Recently updated CVEs

Oct 26, 2026 UTC

Use after free in Winlogon allows an authorized attacker to elevate privileges locally.

Oct 26, 2026 UTC

Missing authorization in Windows Defender Firewall Service allows an authorized attacker to bypass a security feature locally.

Oct 26, 2026 UTC

Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.

Oct 26, 2026 UTC

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.

Oct 26, 2026 UTC

Access of resource using incompatible type ('type confusion') in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

Oct 26, 2026 UTC

Heap-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.

Oct 26, 2026 UTC

Integer overflow or wraparound in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.

Oct 26, 2026 UTC

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

Oct 26, 2026 UTC

Cleartext storage of sensitive information in Windows Hello allows an authorized attacker to perform tampering locally.

Oct 26, 2026 UTC

Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.

Oct 26, 2026 UTC

Incorrect authorization in Windows Installer allows an authorized attacker to elevate privileges locally.

Oct 26, 2026 UTC

Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.

Oct 26, 2026 UTC

Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to disclose information locally.

Oct 26, 2026 UTC

Double free in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally.

Oct 26, 2026 UTC

Heap-based buffer overflow in Windows Display Enhancement Service allows an authorized attacker to elevate privileges locally.