CVE-2026-70014

Heap-based buffer overflow in Windows Cryptographic Services allows an authorized attacker to elevate privileges locally.

Exposure of sensitive system information to an unauthorized control sphere in Windows Cryptographic Services allows an authorized attacker to disclose information locally.

An out-of-bounds read vulnerability in Windows Cryptographic Services allows an authorized attacker to disclose information locally.

Exposure of sensitive information to an unauthorized actor in Windows Cryptographic Services allows an authorized attacker to disclose information locally.

Exposure of sensitive information to an unauthorized actor in Windows Cryptographic Services allows an authorized attacker to disclose information locally.

Improper certificate validation in Windows Cryptographic Services allows an unauthorized attacker to bypass a security feature over a network.

Missing release of memory after effective lifetime in Windows Cryptographic Services allows an unauthorized attacker to deny service over a network.

Improper authentication in Windows Cryptographic Services allows an unauthorized attacker to elevate privileges locally.

A vulnerability in Windows Cryptographic Services allows information disclosure. An attacker could exploit this flaw to read sensitive data stored in system memory.

A vulnerability in Windows Cryptographic Services may lead to information disclosure. An attacker could exploit this flaw to gain access to sensitive data.