CVE-2026-96007 Connected Devices Platform Service (Cdpsvc) Elevation of Privilege Vulnerability
Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally.
CVE-2026-96020 Windows Domain Name Service Remote Code Execution Vulnerability
Out-of-bounds write in DNS Server allows an authorized attacker to execute code over a network.
CVE-2026-96016 Windows Local Security Authority Subsystem Service (LSASS) Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.
CVE-2026-96017 Role: DNS Server Denial of Service Vulnerability
Use after free in DNS Server allows an authorized attacker to deny service over a network.
CVE-2026-96019 Windows Installer Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-96022 Windows Text Services Framework Information Disclosure Vulnerability
Use of uninitialized resource in Windows Text Services Framework allows an authorized attacker to disclose information locally.
CVE-2026-96023 Windows Push Notification Core Elevation of Privilege Vulnerability
Use after free in Windows Push Notification Core allows an authorized attacker to elevate privileges locally.
CVE-2026-96029 Windows Installer Elevation of Privilege Vulnerability
Improper access control in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-96037 Windows User Manager Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows User Manager Service allows an authorized attacker to elevate privileges locally.
CVE-2026-96027 Windows Installer Elevation of Privilege Vulnerability
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-96028 Windows Installer Elevation of Privilege Vulnerability
Access of resource using incompatible type ('type confusion') in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-96035 Windows Installer Elevation of Privilege Vulnerability
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-96036 Windows Installer Elevation of Privilege Vulnerability
Integer overflow or wraparound in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-96038 Windows Audio Service Elevation of Privilege Vulnerability
Inclusion of functionality from untrusted control sphere in Windows Audio Service allows an authorized attacker to elevate privileges locally.
CVE-2026-96041 Windows USB Hub Driver Information Disclosure Vulnerability
Out-of-bounds read in Windows USB Hub Driver allows an authorized attacker to disclose information locally.
CVE-2026-96042 Windows Connection Manager Service Elevation of Privilege Vulnerability
Use after free in Windows Connection Manager Service allows an authorized attacker to elevate privileges locally.
CVE-2026-96051 Windows USB Driver Elevation of Privilege Vulnerability
Out-of-bounds read in Windows USB Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-96055 Windows USB Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-96057 Windows USB Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-96060 Windows Installer Elevation of Privilege Vulnerability
Out-of-bounds read in Windows Installer allows an authorized attacker to elevate privileges locally.


