Microsoft Windows 10 1809 vulnerabilities

CVE-2026-70232 Medium · 5.5 CWE-497 Oct 13, 2026

Windows Kernel Information Disclosure Vulnerability

Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally.

CVE-2026-70211 Medium · 5.5 CWE-125 Oct 13, 2026

Win32k Information Disclosure Vulnerability

Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

CVE-2026-70209 High · 7.0 CWE-416 Oct 13, 2026

Windows Win32k Elevation of Privilege Vulnerability

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

CVE-2026-70199 Medium · 5.5 CWE-497 Oct 13, 2026

Windows Kernel Information Disclosure Vulnerability

Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally.

CVE-2026-70176 High · 7.0 CWE-416 Oct 13, 2026

Windows Win32k Elevation of Privilege Vulnerability

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

CVE-2026-70170 Medium · 6.5 CWE-822 Oct 13, 2026

Windows Kernel Denial of Service Vulnerability

Untrusted pointer dereference in Windows Kernel allows an authorized attacker to deny service over a network.

CVE-2026-70166 Medium · 6.5 CWE-125 Oct 13, 2026

Windows DNS Denial of Service Vulnerability

Out-of-bounds read in Windows DNS allows an authorized attacker to deny service over a network.

CVE-2026-70160 High · 7.0 CWE-416 Oct 13, 2026

Windows Kernel Elevation of Privilege Vulnerability

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-70155 High · 7.5 CWE-401 Oct 13, 2026

Windows DNS Denial of Service Vulnerability

Missing release of memory after effective lifetime in Windows DNS allows an unauthorized attacker to deny service over a network.

CVE-2026-70127 High · 8.1 CWE-416 Oct 13, 2026

Windows Domain Name Service Remote Code Execution Vulnerability

Use after free in DNS Server allows an unauthorized attacker to execute code over a network.

CVE-2026-70121 High · 7.8 CWE-122 Oct 13, 2026

Windows Kernel Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-70117 High · 7.8 CWE-122 Oct 13, 2026

Windows Win32k Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

CVE-2026-70111 High · 8.1 CWE-822 Oct 13, 2026

Windows Kernel Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows Kernel allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-70108 High · 7.8 CWE-122 Oct 13, 2026

Windows Win32k Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

CVE-2026-70106 High · 7.8 CWE-122 Oct 13, 2026

Windows Kernel Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-70104 High · 7.8 CWE-822 Oct 13, 2026

Windows Win32k Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

CVE-2026-70103 High · 7.8 CWE-122 Oct 13, 2026

Windows Error Reporting Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

CVE-2026-70102 High · 7.8 CWE-416 Oct 13, 2026

Windows Spaceport.sys Elevation of Privilege Vulnerability

Use after free in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.

CVE-2026-70095 High · 7.5 CWE-122 Oct 13, 2026

Windows iSCSI Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a network.

CVE-2026-70093 High · 7.8 CWE-122 Oct 13, 2026

Windows Rich Text Edit Control Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Rich Text Edit Control allows an authorized attacker to elevate privileges locally.

CVE-2026-70092 High · 7.8 CWE-122 Oct 13, 2026

Microsoft PostScript Printer Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally.

CVE-2026-70087 Medium · 5.5 CWE-863 Oct 13, 2026

Role: DNS Server Security Feature Bypass Vulnerability

Incorrect authorization in DNS Server allows an authorized attacker to bypass a security feature locally.

CVE-2026-70083 Medium · 5.5 CWE-863 Oct 13, 2026

Role: DNS Server Tampering Vulnerability

Incorrect authorization in DNS Server allows an authorized attacker to perform tampering locally.

CVE-2026-70079 High · 7.5 CWE-841 Oct 13, 2026

Windows DNS Denial of Service Vulnerability

Improper enforcement of behavioral workflow in Windows DNS allows an unauthorized attacker to deny service over a network.

CVE-2026-70074 Medium · 5.5 CWE-125 Oct 13, 2026

Windows DNS Information Disclosure Vulnerability

Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information locally.