CVE-2026-70160 Windows Kernel Elevation of Privilege Vulnerability
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-70160 US
Výsledky hledání
· zachyceno
· zachyceno
CVE-2026-70158 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
EPSS 0.01 CVE-2026-70158 US
· zachyceno
CVE-2026-70148 Windows Broadcast DVR User Service Information Disclosure Vulnerability
Improper authorization in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-70148 US
· zachyceno
CVE-2026-70143 Windows Network File System Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Network File System allows an authorized attacker to execute code locally.
EPSS < 0.01 CVE-2026-70143 US
· zachyceno
CVE-2026-70122 Windows Broadcast DVR User Service Elevation of Privilege Vulnerability
Time-of-check time-of-use (toctou) race condition in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-70122 US
· zachyceno
CVE-2026-70112 Windows Spaceport.sys Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to execute code locally.
EPSS < 0.01 CVE-2026-70112 US
· zachyceno
CVE-2026-70084 Windows Projected File System Information Disclosure Vulnerability
Improper access control in Windows Projected File System allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-70084 US
· zachyceno
CVE-2026-70054 Windows NetBIOS Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows NetBIOS allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-70054 US
· zachyceno
CVE-2026-69915 Windows NTFS Elevation of Privilege Vulnerability
Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-69915 US
· zachyceno
CVE-2026-69902 Windows NTFS Remote Code Execution Vulnerability
Untrusted pointer dereference in Windows NTFS allows an authorized attacker to execute code locally.
EPSS < 0.01 CVE-2026-69902 US
· zachyceno
CVE-2026-69884 Windows GDI Elevation of Privilege Vulnerability
Buffer over-read in Windows GDI allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-69884 US
· zachyceno
CVE-2026-88193 Microsoft Scripting Engine Elevation of Privilege Vulnerability
Heap-based buffer overflow in Microsoft Scripting Engine allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-88193 Microsoft US
· zachyceno
CVE-2026-88188 Windows DWM Core Library Elevation of Privilege Vulnerability
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-88188 US
· zachyceno
CVE-2026-88191 Microsoft Windows Search Component Elevation of Privilege Vulnerability
Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-88191 Microsoft US
· zachyceno
CVE-2026-88189 Windows DWM Core Library Elevation of Privilege Vulnerability
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-88189 US
· zachyceno
CVE-2026-88194 Windows DWM Core Library Elevation of Privilege Vulnerability
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-88194 US
· zachyceno
CVE-2026-88181 Windows DWM Core Library Elevation of Privilege Vulnerability
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-88181 US
· zachyceno
CVE-2026-88182 Microsoft Windows Search Component Elevation of Privilege Vulnerability
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-88182 Microsoft US
· zachyceno
CVE-2026-88180 Windows DWM Core Library Elevation of Privilege Vulnerability
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-88180 US
· zachyceno
CVE-2026-88179 Windows DWM Core Library Elevation of Privilege Vulnerability
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-88179 US
· zachyceno
CVE-2026-88177 Windows DWM Core Library Elevation of Privilege Vulnerability
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-88177 US
· zachyceno
CVE-2026-88174 Windows Deployment Services Remote Code Execution Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Deployment Services allows an unauthorized attacker to execute code over a network.
EPSS < 0.01 CVE-2026-88174 US
· zachyceno
CVE-2026-88171 Windows DHCP Server Remote Code Execution Vulnerability
Double free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-88171 US
· zachyceno
CVE-2026-88149 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Double free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-88149 US
· zachyceno
CVE-2026-88142 Windows Background Intelligent Transfer Service (BITS) Remote Code Execution Vulnerability
Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-88142 US
· zachyceno
CVE-2026-88141 Windows Kernel Elevation of Privilege Vulnerability
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-88141 US
· zachyceno
CVE-2026-88139 Windows Kernel Elevation of Privilege Vulnerability
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-88139 US
· zachyceno
CVE-2026-88133 Windows Portable Device Enumerator Service Elevation of Privilege Vulnerability
Improper authorization in Windows Portable Device Enumerator Service allows an authorized attacker to elevate privileges locally.
EPSS 0.01 CVE-2026-88133 US
· zachyceno
CVE-2026-88152 Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability
Use after free in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-88152 US
· zachyceno
CVE-2026-88121 Windows Background Intelligent Transfer Service (BITS) Remote Code Execution Vulnerability
Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-88121 US
· zachyceno
CVE-2026-88147 Windows Secure Socket Tunneling Protocol (SSTP) Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-88147 US
· zachyceno
CVE-2026-88118 Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability
Integer overflow or wraparound in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-88118 US
· zachyceno
CVE-2026-88128 Windows DWM Core Library Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-88128 US
· zachyceno
CVE-2026-88115 Windows Server for NFS Remote Code Execution Vulnerability
Out-of-bounds read in Windows Server for NFS allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-88115 US
· zachyceno
CVE-2026-88135 WebDAV Elevation of Privilege Vulnerability
Improper access control in WebDAV allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-88135 US
· zachyceno
CVE-2026-88113 Windows Broadcast DVR User Service Elevation of Privilege Vulnerability
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-88113 US
· zachyceno
CVE-2026-88110 Windows Graphics Kernel Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-88110 US
· zachyceno
CVE-2026-88126 WebDAV Elevation of Privilege Vulnerability
Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-88126 US
· zachyceno
CVE-2026-88109 Microsoft Office Click-To-Run Elevation of Privilege Vulnerability
Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-88109 Microsoft US
· zachyceno
CVE-2026-88134 Windows Kernel Elevation of Privilege Vulnerability
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-88134 US
· zachyceno
CVE-2026-88127 Windows SMB Server Elevation of Privilege Vulnerability
Use after free in Windows SMB Server allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-88127 US
· zachyceno
CVE-2026-88105 Windows Broadcast DVR User Service Elevation of Privilege Vulnerability
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-88105 US
· zachyceno
CVE-2026-88103 Windows Broadcast DVR User Service Elevation of Privilege Vulnerability
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-88103 US
· zachyceno
CVE-2026-88079 Windows MIDI Service Module Elevation of Privileges Vulnerability
Null pointer dereference in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-88079 US
· zachyceno
CVE-2026-87702 Windows Resource Management (MRM) Elevation of Privilege Vulnerability
Integer overflow or wraparound in Windows Resource Management (MRM) allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-87702 US
· zachyceno
CVE-2026-88072 Windows Host Guardian Service Elevation of Privilege Vulnerability
Improper access control in Windows Host Guardian Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-88072 US
· zachyceno
CVE-2026-87715 Windows Installer Elevation of Privilege Vulnerability
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-87715 US
· zachyceno
CVE-2026-87700 Windows Installer Elevation of Privilege Vulnerability
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-87700 US
· zachyceno
CVE-2026-87704 Windows Installer Elevation of Privilege Vulnerability
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-87704 US
· zachyceno
CVE-2026-87698 Windows Remote Access Service Infrastructure Information Disclosure Vulnerability
Out-of-bounds read in Windows Remote Access Service Infrastructure allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-87698 US
· zachyceno
CVE-2026-87709 Windows Host Guardian Service Tampering Vulnerability
Improper access control in Windows Host Guardian Service allows an authorized attacker to perform tampering locally.
EPSS < 0.01 CVE-2026-87709 US
· zachyceno
CVE-2026-87694 Windows Installer Elevation of Privilege Vulnerability
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-87694 US
· zachyceno
CVE-2026-87693 Windows Installer Elevation of Privilege Vulnerability
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-87693 US
· zachyceno
CVE-2026-87705 Windows Hyper-V Security Feature Bypass Vulnerability
Improper verification of source of a communication channel in Windows Hyper-V allows an unauthorized attacker to bypass a security feature over an adjacent network.
EPSS < 0.01 CVE-2026-87705 US
· zachyceno
CVE-2026-88076 Windows Installer Elevation of Privilege Vulnerability
Null pointer dereference in Windows Installer allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-88076 US
· zachyceno
CVE-2026-87699 Winlogon Elevation of Privilege Vulnerability
Heap-based buffer overflow in Winlogon allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-87699 US
· zachyceno
CVE-2026-85943 Reliable Multicast Transport Driver (RMCAST) Elevation of Privilege Vulnerability
Time-of-check time-of-use (toctou) race condition in Reliable Multicast Transport Driver (RMCAST) allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-85943 US
· zachyceno
CVE-2026-85941 Windows Installer Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-85941 US
· zachyceno
CVE-2026-85884 Windows Health and Optimized Experiences Service Elevation of Privilege Vulnerability
Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-85884 US
· zachyceno
CVE-2026-69798 Windows Wired AutoConfig Service Elevation of Privilege Vulnerability
Use after free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-69798 US