Find the CVE cohort

Concurrent execution using shared resource with improper synchronization ('race condition') in Function Discovery Service (fdwsd.dll) allows an authorized attacker to elevate privileges locally.

Excerpt language: en.

Severity high: primary CNA CVSS 7 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-14T16:58:23.342Z. Updated 2026-10-15T15:53:27.743Z.

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally.

Excerpt language: en.

Severity medium: primary CNA CVSS 5.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-14T16:58:22.719Z. Updated 2026-10-15T15:53:27.146Z.

Use after free in Windows WalletService allows an authorized attacker to elevate privileges locally.

Excerpt language: en.

Severity high: primary CNA CVSS 7 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-14T16:58:22.140Z. Updated 2026-10-15T15:53:26.546Z.

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally.

Excerpt language: en.

Severity medium: primary CNA CVSS 5.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-14T16:58:21.509Z. Updated 2026-10-15T15:53:25.968Z.

Use after free in Windows Projected File System allows an authorized attacker to elevate privileges locally.

Excerpt language: en.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-14T16:58:20.779Z. Updated 2026-10-15T15:53:46.899Z.

Untrusted pointer dereference in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.

Excerpt language: en.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-14T16:58:20.124Z. Updated 2026-10-15T15:53:25.408Z.

Out-of-bounds read in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.

Excerpt language: en.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-14T16:58:19.394Z. Updated 2026-10-15T15:53:24.881Z.

Double free in Windows Projected File System allows an authorized attacker to elevate privileges locally.

Excerpt language: en.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-14T16:58:18.455Z. Updated 2026-10-15T15:53:24.335Z.

Improper authentication in Windows Active Directory allows an unauthorized attacker to perform spoofing locally.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.2 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-14T16:58:17.336Z. Updated 2026-10-15T15:53:23.729Z.

Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

Excerpt language: en.

Severity high: primary CNA CVSS 7 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-14T16:58:16.731Z. Updated 2026-10-15T15:53:23.205Z.

Double free in Windows Projected File System allows an authorized attacker to elevate privileges locally.

Excerpt language: en.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-14T16:58:16.106Z. Updated 2026-10-15T15:53:22.603Z.

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SSDP Service allows an authorized attacker to elevate privileges locally.

Excerpt language: en.

Severity high: primary CNA CVSS 7 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-14T16:58:15.166Z. Updated 2026-10-15T15:53:22.059Z.

Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information locally.

Excerpt language: en.

Severity medium: primary CNA CVSS 5.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-14T16:58:14.503Z. Updated 2026-10-15T15:53:21.529Z.

Improper input validation in Windows Hello allows an unauthorized attacker to bypass a security feature over a network.

Excerpt language: en.

Severity high: primary CNA CVSS 8.7 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-14T16:58:13.895Z. Updated 2026-10-15T15:53:20.935Z.

Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an unauthorized attacker to disclose information over an adjacent network.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-14T16:58:13.263Z. Updated 2026-10-15T15:53:20.299Z.

Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

Excerpt language: en.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-14T16:58:12.545Z. Updated 2026-10-15T15:53:19.749Z.

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

Excerpt language: en.

Severity high: primary CNA CVSS 7 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-14T16:58:11.466Z. Updated 2026-10-15T15:53:19.216Z.

Untrusted pointer dereference in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.

Excerpt language: en.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-14T16:58:10.717Z. Updated 2026-10-15T15:53:18.733Z.