CVE-2026-69440 Windows MIDI Service Module Elevation of Privileges Vulnerability
Time-of-check time-of-use (toctou) race condition in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.
Výsledky hledání
60
CVE-2026-69434 Windows URL Moniker Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows URL Moniker allows an unauthorized attacker to execute code over a network.
CVE-2026-69433 Windows Error Reporting Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
CVE-2026-69447 Windows Audio Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69449 Windows BitLocker Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows BitLocker allows an authorized attacker to execute code locally.
CVE-2026-69430 Windows Embedded Mode Service Elevation of Privilege Vulnerability
Use after free in Windows Embedded Mode Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69475 Windows Remote Desktop Services Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.
CVE-2026-69427 Microsoft VOLSNAP.SYS Elevation of Privilege Vulnerability
Out-of-bounds read in Windows VOLSNAP.SYS allows an authorized attacker to elevate privileges over a network.
CVE-2026-69425 Windows NTFS Tampering Vulnerability
Improper link resolution before file access ('link following') in Windows NTFS allows an authorized attacker to perform tampering locally.
CVE-2026-69438 Microsoft JScript Remote Code Execution Vulnerability
Incorrect conversion between numeric types in Microsoft JScript allows an unauthorized attacker to execute code over a network.
CVE-2026-69422 Windows USB Video Driver Elevation of Privilege Vulnerability
Use after free in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-69428 Windows LDAP - Lightweight Directory Access Protocol Denial of Service Vulnerability
Out-of-bounds read in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to deny service over a network.
CVE-2026-69424 Windows Distributed File System (DFS) Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to elevate privileges locally.
CVE-2026-69416 Windows DHCP Server Denial of Service Vulnerability
Buffer over-read in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network.
CVE-2026-69407 Volume Manager Driver Elevation of Privilege Vulnerability
Integer overflow or wraparound in Volume Manager Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-69405 Windows DHCP Server Denial of Service Vulnerability
Missing release of memory after effective lifetime in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network.
CVE-2026-69421 Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
Integer underflow (wrap or wraparound) in Windows Kernel Mode Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-69398 Windows Bluetooth Service Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69410 Windows Win32k Elevation of Privilege Vulnerability
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVE-2026-69396 Windows NDIS Elevation of Privilege Vulnerability
Use after free in Windows NDIS allows an authorized attacker to elevate privileges over a network.
CVE-2026-69393 Windows Spaceport.sys Information Disclosure Vulnerability
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information over a network.
CVE-2026-69388 Windows Bluetooth Service Elevation of Privilege Vulnerability
Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69386 Microsoft Windows Media Foundation Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
CVE-2026-69385 Windows TCP/IP Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
CVE-2026-69374 Windows SMB Server Denial of Service Vulnerability
Allocation of resources without limits or throttling in Windows SMB Server allows an authorized attacker to deny service over a network.
CVE-2026-69373 Windows Overlay Filter Elevation of Privilege Vulnerability
Integer overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
CVE-2026-69403 Windows SMB Server Information Disclosure Vulnerability
Missing authorization in Windows SMB Server allows an authorized attacker to disclose information locally.
CVE-2026-69369 Windows DNS Information Disclosure Vulnerability
Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information locally.
CVE-2026-69364 Windows Print Spooler Components Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Print Spooler Components allows an authorized attacker to elevate privileges over a network.
CVE-2026-69365 Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability
Out-of-bounds read in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges over a network.
CVE-2026-69360 Microsoft Office Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-69372 Windows Network File System Denial of Service Vulnerability
Out-of-bounds read in Windows Network File System allows an authorized attacker to deny service over a network.
CVE-2026-69384 Virtual Hard Disk (VHD) Miniport Driver Denial of Service Vulnerability
Null pointer dereference in Virtual Hard Disk (VHD) Miniport Driver allows an unauthorized attacker to deny service locally.
CVSS 7.1 CVE-2026-69384 US
CVE-2026-69376 Microsoft Standard XPS Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally.
CVE-2026-69357 Windows NDIS Elevation of Privilege Vulnerability
Use after free in Windows NDIS allows an authorized attacker to elevate privileges over a network.
CVE-2026-69358 Remote Desktop Client Remote Code Execution Vulnerability
Use of uninitialized resource in Remote Desktop Client allows an authorized attacker to execute code over a network.
CVE-2026-69353 Windows Text Shaping Information Disclosure Vulnerability
Out-of-bounds read in Windows Text Shaping allows an authorized attacker to disclose information locally.
CVE-2026-69350 Windows Overlay Filter Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
CVE-2026-69348 Windows Win32k Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVE-2026-69346 Windows Print Spooler Components Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges over a network.
CVE-2026-69344 Windows Print Spooler Components Information Disclosure Vulnerability
Out-of-bounds read in Windows Print Spooler Components allows an authorized attacker to disclose information locally.
CVE-2026-69343 Windows Overlay Filter Information Disclosure Vulnerability
Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to disclose information locally.
CVE-2026-69342 Windows DHCP Server Denial of Service Vulnerability
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
CVE-2026-69340 Windows NTFS Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network.
CVE-2026-69335 Windows Win32k Elevation of Privilege Vulnerability
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVE-2026-69332 Windows NTFS Elevation of Privilege Vulnerability
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges over a network.
CVE-2026-69331 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
CVE-2026-69328 Windows Storage Elevation of Privilege Vulnerability
Untrusted search path in Windows Storage allows an authorized attacker to elevate privileges locally.
CVE-2026-69329 BranchCache Denial of Service Vulnerability
Out-of-bounds read in BranchCache allows an unauthorized attacker to deny service over a network.
CVE-2026-69351 Windows Universal Plug and Play (UPnP) Device Host Information Disclosure Vulnerability
Exposure of private personal information to an unauthorized actor in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to disclose information locally.
CVE-2026-69324 Windows Performance Monitor Elevation of Privilege Vulnerability
Access of resource using incompatible type ('type confusion') in Windows Performance Monitor allows an authorized attacker to elevate privileges locally.
CVE-2026-69322 Microsoft Windows Search Component Elevation of Privilege Vulnerability
Double free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a network.
CVE-2026-69319 Windows USB Video Driver Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-69316 Windows Overlay Filter Information Disclosure Vulnerability
Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information locally.
CVE-2026-69317 Windows Remote Desktop Client Information Disclosure Vulnerability
Out-of-bounds read in Remote Desktop Client allows an authorized attacker to disclose information over a network.
CVE-2026-69318 Windows Imaging Component Information Disclosure Vulnerability
Out-of-bounds read in Windows Imaging Component allows an authorized attacker to disclose information locally.
CVE-2026-69308 Microsoft Standard XPS Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally.
CVE-2026-69312 Windows NTFS Elevation of Privilege Vulnerability
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVE-2026-69315 Windows License Manager Information Disclosure Vulnerability
Exposure of sensitive system information to an unauthorized control sphere in Windows License Manager allows an authorized attacker to disclose information locally.
CVE-2026-69313 Microsoft Standard XPS Elevation of Privilege Vulnerability
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network.