Medium · CVSS 6.5
Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.
Published Aug 11, 2026 · Updated Oct 8, 2026
High · CVSS 7.8
Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
High · CVSS 7.4
Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
Published Aug 3, 2026 · Updated Oct 8, 2026
High · CVSS 7.8
Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
High · CVSS 8.1
Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.
Published Aug 3, 2026 · Updated Oct 8, 2026
High · CVSS 7.8
Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Medium · CVSS 5.5
Buffer over-read in Windows NTFS allows an authorized attacker to disclose information locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
High · CVSS 8.8
Heap-based buffer overflow in Windows SMB Server allows an authorized attacker to execute code over a network.
Published Aug 11, 2026 · Updated Oct 8, 2026
High · CVSS 7
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Medium · CVSS 5.5
Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
High · CVSS 8.8
Heap-based buffer overflow in Windows SMB Server allows an authorized attacker to execute code over a network.
Published Aug 11, 2026 · Updated Oct 8, 2026
High · CVSS 8.1
Heap-based buffer overflow in RPC Runtime allows an unauthorized attacker to execute code over a network.
Published Aug 11, 2026 · Updated Oct 8, 2026
Medium · CVSS 6.5
Out-of-bounds read in Windows SMB Client allows an unauthorized attacker to disclose information over a network.
Published Aug 11, 2026 · Updated Oct 8, 2026
High · CVSS 7
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
High · CVSS 8.1
Use after free in Windows DNS allows an unauthorized attacker to elevate privileges over a network.
Published Aug 11, 2026 · Updated Oct 8, 2026
High · CVSS 7.8
Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
High · CVSS 7.8
Heap-based buffer overflow in Windows SMB Client allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Medium · CVSS 5.5
Incorrect authorization in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to disclose information locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
High · CVSS 7.8
Heap-based buffer overflow in Windows Shell allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
High · CVSS 7.8
Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
High · CVSS 7.8
Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
High · CVSS 7.8
Heap-based buffer overflow in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Medium · CVSS 6.7
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
High · CVSS 7.8
Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
High · CVSS 7.8
Integer overflow or wraparound in Windows Projected File System allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
High · CVSS 7
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
High · CVSS 7.8
Integer underflow (wrap or wraparound) in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Medium · CVSS 5.3
Improper verification of cryptographic signature in Windows Schannel allows an unauthorized attacker to bypass a security feature over a network.
Published Aug 11, 2026 · Updated Oct 8, 2026
High · CVSS 7.8
Heap-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
High · CVSS 7
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
High · CVSS 7.8
Heap-based buffer overflow in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Medium · CVSS 5.5
Buffer over-read in Windows Wired AutoConfig Service allows an authorized attacker to disclose information locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Medium · CVSS 5.5
Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
High · CVSS 7.8
Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
High · CVSS 7
Time-of-check time-of-use (toctou) race condition in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
High · CVSS 7
Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
High · CVSS 7
Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
High · CVSS 7.8
Insufficient granularity of access control in User-Mode Power Service (UMPS) allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
High · CVSS 7.8
Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Medium · CVSS 6.5
Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.
Published Aug 11, 2026 · Updated Oct 8, 2026
Medium · CVSS 6.5
Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.
Published Aug 11, 2026 · Updated Oct 8, 2026
High · CVSS 7.8
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
High · CVSS 7.8
Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Medium · CVSS 5.5
Use of uninitialized resource in Windows GDI+ allows an authorized attacker to disclose information locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Medium · CVSS 6.4
Use after free in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack.
Published Aug 11, 2026 · Updated Oct 8, 2026
High · CVSS 7.8
Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
High · CVSS 7.8
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
High · CVSS 7.8
Numeric truncation error in Microsoft Digest Authentication allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
High · CVSS 7
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
High · CVSS 7
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026