CVE-2026-70299
HighCVSS 8.8Summary
Improper access control in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
Risk Assessment
An attacker with local access could gain higher privileges on the system, potentially leading to host takeover.
Recommendation
Apply security updates for Windows Bind Filter Driver and restrict local access to the system.
Other vulnerabilities in Windows Bind Filter Driver
See all- CVE-2026-88168High
Heap-based buffer overflow in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-83900High
Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-83852High
Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-83692High
Heap-based buffer overflow in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-70274High
Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-68825High
A use-after-free vulnerability exists in Windows Bind Filter Driver. This allows an authorized attacker to elevate privileges locally.
- CVE-2026-62705High
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-61934High
Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-61927High
Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
- CVE-2021-36954High
Vulnerability in Windows Bind Filter Driver allows elevation of privilege. An attacker could exploit this flaw to gain higher privileges on the system.
Original NVD description (English source)
Improper access control in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

