CVE Vulnerability Database

Complete database of CVE vulnerabilities. Track critical security threats, exploits and patches. Updated daily from NVD NIST.

CVE-2026-96856

7.8

Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.

Microsoft
Details

CVE-2026-96855

5.5

Improper access control in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally.

Microsoft
Details

CVE-2026-96854

5.5

Access of resource using incompatible type ('type confusion') in Windows Device Association Service allows an authorized attacker to disclose information locally.

Microsoft
Details

CVE-2026-96853

4.7

Time-of-check time-of-use (toctou) race condition in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

Microsoft
Details

CVE-2026-96852

7.0

Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

Microsoft
Details

CVE-2026-96851

5.5

Buffer over-read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.

Microsoft
Details

CVE-2026-96850

5.5

Use of uninitialized resource in Windows Modern Device Management (MDM) allows an authorized attacker to disclose information locally.

Microsoft
Details

CVE-2026-96849

5.5

Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.

Microsoft
Details

CVE-2026-96848

5.5

Buffer over-read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

Microsoft
Details

CVE-2026-96847

7.8

Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally.

Microsoft
Details
← 1025/12314 →