CVE-2026-112798 Windows NetBIOS Elevation of Privilege Vulnerability
Use after free in Windows NetBIOS allows an authorized attacker to elevate privileges locally.
CVE-2026-112799 Windows Projected File System Elevation of Privilege Vulnerability
Stack-based buffer overflow in Windows Projected File System allows an authorized attacker to elevate privileges locally.
CVE-2026-112800 Windows Diagnostic Policy Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Diagnostic Policy Service allows an authorized attacker to elevate privileges locally.
CVE-2026-112801 Windows eSCL Scanner Elevation of Privilege Vulnerability
Insufficiently protected credentials in Windows eSCL Scanner allows an authorized attacker to elevate privileges locally.
CVE-2026-112802 Windows Kernel Elevation of Privilege Vulnerability
Missing authorization in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-112803 Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability
Improper access control in Windows Cloud Files Mini Filter Driver allows an authorized attacker to disclose information locally.
CVE-2026-112804 Windows exFAT File System Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate privileges locally.
CVE-2026-112805 Windows Kernel Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-112806 Windows Print Spooler Components Information Disclosure Vulnerability
Insufficiently protected credentials in Windows Print Spooler Components allows an authorized attacker to disclose information locally.
CVE-2026-112807 Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability
Heap-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to deny service over a network.
CVE-2026-112808 Windows Print Spooler Components Information Disclosure Vulnerability
Exposure of sensitive system information to an unauthorized control sphere in Windows Print Spooler Components allows an authorized attacker to disclose information over a network.
CVE-2026-112809 Windows Composite Image File System Information Disclosure Vulnerability
Improper access control in Windows Composite Image File System allows an authorized attacker to disclose information locally.
CVE-2026-112810 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
Time-of-check time-of-use (toctou) race condition in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-112811 Windows Print Spooler Components Elevation of Privilege Vulnerability
Stack-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
CVE-2026-112812 Windows SMB Client Elevation of Privilege Vulnerability
Use after free in Windows SMB Client allows an authorized attacker to elevate privileges locally.
CVE-2026-112813 Windows Overlay Filter Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
CVE-2026-112814 Windows Management Instrumentation Elevation of Privilege Vulnerability
Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.
CVE-2026-112965 Windows Management Instrumentation Information Disclosure Vulnerability
Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.
CVE-2026-112966 Windows Security Account Manager Denial of Service Vulnerability
Uncontrolled resource consumption in Windows Security Account Manager allows an unauthorized attacker to deny service over a network.
CVE-2026-112967 Windows Xbox Live Networking Service Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Xbox Live Networking Service allows an unauthorized attacker to execute code over a network.


