Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
CVE-2026-70115
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
2026-10-29 归档
今日共收录 3209 条安全情报，包含 2330 个 CVE，388 篇安全通告，以及 93 篇研究论文。
← 返回归档列表Stack-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker to bypass a security feature with a physical attack.
CVE-2026-70116
Stack-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker to bypass a security
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
CVE-2026-70118
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
Out-of-bounds read in Windows HTTP.sys allows an authorized attacker to disclose information locally.
CVE-2026-70208
Out-of-bounds read in Windows HTTP.sys allows an authorized attacker to disclose information locally.
Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-70210
Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to elevate privileges over a network.
Improper restriction of communication channel to intended endpoints in Windows Security Center allows an authorized attacker to elevate privileges locally.
CVE-2026-70212
Improper restriction of communication channel to intended endpoints in Windows Security Center allows an authorized atta
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
CVE-2026-69988
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
CVE-2026-85368
Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
Insufficient granularity of access control in Windows Mobile Device Management allows an authorized attacker to perform tampering locally.
CVE-2026-70216
Insufficient granularity of access control in Windows Mobile Device Management allows an authorized attacker to perform
Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally.
CVE-2026-70222
Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally.
Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
CVE-2026-85369
Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
Use after free in Windows Console Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-70223
Use after free in Windows Console Driver allows an authorized attacker to elevate privileges locally.
Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
CVE-2026-70225
Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an
Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-70005
Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to bypass a security
Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally.
CVE-2026-70227
Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally.
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
CVE-2026-70230
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
Insufficient granularity of access control in Windows StateRepository API allows an authorized attacker to elevate privileges locally.
CVE-2026-70218
Insufficient granularity of access control in Windows StateRepository API allows an authorized attacker to elevate privi
Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-70233
Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges
Improper authentication in Windows Event Tracing allows an authorized attacker to perform spoofing locally.
CVE-2026-70235
Improper authentication in Windows Event Tracing allows an authorized attacker to perform spoofing locally.
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
CVE-2026-70237
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges loca