CVE-2026-35421
- EPSS 0.53%
- Veröffentlicht 12.05.2026 16:58:32
- Zuletzt bearbeitet 14.05.2026 18:05:39
Heap-based buffer overflow in Windows GDI allows an unauthorized attacker to execute code locally.
CVE-2026-35422
- EPSS 0.61%
- Veröffentlicht 12.05.2026 16:58:32
- Zuletzt bearbeitet 14.05.2026 18:04:43
Authentication bypass using an alternate path or channel in Windows TCP/IP allows an authorized attacker to bypass a security feature over a network.
CVE-2026-35420
- EPSS 0.32%
- Veröffentlicht 12.05.2026 16:58:31
- Zuletzt bearbeitet 14.05.2026 18:06:13
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-35415
- EPSS 0.33%
- Veröffentlicht 12.05.2026 16:58:28
- Zuletzt bearbeitet 14.05.2026 15:57:13
Integer overflow or wraparound in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.
- EPSS 1.65%
- Veröffentlicht 12.05.2026 16:58:28
- Zuletzt bearbeitet 01.06.2026 19:16:30
Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
- EPSS 0.21%
- Veröffentlicht 12.05.2026 16:58:27
- Zuletzt bearbeitet 14.05.2026 17:44:38
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
- EPSS 0.26%
- Veröffentlicht 12.05.2026 16:58:26
- Zuletzt bearbeitet 14.05.2026 17:45:54
Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
CVE-2026-34344
- EPSS 0.31%
- Veröffentlicht 12.05.2026 16:58:25
- Zuletzt bearbeitet 14.05.2026 17:48:01
Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
- EPSS 0.29%
- Veröffentlicht 12.05.2026 16:58:24
- Zuletzt bearbeitet 14.05.2026 14:59:29
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
CVE-2026-34343
- EPSS 0.33%
- Veröffentlicht 12.05.2026 16:58:24
- Zuletzt bearbeitet 14.05.2026 14:58:23
Heap-based buffer overflow in Windows Application Identity (AppID) Subsystem allows an authorized attacker to elevate privileges locally.