Feed aggregator

CVE-2026-70142 Windows Update Service Elevation of Privilege Vulnerability

Microsoft Security Center Center News - Tue, 10/13/2026 - 14:00

Untrusted search path in Windows Update Service allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-70150 Microsoft Windows Search Component Elevation of Privilege Vulnerability

Microsoft Security Center Center News - Tue, 10/13/2026 - 14:00

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-70176 Windows Win32k Elevation of Privilege Vulnerability

Microsoft Security Center Center News - Tue, 10/13/2026 - 14:00

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-70177 Microsoft Windows Search Component Elevation of Privilege Vulnerability

Microsoft Security Center Center News - Tue, 10/13/2026 - 14:00

Numeric truncation error in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-70156 Microsoft Windows Search Component Elevation of Privilege Vulnerability

Microsoft Security Center Center News - Tue, 10/13/2026 - 14:00

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-70198 Windows Push Notifications Elevation of Privilege Vulnerability

Microsoft Security Center Center News - Tue, 10/13/2026 - 14:00

Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-70169 Windows Connected Devices Platform Service Elevation of Privilege Vulnerability

Microsoft Security Center Center News - Tue, 10/13/2026 - 14:00

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-70168 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Microsoft Security Center Center News - Tue, 10/13/2026 - 14:00

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-70245 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Microsoft Security Center Center News - Tue, 10/13/2026 - 14:00

Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-70195 Windows Ancillary Function Driver for WinSock Information Disclosure Vulnerability

Microsoft Security Center Center News - Tue, 10/13/2026 - 14:00

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to disclose information locally.

Categories: Microsoft

CVE-2026-70205 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Microsoft Security Center Center News - Tue, 10/13/2026 - 14:00

Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-70233 Windows Common Log File System Driver Elevation of Privilege Vulnerability

Microsoft Security Center Center News - Tue, 10/13/2026 - 14:00

Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-70247 HTTP.sys Remote Code Execution Vulnerability

Microsoft Security Center Center News - Tue, 10/13/2026 - 14:00

Out-of-bounds read in Windows HTTP.sys allows an authorized attacker to execute code locally.

Categories: Microsoft

CVE-2026-70218 Windows StateRepository API Elevation of Privilege Vulnerability

Microsoft Security Center Center News - Tue, 10/13/2026 - 14:00

Insufficient granularity of access control in Windows StateRepository API allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-70223 Windows Console Driver Elevation of Privilege Vulnerability

Microsoft Security Center Center News - Tue, 10/13/2026 - 14:00

Use after free in Windows Console Driver allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-70225 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Microsoft Security Center Center News - Tue, 10/13/2026 - 14:00

Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-70234 Desktop Window Manager Information Disclosure Vulnerability

Microsoft Security Center Center News - Tue, 10/13/2026 - 14:00

Buffer over-read in Desktop Window Manager allows an authorized attacker to disclose information locally.

Categories: Microsoft

CVE-2026-70249 Windows Win32k Elevation of Privilege Vulnerability

Microsoft Security Center Center News - Tue, 10/13/2026 - 14:00

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-70253 Windows Win32k Elevation of Privilege Vulnerability

Microsoft Security Center Center News - Tue, 10/13/2026 - 14:00

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

CVE-2026-70255 Desktop Window Manager Elevation of Privilege Vulnerability

Microsoft Security Center Center News - Tue, 10/13/2026 - 14:00

Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

Pages

Subscribe to Geeksultant aggregator