CVE-2026-70142 — Untrusted search path in Windows Update Service allows an authorized attacker to elevate privileges locally.
Untrusted search path in Windows Update Service allows an authorized attacker to elevate privileges locally.
Cybersecurity watch: alerts, vulnerabilities, news and tools to protect yourself.
Untrusted search path in Windows Update Service allows an authorized attacker to elevate privileges locally.
Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in Windows Update Service allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally.
Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to disclose information locally.
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
Out-of-bounds read in Windows Remote POS Driver allows an authorized attacker to disclose information locally.
Use after free in Windows Event Tracing allows an authorized attacker to elevate privileges locally.
Allocation of resources without limits or throttling in Windows SMB Server allows an unauthorized attacker to deny service over a network.
Heap-based buffer overflow in Windows Portable Device File System Driver allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to elevate privileges locally.