7.0
CVSS
Use after free in Windows Authentication Methods allows an authorized attacker to elevate privileges locally.
Severity: HIGH
📦
windows_11_26h1
Vendor: microsoft
Actively Exploited
1
CISA KEV List
PoC / Exploits
14
Code Available
Total RCEs
16
Remote Access
Total CVEs
687
Total Indexed
Avg. EPSS
0.65%
Exploit Prob.
Security Vulnerability Index
Page 30 / 69
7.0
CVSS
Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
Severity: HIGH
6.2
CVSS
Divide by zero in Microsoft Graphics Component allows an unauthorized attacker to deny service locally.
Severity: MEDIUM
6.2
CVSS
Null pointer dereference in Microsoft Graphics Component allows an unauthorized attacker to deny service locally.
Severity: MEDIUM
7.4
CVSS
Use after free in Microsoft Brokering File System allows an unauthorized attacker to elevate privileges locally.
Severity: HIGH
7.8
CVSS
CVE-2026-25166
RCE
Deserialization of untrusted data in Windows System Image Manager allows an authorized attacker to execute code locally.
Severity: HIGH
7.8
CVSS
Null pointer dereference in Windows Performance Counters allows an authorized attacker to elevate privileges locally.
Severity: HIGH
7.0
CVSS
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
Severity: HIGH
7.0
CVSS
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
Severity: HIGH
7.8
CVSS
CVE-2026-24294
Exploit Found
Improper authentication in Windows SMB Server allows an authorized attacker to elevate privileges locally.
Severity: HIGH