Common Vulnerabilities and Exposures (CVE)
CVE-2026-72936
Use after free in Windows SMB Client allows an unauthorized attacker to execute code over a network.
CVE-2026-72931
Missing release of resource after effective lifetime in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to deny service locally.
CVE-2026-72928
Use after free in Windows DNS allows an authorized attacker to execute code over a network.
CVE-2026-72927
Heap-based buffer overflow in Winsock allows an authorized attacker to elevate privileges locally.
CVE-2026-71352
Integer underflow (wrap or wraparound) in Windows Remote Access Connection Manager allows an authorized attacker to execute code over a network.
CVE-2026-71342
Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
CVE-2026-71349
Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code with a physical attack.
CVE-2026-70583
Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges locally.
CVE-2026-70579
Out-of-bounds read in Windows Mobile Broadband allows an unauthorized attacker to disclose information over a network.
CVE-2026-70578
Heap-based buffer overflow in Windows Credential Guard allows an authorized attacker to elevate privileges locally.
CVE-2026-70577
Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.
CVE-2026-70581
Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-70575
Null pointer dereference in Windows Schannel allows an authorized attacker to deny service over a network.
CVE-2026-70572
Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-70573
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.