2026

Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network.

Use after free in Windows Shell allows an authorized attacker to elevate privileges locally.

Use after free in Microsoft Install Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.

Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges over a network.

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network.

Incorrect calculation of buffer size in Windows iSCSI allows an unauthorized attacker to execute code over a network.

Use after free in Windows HTTP.sys allows an authorized attacker to elevate privileges over a network.

Heap-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevat

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to e

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Missing release of memory after effective lifetime in Windows TCP/IP allows an unauthorized attacker to deny service ove

Null pointer dereference in Windows IKE Extension allows an unauthorized attacker to deny service over a network.

Incorrect type conversion or cast in Microsoft Windows Search Component allows an authorized attacker to elevate privile

Integer overflow or wraparound in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Buffer over-read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Numeric truncation error in Windows Kernel allows an authorized attacker to elevate privileges locally.

Use after free in Graphic Fonts allows an authorized attacker to elevate privileges locally.

Use after free in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.

Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privi

Heap-based buffer overflow in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate pri

Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Online Certificate Status Protocol (OCSP) allows an authorized attacker to elevate

Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate p

Out-of-bounds read in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally.

Use after free in Windows Work Folder Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Missing authorization in Windows Hyper-V allows an authorized attacker to elevate privileges over a network.

Use after free in Windows DNS allows an authorized attacker to execute code over a network.

Out-of-bounds read in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locall

Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over a network.

Use after free in Active Directory Domain Services allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Windows SMB Client allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges lo

Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privilege

Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.

Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network.

Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to execute code locally.

Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network.

Numeric truncation error in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.

Improper neutralization of special elements used in a command ('command injection') in Windows Program Compatibility Ass

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.