CVE Database

CVE-2026-70077 Medium · 4.7 CWE-416 Oct 13, 2026

Windows Kernel Information Disclosure Vulnerability

Use after free in Windows Kernel allows an authorized attacker to disclose information locally.

CVE-2026-70076 High · 7.0 CWE-416 Oct 13, 2026

Windows Win32k Elevation of Privilege Vulnerability

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

CVE-2026-70067 High · 7.0 CWE-416 Oct 13, 2026

Windows Win32k Elevation of Privilege Vulnerability

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

CVE-2026-70066 High · 7.0 CWE-416 Oct 13, 2026

Windows DHCP Server Elevation of Privilege Vulnerability

Use after free in Windows DHCP Server allows an authorized attacker to elevate privileges locally.

CVE-2026-70056 High · 7.0 CWE-416 Oct 13, 2026

Windows Update Service Elevation of Privilege Vulnerability

Use after free in Windows Update Service allows an authorized attacker to elevate privileges locally.

CVE-2026-70045 High · 7.0 CWE-416 Oct 13, 2026

Windows Work Folders Elevation of Privilege Vulnerability

Use after free in Windows Work Folders allows an authorized attacker to elevate privileges locally.

CVE-2026-70026 High · 7.0 CWE-416 Oct 13, 2026

Windows Secure Kernel Mode Elevation of Privilege Vulnerability

Use after free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.

CVE-2026-70025 Medium · 6.5 CWE-416 Oct 13, 2026

Windows Netlogon Denial of Service Vulnerability

Use after free in Windows Netlogon allows an authorized attacker to deny service over a network.

CVE-2026-70023 High · 7.8 CWE-416 Oct 13, 2026

Windows Hyper-V Elevation of Privilege Vulnerability

Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

CVE-2026-70021 High · 7.0 CWE-416 Oct 13, 2026

Windows Direct Composition Elevation of Privilege Vulnerability

Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.

CVE-2026-70014 High · 7.5 CWE-416 Oct 13, 2026

Windows Cryptographic Services Remote Code Execution Vulnerability

Use after free in Windows Cryptographic Services allows an authorized attacker to execute code over a network.

CVE-2026-70013 High · 8.1 CWE-416 Oct 13, 2026

Windows iSCSI Remote Code Execution Vulnerability

Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.

CVE-2026-70012 High · 7.5 CWE-416 Oct 13, 2026