Month: February 2026

Heap-based buffer overflow in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-21236 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability→

Untrusted pointer dereference in Windows HTTP.sys allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-21232 Windows HTTP.sys Elevation of Privilege Vulnerability→

Concurrent execution using shared resource with improper synchronization (‘race condition’) in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-21234 Windows Connected Devices Platform Service Elevation of Privilege Vulnerability→

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-21241 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability→

Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-21235 Windows Graphics Component Elevation of Privilege Vulnerability→

External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing locally. Continue reading CVE-2026-21249 Windows NTLM Spoofing Vulnerability→

Use after free in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-21242 Windows Subsystem for Linux Elevation of Privilege Vulnerability→

Improper neutralization of special elements used in a command (‘command injection’) in GitHub Copilot and Visual Studio allows an unauthorized attacker to execute code over a network. Continue reading CVE-2026-21256 GitHub Copilot and Visual Studio Remote Code Execution Vulnerability→