CVE-2026-95988 Windows Kernel Elevation of Privilege Vulnerability
Incorrect authorization in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-95991 Windows Graphics Kernel Elevation of Privilege Vulnerability
Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-95996 Windows Bluetooth Port Driver Elevation of Privilege Vulnerability
Integer underflow (wrap or wraparound) in Windows Bluetooth Port Driver allows an authorized attacker to elevate privileges over a network.
CVE-2026-95997 Windows Event Logging Service Elevation of Privilege Vulnerability
Use after free in Windows Event Logging Service allows an authorized attacker to elevate privileges locally.
CVE-2026-96002 Windows Domain Name Service Remote Code Execution Vulnerability
Heap-based buffer overflow in DNS Server allows an authorized attacker to execute code over a network.
CVE-2026-96004 Windows Installer Elevation of Privilege Vulnerability
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-96007 Connected Devices Platform Service (Cdpsvc) Elevation of Privilege Vulnerability
Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally.
CVE-2026-96020 Windows Domain Name Service Remote Code Execution Vulnerability
Out-of-bounds write in DNS Server allows an authorized attacker to execute code over a network.
CVE-2026-96016 Windows Local Security Authority Subsystem Service (LSASS) Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.
CVE-2026-96017 Role: DNS Server Denial of Service Vulnerability
Use after free in DNS Server allows an authorized attacker to deny service over a network.
CVE-2026-96019 Windows Installer Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-96022 Windows Text Services Framework Information Disclosure Vulnerability
Use of uninitialized resource in Windows Text Services Framework allows an authorized attacker to disclose information locally.
CVE-2026-96023 Windows Push Notification Core Elevation of Privilege Vulnerability
Use after free in Windows Push Notification Core allows an authorized attacker to elevate privileges locally.
CVE-2026-96029 Windows Installer Elevation of Privilege Vulnerability
Improper access control in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-96037 Windows User Manager Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows User Manager Service allows an authorized attacker to elevate privileges locally.
CVE-2026-96027 Windows Installer Elevation of Privilege Vulnerability
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-96028 Windows Installer Elevation of Privilege Vulnerability
Access of resource using incompatible type ('type confusion') in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-96035 Windows Installer Elevation of Privilege Vulnerability
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-96036 Windows Installer Elevation of Privilege Vulnerability
Integer overflow or wraparound in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-96038 Windows Audio Service Elevation of Privilege Vulnerability
Inclusion of functionality from untrusted control sphere in Windows Audio Service allows an authorized attacker to elevate privileges locally.


