Windows 11 25h2 CVE-2026-23672

Privilege escalation in the Windows Ancillary Function Driver for WinSock (afd.sys) allows a locally authenticated attac

Windows Shell contains a protection mechanism failure (CVE-2026-21510, CVSS 8.8) that allows unauthenticated remote atta

In IGEL OS before 11, Secure Boot can be bypassed because the igel-flash-driver module improperly verifies a cryptograph

Desktop Window Manager (DWM) in Windows contains a type confusion vulnerability (CVE-2026-21519, CVSS 7.8) that enables

Desktop Windows Manager on Windows 10, Windows 11, and Windows Server 2022 leaks sensitive information to local authenti

Windows Kernel contains a race condition vulnerability enabling local privilege escalation through concurrent resource a

Remote code execution in Microsoft Windows HTTP.sys allows unauthenticated network attackers to execute arbitrary code b

Privilege elevation in the Windows TCP/IP networking stack allows an unauthenticated attacker on an adjacent network to

Remote code execution in Windows RRAS affects Windows 10 1607 and Windows Server 2022 23h2 through an integer overflow v

Local code execution in Microsoft Windows Win32K GRFX (graphics) subsystem allows an attacker with low-privilege local a

Local code execution in the Windows Win32K GRFX (graphics) subsystem allows an unauthorized attacker with the ability to

Local privilege escalation in Microsoft Windows Push Notifications service stems from a race condition (CWE-362) that an