| CVE-2026-32075 | Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally. | high | |
| CVE-2026-26173 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. | high | |
| CVE-2026-27925 | Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an unauthorized attacker to disclose information over an adjacent network. | medium | |
| CVE-2026-72970 | Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. | high | |
| CVE-2026-67379 | Stack-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. | high | |
| CVE-2026-68825 | Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally. | high | |
| CVE-2026-68851 | Buffer over-read in Windows NTFS allows an authorized attacker to disclose information locally. | medium | |
| CVE-2026-68840 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Driver allows an authorized attacker to elevate privileges locally. | high | |
| CVE-2026-68837 | Use after free in Windows File History Service allows an authorized attacker to elevate privileges locally. | high | |
| CVE-2026-68842 | Exposure of sensitive system information to an unauthorized control sphere in Windows MIDI Service Module allows an authorized attacker to disclose information locally. | medium | |
| CVE-2026-69389 | Heap-based buffer overflow in Windows Storage Management Provider allows an authorized attacker to elevate privileges locally. | high | |
| CVE-2026-69390 | Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information locally. | medium | |
| CVE-2026-69447 | Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally. | high | |
| CVE-2026-69574 | Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally. | high | |
| CVE-2026-69585 | Incorrect type conversion or cast in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. | high | |
| CVE-2026-69593 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. | high | |
| CVE-2026-69770 | Use of uninitialized resource in Windows Spaceport.sys allows an authorized attacker to disclose information locally. | medium | |
| CVE-2026-69930 | Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to disclose information over a network. | high | |
| CVE-2026-69860 | Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network. | high | |
| CVE-2026-70577 | Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally. | high | |
| CVE-2026-72942 | Out-of-bounds read in Windows Spaceport.sys allows an unauthorized attacker to disclose information over a network. | medium | |
| CVE-2026-72945 | Use of uninitialized resource in Windows Task Scheduler allows an authorized attacker to disclose information locally. | medium | |
| CVE-2026-72926 | Use after free in Windows Internet Connection Sharing (ICS) allows an authorized attacker to elevate privileges locally. | high | |
| CVE-2026-71333 | Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally. | high | |
| CVE-2026-72939 | Null pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to deny service over a network. | medium | |
| CVE-2026-73007 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. | high | |
| CVE-2026-77904 | Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally. | high | |
| CVE-2026-77896 | Integer overflow or wraparound in Remote Desktop Client allows an unauthorized attacker to deny service over a network. | high | |
| CVE-2026-77486 | Integer overflow or wraparound in SQL Server allows an unauthorized attacker to execute code over a network. | high | |
| CVE-2026-78453 | Integer underflow (wrap or wraparound) in Microsoft Windows SCSI Class System File allows an unauthorized attacker to disclose information over a network. | medium | |
| CVE-2026-77894 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally. | high | |
| CVE-2026-78508 | Out-of-bounds read in Windows CD-ROM Driver allows an unauthorized attacker to disclose information with a physical attack. | medium | |
| CVE-2026-81397 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | high | |
| CVE-2026-84001 | Out-of-bounds read in Windows Key Distribution Center allows an unauthorized attacker to deny service over a network. | high | |
| CVE-2026-83997 | Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network. | high | |
| CVE-2026-81377 | Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an unauthorized attacker to perform tampering over a network. | medium | |
| CVE-2026-78521 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | high | |
| CVE-2026-72956 | Untrusted pointer dereference in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network. | medium | |
| CVE-2026-72974 | Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. | medium | |
| CVE-2026-69629 | Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. | high | |
| CVE-2026-69462 | Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over a network. | high | |
| CVE-2026-83983 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. | high | |
| CVE-2026-69607 | Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network. | high | |
| CVE-2026-69680 | Origin validation error in Windows DNS allows an unauthorized attacker to perform spoofing over a network. | high | |
| CVE-2026-80081 | Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. | high | |
| CVE-2026-69803 | Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to disclose information over a network. | high | |
| CVE-2026-20920 | Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally. | high | |
| CVE-2026-21518 | Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network. | high | |
| CVE-2026-41610 | Improper neutralization of input during web page generation ('cross-site scripting') in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally. | medium | |
| CVE-2026-41611 | Improper neutralization of script-related html tags in a web page (basic xss) in Visual Studio Code allows an unauthorized attacker to execute code locally. | low | |
