7.8
CVE-2026-25174 - Windows Extensible File Allocation Table Elevation of Privilege Vulnerability
Out-of-bounds read in Windows Extensible File Allocation allows an authorized attacker to elevate privileges locally.
8
CVE-2026-25173 - Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Integer overflow or wraparound in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network.
8
CVE-2026-25172 - Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Integer overflow or wraparound in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network.
7
CVE-2026-25171 - Windows Authentication Elevation of Privilege Vulnerability
Use after free in Windows Authentication Methods allows an authorized attacker to elevate privileges locally.
7
CVE-2026-25170 - Windows Hyper-V Elevation of Privilege Vulnerability
Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
6.2
CVE-2026-25169 - Windows Graphics Component Denial of Service Vulnerability
Divide by zero in Microsoft Graphics Component allows an unauthorized attacker to deny service locally.
6.2
CVE-2026-25168 - Windows Graphics Component Denial of Service Vulnerability
Null pointer dereference in Microsoft Graphics Component allows an unauthorized attacker to deny service locally.
7.4
CVE-2026-25167 - Microsoft Brokering File System Elevation of Privilege Vulnerability
Use after free in Microsoft Brokering File System allows an unauthorized attacker to elevate privileges locally.
7.8
CVE-2026-25166 - Windows System Image Manager Assessment and Deployment Kit (ADK) Remote Code Execution Vulnerability
Deserialization of untrusted data in Windows System Image Manager allows an authorized attacker to execute code locally.
7.8
CVE-2026-25165 - Performance Counters for Windows Elevation of Privilege Vulnerability
Null pointer dereference in Windows Performance Counters allows an authorized attacker to elevate privileges locally.