CVE-2026-96057 Windows USB Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-96060 Windows Installer Elevation of Privilege Vulnerability
Out-of-bounds read in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-96061 Windows Installer Elevation of Privilege Vulnerability
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-96067 Microsoft Color Management Remote Code Execution Vulnerability
Integer overflow or wraparound in Microsoft Color Management allows an unauthorized attacker to execute code over a network.
CVE-2026-96073 Windows Installer Elevation of Privilege Vulnerability
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-96074 Windows AppX Package Manager Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows AppX Package Manager allows an authorized attacker to elevate privileges locally.
CVE-2026-96075 Windows Feedback Hub Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Feedback Hub allows an authorized attacker to elevate privileges locally.
CVE-2026-96076 Windows DIAL Client Elevation of Privilege Vulnerability
Use after free in Windows DIAL Client allows an authorized attacker to elevate privileges locally.
CVE-2026-96086 Windows WLAN Service Denial of Service Vulnerability
Out-of-bounds read in Windows WLAN Service allows an unauthorized attacker to deny service over an adjacent network.
CVE-2026-96088 Windows Connected User Experiences and Telemetry Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally.
CVE-2026-96092 Windows Domain Name Service Remote Code Execution Vulnerability
Use after free in DNS Server allows an unauthorized attacker to execute code over a network.
CVE-2026-96093 Windows Internet (wininet.dll) Information Disclosure Vulnerability
Out-of-bounds read in Windows Internet (wininet.dll) allows an authorized attacker to disclose information locally.
CVE-2026-96097 Windows Brokering File System Elevation of Privilege Vulnerability
Release of invalid pointer or reference in Windows Brokering File System allows an authorized attacker to elevate privileges locally.
CVE-2026-96103 Desktop Window Manager Elevation of Privilege Vulnerability
Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
CVE-2026-96107 Windows Phone Service Elevation of Privilege Vulnerability
Null pointer dereference in Windows Phone Service allows an authorized attacker to elevate privileges locally.
CVE-2026-96110 Windows OLE Information Disclosure Vulnerability
Use after free in Windows OLE allows an authorized attacker to disclose information locally.
CVE-2026-96122 Windows Graphics Kernel Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-96124 Windows Graphics Kernel Elevation of Privilege Vulnerability
Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-96127 Windows Biometric Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-96139 Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.


