Vulnerability feed
CVE and vendor PSIRT advisories from 13 sources, last 30 days. Updated hourly, last run
| Expand | Severity |
Score |
Advisory |
Title |
Source |
Flags |
Published |
|---|---|---|---|---|---|---|---|
| High | 7.8 | CVE-2026-97809 |
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
MicrosoftMicrosoft Windows 11 version 23H2, Microsoft Windows 11 Version 24H2, Microsoft Windows 11 Version 25H2, Microsoft Windows 11 version 26H1, Microsoft Windows 11 Version 26H2, Microsoft Windows 10 Version 1809, Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 22H2, Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows 10 1809
|
NVD | |||
|
CVE-2026-97809Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
From the advisoryUse after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. Impact if exploitedConfidentialityHigh IntegrityHigh AvailabilityHigh
How it is exploited
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H AffectsMicrosoftMicrosoft Windows 11 version 23H2Microsoft Windows 11 Version 24H2Microsoft Windows 11 Version 25H2Microsoft Windows 11 version 26H1Microsoft Windows 11 Version 26H2Microsoft Windows 10 Version 1809Microsoft Windows 10 Version 21H2Microsoft Windows 10 Version 22H2Microsoft Windows Server 2019Microsoft Windows Server 2019 (Server Core installation)Microsoft Windows 10 1809
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| High | 7.0 | CVE-2026-97808 |
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
MicrosoftMicrosoft Windows 11 version 23H2, Microsoft Windows 11 Version 24H2, Microsoft Windows 11 Version 25H2, Microsoft Windows 11 version 26H1, Microsoft Windows 11 Version 26H2, Microsoft Windows 10 Version 1809, Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 22H2, Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows 10 1809
|
NVD | |||
|
CVE-2026-97808Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
From the advisoryUse after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. Impact if exploitedConfidentialityHigh IntegrityHigh AvailabilityHigh
How it is exploited
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H AffectsMicrosoftMicrosoft Windows 11 version 23H2Microsoft Windows 11 Version 24H2Microsoft Windows 11 Version 25H2Microsoft Windows 11 version 26H1Microsoft Windows 11 Version 26H2Microsoft Windows 10 Version 1809Microsoft Windows 10 Version 21H2Microsoft Windows 10 Version 22H2Microsoft Windows Server 2019Microsoft Windows Server 2019 (Server Core installation)Microsoft Windows 10 1809
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| High | 7.8 | CVE-2026-97807 |
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
MicrosoftMicrosoft Windows 11 version 23H2, Microsoft Windows 11 Version 24H2, Microsoft Windows 11 Version 25H2, Microsoft Windows 11 version 26H1, Microsoft Windows 11 Version 26H2, Microsoft Windows 10 Version 1809, Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 22H2, Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows 10 1809
|
NVD | |||
|
CVE-2026-97807Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
From the advisoryUse after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. Impact if exploitedConfidentialityHigh IntegrityHigh AvailabilityHigh
How it is exploited
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H AffectsMicrosoftMicrosoft Windows 11 version 23H2Microsoft Windows 11 Version 24H2Microsoft Windows 11 Version 25H2Microsoft Windows 11 version 26H1Microsoft Windows 11 Version 26H2Microsoft Windows 10 Version 1809Microsoft Windows 10 Version 21H2Microsoft Windows 10 Version 22H2Microsoft Windows Server 2019Microsoft Windows Server 2019 (Server Core installation)Microsoft Windows 10 1809
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| High | 7.8 | CVE-2026-97806 |
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
MicrosoftMicrosoft Windows 11 version 23H2, Microsoft Windows 11 Version 24H2, Microsoft Windows 11 Version 25H2, Microsoft Windows 11 version 26H1, Microsoft Windows 11 Version 26H2, Microsoft Windows 10 Version 1809, Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 22H2, Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows 10 1809
|
NVD | |||
|
CVE-2026-97806Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
From the advisoryUse after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. Impact if exploitedConfidentialityHigh IntegrityHigh AvailabilityHigh
How it is exploited
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H AffectsMicrosoftMicrosoft Windows 11 version 23H2Microsoft Windows 11 Version 24H2Microsoft Windows 11 Version 25H2Microsoft Windows 11 version 26H1Microsoft Windows 11 Version 26H2Microsoft Windows 10 Version 1809Microsoft Windows 10 Version 21H2Microsoft Windows 10 Version 22H2Microsoft Windows Server 2019Microsoft Windows Server 2019 (Server Core installation)Microsoft Windows 10 1809
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| High | 7.0 | CVE-2026-96919 |
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
MicrosoftMicrosoft Windows 11 version 23H2, Microsoft Windows 11 Version 24H2, Microsoft Windows 11 Version 25H2, Microsoft Windows 11 version 26H1, Microsoft Windows 11 Version 26H2, Microsoft Windows 10 Version 1809, Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 22H2, Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows 10 1809
|
NVD | |||
|
CVE-2026-96919Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
From the advisoryUse after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. Impact if exploitedConfidentialityHigh IntegrityHigh AvailabilityHigh
How it is exploited
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H AffectsMicrosoftMicrosoft Windows 11 version 23H2Microsoft Windows 11 Version 24H2Microsoft Windows 11 Version 25H2Microsoft Windows 11 version 26H1Microsoft Windows 11 Version 26H2Microsoft Windows 10 Version 1809Microsoft Windows 10 Version 21H2Microsoft Windows 10 Version 22H2Microsoft Windows Server 2019Microsoft Windows Server 2019 (Server Core installation)Microsoft Windows 10 1809
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| Medium | 5.5 | CVE-2026-96848 |
Buffer over-read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
MicrosoftMicrosoft Windows 11 version 23H2, Microsoft Windows Server 2025, Microsoft Windows Server 2025 (Server Core installation), Microsoft Windows 10 Version 1809, Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 22H2, Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows Server 2022, Microsoft Windows 10 1809, Microsoft Windows 10 21H2
|
NVD | |||
|
CVE-2026-96848Buffer over-read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
From the advisoryBuffer over-read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. Impact if exploitedConfidentialityHigh IntegrityNone AvailabilityNone
How it is exploited
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N AffectsMicrosoftMicrosoft Windows 11 version 23H2Microsoft Windows Server 2025Microsoft Windows Server 2025 (Server Core installation)Microsoft Windows 10 Version 1809Microsoft Windows 10 Version 21H2Microsoft Windows 10 Version 22H2Microsoft Windows Server 2019Microsoft Windows Server 2019 (Server Core installation)Microsoft Windows Server 2022Microsoft Windows 10 1809Microsoft Windows 10 21H2
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| High | 7.5 | CVE-2026-96248 |
Stack-based buffer overflow in Windows Host Guardian Service allows an unauthorized attacker to deny service over a network.
MicrosoftMicrosoft Windows Server 2025, Microsoft Windows Server 2025 (Server Core installation), Microsoft Windows 10 Version 1809, Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows Server 2022, Microsoft Windows 10 Version 1607, Microsoft Windows Server 2016, Microsoft Windows Server 2016 (Server Core installation), Microsoft Windows 10 1809, Microsoft Windows 10 1607
|
NVD | |||
|
CVE-2026-96248Stack-based buffer overflow in Windows Host Guardian Service allows an unauthorized attacker to deny service over a network.
From the advisoryStack-based buffer overflow in Windows Host Guardian Service allows an unauthorized attacker to deny service over a network. Impact if exploitedConfidentialityNone IntegrityNone AvailabilityHigh
How it is exploited
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H AffectsMicrosoftMicrosoft Windows Server 2025Microsoft Windows Server 2025 (Server Core installation)Microsoft Windows 10 Version 1809Microsoft Windows Server 2019Microsoft Windows Server 2019 (Server Core installation)Microsoft Windows Server 2022Microsoft Windows 10 Version 1607Microsoft Windows Server 2016Microsoft Windows Server 2016 (Server Core installation)Microsoft Windows 10 1809Microsoft Windows 10 1607
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| High | 7.8 | CVE-2026-96220 |
Improper control of generation of code ('code injection') in Windows Assigned Access allows an authorized attacker to elevate privileges locally.
MicrosoftMicrosoft Windows 11 version 23H2, Microsoft Windows 11 Version 24H2, Microsoft Windows 11 Version 25H2, Microsoft Windows 11 version 26H1, Microsoft Windows 11 Version 26H2, Microsoft Windows 10 Version 1809, Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 22H2, Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows 10 1809
|
NVD | |||
|
CVE-2026-96220Improper control of generation of code ('code injection') in Windows Assigned Access allows an authorized attacker to elevate privileges locally.
From the advisoryImproper control of generation of code ('code injection') in Windows Assigned Access allows an authorized attacker to elevate privileges locally. Impact if exploitedConfidentialityHigh IntegrityHigh AvailabilityHigh
How it is exploited
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H AffectsMicrosoftMicrosoft Windows 11 version 23H2Microsoft Windows 11 Version 24H2Microsoft Windows 11 Version 25H2Microsoft Windows 11 version 26H1Microsoft Windows 11 Version 26H2Microsoft Windows 10 Version 1809Microsoft Windows 10 Version 21H2Microsoft Windows 10 Version 22H2Microsoft Windows Server 2019Microsoft Windows Server 2019 (Server Core installation)Microsoft Windows 10 1809
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| High | 7.8 | CVE-2026-88105 |
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
MicrosoftMicrosoft Windows 11 version 23H2, Microsoft Windows 11 Version 24H2, Microsoft Windows 11 Version 25H2, Microsoft Windows 11 version 26H1, Microsoft Windows 11 Version 26H2, Microsoft Windows 10 Version 1809, Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 22H2, Microsoft Windows 10 Version 1607, Microsoft Windows 10 1809, Microsoft Windows 10 1607
|
NVD | |||
|
CVE-2026-88105Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
From the advisoryUse after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. Impact if exploitedConfidentialityHigh IntegrityHigh AvailabilityHigh
How it is exploited
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H AffectsMicrosoftMicrosoft Windows 11 version 23H2Microsoft Windows 11 Version 24H2Microsoft Windows 11 Version 25H2Microsoft Windows 11 version 26H1Microsoft Windows 11 Version 26H2Microsoft Windows 10 Version 1809Microsoft Windows 10 Version 21H2Microsoft Windows 10 Version 22H2Microsoft Windows 10 Version 1607Microsoft Windows 10 1809Microsoft Windows 10 1607
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| High | 7.0 | CVE-2026-88103 |
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
MicrosoftMicrosoft Windows 11 version 23H2, Microsoft Windows 11 Version 24H2, Microsoft Windows 11 Version 25H2, Microsoft Windows 11 version 26H1, Microsoft Windows 11 Version 26H2, Microsoft Windows 10 Version 1809, Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 22H2, Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows 10 1809
|
NVD | |||
|
CVE-2026-88103Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
From the advisoryUse after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. Impact if exploitedConfidentialityHigh IntegrityHigh AvailabilityHigh
How it is exploited
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H AffectsMicrosoftMicrosoft Windows 11 version 23H2Microsoft Windows 11 Version 24H2Microsoft Windows 11 Version 25H2Microsoft Windows 11 version 26H1Microsoft Windows 11 Version 26H2Microsoft Windows 10 Version 1809Microsoft Windows 10 Version 21H2Microsoft Windows 10 Version 22H2Microsoft Windows Server 2019Microsoft Windows Server 2019 (Server Core installation)Microsoft Windows 10 1809
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| High | 7.8 | CVE-2026-102201 |
Use after free in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally.
MicrosoftMicrosoft Windows 11 version 23H2, Microsoft Windows 11 Version 24H2, Microsoft Windows 11 Version 25H2, Microsoft Windows 11 version 26H1, Microsoft Windows 11 Version 26H2, Microsoft Windows 10 Version 1809, Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 22H2, Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows 10 1809
|
NVD | |||
|
CVE-2026-102201Use after free in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally.
From the advisoryUse after free in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally. Impact if exploitedConfidentialityHigh IntegrityHigh AvailabilityHigh
How it is exploited
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H AffectsMicrosoftMicrosoft Windows 11 version 23H2Microsoft Windows 11 Version 24H2Microsoft Windows 11 Version 25H2Microsoft Windows 11 version 26H1Microsoft Windows 11 Version 26H2Microsoft Windows 10 Version 1809Microsoft Windows 10 Version 21H2Microsoft Windows 10 Version 22H2Microsoft Windows Server 2019Microsoft Windows Server 2019 (Server Core installation)Microsoft Windows 10 1809
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| High | 7.0 | CVE-2026-102197 |
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
MicrosoftMicrosoft Windows 11 version 23H2, Microsoft Windows 11 Version 24H2, Microsoft Windows 11 Version 25H2, Microsoft Windows 11 version 26H1, Microsoft Windows 11 Version 26H2, Microsoft Windows 10 Version 1809, Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 22H2, Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows 10 1809
|
NVD | |||
|
CVE-2026-102197Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
From the advisoryUse after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. Impact if exploitedConfidentialityHigh IntegrityHigh AvailabilityHigh
How it is exploited
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H AffectsMicrosoftMicrosoft Windows 11 version 23H2Microsoft Windows 11 Version 24H2Microsoft Windows 11 Version 25H2Microsoft Windows 11 version 26H1Microsoft Windows 11 Version 26H2Microsoft Windows 10 Version 1809Microsoft Windows 10 Version 21H2Microsoft Windows 10 Version 22H2Microsoft Windows Server 2019Microsoft Windows Server 2019 (Server Core installation)Microsoft Windows 10 1809
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| High | 7.8 | CVE-2026-102196 |
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
MicrosoftMicrosoft Windows 11 version 23H2, Microsoft Windows 11 Version 24H2, Microsoft Windows 11 Version 25H2, Microsoft Windows 11 version 26H1, Microsoft Windows 11 Version 26H2, Microsoft Windows 10 Version 1809, Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 22H2, Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows 10 1809
|
NVD | |||
|
CVE-2026-102196Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
From the advisoryUse after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. Impact if exploitedConfidentialityHigh IntegrityHigh AvailabilityHigh
How it is exploited
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H AffectsMicrosoftMicrosoft Windows 11 version 23H2Microsoft Windows 11 Version 24H2Microsoft Windows 11 Version 25H2Microsoft Windows 11 version 26H1Microsoft Windows 11 Version 26H2Microsoft Windows 10 Version 1809Microsoft Windows 10 Version 21H2Microsoft Windows 10 Version 22H2Microsoft Windows Server 2019Microsoft Windows Server 2019 (Server Core installation)Microsoft Windows 10 1809
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| High | 7.0 | CVE-2026-102193 |
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
MicrosoftMicrosoft Windows 11 version 23H2, Microsoft Windows 11 Version 24H2, Microsoft Windows 11 Version 25H2, Microsoft Windows 11 version 26H1, Microsoft Windows 11 Version 26H2, Microsoft Windows 10 Version 1809, Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 22H2, Microsoft Windows 10 1809, Microsoft Windows 10 21H2, Microsoft Windows 10 22H2
|
NVD | |||
|
CVE-2026-102193Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
From the advisoryUse after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. Impact if exploitedConfidentialityHigh IntegrityHigh AvailabilityHigh
How it is exploited
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H AffectsMicrosoftMicrosoft Windows 11 version 23H2Microsoft Windows 11 Version 24H2Microsoft Windows 11 Version 25H2Microsoft Windows 11 version 26H1Microsoft Windows 11 Version 26H2Microsoft Windows 10 Version 1809Microsoft Windows 10 Version 21H2Microsoft Windows 10 Version 22H2Microsoft Windows 10 1809Microsoft Windows 10 21H2Microsoft Windows 10 22H2
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||