Recently updated CVEs

Nov 12, 2026 UTC

Untrusted pointer dereference in Windows Encrypting File System (EFS) allows an authorized attacker to deny service locally.

Nov 12, 2026 UTC

Double free in Winsock allows an authorized attacker to elevate privileges locally.

Nov 12, 2026 UTC

Integer overflow or wraparound in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally.

Nov 12, 2026 UTC

Weak authentication in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.

Nov 12, 2026 UTC

Use after free in Winlogon allows an authorized attacker to elevate privileges locally.

Nov 12, 2026 UTC

Improper link resolution before file access ('link following') in Windows DNS allows an authorized attacker to elevate privileges over a network.

Nov 12, 2026 UTC

Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.

Nov 12, 2026 UTC

Buffer over-read in Windows Message Queuing allows an unauthorized attacker to deny service over a network.

Nov 12, 2026 UTC

An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions. To exploit the vulnerability, a locally authenticated attacker could…

Nov 12, 2026 UTC

Integer underflow (wrap or wraparound) in Microsoft QUIC allows an unauthorized attacker to deny service over a network.

Nov 12, 2026 UTC

Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to elevate privileges locally.

Nov 12, 2026 UTC

An elevation of privilege vulnerability exists in the Windows Installer when the Windows Installer fails to properly sanitize input leading to an insecure library loading behavior. A locally authenticated attacker could run arbitrary code with elevated system privileges. An attac…

Nov 12, 2026 UTC

Buffer over-read in Windows Shell allows an authorized attacker to disclose information locally.

Nov 12, 2026 UTC

Relative path traversal in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges locally.

Nov 12, 2026 UTC

An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions. To exploit the vulnerability, a locally authenticated attacker could…