CVE-2026-72927 - Heap-based buffer overflow in Winsock allows an authorized attacker to elevate privileges locally.

CVE-2026-72926 - Use after free in Windows Internet Connection Sharing (ICS) allows an authorized attacker to elevate

CVE-2026-72923 - The OpenAPI.NET SDK contains a useful object model for OpenAPI documents in .NET along with common s

CVE-2026-71353 - Double free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to ele

CVE-2026-71352 - Integer underflow (wrap or wraparound) in Windows Remote Access Connection Manager allows an authori

CVE-2026-71351 - Double free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to ele

CVE-2026-71350 - Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code

CVE-2026-71349 - Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code

CVE-2026-71348 - Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code

CVE-2026-71345 - Out-of-bounds write in Windows Spaceport.sys allows an authorized attacker to execute code locally.

CVE-2026-71343 - Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker

CVE-2026-71342 - Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate

CVE-2026-71341 - Out-of-bounds read in Windows Partition Management Driver allows an authorized attacker to disclose

CVE-2026-71340 - Use after free in Windows File History Service allows an authorized attacker to elevate privileges l

CVE-2026-71339 - Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges

CVE-2026-71338 - Double free in Windows Failover Cluster allows an authorized attacker to elevate privileges locally.

CVE-2026-71337 - Stack-based buffer overflow in Windows Storage Management Provider allows an authorized attacker to

CVE-2026-71336 - Integer overflow or wraparound in Windows Work Folder Service allows an authorized attacker to execu

CVE-2026-71334 - Heap-based buffer overflow in Windows NFS Portmapper allows an authorized attacker to elevate privil

CVE-2026-71333 - Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate

CVE-2026-71332 - Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to e

CVE-2026-71330 - Exposure of sensitive system information to an unauthorized control sphere in Windows Services for N

CVE-2026-71329 - Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code with a ph

CVE-2026-71328 - Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a n

CVE-2026-70587 - Improper null termination in Windows Remote Desktop Protocol allows an unauthorized attacker to disc

CVE-2026-70586 - Heap-based buffer overflow in Windows Paint allows an unauthorized attacker to execute code over a n

CVE-2026-70585 - Use after free in Windows Services for NFS ONCRPC XDR Driver allows an authorized attacker to execut

CVE-2026-70584 - Access of resource using incompatible type ('type confusion') in Windows Core Messaging allows an au

CVE-2026-70583 - Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privil

CVE-2026-70582 - Concurrent execution using shared resource with improper synchronization ('race condition') in Windo

CVE-2026-70581 - Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate

CVE-2026-70579 - Out-of-bounds read in Windows Mobile Broadband allows an unauthorized attacker to disclose informati

CVE-2026-70578 - Heap-based buffer overflow in Windows Credential Guard allows an authorized attacker to elevate priv

CVE-2026-70577 - Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate pr

CVE-2026-70575 - Null pointer dereference in Windows Schannel allows an authorized attacker to deny service over a ne

CVE-2026-70574 - Out-of-bounds read in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to eleva

CVE-2026-70573 - Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri

CVE-2026-70572 - Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate

CVE-2026-70570 - Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an

CVE-2026-70569 - Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges loca

CVE-2026-70568 - Heap-based buffer overflow in Windows Defender Firewall Service allows an authorized attacker to ele

CVE-2026-70567 - Double free in Windows Display Enhancement Service allows an authorized attacker to elevate privileg

CVE-2026-70565 - Use after free in Windows AF_UNIX Socket Provider allows an authorized attacker to elevate privilege

CVE-2026-70564 - Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elev

CVE-2026-70563 - Improper link resolution before file access ('link following') in Windows Shell allows an unauthoriz

CVE-2026-70562 - Double free in Windows Audio Service allows an authorized attacker to elevate privileges locally.

CVE-2026-70351 - Integer overflow or wraparound in Microsoft WebP Image Extension allows an unauthorized attacker to

CVE-2026-70342 - Use after free in Windows Ancillary Function Driver for WinSock allows an unauthorized attacker to e

CVE-2026-70334 - Incomplete list of disallowed inputs in Visual Studio Code allows an unauthorized attacker to bypass

CVE-2026-70296 - Out-of-bounds write in Windows Imaging Component allows an unauthorized attacker to execute code ove

CVE-2026-70290 - Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to dis

CVE-2026-70289 - Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevat

CVE-2026-70283 - Incorrect authorization in Windows Win32K allows an authorized attacker to elevate privileges locall

CVE-2026-70203 - Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code o

CVE-2026-70145 - Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose i

CVE-2026-70124 - Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to disclose information ov

CVE-2026-70091 - Concurrent execution using shared resource with improper synchronization ('race condition') in Windo

CVE-2026-70065 - Missing release of memory after effective lifetime in Windows DHCP Server allows an unauthorized att

CVE-2026-70019 - Windows hard link in Windows Compressed Folder allows an unauthorized attacker to disclose informati

CVE-2026-69989 - Use after free in DNS Server allows an unauthorized attacker to execute code over a network.

CVE-2026-69930 - Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to disclose information ov

CVE-2026-69929 - Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to disclose information ov

CVE-2026-69921 - Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elev

CVE-2026-69911 - Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privil

CVE-2026-69910 - Stack-based buffer overflow in Windows Hyper-V allows an unauthorized attacker to execute code over

CVE-2026-69907 - Improper handling of insufficient permissions or privileges in Windows Enterprise App Management all

CVE-2026-69906 - Heap-based buffer overflow in Windows Secure Kernel Mode allows an authorized attacker to elevate pr

CVE-2026-69904 - Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to d

CVE-2026-69900 - Untrusted pointer dereference in Kernel Streaming WOW Thunk Service Driver allows an authorized atta

CVE-2026-69896 - Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locall

CVE-2026-69895 - Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information lo

CVE-2026-69891 - Use after free in Windows Media allows an authorized attacker to elevate privileges locally.

CVE-2026-69890 - Use after free in Windows Virtual Trusted Platform Module allows an authorized attacker to elevate p

CVE-2026-69889 - Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges loca

CVE-2026-69881 - Null pointer dereference in Windows IKE Extension allows an unauthorized attacker to deny service ov

CVE-2026-69878 - Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code loca

CVE-2026-69876 - Use after free in Windows DHCP Server allows an authorized attacker to execute code over an adjacent

CVE-2026-69875 - Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over

CVE-2026-69874 - Untrusted pointer dereference in Windows ALPC allows an authorized attacker to elevate privileges lo

CVE-2026-69866 - Use after free in Windows Device Association Service allows an authorized attacker to elevate privil

CVE-2026-69864 - Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.

CVE-2026-69862 - Out-of-bounds read in Windows Wireless Wide Area Network Service allows an authorized attacker to di

CVE-2026-69860 - Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute c

CVE-2026-69859 - Time-of-check time-of-use (toctou) race condition in Windows USB Audio Class driver (usbaudio.sys) a

CVE-2026-69858 - Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.

CVE-2026-69854 - Improper authentication in Spring Cloud Azure allows an unauthorized attacker to elevate privileges

CVE-2026-69853 - Use of uninitialized resource in Windows Win32K allows an authorized attacker to disclose informatio

CVE-2026-69852 - Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an

CVE-2026-69847 - Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over

CVE-2026-69846 - Integer overflow or wraparound in Windows Secure Kernel Mode allows an authorized attacker to elevat

CVE-2026-69845 - Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code ov

CVE-2026-69844 - Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally.

CVE-2026-69841 - Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized attacker to

CVE-2026-69839 - Uncaught exception in Windows iSCSI Target Service allows an authorized attacker to deny service ove

CVE-2026-69838 - Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileg

CVE-2026-69834 - Use after free in Windows ALPC allows an authorized attacker to elevate privileges locally.

CVE-2026-69832 - Exposure of sensitive system information to an unauthorized control sphere in Windows Win32K allows

CVE-2026-69829 - Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a n

CVE-2026-69827 - Concurrent execution using shared resource with improper synchronization ('race condition') in DNS S

CVE-2026-69826 - Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri

CVE-2026-69824 - Integer underflow (wrap or wraparound) in Microsoft Standard XPS allows an unauthorized attacker to

CVE-2026-69822 - Numeric truncation error in Windows Kerberos allows an authorized attacker to elevate privileges loc

CVE-2026-69821 - Improper encoding or escaping of output in Active Directory Certificate Services (AD CS) allows an a

CVE-2026-69820 - Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges loca

CVE-2026-69819 - Out-of-bounds write in RPC Runtime allows an unauthorized attacker to execute code over a network.

CVE-2026-69818 - Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.

CVE-2026-69817 - Use after free in Windows Bluetooth Port Driver allows an authorized attacker to elevate privileges

CVE-2026-69816 - Use after free in Windows Accounts Control allows an authorized attacker to elevate privileges local

CVE-2026-69814 - Use after free in Windows Credential Providers allows an authorized attacker to elevate privileges l

CVE-2026-69813 - Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.

CVE-2026-69809 - Missing release of memory after effective lifetime in Active Directory Domain Services allows an una

CVE-2026-69808 - Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally.

CVE-2026-69807 - Improper limitation of a pathname to a restricted directory ('path traversal') in Windows PowerShell

CVE-2026-69806 - Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to

CVE-2026-69805 - External control of file name or path in .NET allows an unauthorized attacker to elevate privileges

CVE-2026-69804 - Time-of-check time-of-use (toctou) race condition in Microsoft Office SharePoint allows an authorize

CVE-2026-69803 - Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to disclose information ov

CVE-2026-69801 - Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privile

CVE-2026-69799 - Concurrent execution using shared resource with improper synchronization ('race condition') in Windo

CVE-2026-69797 - Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a

CVE-2026-69794 - Buffer over-read in Windows Encrypting File System (EFS) allows an authorized attacker to disclose i

CVE-2026-69793 - Improper validation of consistency within input in Windows TCP/IP allows an unauthorized attacker to

CVE-2026-69792 - Concurrent execution using shared resource with improper synchronization ('race condition') in Windo

CVE-2026-69791 - Use after free in Windows Device Association Service allows an authorized attacker to elevate privil

CVE-2026-69790 - Heap-based buffer overflow in Windows Credential Providers allows an authorized attacker to elevate

CVE-2026-69787 - Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri

CVE-2026-69786 - Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code o

CVE-2026-69785 - Untrusted search path in Windows Smart Card allows an authorized attacker to elevate privileges loca

CVE-2026-69784 - Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.

CVE-2026-69782 - Concurrent execution using shared resource with improper synchronization ('race condition') in DNS S

CVE-2026-69781 - Missing release of memory after effective lifetime in Windows DHCP Client allows an unauthorized att

CVE-2026-69779 - Time-of-check time-of-use (toctou) race condition in Windows Win32K allows an authorized attacker to

CVE-2026-69778 - Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute cod

CVE-2026-69777 - Heap-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privilege

CVE-2026-69775 - Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges over

CVE-2026-69773 - Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri

CVE-2026-69772 - Heap-based buffer overflow in Windows Network File System allows an unauthorized attacker to execute

CVE-2026-69771 - Improper link resolution before file access ('link following') in Windows Container Manager Service

CVE-2026-69770 - Use of uninitialized resource in Windows Spaceport.sys allows an authorized attacker to disclose inf

CVE-2026-69769 - Heap-based buffer overflow in Windows HTTP Print Provider allows an unauthorized attacker to execute

CVE-2026-69768 - Heap-based buffer overflow in Windows RNDIS allows an unauthorized attacker to execute code over a n

CVE-2026-69767 - Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a

CVE-2026-69764 - Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code

CVE-2026-69762 - Stack-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges ov

CVE-2026-69761 - Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges over a network.

CVE-2026-69760 - Out-of-bounds read in Windows Kerberos allows an unauthorized attacker to deny service over a networ

CVE-2026-69759 - Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code

CVE-2026-69758 - Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an auth

CVE-2026-69757 - Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges over a network.

CVE-2026-69744 - Null pointer dereference in Windows Kerberos allows an unauthorized attacker to deny service over a

CVE-2026-69742 - Integer overflow or wraparound in Microsoft Office Publisher allows an unauthorized attacker to exec

CVE-2026-69741 - Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information lo

CVE-2026-69740 - Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.

CVE-2026-69739 - Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over

CVE-2026-69738 - Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate

CVE-2026-69735 - Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privil

CVE-2026-69734 - Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to disclose

CVE-2026-69732 - Heap-based buffer overflow in Windows Link Layer Topology Discovery Protocol allows an unauthorized

CVE-2026-69731 - Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges l

CVE-2026-69730 - Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.

CVE-2026-69729 - Heap-based buffer overflow in Windows Credential Providers allows an authorized attacker to execute

CVE-2026-69727 - Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri

CVE-2026-69725 - Double free in Windows Hello allows an authorized attacker to elevate privileges locally.

CVE-2026-69724 - Missing authorization in Microsoft Office SharePoint allows an authorized attacker to execute code o

CVE-2026-69723 - Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows

CVE-2026-69722 - Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code

CVE-2026-69720 - Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate p

CVE-2026-69719 - Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information ov

CVE-2026-69717 - Untrusted pointer dereference in Windows Group Policy allows an authorized attacker to elevate privi

CVE-2026-69716 - Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Of

CVE-2026-69715 - Out-of-bounds read in Windows Direct Show allows an unauthorized attacker to execute code over a net

CVE-2026-69714 - Stack-based buffer overflow in Windows Device Association Service allows an authorized attacker to e

CVE-2026-69713 - Dependency on vulnerable third-party component in Windows Secure Boot allows an authorized attacker

CVE-2026-69712 - Use after free in Windows Key Distribution Center allows an authorized attacker to execute code over

CVE-2026-69711 - Use after free in Windows Device Association Service allows an authorized attacker to elevate privil

CVE-2026-69710 - Concurrent execution using shared resource with improper synchronization ('race condition') in Windo

CVE-2026-69709 - Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.

CVE-2026-69708 - Use after free in Windows Web Platform Storage allows an authorized attacker to elevate privileges l

CVE-2026-69707 - Integer overflow or wraparound in Windows USB Audio Class driver (usbaudio.sys) allows an authorized

CVE-2026-69706 - Use after free in Windows Win32K allows an authorized attacker to elevate privileges over a network.

CVE-2026-69694 - Deserialization of untrusted data in Windows IP Address Management (IPAM) Service allows an authoriz

CVE-2026-69693 - Use after free in Windows Device Association Broker service allows an authorized attacker to elevate

CVE-2026-69692 - Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69691 - Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privile

CVE-2026-69690 - Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Of

CVE-2026-69689 - Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges over a netw

CVE-2026-69688 - Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized attacker to

CVE-2026-69687 - Integer underflow (wrap or wraparound) in Windows USB Audio Class driver (usbaudio.sys) allows an au

CVE-2026-69686 - Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code

CVE-2026-69685 - Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges l

CVE-2026-69684 - Generation of error message containing sensitive information in Windows Error Reporting allows an au

CVE-2026-69683 - Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to d

CVE-2026-69682 - Use after free in Windows Host Guardian Service allows an authorized attacker to elevate privileges

CVE-2026-69681 - Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker

CVE-2026-69680 - Origin validation error in Windows DNS allows an unauthorized attacker to perform spoofing over a ne

CVE-2026-69679 - Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service over an adja

CVE-2026-69678 - Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a

CVE-2026-69676 - Authentication bypass by capture-replay in Windows Kerberos allows an authorized attacker to execute

CVE-2026-69674 - Missing authentication for critical function in Windows Modern Device Management (MDM) allows an aut

CVE-2026-69672 - Use of uninitialized resource in Windows DNS allows an authorized attacker to disclose information l

CVE-2026-69671 - Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code

CVE-2026-69669 - Heap-based buffer overflow in Windows Kernel allows an unauthorized attacker to execute code over a

CVE-2026-69654 - Use after free in Windows Accounts Control allows an authorized attacker to elevate privileges local

CVE-2026-69652 - Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.

CVE-2026-69649 - Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute

CVE-2026-69648 - Use after free in Windows Notification allows an authorized attacker to elevate privileges locally.

CVE-2026-69645 - Use after free in Windows Message Queuing allows an authorized attacker to elevate privileges locall

CVE-2026-69643 - Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privile

CVE-2026-69641 - Missing authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileg

CVE-2026-69638 - Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.

CVE-2026-69637 - Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service over an adja

CVE-2026-69636 - Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Of

CVE-2026-69632 - Use after free in Microsoft Office allows an unauthorized attacker to execute code over a network.

CVE-2026-69631 - Integer overflow or wraparound in Windows DNS allows an unauthorized attacker to deny service over a

CVE-2026-69630 - Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally.

CVE-2026-69629 - Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute co

CVE-2026-69628 - Heap-based buffer overflow in Windows iSCSI allows an authorized attacker to execute code over a net

CVE-2026-69627 - Out-of-bounds read in Windows Remote Desktop Licensing Service allows an authorized attacker to disc

CVE-2026-69626 - Buffer over-read in Microsoft Office allows an unauthorized attacker to disclose information over a

CVE-2026-69625 - Heap-based buffer overflow in Windows Connected User Experiences and Telemetry allows an authorized

CVE-2026-69624 - Incomplete list of disallowed inputs in Active Directory Certificate Services (AD CS) allows an auth

CVE-2026-69623 - Heap-based buffer overflow in Windows HTTP Print Provider allows an authorized attacker to execute c

CVE-2026-69621 - Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privilege

CVE-2026-69620 - Stack-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code o

CVE-2026-69619 - Out-of-bounds read in Windows exFAT File System allows an authorized attacker to elevate privileges

CVE-2026-69618 - Out-of-bounds read in Windows SMB Client allows an authorized attacker to disclose information local

CVE-2026-69617 - Out-of-bounds read in Windows Resilient File System (ReFS) allows an authorized attacker to elevate

CVE-2026-69616 - Out-of-bounds read in Windows Remote Desktop Services allows an authorized attacker to disclose info

CVE-2026-69615 - Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Of

CVE-2026-69614 - Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute co

CVE-2026-69613 - Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges loca

CVE-2026-69612 - Absolute path traversal in Windows Error Reporting allows an authorized attacker to elevate privileg

CVE-2026-69611 - Use after free in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate p

CVE-2026-69610 - Buffer over-read in Windows Win32K allows an authorized attacker to elevate privileges locally.

CVE-2026-69609 - Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally.

CVE-2026-69608 - Integer overflow or wraparound in Microsoft Windows Search Component allows an authorized attacker t

CVE-2026-69607 - Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a

CVE-2026-69606 - Use after free in Windows Shell allows an authorized attacker to elevate privileges locally.

CVE-2026-69605 - Use after free in Microsoft Install Service allows an authorized attacker to elevate privileges loca

CVE-2026-69604 - Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privile

CVE-2026-69603 - Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.

CVE-2026-69602 - Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges o

CVE-2026-69601 - Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to

CVE-2026-69600 - Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privil

CVE-2026-69599 - Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over

CVE-2026-69598 - Incorrect calculation of buffer size in Windows iSCSI allows an unauthorized attacker to execute cod

CVE-2026-69597 - Use after free in Windows HTTP.sys allows an authorized attacker to elevate privileges over a networ

CVE-2026-69595 - Use after free in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to exec

CVE-2026-69594 - Heap-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) allows an authorize

CVE-2026-69593 - Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri