| CVE-2026-21247 | Improper input validation in Windows Hyper-V allows an authorized attacker to execute code locally. | high | |
| CVE-2025-47380 | Memory corruption while preprocessing IOCTLs in sensors. | high | |
| CVE-2025-47343 | Memory corruption while processing a video session to set video parameters. | high | |
| CVE-2026-42975 | Heap-based buffer overflow in Windows Bluetooth Port Driver allows an unauthorized attacker to execute code over an adjacent network. | high | |
| CVE-2026-49169 | Use after free in DNS Server allows an authorized attacker to execute code over a network. | high | |
| CVE-2026-49178 | Heap-based buffer overflow in Active Directory Domain Services allows an authorized attacker to execute code over a network. | high | |
| CVE-2026-49789 | Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally. | high | |
| CVE-2026-50350 | Exposure of sensitive information to an unauthorized actor in Windows Trusted Runtime Interface Driver allows an authorized attacker to disclose information locally. | medium | |
| CVE-2026-49790 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability | high | |
| CVE-2026-50296 | Use after free in Graphics Kernel allows an authorized attacker to elevate privileges locally. | high | |
| CVE-2026-49800 | Integer overflow or wraparound in Windows Web Proxy Auto-Discovery Protocol (WPAD) allows an authorized attacker to elevate privileges locally. | high | |
| CVE-2026-49807 | Exposure of sensitive information to an unauthorized actor in Windows DirectX allows an unauthorized attacker to disclose information locally. | medium | |
| CVE-2026-50325 | Improper access control in Windows Win32K allows an authorized attacker to elevate privileges locally. | high | |
| CVE-2026-50293 | Use after free in Windows Internal Task Bar allows an authorized attacker to elevate privileges locally. | high | |
| CVE-2026-50694 | Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network. | critical | |
| CVE-2026-54129 | Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally. | high | |
| CVE-2026-54983 | Stack-based buffer overflow in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network. | high | |
| CVE-2026-58601 | Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally. | high | |
| CVE-2026-58609 | Out-of-bounds read in Microsoft Graphics Component allows an unauthorized attacker to execute code locally. | high | |
| CVE-2026-58610 | Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code locally. | high | |
| CVE-2026-54122 | Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code locally. | high | |
| CVE-2026-55001 | Improper certificate validation in Windows Active Directory allows an authorized attacker to elevate privileges locally. | high | |
| CVE-2026-55006 | Insufficient granularity of access control in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally. | high | |
| CVE-2026-56193 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. | low | |
| CVE-2026-58637 | Use after free in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally. | high | |
| CVE-2026-58546 | Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network. | medium | |
| CVE-2026-57096 | Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally. | high | |
| CVE-2026-58540 | Improper authorization in Windows Installer allows an authorized attacker to elevate privileges locally. | high | |
| CVE-2026-58536 | Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. | high | |
| CVE-2026-57087 | Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. | high | |
| CVE-2026-57095 | Exposure of sensitive information to an unauthorized actor in Windows Win32K allows an unauthorized attacker to elevate privileges locally. | high | |
| CVE-2026-57085 | Out-of-bounds read in Windows Print Spooler Components allows an authorized attacker to disclose information locally. | low | |
| CVE-2026-56182 | Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally. | high | |
| CVE-2026-56173 | Use after free in Windows WebView allows an authorized attacker to elevate privileges locally. | high | |
| CVE-2026-56648 | Time-of-check time-of-use (toctou) race condition in Windows Network File System allows an authorized attacker to elevate privileges over a network. | high | |
| CVE-2026-55137 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | high | |
| CVE-2026-55131 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | high | |
| CVE-2026-55036 | Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | high | |
| CVE-2026-50313 | Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally. | high | |
| CVE-2026-50326 | Use after free in Windows Unified Consent System allows an authorized attacker to elevate privileges locally. | high | |
| CVE-2026-50335 | Improper access control in Windows Operating Systems allows an authorized attacker to elevate privileges locally. | high | |
| CVE-2026-50336 | Heap-based buffer overflow in Windows Media allows an authorized attacker to elevate privileges locally. | high | |
| CVE-2026-50337 | Incorrect type conversion or cast in Windows Notification allows an authorized attacker to elevate privileges locally. | high | |
| CVE-2026-50509 | Deserialization of untrusted data in Windows Wireless Wide Area Network Service allows an authorized attacker to elevate privileges locally. | high | |
| CVE-2026-50365 | Improper authentication in Windows RPC API allows an unauthorized attacker to elevate privileges over an adjacent network. | high | |
| CVE-2026-50368 | Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network. | high | |
| CVE-2026-50490 | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. | high | |
| CVE-2026-50376 | Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network. | medium | |
| CVE-2026-50352 | Exposure of sensitive information to an unauthorized actor in Windows Cryptographic Services allows an authorized attacker to disclose information locally. | medium | |
| CVE-2026-50493 | Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. | high | |
