CVE-2026-83570 Windows Search Service Elevation of Privilege Vulnerability
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83570 Microsoft US
Výsledky hledání
· zachyceno
· zachyceno
CVE-2026-83568 Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability
Improper access control in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83568 US
· zachyceno
CVE-2026-83567 Windows NTFS Elevation of Privilege Vulnerability
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83567 US
· zachyceno
CVE-2026-83566 Windows Win32k Elevation of Privilege Vulnerability
Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83566 US
· zachyceno
CVE-2026-83565 Windows Encrypting File System (EFS) Information Disclosure Vulnerability
Buffer over-read in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-83565 US
· zachyceno
CVE-2026-83564 Windows Search Service Elevation of Privilege Vulnerability
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83564 Microsoft US
· zachyceno
CVE-2026-83523 Windows Image Acquisition Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Image Acquisition allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-83523 US
· zachyceno
CVE-2026-83522 Windows IKE Extension Spoofing Vulnerability
Reliance on untrusted inputs in a security decision in Windows IKE Extension allows an unauthorized attacker to perform spoofing over a network.
EPSS 0.01 CVE-2026-83522 US
· zachyceno
CVE-2026-83519 Windows Error Reporting Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-83519 US
· zachyceno
CVE-2026-83517 Microsoft Windows Media Foundation Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-83517 Microsoft US
· zachyceno
CVE-2026-83513 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83513 US
· zachyceno
CVE-2026-83514 Windows Partition Management Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83514 US
· zachyceno
CVE-2026-83511 Active Directory Federation Services (AD FS) Spoofing Vulnerability
Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.
EPSS 0.01 CVE-2026-83511 US
· zachyceno
CVE-2026-83509 Windows Setup Files Cleanup Elevation of Privilege Vulnerability
Untrusted search path in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83509 US
· zachyceno
CVE-2026-83507 Windows Update Orchestrator Service Information Disclosure Vulnerability
Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-83507 US
· zachyceno
CVE-2026-83508 Windows NTFS Elevation of Privilege Vulnerability
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83508 US
· zachyceno
CVE-2026-83506 Servicing Stack Updates Elevation of Privilege Vulnerability
Untrusted search path in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83506 US
· zachyceno
CVE-2026-83505 Windows Setup Files Cleanup Elevation of Privilege Vulnerability
Time-of-check time-of-use (toctou) race condition in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83505 US
· zachyceno
CVE-2026-81971 Windows NTFS Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows NTFS allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-81971 US
· zachyceno
CVE-2026-69454 Microsoft Azure Attestation service and Device Health Attestation Service Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-69454 Microsoft US
· zachyceno
CVE-2026-69326 Graphic Fonts Remote Code Execution Vulnerability
Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-69326 US
· zachyceno
CVE-2026-77496 Windows Imaging Component Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-77496 US
· zachyceno
CVE-2026-73027 Windows Setup Files Cleanup Elevation of Privilege Vulnerability
External control of system or configuration setting in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.
EPSS 0.01 CVE-2026-73027 US
· zachyceno
CVE-2026-69635 Windows Installer Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges with a physical attack.
EPSS < 0.01 CVE-2026-69635 US
· zachyceno
CVE-2026-78459 Microsoft Internet Information Services Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Internet Information Services allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-78459 Microsoft US
· zachyceno
CVE-2026-69596 Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability
Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-69596 US
· zachyceno
CVE-2026-69577 Microsoft Azure Attestation service and Device Health Attestation Service Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-69577 Microsoft US
· zachyceno
CVE-2026-69471 Windows Installer Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-69471 US
· zachyceno
CVE-2026-69783 Windows Update Elevation of Privilege Vulnerability
External control of file name or path in Windows Update allows an authorized attacker to elevate privileges locally.
EPSS 0.01 CVE-2026-69783 US
· zachyceno
CVE-2026-69733 Windows Update Elevation of Privilege Vulnerability
Untrusted search path in Windows Update allows an authorized attacker to elevate privileges locally.
EPSS 0.01 CVE-2026-69733 US
· zachyceno
CVE-2026-69640 Windows Key Distribution Center Security Feature Bypass Vulnerability
Incorrect authorization in Windows Key Distribution Center allows an authorized attacker to bypass a security feature over a network.
EPSS 0.01 CVE-2026-69640 US
· zachyceno
CVE-2026-67628 Microsoft SQL Server Information Disclosure Vulnerability
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-67628 Microsoft US
· zachyceno
CVE-2026-67626 Microsoft SQL Server Denial of Service Vulnerability
Uncontrolled resource consumption in SQL Server allows an authorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-67626 Microsoft US
· zachyceno
CVE-2026-65674 Microsoft SQL Server Remote Code Execution Vulnerability
Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network.
EPSS 0.02 CVE-2026-65674 Microsoft US
· zachyceno
CVE-2026-77902 Microsoft Office Excel Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-77902 Microsoft US
· zachyceno
CVE-2026-69765 Windows Storport Miniport Driver Remote Code Execution Vulnerability
Use after free in Windows Storport Miniport Driver allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-69765 US
· zachyceno
CVE-2026-69736 Windows Credential Manager Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Credential Manager allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-69736 US
· zachyceno
CVE-2026-70295 Win32k Information Disclosure Vulnerability
Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-70295 US
· zachyceno
CVE-2026-70294 Win32k Information Disclosure Vulnerability
Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-70294 US
· zachyceno
CVE-2026-70293 Win32k Information Disclosure Vulnerability
Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-70293 US
· zachyceno
CVE-2026-70292 Win32k Information Disclosure Vulnerability
Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-70292 US
· zachyceno
CVE-2026-70288 Win32k Information Disclosure Vulnerability
Time-of-check time-of-use (toctou) race condition in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-70288 US
· zachyceno
CVE-2026-70258 Microsoft Windows Media Foundation Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-70258 Microsoft US
· zachyceno
CVE-2026-70237 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-70237 US
· zachyceno
CVE-2026-70236 Windows Win32k Elevation of Privilege Vulnerability
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-70236 US
· zachyceno
CVE-2026-70232 Windows Kernel Information Disclosure Vulnerability
Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally.
EPSS 0.01 CVE-2026-70232 US
· zachyceno
CVE-2026-70209 Windows Win32k Elevation of Privilege Vulnerability
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-70209 US
· zachyceno
CVE-2026-70208 HTTP.sys Information Disclosure Vulnerability
Out-of-bounds read in Windows HTTP.sys allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-70208 US
· zachyceno
CVE-2026-70230 Windows Audio Service Elevation of Privilege Vulnerability
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-70230 US
· zachyceno
CVE-2026-70201 Windows DHCP Server Denial of Service Vulnerability
Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service locally.
EPSS < 0.01 CVE-2026-70201 US
· zachyceno
CVE-2026-70211 Win32k Information Disclosure Vulnerability
Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-70211 US
· zachyceno
CVE-2026-70199 Windows Kernel Information Disclosure Vulnerability
Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally.
EPSS 0.01 CVE-2026-70199 US
· zachyceno
CVE-2026-70157 Windows System Information Console Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows System Information Console allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-70157 US
· zachyceno
CVE-2026-70207 Network Policy Server (NPS) Remote Code Execution Vulnerability
Heap-based buffer overflow in Network Policy Server (NPS) allows an authorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-70207 US
· zachyceno
CVE-2026-70144 Windows Win32k Elevation of Privilege Vulnerability
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-70144 US
· zachyceno
CVE-2026-70075 Windows Virtualization-Based Security (VBS) Enclave Security Feature Bypass Vulnerability
Time-of-check time-of-use (toctou) race condition in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to bypass a security feature locally.
EPSS < 0.01 CVE-2026-70075 US
· zachyceno
CVE-2026-70072 Windows Netlogon Denial of Service Vulnerability
Allocation of resources without limits or throttling in Windows Netlogon allows an authorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-70072 US
· zachyceno
CVE-2026-70074 Windows DNS Information Disclosure Vulnerability
Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-70074 US
· zachyceno
CVE-2026-70071 Role: DNS Server Tampering Vulnerability
Improper verification of cryptographic signature in DNS Server allows an authorized attacker to perform tampering locally.
EPSS < 0.01 CVE-2026-70071 US
· zachyceno
CVE-2026-70069 Windows DHCP Server Remote Code Execution Vulnerability
Stack-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-70069 US