Microsoft Security Response Center
CVE-2026-70142 Windows Update Service Elevation of Privilege Vulnerability
Untrusted search path in Windows Update Service allows an authorized attacker to elevate privileges locally.
90-day archive
All news
Search by headline, summary or source name. Every item links to its own original page.
13070 news
Page 157 of 436
Microsoft Security Response Center
CVE-2026-70141 Microsoft Windows Search Component Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.
Microsoft Security Response Center
CVE-2026-70140 Windows Audio Service Elevation of Privilege Vulnerability
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
CVE-2026-70139 Windows Update Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Update Service allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
CVE-2026-70138 Windows OLE Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
CVE-2026-70136 Microsoft Windows Search Component Elevation of Privilege Vulnerability
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
CVE-2026-70135 Windows Remote POS Driver Information Disclosure Vulnerability
Out-of-bounds read in Windows Remote POS Driver allows an authorized attacker to disclose information locally.
Microsoft Security Response Center
CVE-2026-70133 Windows SMB Server Denial of Service Vulnerability
Allocation of resources without limits or throttling in Windows SMB Server allows an unauthorized attacker to deny service over a network.
Microsoft Security Response Center
CVE-2026-70132 Windows Portable Device File System Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Portable Device File System Driver allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
CVE-2026-70127 Windows Domain Name Service Remote Code Execution Vulnerability
Use after free in DNS Server allows an unauthorized attacker to execute code over a network.
Microsoft Security Response Center
CVE-2026-70126 Windows Bluetooth Port Driver Remote Code Execution
Out-of-bounds read in Windows Bluetooth Port Driver allows an unauthorized attacker to execute code over an adjacent network.
Microsoft Security Response Center
CVE-2026-70123 Microsoft Graphics Component Elevation of Privilege Vulnerability
Numeric truncation error in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
CVE-2026-70121 Windows Kernel Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
CVE-2026-70119 Windows DNS Remote Code Execution Vulnerability
Out-of-bounds read in Windows DNS allows an authorized attacker to execute code over a network.
Microsoft Security Response Center
CVE-2026-70118 Windows Audio Service Elevation of Privilege Vulnerability
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
CVE-2026-70117 Windows Win32k Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
CVE-2026-70115 Microsoft Windows Search Component Elevation of Privilege Vulnerability
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
CVE-2026-70114 Windows Kernel Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
CVE-2026-70108 Windows Win32k Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
CVE-2026-70106 Windows Kernel Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
CVE-2026-70104 Windows Win32k Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
CVE-2026-70103 Windows Error Reporting Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
CVE-2026-70098 Visual Studio Code Remote Code Execution Vulnerability
Missing authorization in Visual Studio Code allows an unauthorized attacker to execute code over a network.
Microsoft Security Response Center
CVE-2026-70097 Windows Virtualization-Based Security (VBS) Enclave Spoofing Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to perform spoofing locally.
Microsoft Security Response Center
CVE-2026-70096 Windows Rich Text Edit Control Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Rich Text Edit Control allows an unauthorized attacker to execute code over a network.
Microsoft Security Response Center
CVE-2026-70095 Windows iSCSI Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a network.
Microsoft Security Response Center
CVE-2026-70093 Windows Rich Text Edit Control Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Rich Text Edit Control allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
CVE-2026-70090 Windows Netlogon Information Disclosure Vulnerability
Use of uninitialized resource in Windows Netlogon allows an authorized attacker to disclose information locally.
Microsoft Security Response Center
CVE-2026-70087 Role: DNS Server Security Feature Bypass Vulnerability
Incorrect authorization in DNS Server allows an authorized attacker to bypass a security feature locally.
Microsoft Security Response Center
CVE-2026-70085 Role: DNS Server Tampering Vulnerability
Missing authorization in DNS Server allows an authorized attacker to perform tampering locally.