Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-72969 US
Improper verification of cryptographic signature in Windows Key Distribution Center allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-69650 US
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
EPSS < 0.01 CVE-2026-69830 US
Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-69387 US
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-67625 Microsoft US
Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-72934 US
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-69354 US
Missing authentication for critical function in Windows Credential Guard allows an authorized attacker to perform spoofing locally.
EPSS < 0.01 CVE-2026-70580 US
Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-69651 US
Insertion of sensitive information into sent data in .NET allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-66822 US
Use after free in Windows Application Compatibility Cache allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-72955 US
Out-of-bounds read in Windows iSCSI allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-69721 US
Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-69883 US
Exposure of sensitive system information to an unauthorized control sphere in Windows iSCSI allows an authorized attacker to disclose information locally.
EPSS 0.01 CVE-2026-69644 US
Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-69634 US
Out-of-bounds write in Windows iSCSI allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-69705 US
Integer overflow or wraparound in Windows iSCSI allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-69521 US
Heap-based buffer overflow in Windows kernel32.dll allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-68836 US
Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-70285 US
Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-70284 US
Incorrect authorization in Windows Hello allows an authorized attacker to bypass a security feature locally.
EPSS < 0.01 CVE-2026-70280 US
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-70278 Microsoft US
Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-70274 US
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-70273 US
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-70272 US
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-70271 US
Use after free in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-70252 US
Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-70255 US
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-70253 US
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-70249 US
Buffer over-read in Desktop Window Manager allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-70234 US
Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-70225 US
Use after free in Windows Console Driver allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-70223 US
Insufficient granularity of access control in Windows StateRepository API allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-70218 US
Out-of-bounds read in Windows HTTP.sys allows an authorized attacker to execute code locally.
EPSS < 0.01 CVE-2026-70247 US
Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-70233 US
Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-70205 US
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-70195 US
Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-70245 US
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-70168 US
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-70169 US
Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-70198 US
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-70156 Microsoft US
Numeric truncation error in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-70177 Microsoft US
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-70176 US
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-70150 Microsoft US
Untrusted search path in Windows Update Service allows an authorized attacker to elevate privileges locally.
EPSS 0.01 CVE-2026-70142 US
Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-70173 Microsoft US
Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-70141 Microsoft US
Allocation of resources without limits or throttling in Windows SMB Server allows an unauthorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-70133 US
Missing release of memory after effective lifetime in Windows DNS allows an unauthorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-70155 US
Out-of-bounds read in Windows DNS allows an authorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-70119 US
Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-70138 US
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-70136 Microsoft US
Out-of-bounds read in Windows DNS allows an authorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-70166 US
Out-of-bounds read in Windows Remote POS Driver allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-70135 US
Out-of-bounds read in Windows Bluetooth Port Driver allows an unauthorized attacker to execute code over an adjacent network.
EPSS 0.01 CVE-2026-70126 US
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-70118 US
Heap-based buffer overflow in Windows Portable Device File System Driver allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-70132 US
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-70115 Microsoft US