Microsoft Security Response Center
CVE-2026-70090 Windows Netlogon Information Disclosure Vulnerability
Use of uninitialized resource in Windows Netlogon allows an authorized attacker to disclose information locally.
90-day archive
All news
Search by headline, summary or source name. Every item links to its own original page.
Category: Operating Systems
Clear filters
1002 news
Page 14 of 34
Microsoft Security Response Center
CVE-2026-70082 Windows DNS Denial of Service Vulnerability
Uncaught exception in Windows DNS allows an unauthorized attacker to deny service over a network.
Microsoft Security Response Center
CVE-2026-70079 Windows DNS Denial of Service Vulnerability
Improper enforcement of behavioral workflow in Windows DNS allows an unauthorized attacker to deny service over a network.
Microsoft Security Response Center
CVE-2026-70077 Windows Kernel Information Disclosure Vulnerability
Use after free in Windows Kernel allows an authorized attacker to disclose information locally.
Microsoft Security Response Center
CVE-2026-70076 Windows Win32k Elevation of Privilege Vulnerability
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
CVE-2026-70064 Windows Kerberos Elevation of Privilege Vulnerability
Integer underflow (wrap or wraparound) in Windows Kerberos allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
CVE-2026-70063 Windows Kernel Information Disclosure Vulnerability
Out-of-bounds read in Windows Kernel allows an authorized attacker to disclose information locally.
Microsoft Security Response Center
CVE-2026-70062 Windows libarchive Remote Code Execution Vulnerability
Double free in Windows Libarchive allows an unauthorized attacker to execute code over a network.
Microsoft Security Response Center
CVE-2026-70060 Windows Win32k Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
CVE-2026-70059 Windows OLE Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
CVE-2026-70058 Windows DHCP Server Remote Code Execution Vulnerability
Out-of-bounds write in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
Microsoft Security Response Center
CVE-2026-70057 Windows Routing and Remote Access Service (RRAS) Security Feature Bypass Vulnerability
Incorrect authorization in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to bypass a security feature locally.
Microsoft Security Response Center
CVE-2026-70056 Windows Update Service Elevation of Privilege Vulnerability
Use after free in Windows Update Service allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
CVE-2026-70033 Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability
Missing release of memory after effective lifetime in Remote Desktop Gateway Service allows an unauthorized attacker to deny service over a network.
Microsoft Security Response Center
CVE-2026-70027 Windows Subsystem for Linux Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
CVE-2026-70026 Windows Secure Kernel Mode Elevation of Privilege Vulnerability
Use after free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
CVE-2026-70025 Windows Netlogon Denial of Service Vulnerability
Use after free in Windows Netlogon allows an authorized attacker to deny service over a network.
Microsoft Security Response Center
CVE-2026-70021 Windows Direct Composition Elevation of Privilege Vulnerability
Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
CVE-2026-70017 Windows Secure Kernel Mode Information Disclosure Vulnerability
Access of resource using incompatible type ('type confusion') in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally.
Microsoft Security Response Center
CVE-2026-70015 Windows Local Security Authority Subsystem Service (LSASS) Elevation of Privilege Vulnerability
Use after free in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
CVE-2026-70014 Windows Cryptographic Services Remote Code Execution Vulnerability
Use after free in Windows Cryptographic Services allows an authorized attacker to execute code over a network.
Microsoft Security Response Center
CVE-2026-70010 Windows NTFS Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
CVE-2026-69979 Windows AppX Deployment Service Security Feature Bypass Vulnerability
Improper protection of alternate path in Windows AppX Deployment Service allows an authorized attacker to bypass a security feature locally.
Microsoft Security Response Center
CVE-2026-69978 Microsoft Windows VMSwitch Denial of Service Vulnerability
Null pointer dereference in Windows VMSwitch allows an authorized attacker to deny service locally.
Microsoft Security Response Center
CVE-2026-69973 Windows libarchive Tampering Vulnerability
Improper limitation of a pathname to a restricted directory ('path traversal') in Windows Libarchive allows an unauthorized attacker to perform tampering over a network.
Microsoft Security Response Center
CVE-2026-69971 Windows Kernel-Mode Drivers Information Disclosure Vulnerability
Incorrect authorization in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.
Microsoft Security Response Center
CVE-2026-69970 Kernel Streaming Service Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
CVE-2026-69969 Windows AppX Deployment Service Information Disclosure Vulnerability
Improper link resolution before file access ('link following') in Windows AppX Deployment Service allows an authorized attacker to disclose information locally.
Microsoft Security Response Center
CVE-2026-69968 Windows libarchive Tampering Vulnerability
Relative path traversal in Windows Libarchive allows an unauthorized attacker to perform tampering over a network.
Microsoft Security Response Center
CVE-2026-69967 Windows Overlay Filter Information Disclosure Vulnerability
Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to disclose information locally.