CVE-2026-70285 is a heap-based buffer overflow vulnerability in the Windows Win32 Kernel Subsystem affecting multiple Windows 10 Version 1607 builds. It allows an authorized local attacker to elevate privileges. The vulnerability has a high severity CVSS score of 7.8 and has been officially fixed in multiple Windows 10 updates.
CVE-2026-70278 is a heap-based buffer overflow vulnerability in Microsoft Windows Media Foundation affecting Windows 10 Version 1607 and related builds. It allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity score of 7.8 and has been officially fixed in multiple Windows 10 builds.
CVE-2026-70255 is a heap-based buffer overflow vulnerability in the Desktop Window Manager component of Microsoft Windows 10 Version 1809 and related builds. An authorized local attacker can exploit this flaw to elevate privileges. The vulnerability has a high severity rating with a CVSS score of 7.8. Microsoft has released official fixes for all affected versions.
CVE-2026-70233 is a heap-based buffer overflow vulnerability in the Windows Common Log File System Driver affecting Windows 10 Version 1607 and related builds. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has a high severity rating with a CVSS score of 7.8. Microsoft has released official fixes for all affected versions.
CVE-2026-70138 is a heap-based buffer overflow vulnerability in Windows OLE affecting multiple versions of Microsoft Windows 10, including Version 1607 and later builds. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has a high severity score of 7.8 and has been officially fixed in several Windows 10 updates.
CVE-2026-70132 is a heap-based buffer overflow vulnerability in the Windows Portable Device File System Driver affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has a high severity rating with a CVSS score of 7.8. Microsoft has released official fixes for all affected versions.
CVE-2026-70123 is a numeric truncation error vulnerability in the Microsoft Graphics Component of Windows 10 Version 1607 and related builds. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has a high severity rating with a CVSS score of 7.8. Microsoft has released official fixes for all affected versions.
CVE-2026-70114 is a heap-based buffer overflow vulnerability in the Windows Kernel of Microsoft Windows 11 version 23H2. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has a high severity score of 7.8 and affects multiple builds of Windows 11 23H2 prior to specific fixed versions. Microsoft has released official fixes for this issue.
CVE-2026-70117 is a heap-based buffer overflow vulnerability in the Windows Win32 Kernel Subsystem affecting multiple builds of Windows 10 Version 1607 and later. It allows an authorized local attacker to elevate privileges. The vulnerability has a high severity score of 7.8 and has been officially fixed in specific Windows 10 builds.
CVE-2026-70108 is a heap-based buffer overflow vulnerability in the Windows Win32 Kernel Subsystem affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity score of 7.8 and has been officially fixed in several Windows 10 builds.
CVE-2026-70139 is a heap-based buffer overflow vulnerability in the Windows Update Service affecting multiple versions of Microsoft Windows 10, including Version 1607 and later builds. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has a high severity rating with a CVSS score of 7.8. Microsoft has released official fixes for all affected versions.
CVE-2026-70121 is a heap-based buffer overflow vulnerability in the Windows Kernel affecting Windows 10 Version 1809 and related builds. It allows an authorized local attacker to elevate privileges. The vulnerability has a high severity with a CVSS score of 7.8. Official fixes have been released for all affected versions.
CVE-2026-70106 is a heap-based buffer overflow vulnerability affecting Microsoft Office 365 for Mac and certain Windows Kernel versions. It allows an authorized local attacker to elevate privileges. The vulnerability has a high severity score of 7.8 and has been officially fixed in multiple versions. No known exploits are reported in the wild.
CVE-2026-70096 is a critical heap-based buffer overflow vulnerability in the Windows Rich Text Edit Control component used by Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code remotely over a network without user interaction or privileges. The vulnerability affects multiple versions of Microsoft 365 Apps for Enterprise and certain Windows builds. Official fixes have been released by Microsoft to address this issue.
CVE-2026-70093 is a heap-based buffer overflow vulnerability in the Windows Rich Text Edit Control affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has a high severity score and has been officially fixed by Microsoft in specific updates.
CVE-2026-70103 is a heap-based buffer overflow vulnerability in Windows Error Reporting on Microsoft Windows 10 Version 1607 and later builds up to specific patched versions. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has a high severity rating with a CVSS score of 7.8. Microsoft has released official fixes for affected versions.
CVE-2026-70095 is a heap-based buffer overflow vulnerability in the Windows iSCSI component affecting multiple Windows 10 versions including Version 1607. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability has a high severity CVSS score of 7.5 and has been officially fixed in multiple Windows updates.
CVE-2026-70060 is a heap-based buffer overflow vulnerability in the Windows Win32 Kernel Subsystem affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity score of 7.8 and has been officially fixed in various Windows 10 builds.
CVE-2026-70059 is a heap-based buffer overflow vulnerability in Windows OLE affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows an authorized local attacker to elevate privileges. Microsoft has released official fixes for all affected versions. The vulnerability has a high severity rating with a CVSS score of 7.8.
CVE-2026-70027 is a heap-based buffer overflow vulnerability in the Windows Subsystem for Linux component of Microsoft Windows 10 Version 21H2. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has a high severity score of 7.8 and affects multiple Windows 10 builds prior to specific fixed versions. Microsoft has released official fixes for the affected versions.