Common Vulnerabilities and Exposures (CVE)
CVE-2026-105010
Use after free in Microsoft Windows Search Component allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-105009
Incorrect default permissions in Windows Server Update Service allows an authorized attacker to elevate privileges locally.
CVE-2026-105008
No cwe for this issue in Windows Schannel allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-105007
An elevation of privilege vulnerability exists in the Network Driver Interface Specification (NDIS) when ndis.sys fails to check the length of a buffer prior to copying memory to it. To exploit the vulnerability, in a local attack scenario,...
CVE-2026-105006
Use after free in HID class driver allows an unauthorized attacker to elevate privileges with a physical attack.
CVE-2026-105005
Out-of-bounds write in Windows Schannel allows an unauthorized attacker to execute code over a network.
CVE-2026-105004
Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
CVE-2026-105003
Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally.
CVE-2026-103578
Untrusted pointer dereference in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack.
CVE-2026-103577
Insecure default variable initialization in Microsoft QUIC allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-103576
Url redirection to untrusted site ('open redirect') in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-103575
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
CVE-2026-103569
Out-of-bounds read in Windows IKE Extension allows an unauthorized attacker to disclose information over a network.
CVE-2026-103568
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Credential Providers allows an authorized attacker to elevate privileges locally.
CVE-2026-103567
Buffer over-read in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally.