Windows Win32 Kernel Subsystem vulnerabilities
43 known CVE vulnerabilities in Windows Win32 Kernel Subsystem, translated and rated.
- CVE-2026-96853Medium
Time-of-check time-of-use (toctou) race condition in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
- CVE-2026-96848Medium
Buffer over-read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
- CVE-2026-96249High
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
- CVE-2026-85858High
Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
- CVE-2026-85804High
A use after free in the Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
- CVE-2026-85802High
A use after free in the Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
- CVE-2026-83909Medium
Exposure of sensitive system information to an unauthorized control sphere in the Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
- CVE-2026-83901High
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
- CVE-2026-83897Medium
A vulnerability in the Windows Win32 Kernel Subsystem allows exposure of sensitive system information to an unauthorized control sphere. An authorized attacker can disclose information locally.
- CVE-2026-83895Medium
A heap-based buffer overflow in the Windows Win32 Kernel Subsystem allows an unauthorized attacker to elevate privileges via a physical attack.
- CVE-2026-83774Medium
Exposure of sensitive system information to an unauthorized control sphere in the Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
- CVE-2026-83761High
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
- CVE-2026-83756High
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
- CVE-2026-70295Medium
Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
- CVE-2026-70294Medium
Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
- CVE-2026-70293Medium
Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
- CVE-2026-70292Medium
Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
- CVE-2026-70288Medium
Time-of-check time-of-use (toctou) race condition in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
- CVE-2026-70285High
Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
- CVE-2026-70284Medium
Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
- CVE-2026-70273High
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
- CVE-2026-70271High
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
- CVE-2026-70253High
A use after free in the Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
- CVE-2026-70249High
A use after free in the Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
- CVE-2026-70236High
Use after free vulnerability in the Windows Win32 Kernel Subsystem. An authorized attacker can exploit it to elevate privileges locally.
- CVE-2026-70211Medium
Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
- CVE-2026-70209High
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
- CVE-2026-70176High
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
- CVE-2026-70144High
Use after free in Windows Win32 Kernel Subsystem. An authorized attacker can exploit this to elevate privileges locally.
- CVE-2026-70117High
Heap-based buffer overflow in the Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
- CVE-2026-70108High
Heap-based buffer overflow in the Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
- CVE-2026-70104High
Untrusted pointer dereference in the Windows Win32 Kernel Subsystem. An authorized attacker can elevate privileges locally.
- CVE-2026-70076High
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
- CVE-2026-70067High
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
- CVE-2026-70060High
Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
- CVE-2026-102208High
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
- CVE-2025-24983HighActively exploited
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
- CVE-2022-41113High
Vulnerability in the Windows Win32 Kernel Subsystem allows elevation of privilege. An attacker could exploit it to gain higher privileges on the system.
- CVE-2026-70290Medium
Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
- CVE-2026-70289High
Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
- CVE-2024-38253High
An elevation of privilege vulnerability in the Windows Win32 Kernel Subsystem.
- CVE-2024-38252High
An elevation of privilege vulnerability in the Windows Win32 Kernel Subsystem.
- CVE-2024-30086High
A vulnerability in the Windows Win32 kernel subsystem allows elevation of privilege. This flaw can be exploited by a local attacker to gain higher privileges on the system.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS