CVE-2026-70160 — Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVSS 7
NVD · CVE récentesCWE-416
Cyber Threat Dashboard
Cybersecurity watch: alerts, vulnerabilities, news and tools to protect yourself.
5791Items
4124Last 7 days
3Today
2618Critical + high
15/10/2026 03:44Last collection
CVE-2026-70159 — Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny…
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.
CVSS 7.5
NVD · CVE récentesCWE-770
CVE-2026-70158 — Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthor…
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
CVSS 8.8
NVD · CVE récentesCWE-415
CVE-2026-70157 — Heap-based buffer overflow in Windows System Information Console allows an unauthorized attacker to execute c…
Heap-based buffer overflow in Windows System Information Console allows an unauthorized attacker to execute code over a network.
CVSS 9.8
NVD · CVE récentesCWE-122
CVE-2026-70156 — Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges loca…
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
CVSS 7
NVD · CVE récentesCWE-416
CVE-2026-70155 — Missing release of memory after effective lifetime in Windows DNS allows an unauthorized attacker to deny ser…
Missing release of memory after effective lifetime in Windows DNS allows an unauthorized attacker to deny service over a network.
CVSS 7.5
NVD · CVE récentesCWE-401
CVE-2026-70153 — Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute…
Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over a network.
CVSS 9.8
NVD · CVE récentesCWE-122
CVE-2026-70151 — Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
CVSS 7.8
NVD · CVE récentesCWE-416
CVE-2026-70150 — Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges loca…
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
CVSS 7
NVD · CVE récentesCWE-416
CVE-2026-70149 — Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver (csc.sys) al…
Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver (csc.sys) allows an authorized attacker to disclose information locally.
CVSS 8.8
CVE-2026-70148 — Improper authorization in Windows Broadcast DVR User Service allows an authorized attacker to disclose inform…
Improper authorization in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally.
CVSS 6.5
NVD · CVE récentesCWE-441
CVE-2026-70147 — Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute…
Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over a network.
CVSS 9.8
NVD · CVE récentesCWE-122