CVE-2026-70566
HighCVSS 7.8Summary
Null pointer dereference in Windows Schannel allows an authorized attacker to elevate privileges locally.
Risk Assessment
An attacker with local access could gain higher privileges on the system, potentially leading to host takeover.
Recommendation
Apply security updates for Windows Schannel and restrict local access to the system.
Other vulnerabilities in Windows Schannel
See all- CVE-2026-105005High
Out-of-bounds write in Windows Schannel allows an unauthorized attacker to execute code over a network.
- CVE-2026-85818Critical
Improper verification of cryptographic signature in Windows Schannel allows an unauthorized attacker to perform spoofing over a network.
- CVE-2026-105008Critical
No cwe for this issue in Windows Schannel allows an unauthorized attacker to perform spoofing over a network.
- CVE-2026-72940High
Heap-based buffer overflow in Windows Schannel allows an unauthorized attacker to execute code over a network.
- CVE-2026-70575Medium
Null pointer dereference in Windows Schannel allows an authorized attacker to cause a denial of service over a network.
- CVE-2026-62779High
Use after free in Windows Schannel allows an authorized attacker to elevate privileges locally.
- CVE-2026-62757Medium
Improper verification of cryptographic signature in Windows Schannel allows an unauthorized attacker to bypass a security feature over a network.
- CVE-2026-56186High
Out-of-bounds read in Windows Schannel allows an authorized attacker to disclose information over a network.
Original NVD description (English source)
Null pointer dereference in Windows Schannel allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

