cve.bz

microsoft windows 11 26h1 vulnerabilities, newest first, page 36

Filter
  1. 7.8CVE-2026-62700EPSS 0.3%

    Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.

  2. 6.8CVE-2026-62699EPSS 0.4%

    Null pointer dereference in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to execute code locally.

  3. 7.8CVE-2026-62698EPSS 0.3%

    Numeric truncation error in Microsoft Digest Authentication allows an authorized attacker to elevate privileges locally.

  4. 7.8CVE-2026-62696EPSS 0.3%

    Integer underflow (wrap or wraparound) in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.

  5. 7.8CVE-2026-62695EPSS 0.3%

    Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.

  6. 7.0CVE-2026-62693EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.

  7. 7.8CVE-2026-62692EPSS 0.3%

    Heap-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.

  8. 7.0CVE-2026-62690EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate privileges locally.

  9. 7.8CVE-2026-62688EPSS 0.3%

    Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.

  10. 7.0CVE-2026-61939EPSS 0.3%

    Use after free in Winlogon allows an authorized attacker to elevate privileges locally.

  11. 7.0CVE-2026-61938EPSS 0.3%

    Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

  12. 7.8CVE-2026-61937EPSS 0.3%

    Integer overflow or wraparound in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.

  13. 5.5CVE-2026-61936EPSS 0.3%

    Missing authorization in Windows Defender Firewall Service allows an authorized attacker to bypass a security feature locally.

  14. 7.8CVE-2026-61934EPSS 0.3%

    Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.

  15. 5.5CVE-2026-61933EPSS 0.4%

    Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.

  16. 7.8CVE-2026-61930EPSS 0.3%

    Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

  17. 7.0CVE-2026-61929EPSS 0.3%

    Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

  18. 5.5CVE-2026-61928EPSS 0.2%

    Cleartext storage of sensitive information in Windows Hello allows an authorized attacker to perform tampering locally.

  19. 7.0CVE-2026-61927EPSS 0.2%

    Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.

  20. 7.8CVE-2026-61926EPSS 0.3%

    Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.

  21. 7.8CVE-2026-61925EPSS 0.3%

    Incorrect authorization in Windows Installer allows an authorized attacker to elevate privileges locally.

  22. 7.5CVE-2026-61924EPSS 0.9%

    Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.

  23. 7.8CVE-2026-61923EPSS 0.3%

    Heap-based buffer overflow in Windows Display Enhancement Service allows an authorized attacker to elevate privileges locally.

  24. 6.5CVE-2026-61921EPSS 0.9%

    Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.

  25. 6.6CVE-2026-61920EPSS 0.5%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DNS allows an authorized attacker to execute code over a network.

  26. 7.5CVE-2026-61918EPSS 0.9%

    Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.

  27. 5.5CVE-2026-61368EPSS 0.4%

    Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to disclose information locally.

  28. 7.8CVE-2026-61367EPSS 0.3%

    Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.

  29. 7.0CVE-2026-61366EPSS 0.3%

    Double free in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally.

  30. 7.8CVE-2026-61365EPSS 0.3%

    Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.

  31. 7.8CVE-2026-61364EPSS 0.3%

    Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.

  32. 8.1CVE-2026-61363EPSS 0.7%

    Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

  33. 7.0CVE-2026-61361EPSS 0.3%

    Use after free in Windows DHCP Client allows an authorized attacker to execute code locally.

  34. 5.5CVE-2026-61360EPSS 0.4%

    Untrusted pointer dereference in Windows GDI allows an authorized attacker to disclose information locally.

  35. 7.8CVE-2026-61359EPSS 0.3%

    Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.

  36. 7.8CVE-2026-61358EPSS 0.4%

    Improper link resolution before file access ('link following') in Windows Accessibility Infrastructure (ATBroker.exe) allows an authorized attacker to elevate privileges locally.

  37. 7.8CVE-2026-61357EPSS 0.3%

    Use after free in Application Information Services allows an authorized attacker to elevate privileges locally.

  38. 7.8CVE-2026-61356EPSS 0.3%

    Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.

  39. 7.8CVE-2026-61355EPSS 0.3%

    Heap-based buffer overflow in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally.

  40. 7.8CVE-2026-61353EPSS 0.3%

    Heap-based buffer overflow in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

  41. 8.1CVE-2026-61352EPSS 0.5%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

  42. 4.6CVE-2026-61350EPSS 0.5%

    Buffer over-read in Windows NTFS allows an unauthorized attacker to disclose information with a physical attack.

  43. 7.8CVE-2026-61349EPSS 0.3%

    Use after free in Windows Work Folder Service allows an authorized attacker to elevate privileges locally.

  44. 7.0CVE-2026-61348EPSS 0.3%

    Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

  45. 5.5CVE-2026-61347EPSS 0.4%

    Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclose information locally.

  46. 7.0CVE-2026-61346EPSS 0.3%

    Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

  47. 6.5CVE-2026-61345EPSS 1.1%

    Null pointer dereference in Microsoft Remote Registry Service allows an authorized attacker to deny service over a network.

  48. 6.5CVE-2026-59138EPSS 1.1%

    Null pointer dereference in Microsoft Remote Registry Service allows an authorized attacker to deny service over a network.

  49. 5.5CVE-2026-59137EPSS 0.4%

    Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose information locally.

  50. 5.5CVE-2026-59136EPSS 0.4%

    Use of uninitialized resource in Microsoft COM for Windows allows an authorized attacker to disclose information locally.