| CVE-2026-105510 | HIGH | 7.0 | Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to elevate pri… | 2026-11-10 |
| CVE-2026-105511 | HIGH | 7.0 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Point-t… | 2026-11-10 |
| CVE-2026-105512 | HIGH | 7.5 | Integer underflow (wrap or wraparound) in Microsoft QUIC allows an unauthorized attacker to deny service over … | 2026-11-10 |
| CVE-2026-105513 | HIGH | 7.0 | An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory. A… | 2026-11-10 |
| CVE-2026-105515 | HIGH | 7.5 | Buffer over-read in Windows Message Queuing allows an unauthorized attacker to deny service over a network.… | 2026-11-10 |
| CVE-2026-105518 | HIGH | 8.8 | Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.… | 2026-11-10 |
| CVE-2026-105520 | HIGH | 7.2 | Improper link resolution before file access ('link following') in Windows DNS allows an authorized attacker to… | 2026-11-10 |
| CVE-2026-105522 | HIGH | 7.0 | Use after free in Winlogon allows an authorized attacker to elevate privileges locally.… | 2026-11-10 |
| CVE-2026-105524 | HIGH | 7.8 | Weak authentication in Windows Management Instrumentation allows an authorized attacker to elevate privileges … | 2026-11-10 |
| CVE-2026-105525 | HIGH | 7.0 | Integer overflow or wraparound in Windows Network Connection Broker allows an authorized attacker to elevate p… | 2026-11-10 |
| CVE-2026-105526 | HIGH | 7.0 | Double free in Winsock allows an authorized attacker to elevate privileges locally.… | 2026-11-10 |
| CVE-2026-105527 | MEDIUM | 5.5 | Untrusted pointer dereference in Windows Encrypting File System (EFS) allows an authorized attacker to deny se… | 2026-11-10 |
| CVE-2026-105528 | HIGH | 7.8 | Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges local… | 2026-11-10 |
| CVE-2026-105529 | HIGH | 7.0 | Weak authentication in Windows Storage allows an authorized attacker to elevate privileges locally.… | 2026-11-10 |
| CVE-2026-105530 | MEDIUM | 5.5 | Use after free in Windows System Events Broker allows an authorized attacker to disclose information locally.… | 2026-11-10 |
| CVE-2026-105531 | MEDIUM | 5.5 | External control of file name or path in Windows Print Spooler Components allows an authorized attacker to dis… | 2026-11-10 |
| CVE-2026-105532 | HIGH | 7.8 | Improper link resolution before file access ('link following') in Windows Installer allows an authorized attac… | 2026-11-10 |
| CVE-2026-105533 | HIGH | 7.0 | Release of invalid pointer or reference in Windows COM allows an authorized attacker to elevate privileges loc… | 2026-11-10 |
| CVE-2026-105534 | HIGH | 8.8 | Heap-based buffer overflow in Windows Storage allows an unauthorized attacker to execute code over a network.… | 2026-11-10 |
| CVE-2026-105537 | MEDIUM | 5.5 | Use of uninitialized resource in Mailslot File System allows an authorized attacker to disclose information lo… | 2026-11-10 |
| CVE-2026-105540 | HIGH | 7.0 | Incorrect resource transfer between spheres in Windows Error Reporting allows an authorized attacker to elevat… | 2026-11-10 |
| CVE-2026-105541 | HIGH | 7.8 | Use of out-of-range pointer offset in Windows Audio Service allows an authorized attacker to elevate privilege… | 2026-11-10 |
| CVE-2026-105542 | HIGH | 8.8 | Untrusted pointer dereference in Windows NTFS allows an unauthorized attacker to execute code over a network.… | 2026-11-10 |
| CVE-2026-105543 | HIGH | 7.8 | Null pointer dereference in Windows Installer allows an authorized attacker to elevate privileges locally.… | 2026-11-10 |
| CVE-2026-105544 | HIGH | 7.5 | Improper access control in .NET allows an authorized attacker to elevate privileges locally.… | 2026-11-10 |
| CVE-2026-105545 | HIGH | 7.0 | An elevation of privilege vulnerability exists in the Windows Installer when the Windows Installer fails to pr… | 2026-11-10 |
| CVE-2026-105546 | HIGH | 7.0 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Managem… | 2026-11-10 |
| CVE-2026-105547 | HIGH | 7.0 | Double free in Windows Setup and Deployment allows an authorized attacker to elevate privileges locally.… | 2026-11-10 |
| CVE-2026-105549 | MEDIUM | 4.3 | Out-of-bounds read in Windows Smart Card allows an authorized attacker to disclose information with a physical… | 2026-11-10 |
| CVE-2026-105551 | HIGH | 7.5 | Heap-based buffer overflow in Windows NetBIOS allows an unauthorized attacker to elevate privileges over a net… | 2026-11-10 |
| CVE-2026-105552 | MEDIUM | 5.5 | An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memor… | 2026-11-10 |
| CVE-2026-105553 | HIGH | 7.0 | Stack-based buffer overflow in Windows Filtering Platform (WFP) allows an authorized attacker to elevate privi… | 2026-11-10 |
| CVE-2026-105554 | HIGH | 7.0 | Heap-based buffer overflow in Windows Background Intelligent Transfer Service (BITS) allows an authorized atta… | 2026-11-10 |
| CVE-2026-105557 | MEDIUM | 5.9 | Exposure of sensitive system information to an unauthorized control sphere in Windows DHCP Server allows an un… | 2026-11-10 |
| CVE-2026-105558 | HIGH | 7.5 | Heap-based buffer overflow in Windows Deployment Services allows an authorized attacker to execute code over a… | 2026-11-10 |
| CVE-2026-105559 | MEDIUM | 6.5 | No cwe for this issue in Windows Active Directory allows an authorized attacker to deny service over a network… | 2026-11-10 |
| CVE-2026-105560 | HIGH | 7.2 | Release of invalid pointer or reference in Windows DHCP Server allows an authorized attacker to execute code o… | 2026-11-10 |
| CVE-2026-105561 | HIGH | 7.5 | Uncontrolled resource consumption in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized at… | 2026-11-10 |
| CVE-2026-105562 | MEDIUM | 4.7 | Time-of-check time-of-use (toctou) race condition in Windows Container Manager Service allows an authorized at… | 2026-11-10 |
| CVE-2026-105565 | HIGH | 7.0 | Use after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.… | 2026-11-10 |
| CVE-2026-105566 | HIGH | 7.0 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel … | 2026-11-10 |
| CVE-2026-105567 | HIGH | 7.0 | Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally… | 2026-11-10 |
| CVE-2026-105568 | MEDIUM | 6.5 | Out-of-bounds read in Active Directory Domain Services allows an authorized attacker to deny service over a ne… | 2026-11-10 |
| CVE-2026-105569 | HIGH | 7.8 | Out-of-bounds read in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileg… | 2026-11-10 |
| CVE-2026-105574 | HIGH | 7.0 | Use after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.… | 2026-11-10 |
| CVE-2026-105575 | HIGH | 7.8 | Access of resource using incompatible type ('type confusion') in Windows DWM Core Library allows an authorized… | 2026-11-10 |
| CVE-2026-105578 | HIGH | 7.5 | Integer overflow or wraparound in Microsoft JScript allows an unauthorized attacker to execute code over a net… | 2026-11-10 |
| CVE-2026-105579 | HIGH | 7.5 | Integer overflow or wraparound in Windows DNS allows an unauthorized attacker to disclose information over a n… | 2026-11-10 |
| CVE-2026-105580 | HIGH | 7.8 | Heap-based buffer overflow in Windows Management Instrumentation allows an unauthorized attacker to execute co… | 2026-11-10 |
| CVE-2026-105581 | HIGH | 8.8 | Stack-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges loca… | 2026-11-10 |