Common Vulnerabilities and Exposures (CVE)

Sep 25, 2026 21:34:51 UTC

Heap-based buffer overflow in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally.

Sep 25, 2026 21:34:50 UTC

Out-of-bounds read in Windows USB Driver allows an authorized attacker to elevate privileges locally.

Sep 25, 2026 21:34:49 UTC

Use after free in Microsoft COM for Windows allows an authorized attacker to elevate privileges locally.

Sep 25, 2026 21:34:48 UTC

Use after free in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally.

Sep 25, 2026 21:34:48 UTC

Heap-based buffer overflow in Windows DCOM Server allows an authorized attacker to elevate privileges locally.

Sep 25, 2026 21:34:47 UTC

Out-of-bounds read in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to disclose information locally.

Sep 25, 2026 21:34:47 UTC

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a network.

Sep 25, 2026 21:34:46 UTC

Stack-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally.

Sep 25, 2026 21:34:46 UTC

Heap-based buffer overflow in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.

Sep 25, 2026 21:34:45 UTC

Integer underflow (wrap or wraparound) in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally.

Sep 25, 2026 21:34:45 UTC

Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally.

Sep 25, 2026 21:34:44 UTC

Numeric truncation error in Internet Storage Name Service allows an authorized attacker to disclose information locally.

Sep 25, 2026 21:34:44 UTC

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over a network.

Sep 25, 2026 21:34:43 UTC

Integer overflow or wraparound in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

Sep 25, 2026 21:34:43 UTC

Use of uninitialized resource in Windows GDI+ allows an authorized attacker to disclose information locally.

Page: 37