2026-70176 - Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges

CVE-2026-70175 - Improper authentication in ASP.NET Core allows an unauthorized attacker to elevate privileges over a

CVE-2026-70174 - Improperly implemented security check for standard in .NET allows an unauthorized attacker to execut

CVE-2026-70173 - Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose i

CVE-2026-70172 - Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges lo

CVE-2026-70170 - Untrusted pointer dereference in Windows Kernel allows an authorized attacker to deny service over a

CVE-2026-70169 - Concurrent execution using shared resource with improper synchronization ('race condition') in Windo

CVE-2026-70168 - Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to ele

CVE-2026-70167 - Access of resource using incompatible type ('type confusion') in DNS Server allows an authorized att

CVE-2026-70166 - Out-of-bounds read in Windows DNS allows an authorized attacker to deny service over a network.

CVE-2026-70165 - Improper link resolution before file access ('link following') in .NET allows an authorized attacker

CVE-2026-70164 - Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

CVE-2026-70163 - Allocation of resources without limits or throttling in OpenSSH for Windows allows an unauthorized a

CVE-2026-70162 - A denial of service vulnerability exists when Microsoft Common Object Runtime Library improperly han

CVE-2026-70161 - Improper limitation of a pathname to a restricted directory ('path traversal') in .NET allows an aut

CVE-2026-70160 - Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-70159 - Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker

CVE-2026-70158 - Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an

CVE-2026-70157 - Heap-based buffer overflow in Windows System Information Console allows an unauthorized attacker to

CVE-2026-70156 - Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privil

CVE-2026-70155 - Missing release of memory after effective lifetime in Windows DNS allows an unauthorized attacker to

CVE-2026-70153 - Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to

CVE-2026-70151 - Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges loc

CVE-2026-70150 - Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privil

CVE-2026-70149 - Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver (cs

CVE-2026-70148 - Improper authorization in Windows Broadcast DVR User Service allows an authorized attacker to disclo

CVE-2026-70147 - Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to

CVE-2026-70144 - Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges

CVE-2026-70143 - Heap-based buffer overflow in Windows Network File System allows an authorized attacker to execute c

CVE-2026-70142 - Untrusted search path in Windows Update Service allows an authorized attacker to elevate privileges

CVE-2026-70141 - Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose i

CVE-2026-70140 - Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.

CVE-2026-70139 - Heap-based buffer overflow in Windows Update Service allows an authorized attacker to elevate privil

CVE-2026-70138 - Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locall

CVE-2026-70137 - Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to

CVE-2026-70136 - Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privil

CVE-2026-70135 - Out-of-bounds read in Windows Remote POS Driver allows an authorized attacker to disclose informatio

CVE-2026-70134 - Use after free in Windows Event Tracing allows an authorized attacker to elevate privileges locally.

CVE-2026-70133 - Allocation of resources without limits or throttling in Windows SMB Server allows an unauthorized at

CVE-2026-70132 - Heap-based buffer overflow in Windows Portable Device File System Driver allows an authorized attack

CVE-2026-70131 - Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to

CVE-2026-70128 - Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information local

CVE-2026-70127 - Use after free in DNS Server allows an unauthorized attacker to execute code over a network.

CVE-2026-70126 - Out-of-bounds read in Windows Bluetooth Port Driver allows an unauthorized attacker to execute code

CVE-2026-70123 - Numeric truncation error in Microsoft Graphics Component allows an authorized attacker to elevate pr

CVE-2026-70122 - Time-of-check time-of-use (toctou) race condition in Windows Broadcast DVR User Service allows an au

CVE-2026-70121 - Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges loc

CVE-2026-70119 - Out-of-bounds read in Windows DNS allows an authorized attacker to execute code over a network.

CVE-2026-70118 - Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.

CVE-2026-70117 - Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevat

CVE-2026-70116 - Stack-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker

CVE-2026-70115 - Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privil

CVE-2026-70114 - Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges loc

CVE-2026-70113 - Integer overflow or wraparound in Windows Client for NFS allows an authorized attacker to elevate pr

CVE-2026-70112 - Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to execute code lo

CVE-2026-70111 - Untrusted pointer dereference in Windows Kernel allows an unauthorized attacker to elevate privilege

CVE-2026-70110 - Stack-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker t

CVE-2026-70109 - Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to

CVE-2026-70108 - Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevat

CVE-2026-70106 - Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges loc

CVE-2026-70104 - Untrusted pointer dereference in Windows Win32 Kernel Subsystem allows an authorized attacker to ele

CVE-2026-70103 - Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privi

CVE-2026-70102 - Use after free in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.

CVE-2026-70097 - Concurrent execution using shared resource with improper synchronization ('race condition') in Windo

CVE-2026-70096 - Heap-based buffer overflow in Windows Rich Text Edit Control allows an unauthorized attacker to exec

CVE-2026-70095 - Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a n

CVE-2026-70093 - Heap-based buffer overflow in Windows Rich Text Edit Control allows an authorized attacker to elevat

CVE-2026-70092 - Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to

CVE-2026-70090 - Use of uninitialized resource in Windows Netlogon allows an authorized attacker to disclose informat

CVE-2026-70089 - Heap-based buffer overflow in Windows GDI allows an unauthorized attacker to execute code over a net

CVE-2026-70087 - Incorrect authorization in DNS Server allows an authorized attacker to bypass a security feature loc

CVE-2026-70086 - Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privil

CVE-2026-70085 - Missing authorization in DNS Server allows an authorized attacker to perform tampering locally.

CVE-2026-70084 - Improper access control in Windows Projected File System allows an authorized attacker to disclose i

CVE-2026-70083 - Incorrect authorization in DNS Server allows an authorized attacker to perform tampering locally.

CVE-2026-70082 - Uncaught exception in Windows DNS allows an unauthorized attacker to deny service over a network.

CVE-2026-70079 - Improper enforcement of behavioral workflow in Windows DNS allows an unauthorized attacker to deny s

CVE-2026-70077 - Use after free in Windows Kernel allows an authorized attacker to disclose information locally.

CVE-2026-70076 - Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges

CVE-2026-70075 - Time-of-check time-of-use (toctou) race condition in Windows Virtualization-Based Security (VBS) Enc

CVE-2026-70074 - Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information locally.

CVE-2026-70072 - Allocation of resources without limits or throttling in Windows Netlogon allows an authorized attack

CVE-2026-70071 - Improper verification of cryptographic signature in DNS Server allows an authorized attacker to perf

CVE-2026-70069 - Stack-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code ove

CVE-2026-70068 - Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an unauthorized attac

CVE-2026-70067 - Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges

CVE-2026-70066 - Use after free in Windows DHCP Server allows an authorized attacker to elevate privileges locally.

CVE-2026-70064 - Integer underflow (wrap or wraparound) in Windows Kerberos allows an authorized attacker to elevate

CVE-2026-70063 - Out-of-bounds read in Windows Kernel allows an authorized attacker to disclose information locally.

CVE-2026-70062 - Double free in Windows Libarchive allows an unauthorized attacker to execute code over a network.

CVE-2026-70060 - Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevat

CVE-2026-70059 - Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locall

CVE-2026-70058 - Out-of-bounds write in Windows DHCP Server allows an unauthorized attacker to execute code over a ne

CVE-2026-70057 - Incorrect authorization in Windows Routing and Remote Access Service (RRAS) allows an authorized att

CVE-2026-70056 - Use after free in Windows Update Service allows an authorized attacker to elevate privileges locally

CVE-2026-70055 - Exposure of sensitive system information to an unauthorized control sphere in Windows Cryptographic

CVE-2026-70054 - Heap-based buffer overflow in Windows NetBIOS allows an authorized attacker to elevate privileges lo

CVE-2026-70052 - Integer overflow or wraparound in Windows PowerShell allows an authorized attacker to execute code l

CVE-2026-70051 - Access of resource using incompatible type ('type confusion') in Windows SmartScreen allows an autho

CVE-2026-70049 - Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Co

CVE-2026-70048 - Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to

CVE-2026-70045 - Use after free in Windows Work Folders allows an authorized attacker to elevate privileges locally.

CVE-2026-70044 - Out-of-bounds read in Microsoft Windows Media Foundation allows an unauthorized attacker to disclose

CVE-2026-70041 - Buffer over-read in Windows CD-ROM Driver allows an authorized attacker to disclose information loca

CVE-2026-70038 - Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.

CVE-2026-70035 - Deserialization of untrusted data in .NET Framework allows an unauthorized attacker to execute code

CVE-2026-70033 - Missing release of memory after effective lifetime in Remote Desktop Gateway Service allows an unaut

CVE-2026-70031 - Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to deny service over a n

CVE-2026-70027 - Heap-based buffer overflow in Windows Subsystem for Linux allows an authorized attacker to elevate p

CVE-2026-70026 - Use after free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges loc

CVE-2026-70025 - Use after free in Windows Netlogon allows an authorized attacker to deny service over a network.

CVE-2026-70024 - Stack-based buffer overflow in Windows Internet Information Services allows an unauthorized attacker

CVE-2026-70023 - Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

CVE-2026-70021 - Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges loc

CVE-2026-70017 - Access of resource using incompatible type ('type confusion') in Windows Secure Kernel Mode allows a

CVE-2026-70015 - Use after free in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized at

CVE-2026-70014 - Use after free in Windows Cryptographic Services allows an authorized attacker to execute code over

CVE-2026-70013 - Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.

CVE-2026-70012 - Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo

CVE-2026-70011 - Out-of-bounds read in Windows IP Over USB Service allows an authorized attacker to disclose informat

CVE-2026-70010 - Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges local

CVE-2026-70008 - Integer overflow or wraparound in Windows IP Over USB Service allows an authorized attacker to eleva

CVE-2026-70007 - Out-of-bounds write in .NET Framework allows an unauthorized attacker to execute code over a network

CVE-2026-70006 - Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo

CVE-2026-70005 - Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker

CVE-2026-70004 - Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo

CVE-2026-69999 - Out-of-bounds read in Windows Update allows an authorized attacker to disclose information locally.

CVE-2026-69998 - Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo

CVE-2026-69997 - Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo

CVE-2026-69996 - Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo

CVE-2026-69995 - Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo

CVE-2026-69994 - Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo

CVE-2026-69992 - Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code ov

CVE-2026-69991 - Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo

CVE-2026-69988 - Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo

CVE-2026-69987 - Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo

CVE-2026-69986 - Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo

CVE-2026-69985 - Heap-based buffer overflow in Windows Libarchive allows an unauthorized attacker to execute code ove

CVE-2026-69984 - Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo

CVE-2026-69982 - Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker

CVE-2026-69979 - Improper protection of alternate path in Windows AppX Deployment Service allows an authorized attack

CVE-2026-69978 - Null pointer dereference in Windows VMSwitch allows an authorized attacker to deny service locally.

CVE-2026-69977 - Use after free in Quality Windows Audio/Video Experience (QWAVE) service allows an authorized attack

CVE-2026-69976 - Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo

CVE-2026-69974 - Out-of-bounds read in Desktop Window Manager allows an authorized attacker to disclose information l

CVE-2026-69973 - Improper limitation of a pathname to a restricted directory ('path traversal') in Windows Libarchive

CVE-2026-69971 - Incorrect authorization in Windows Kernel-Mode Drivers allows an authorized attacker to disclose inf

CVE-2026-69970 - Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate p

CVE-2026-69969 - Improper link resolution before file access ('link following') in Windows AppX Deployment Service al

CVE-2026-69968 - Relative path traversal in Windows Libarchive allows an unauthorized attacker to perform tampering o

CVE-2026-69967 - Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to disclose information l

CVE-2026-69966 - Integer overflow or wraparound in Microsoft Streaming Service allows an authorized attacker to eleva

CVE-2026-69964 - Use after free in Microsoft Streaming Service allows an authorized attacker to elevate privileges lo

CVE-2026-69963 - Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate p

CVE-2026-69959 - Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to execute code locally.

CVE-2026-69958 - Heap-based buffer overflow in Windows Overlay Filter allows an unauthorized attacker to execute code

CVE-2026-69957 - Integer overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate pr

CVE-2026-69955 - Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information

CVE-2026-69954 - Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information loc

CVE-2026-69953 - Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges local

CVE-2026-69952 - Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges loc

CVE-2026-69950 - Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges local

CVE-2026-69949 - Heap-based buffer overflow in Windows Client for NFS allows an authorized attacker to elevate privil

CVE-2026-69947 - Heap-based buffer overflow in Windows Overlay Filter allows an unauthorized attacker to execute code

CVE-2026-69945 - Missing authorization in Windows AppX Deployment Extensions allows an authorized attacker to elevate

CVE-2026-69943 - Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office S

CVE-2026-69942 - Buffer over-read in Windows Overlay Filter allows an authorized attacker to execute code locally.

CVE-2026-69940 - Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information

CVE-2026-69935 - Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.

CVE-2026-69934 - Integer overflow or wraparound in Windows Spaceport.sys allows an authorized attacker to elevate pri

CVE-2026-69931 - Concurrent execution using shared resource with improper synchronization ('race condition') in Windo

CVE-2026-69926 - Access of resource using incompatible type ('type confusion') in Desktop Window Manager allows an au

CVE-2026-69923 - Uncontrolled search path element in Windows AI allows an authorized attacker to elevate privileges l

CVE-2026-69922 - Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information

CVE-2026-69919 - Out-of-bounds read in Windows Cryptographic Services allows an authorized attacker to disclose infor

CVE-2026-69918 - Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privil

CVE-2026-69916 - Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges l

CVE-2026-69915 - Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-69914 - Out-of-bounds read in Windows AppX Deployment Service allows an authorized attacker to disclose info

CVE-2026-69913 - Use after free in Windows TCP/IP allows an unauthorized attacker to execute code over a network.

CVE-2026-69909 - Heap-based buffer overflow in Microsoft COM for Windows allows an authorized attacker to elevate pri

CVE-2026-69905 - Missing authorization in Windows AppX Deployment Service allows an authorized attacker to perform ta