|
291
|
8.1 |
HIGH
Network
|
-
|
-
|
Integer underflow (wrap or wraparound) in Windows Performance Monitor allows an unauthorized attacker to execute code over a network.
New
|
CWE-191
Integer Underflow (Wrap or Wraparound)
|
CVE-2026-42981
|
2026-06-10 02:17 |
2026-06-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
292
|
7.8 |
HIGH
Local
|
-
|
-
|
Integer underflow (wrap or wraparound) in Windows NT OS Kernel allows an authorized attacker to elevate privileges locally.
New
|
CWE-122 CWE-191
Heap-based Buffer Overflow Integer Underflow (Wrap or Wraparound)
|
CVE-2026-42980
|
2026-06-10 02:17 |
2026-06-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
293
|
7.8 |
HIGH
Local
|
-
|
-
|
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
New
|
CWE-362 CWE-416
Race Condition Use After Free
|
CVE-2026-42979
|
2026-06-10 02:17 |
2026-06-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
294
|
7.8 |
HIGH
Local
|
-
|
-
|
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
New
|
CWE-362 CWE-416
Race Condition Use After Free
|
CVE-2026-42978
|
2026-06-10 02:17 |
2026-06-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
295
|
7.8 |
HIGH
Local
|
-
|
-
|
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
New
|
CWE-362
Race Condition
|
CVE-2026-42977
|
2026-06-10 02:17 |
2026-06-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
296
|
8.1 |
HIGH
Network
|
-
|
-
|
Integer underflow (wrap or wraparound) in Windows Performance Monitor allows an unauthorized attacker to execute code over a network.
New
|
CWE-190
Integer Overflow or Wraparound
|
CVE-2026-42974
|
2026-06-10 02:17 |
2026-06-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
297
|
5.5 |
MEDIUM
Local
|
-
|
-
|
Use of uninitialized resource in Windows Push Notifications allows an authorized attacker to disclose information locally.
New
|
CWE-200
Information Exposure
|
CVE-2026-42973
|
2026-06-10 02:17 |
2026-06-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
298
|
5.5 |
MEDIUM
Local
|
-
|
-
|
Exposure of sensitive information to an unauthorized actor in Windows Hyper-V allows an authorized attacker to disclose information locally.
New
|
CWE-200
Information Exposure
|
CVE-2026-42972
|
2026-06-10 02:17 |
2026-06-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
299
|
5.5 |
MEDIUM
Local
|
-
|
-
|
Use of uninitialized resource in Windows Push Notifications allows an authorized attacker to disclose information locally.
New
|
CWE-200
Information Exposure
|
CVE-2026-42971
|
2026-06-10 02:17 |
2026-06-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
300
|
5.5 |
MEDIUM
Local
|
-
|
-
|
Use of uninitialized resource in Windows Push Notifications allows an authorized attacker to disclose information locally.
New
|
CWE-200
Information Exposure
|
CVE-2026-42970
|
2026-06-10 02:17 |
2026-06-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|