Recently updated CVEs

Nov 12, 2026 UTC

Double free in Windows Setup and Deployment allows an authorized attacker to elevate privileges locally.

Nov 12, 2026 UTC

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.

Nov 12, 2026 UTC

An elevation of privilege vulnerability exists in the Windows Installer when the Windows Installer fails to properly sanitize input leading to an insecure library loading behavior. A locally authenticated attacker could run arbitrary code with elevated system privileges. An attac…

Nov 12, 2026 UTC

Null pointer dereference in Windows Installer allows an authorized attacker to elevate privileges locally.

Nov 12, 2026 UTC

Untrusted pointer dereference in Windows NTFS allows an unauthorized attacker to execute code over a network.

Nov 12, 2026 UTC

Use of out-of-range pointer offset in Windows Audio Service allows an authorized attacker to elevate privileges locally.

Nov 12, 2026 UTC

Incorrect resource transfer between spheres in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

Nov 12, 2026 UTC

Use of uninitialized resource in Mailslot File System allows an authorized attacker to disclose information locally.

Nov 12, 2026 UTC

Release of invalid pointer or reference in Windows COM allows an authorized attacker to elevate privileges locally.

Nov 12, 2026 UTC

Improper link resolution before file access ('link following') in Windows Installer allows an authorized attacker to elevate privileges locally.

Nov 12, 2026 UTC

External control of file name or path in Windows Print Spooler Components allows an authorized attacker to disclose information locally.

Nov 12, 2026 UTC

Use after free in Windows System Events Broker allows an authorized attacker to disclose information locally.

Nov 12, 2026 UTC

Weak authentication in Windows Storage allows an authorized attacker to elevate privileges locally.

Nov 12, 2026 UTC

Allocation of Resources Without Limits or Throttling vulnerability in Apache Axis2/Java. The multipart/form-data and application/x-www-form-urlencoded message builders read the request body directly from the transport stream with no size limit, so the servlet container's post-siz…

Nov 12, 2026 UTC

Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.