CVE-2026-96323 Windows Update Elevation of Privilege Vulnerability
Use after free in Windows Update allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-96323 US
Use after free in Windows Update allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-96323 US
Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-96320 US
Improperly implemented security check for standard in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature over a network.
EPSS 0.01 CVE-2026-96303 Microsoft US
Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-96304 US
Uncontrolled resource consumption in RPC Endpoint Mapper Service allows an unauthorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-96300 US
Reliance on untrusted inputs in a security decision in Microsoft PowerShell allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-96251 Microsoft US
Improper verification of cryptographic signature in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.
EPSS 0.01 CVE-2026-96252 US
Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-96253 US
Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-96254 US
Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-96310 US
Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-96301 US
Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-96250 US
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-96249 US
Improper link resolution before file access ('link following') in Windows WalletService allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-96243 US
Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network.
EPSS < 0.01 CVE-2026-96238 US
Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-96237 US
Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-96235 US
Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.
EPSS < 0.01 CVE-2026-96234 US
Out-of-bounds read in .NET allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-96232 US
Improper neutralization of input during web page generation ('cross-site scripting') in ASP.NET Core allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-96230 US
Permissive list of allowed inputs in .NET allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-96229 US
Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-96233 US
Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-96225 US
Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-96231 US
Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-85363 US
Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-84008 US
Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-83520 US
Deserialization of untrusted data in .NET Framework allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-70035 US
Out-of-bounds write in .NET Framework allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-70007 US
Use of uninitialized resource in Windows Subsystem for Linux allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-96206 US
External control of system or configuration setting in Microsoft PowerToys allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-96188 Microsoft US
Deserialization of untrusted data in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally.
EPSS 0.02 CVE-2026-96186 Microsoft US
No cwe for this issue in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-96044 Microsoft US
Heap-based buffer overflow in Microsoft MPEG-2 Video Extension allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-70343 Microsoft US
Use of externally-controlled format string in SQL Server allows an authorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-94520 Microsoft US
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-94512 US
Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-88207 Microsoft US
Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally.
EPSS < 0.01 CVE-2026-88210 Microsoft US
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-88206 Microsoft US
Untrusted pointer dereference in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-88203 Microsoft US
Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-88195 Microsoft US
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-88190 Microsoft US
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-88192 Microsoft US
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-88183 Microsoft US
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-88186 Microsoft US
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-88185 Microsoft US
Privilege context switching error in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-88200 Microsoft US
Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-88166 Microsoft US
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-88184 Microsoft US
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-88172 Microsoft US
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-88154 Microsoft US
Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-88163 Microsoft US
Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-85932 Microsoft US
Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-85340 Microsoft US
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-88144 Microsoft US
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
EPSS 0.02 CVE-2026-70242 Microsoft US
Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-70246 Microsoft US
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-70215 Microsoft US
Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-70281 Microsoft US
Improper access control in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-70217 Microsoft US