Common Vulnerabilities and Exposures (CVE)
CVE-2026-96853
Time-of-check time-of-use (toctou) race condition in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
CVE-2026-96852
Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
CVE-2026-96854
Access of resource using incompatible type ('type confusion') in Windows Device Association Service allows an authorized attacker to disclose information locally.
CVE-2026-96843
Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.
CVE-2026-96847
Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally.
CVE-2026-96846
Out-of-bounds read in WebDAV allows an authorized attacker to disclose information locally.
CVE-2026-111679
Ekko Studio through 0.7.36 contains a missing authorization vulnerability that allows any authenticated non-super_admin user to list and clear server-wide login lockouts via /api/auth/locked-ips. Attackers can send DELETE requests without a...
CVE-2026-96844
Integer underflow (wrap or wraparound) in Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges over an adjacent network.
CVE-2026-96850
Use of uninitialized resource in Windows Modern Device Management (MDM) allows an authorized attacker to disclose information locally.
CVE-2026-96325
Missing reference to active allocated resource in Windows SMB Server allows an unauthorized attacker to deny service over a network.
CVE-2026-96324
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
CVE-2026-96321
Out-of-bounds read in Remote Desktop Display Driver allows an authorized attacker to disclose information locally.
CVE-2026-96322
Use after free in Windows Remote Desktop Protocol allows an authorized attacker to elevate privileges locally.
CVE-2026-96323
Use after free in Windows Update allows an authorized attacker to elevate privileges locally.
CVE-2026-96320
Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.