Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-88134
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
2026-10-29 归档
今日共收录 3209 条安全情报，包含 2330 个 CVE，388 篇安全通告，以及 93 篇研究论文。
← 返回归档列表Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally.
CVE-2026-88140
Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally.
Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.
CVE-2026-88142
Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code
Out-of-bounds read in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.
CVE-2026-83637
Out-of-bounds read in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.
CVE-2026-88143
Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges loca
Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally.
CVE-2026-83636
Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally.
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Background Intelligent Transfer Service (BITS) allows an authorized attack...
CVE-2026-88146
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Background Intell
Double free in Windows BitLocker allows an authorized attacker to elevate privileges locally.
CVE-2026-83634
Double free in Windows BitLocker allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to elevate privileges locally.
CVE-2026-88147
Heap-based buffer overflow in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to elevate p
Double free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
CVE-2026-88149
Double free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally
Use after free in Windows Smart Card allows an authorized attacker to elevate privileges locally.
CVE-2026-83584
Use after free in Windows Smart Card allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.
CVE-2026-88157
Heap-based buffer overflow in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.
Use of externally-controlled format string in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVE-2026-83585
Use of externally-controlled format string in Windows NTFS allows an authorized attacker to elevate privileges locally.
Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.
CVE-2026-88159
Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code
Use after free in Windows Graphics Kernel allows an authorized attacker to disclose information locally.
CVE-2026-83582
Use after free in Windows Graphics Kernel allows an authorized attacker to disclose information locally.
Heap-based buffer overflow in Windows Smart Card allows an authorized attacker to elevate privileges locally.
CVE-2026-83579
Heap-based buffer overflow in Windows Smart Card allows an authorized attacker to elevate privileges locally.
Missing authentication for critical function in Windows Security Account Manager allows an authorized attacker to perform tampering locally.
CVE-2026-96858
Missing authentication for critical function in Windows Security Account Manager allows an authorized attacker to perfor
Out-of-bounds read in Windows Imaging Component allows an authorized attacker to disclose information locally.
CVE-2026-96859
Out-of-bounds read in Windows Imaging Component allows an authorized attacker to disclose information locally.
Out-of-bounds read in Windows USB Print Driver allows an authorized attacker to disclose information locally.
CVE-2026-96860
Out-of-bounds read in Windows USB Print Driver allows an authorized attacker to disclose information locally.
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
CVE-2026-83575
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.