Ad

CVE Vulnerability Database

Complete database of CVE vulnerabilities. Track critical security threats, exploits and patches. Updated daily from NVD NIST.

CVE-2026-26176

7.8

Heap-based buffer overflow in Windows Client Side Caching driver (csc.sys) allows an authorized attacker to elevate privileges locally.

Heap-based
Details

CVE-2026-26175

4.6

Use of uninitialized resource in Windows Boot Manager allows an unauthorized attacker to bypass a security feature with a physical attack.

Details

CVE-2026-26174

7.0

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Server Update Service allows an authorized attacker to elevate privileges locally.

Concurrent
Details

CVE-2026-26173

7.0

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

Concurrent
Details

CVE-2026-26172

7.8

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate privileges locally.

Concurrent
Details

CVE-2026-26171

7.5

Uncontrolled resource consumption in .NET allows an unauthorized attacker to deny service over a network.

Uncontrolled
Details

CVE-2026-26170

7.8

Improper input validation in Microsoft PowerShell allows an authorized attacker to elevate privileges locally.

Microsoft
Details

CVE-2026-26169

6.1

Buffer over-read in Windows Kernel Memory allows an authorized attacker to disclose information locally.

Details

CVE-2026-26168

7.8

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

Concurrent
Details

CVE-2026-26167

8.8

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate privileges locally.

Concurrent
Details
50/3864