CVE-2026-32157
- EPSS 0.13%
- Veröffentlicht 14.04.2026 16:57:26
- Zuletzt bearbeitet 07.05.2026 19:57:08
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
CVE-2026-32156
- EPSS 0.06%
- Veröffentlicht 14.04.2026 16:57:25
- Zuletzt bearbeitet 23.04.2026 14:51:17
Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an unauthorized attacker to execute code locally.
- EPSS 0.06%
- Veröffentlicht 14.04.2026 16:57:24
- Zuletzt bearbeitet 20.04.2026 18:27:30
Concurrent execution using shared resource with improper synchronization ('race condition') in Function Discovery Service (fdwsd.dll) allows an authorized attacker to elevate privileges locally.
- EPSS 0.05%
- Veröffentlicht 14.04.2026 16:57:22
- Zuletzt bearbeitet 21.04.2026 15:09:42
Heap-based buffer overflow in Function Discovery Service (fdwsd.dll) allows an authorized attacker to elevate privileges locally.
- EPSS 0.05%
- Veröffentlicht 14.04.2026 16:57:21
- Zuletzt bearbeitet 21.04.2026 20:49:46
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SSDP Service allows an authorized attacker to elevate privileges locally.
- EPSS 0.05%
- Veröffentlicht 14.04.2026 16:57:20
- Zuletzt bearbeitet 21.04.2026 20:50:56
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SSDP Service allows an authorized attacker to elevate privileges locally.
- EPSS 0.05%
- Veröffentlicht 14.04.2026 16:57:19
- Zuletzt bearbeitet 21.04.2026 21:02:48
Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.
- EPSS 0.05%
- Veröffentlicht 14.04.2026 16:57:18
- Zuletzt bearbeitet 22.04.2026 17:01:04
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
- EPSS 0.05%
- Veröffentlicht 14.04.2026 16:57:16
- Zuletzt bearbeitet 22.04.2026 17:35:51
Time-of-check time-of-use (toctou) race condition in Windows LUAFV allows an authorized attacker to elevate privileges locally.
CVE-2026-27919
- EPSS 0.06%
- Veröffentlicht 14.04.2026 16:57:13
- Zuletzt bearbeitet 22.04.2026 17:54:12
Untrusted pointer dereference in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.