CVE-2026-70164 — Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
CVSS 7
NVD · CVE récentesCWE-416
Cyber Threat Dashboard
Cybersecurity watch: alerts, vulnerabilities, news and tools to protect yourself.
5895Items
4308Last 7 days
187Today
2615Critical + high
15/10/2026 15:46Last collection
CVE-2026-70163 — Allocation of resources without limits or throttling in OpenSSH for Windows allows an unauthorized attacker t…
Allocation of resources without limits or throttling in OpenSSH for Windows allows an unauthorized attacker to deny service over a network.
CVSS 7.5
NVD · CVE récentesCWE-770
CVE-2026-70162 — A denial of service vulnerability exists when Microsoft Common Object Runtime Library improperly handles web…
A denial of service vulnerability exists when Microsoft Common Object Runtime Library improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against a …
CVSS 5.9
NVD · CVE récentesCWE-405
CVE-2026-70161 — Improper limitation of a pathname to a restricted directory ('path traversal') in .NET allows an authorized a…
Improper limitation of a pathname to a restricted directory ('path traversal') in .NET allows an authorized attacker to elevate privileges locally.
CVSS 7.3
NVD · CVE récentesCWE-22
CVE-2026-70160 — Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVSS 7
NVD · CVE récentesCWE-416
CVE-2026-70159 — Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny…
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.
CVSS 7.5
NVD · CVE récentesCWE-770
CVE-2026-70158 — Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthor…
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
CVSS 8.8
NVD · CVE récentesCWE-415
CVE-2026-70157 — Heap-based buffer overflow in Windows System Information Console allows an unauthorized attacker to execute c…
Heap-based buffer overflow in Windows System Information Console allows an unauthorized attacker to execute code over a network.
CVSS 9.8
NVD · CVE récentesCWE-122
CVE-2026-70156 — Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges loca…
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
CVSS 7
NVD · CVE récentesCWE-416
CVE-2026-70155 — Missing release of memory after effective lifetime in Windows DNS allows an unauthorized attacker to deny ser…
Missing release of memory after effective lifetime in Windows DNS allows an unauthorized attacker to deny service over a network.
CVSS 7.5
NVD · CVE récentesCWE-401
CVE-2026-70153 — Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute…
Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over a network.
CVSS 9.8
NVD · CVE récentesCWE-122
CVE-2026-70151 — Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
CVSS 7.8
NVD · CVE récentesCWE-416