Common Vulnerabilities and Exposures (CVE)
CVE-2026-70227
Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally.
CVE-2026-70184
Improper resolution of path equivalence in Windows Backup Engine allows an authorized attacker to elevate privileges locally.
CVE-2026-70111
Untrusted pointer dereference in Windows Kernel allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-85925
Improper restriction of communication channel to intended endpoints in Azure Key Vault allows an authorized attacker to elevate privileges over a network.
CVE-2026-85922
Weak authentication in Azure Key Vault allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-70160
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-70158
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
CVE-2026-70148
Improper authorization in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally.
CVE-2026-70143
Heap-based buffer overflow in Windows Network File System allows an authorized attacker to execute code locally.
CVE-2026-70122
Time-of-check time-of-use (toctou) race condition in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
CVE-2026-70112
Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to execute code locally.
CVE-2026-70084
Improper access control in Windows Projected File System allows an authorized attacker to disclose information locally.
CVE-2026-70054
Heap-based buffer overflow in Windows NetBIOS allows an authorized attacker to elevate privileges locally.
CVE-2026-69915
Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVE-2026-69902
Untrusted pointer dereference in Windows NTFS allows an authorized attacker to execute code locally.