Month: May 2026

Improper access control in Windows Event Logging Service allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-33834 Windows Event Logging Service Elevation of Privilege Vulnerability→

Use after free in Windows Win32K – ICOMP allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-33840 Win32k Elevation of Privilege Vulnerability→

Concurrent execution using shared resource with improper synchronization (‘race condition’) in Windows Win32K – GRFX allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-33839 Win32k Elevation of Privilege Vulnerability→

Heap-based buffer overflow in Windows Message Queuing allows an unauthorized attacker to execute code over an adjacent network. Continue reading CVE-2026-34329 Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability→

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-33841 Windows Kernel Elevation of Privilege Vulnerability→

Heap-based buffer overflow in Volume Manager Extension Driver allows an authorized attacker to execute code with a physical attack. Continue reading CVE-2026-40380 Windows Volume Manager Extension Driver Remote Code Execution Vulnerability→

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. Continue reading CVE-2026-40366 Microsoft Word Remote Code Execution Vulnerability→

Use after free in Windows TCP/IP allows an unauthorized attacker to execute code over a network. Continue reading CVE-2026-40415 Windows TCP/IP Remote Code Execution Vulnerability→