CVE-2026-71338 Windows Failover Cluster Elevation of Privilege Vulnerability
Double free in Windows Failover Cluster allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-71338 US
Výsledky hledání
60
CVE-2026-71334 Windows NFS Portmapper Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows NFS Portmapper allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-71334 US
CVE-2026-71332 Windows Secure Socket Tunneling Protocol (SSTP) Elevation of Privilege Vulnerability
Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-71332 US
CVE-2026-71337 Windows Storage Management Provider Elevation of Privilege Vulnerability
Stack-based buffer overflow in Windows Storage Management Provider allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-71337 US
CVE-2026-71333 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-71333 US
CVE-2026-71330 Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability
Exposure of sensitive system information to an unauthorized control sphere in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-71330 US
CVE-2026-71336 Windows Work Folder Service Remote Code Execution Vulnerability
Integer overflow or wraparound in Windows Work Folder Service allows an authorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-71336 US
CVE-2026-71329 Windows NTFS Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code with a physical attack.
EPSS 0.00 CVE-2026-71329 US
CVE-2026-70587 Windows Remote Desktop Protocol Information Disclosure Vulnerability
Improper null termination in Windows Remote Desktop Protocol allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-70587 US
CVE-2026-70586 Windows Paint Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Paint allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-70586 US
CVE-2026-70585 Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability
Use after free in Windows Services for NFS ONCRPC XDR Driver allows an authorized attacker to execute code locally.
EPSS 0.00 CVE-2026-70585 US
CVE-2026-70584 Windows Core Messaging Elevation of Privilege Vulnerability
Access of resource using incompatible type ('type confusion') in Windows Core Messaging allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-70584 US
CVE-2026-70582 Windows Management Instrumentation Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-70582 US
CVE-2026-70564 Windows Print Spooler Components Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-70564 US
CVE-2026-70563 Windows Shell Spoofing Vulnerability
Improper link resolution before file access ('link following') in Windows Shell allows an unauthorized attacker to perform spoofing over a network.
EPSS 0.01 CVE-2026-70563 US
CVE-2026-70562 Windows Audio Service Elevation of Privilege Vulnerability
Double free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-70562 US
CVE-2026-70351 Microsoft WebP Image Extension Remote Code Execution Vulnerability
Integer overflow or wraparound in Microsoft WebP Image Extension allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-70351 Microsoft US
CVE-2026-58600 HEVC Video Extensions Elevation of Privilege Vulnerability
Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-58600 Microsoft US
CVE-2026-70342 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Use after free in Windows Ancillary Function Driver for WinSock allows an unauthorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-70342 US
CVE-2026-70289 Windows Win32k Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-70289 US
CVE-2026-70334 Visual Studio Code Security Feature Bypass Vulnerability
Incomplete list of disallowed inputs in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.
EPSS 0.00 CVE-2026-70334 US
CVE-2026-66305 Skype for Business Spoofing Vulnerability
Use of client-side authentication in Skype for Business allows an authorized attacker to perform spoofing over a network.
EPSS 0.00 CVE-2026-66305 US
CVE-2026-63523 Skype for Business Spoofing Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Skype for Business allows an unauthorized attacker to perform spoofing over a network.
EPSS 0.00 CVE-2026-63523 US
CVE-2026-69890 Windows Virtual Trusted Platform Module Elevation of Privilege Vulnerability
Use after free in Windows Virtual Trusted Platform Module allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-69890 US
CVE-2026-69740 Windows Hello Elevation of Privilege Vulnerability
Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-69740 US
CVE-2026-69676 Windows Kerberos Remote Code Execution Vulnerability
Authentication bypass by capture-replay in Windows Kerberos allows an authorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-69676 US
CVE-2026-69712 Windows Key Distribution Center Remote Code Execution Vulnerability
Use after free in Windows Key Distribution Center allows an authorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-69712 US
CVE-2026-69730 Windows DNS Server Remote Code Execution Vulnerability
Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-69730 US
CVE-2026-69860 Windows Imaging Component Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-69860 US
CVE-2026-69770 Windows Spaceport.sys Information Disclosure Vulnerability
Use of uninitialized resource in Windows Spaceport.sys allows an authorized attacker to disclose information locally.
EPSS 0.00 CVE-2026-69770 US
CVE-2026-69732 Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Link Layer Topology Discovery Protocol allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-69732 US
CVE-2026-69822 Windows Kerberos Elevation of Privilege Vulnerability
Numeric truncation error in Windows Kerberos allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-69822 US
CVE-2026-69771 Windows Container Manager Service Security Feature Bypass Vulnerability
Improper link resolution before file access ('link following') in Windows Container Manager Service allows an authorized attacker to bypass a security feature locally.
EPSS 0.00 CVE-2026-69771 US
CVE-2026-69758 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-69758 US
CVE-2026-69775 Windows DWM Core Library Elevation of Privilege Vulnerability
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-69775 US
CVE-2026-69772 Windows Network File System Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Network File System allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-69772 US
CVE-2026-69839 Windows iSCSI Target Service Denial of Service Vulnerability
Uncaught exception in Windows iSCSI Target Service allows an authorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-69839 US
CVE-2026-69808 Win32k Information Disclosure Vulnerability
Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally.
EPSS 0.00 CVE-2026-69808 US
CVE-2026-69838 Windows Print Spooler Components Elevation of Privilege Vulnerability
Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-69838 US
CVE-2026-69691 Windows Spaceport.sys Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-69691 US
CVE-2026-69832 Win32k Information Disclosure Vulnerability
Exposure of sensitive system information to an unauthorized control sphere in Windows Win32K allows an authorized attacker to disclose information locally.
EPSS 0.00 CVE-2026-69832 US
CVE-2026-69862 Windows Wireless Wide Area Network Service Information Disclosure Vulnerability
Out-of-bounds read in Windows Wireless Wide Area Network Service allows an authorized attacker to disclose information locally.
EPSS 0.00 CVE-2026-69862 US
CVE-2026-69744 Windows Kerberos Denial of Service Vulnerability
Null pointer dereference in Windows Kerberos allows an unauthorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-69744 US
CVE-2026-69819 RPC Runtime Library Remote Code Execution Vulnerability
Out-of-bounds write in RPC Runtime allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-69819 US
CVE-2026-69762 Windows Win32k Elevation of Privilege Vulnerability
Stack-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-69762 US
CVE-2026-69741 Windows Spaceport.sys Information Disclosure Vulnerability
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information locally.
EPSS 0.00 CVE-2026-69741 US
CVE-2026-69735 Windows Broadcast DVR User Service Elevation of Privilege Vulnerability
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-69735 US
CVE-2026-69896 Windows Error Reporting Elevation of Privilege Vulnerability
Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-69896 US
CVE-2026-69681 Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability
Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-69681 US
CVE-2026-69757 Windows TCP/IP Elevation of Privilege Vulnerability
Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-69757 US
CVE-2026-69889 Windows Bluetooth Service Elevation of Privilege Vulnerability
Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-69889 US
CVE-2026-69723 Windows Kernel Information Disclosure Vulnerability
Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-69723 US
CVE-2026-69875 Windows NTFS Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-69875 US
CVE-2026-69694 Windows IP Address Management (IPAM) Service Elevation of Privilege Vulnerability
Deserialization of untrusted data in Windows IP Address Management (IPAM) Service allows an authorized attacker to elevate privileges locally.
EPSS 0.02 CVE-2026-69694 US
CVE-2026-69711 Windows Device Association Service Elevation of Privilege Vulnerability
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-69711 US
CVE-2026-69717 Windows Group Policy Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows Group Policy allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-69717 US
CVE-2026-69729 Windows Credential Providers Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Credential Providers allows an authorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-69729 US
CVE-2026-69693 Windows Device Association Broker Service Elevation of Privilege Vulnerability
Use after free in Windows Device Association Broker service allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-69693 US
CVE-2026-69859 Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability
Time-of-check time-of-use (toctou) race condition in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-69859 US
CVE-2026-69638 Windows NTFS Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-69638 US