CVE Notify
19.7K subscribers
4 photos
286K links
Alert on the latest CVEs

Partner channel: @malwr
Download Telegram
🚨 CVE-2026-61364
Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.

🎖@cveNotify
🚨 CVE-2026-61365
Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.

🎖@cveNotify
🚨 CVE-2026-61367
Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.

🎖@cveNotify
🚨 CVE-2026-61920
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DNS allows an authorized attacker to execute code over a network.

🎖@cveNotify
🚨 CVE-2026-61925
Incorrect authorization in Windows Installer allows an authorized attacker to elevate privileges locally.

🎖@cveNotify
🚨 CVE-2026-61926
Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.

🎖@cveNotify
🚨 CVE-2026-61929
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

🎖@cveNotify
🚨 CVE-2026-61930
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

🎖@cveNotify
🚨 CVE-2026-61932
Access of resource using incompatible type ('type confusion') in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

🎖@cveNotify
🚨 CVE-2026-61934
Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.

🎖@cveNotify
🚨 CVE-2026-61937
Integer overflow or wraparound in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.

🎖@cveNotify
🚨 CVE-2026-61938
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

🎖@cveNotify
🚨 CVE-2026-61939
Use after free in Winlogon allows an authorized attacker to elevate privileges locally.

🎖@cveNotify
🚨 CVE-2026-62688
Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.

🎖@cveNotify
🚨 CVE-2026-62690
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate privileges locally.

🎖@cveNotify
🚨 CVE-2026-62692
Heap-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.

🎖@cveNotify
🚨 CVE-2026-62693
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.

🎖@cveNotify
🚨 CVE-2026-62695
Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.

🎖@cveNotify
🚨 CVE-2026-62696
Integer underflow (wrap or wraparound) in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.

🎖@cveNotify
🚨 CVE-2026-62700
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.

🎖@cveNotify
🚨 CVE-2026-62701
Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

🎖@cveNotify