Microsoft Security Center Center News

Subscribe to Microsoft Security Center Center News feed
Updated: 24 min 35 sec ago

CVE-2026-70168 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Tue, 10/13/2026 - 14:00

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-70245 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Tue, 10/13/2026 - 14:00

Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-70195 Windows Ancillary Function Driver for WinSock Information Disclosure Vulnerability

Tue, 10/13/2026 - 14:00

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to disclose information locally.

Categories: Microsoft

CVE-2026-70205 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Tue, 10/13/2026 - 14:00

Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-70233 Windows Common Log File System Driver Elevation of Privilege Vulnerability

Tue, 10/13/2026 - 14:00

Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-70247 HTTP.sys Remote Code Execution Vulnerability

Tue, 10/13/2026 - 14:00

Out-of-bounds read in Windows HTTP.sys allows an authorized attacker to execute code locally.

Categories: Microsoft

CVE-2026-70218 Windows StateRepository API Elevation of Privilege Vulnerability

Tue, 10/13/2026 - 14:00

Insufficient granularity of access control in Windows StateRepository API allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-70223 Windows Console Driver Elevation of Privilege Vulnerability

Tue, 10/13/2026 - 14:00

Use after free in Windows Console Driver allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-70225 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Tue, 10/13/2026 - 14:00

Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-70234 Desktop Window Manager Information Disclosure Vulnerability

Tue, 10/13/2026 - 14:00

Buffer over-read in Desktop Window Manager allows an authorized attacker to disclose information locally.

Categories: Microsoft

CVE-2026-70249 Windows Win32k Elevation of Privilege Vulnerability

Tue, 10/13/2026 - 14:00

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-70253 Windows Win32k Elevation of Privilege Vulnerability

Tue, 10/13/2026 - 14:00

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-70255 Desktop Window Manager Elevation of Privilege Vulnerability

Tue, 10/13/2026 - 14:00

Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-70252 Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability

Tue, 10/13/2026 - 14:00

Use after free in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-70271 Windows Win32k Elevation of Privilege Vulnerability

Tue, 10/13/2026 - 14:00

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-70272 Windows Installer Elevation of Privilege Vulnerability

Tue, 10/13/2026 - 14:00

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-70273 Windows Win32k Elevation of Privilege Vulnerability

Tue, 10/13/2026 - 14:00

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-70274 Windows Bind Filter Driver Elevation of Privilege Vulnerability

Tue, 10/13/2026 - 14:00

Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-70278 Microsoft Windows Media Foundation Elevation of Privilege Vulnerability

Tue, 10/13/2026 - 14:00

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-70280 Windows Hello Security Feature Bypass Vulnerability

Tue, 10/13/2026 - 14:00

Incorrect authorization in Windows Hello allows an authorized attacker to bypass a security feature locally.

Categories: Microsoft

Pages