2026

Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges loca

Use after free in Windows DHCP Client allows an authorized attacker to execute code locally.

Double free in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally.

Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

Use after free in Winlogon allows an authorized attacker to elevate privileges locally.

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notification

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows MIDI Service Modu

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bind Filter Drive

Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

Time-of-check time-of-use (toctou) race condition in Windows Common Log File System Driver allows an authorized attacker

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.

Double free in Windows Kerberos allows an authorized attacker to elevate privileges locally.

Use after free in Windows Kerberos allows an authorized attacker to elevate privileges locally.

Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

Use after free in Capability Access Management Service (camsvc) allows an authorized attacker to elevate privileges loca

Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to execute code locally.

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Backup Engine all

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.

Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.

Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.

Double free in Windows Autopilot allows an authorized attacker to elevate privileges locally.

Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.

Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.

Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.

Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges loca

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges loca

NetBSD's hdaudio(4) driver in sys/dev/hdaudio/hdaudio.c contains a missing access control vulnerability that allows unpr

During an internal security assessment, an improper link following vulnerability was identified in Lenovo Vantage and Le

A potential authentication bypass vulnerability was reported in Lenovo System Update that could allow a local authentica

FreeCAD is a free and open-source multiplatform 3D parametric modeler. Prior to 1.1.2, src/App/PropertyPythonObject.cpp

CodeWhale versions >= 0.8.41 and < 0.8.64 contain a vulnerability in the exec_shell_interact (alias exec_interact) tool,

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Tuxedo). Supported vers

Vulnerability in the Oracle Work in Process product of Oracle E-Business Suite (component: Internal Operations). Suppor

Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). The support

Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Com

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The suppor