kernel driver

CVE-2026-26168 is the kind of Windows kernel-adjacent issue that immediately demands attention, even when public details are sparse. Microsoft identifies it as a Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability, which places it in a category that historically...

Microsoft shipped an urgent fix on Patch Tuesday for a newly catalogued elevation-of-privilege flaw in the Windows Universal Disk Format File System Driver (UDFS), tracked as CVE-2026-23672, closing a local attack path that could let low‑privilege users escalate to SYSTEM on affected machines...

Microsoft’s Security Update Guide lists CVE-2026-20940 as an elevation-of-privilege (EoP) vulnerability in the Windows Cloud Files Mini Filter Driver, and defenders should treat any new Cloud Files mini-filter entry as a high-priority patch-and-hunt item until proven otherwise. Background /...

Microsoft has recorded CVE-2026-20820 — a heap‑based buffer overflow in the Windows Common Log File System driver (clfs.sys) that Microsoft classifies as an elevation of privilege vulnerability; an authorized local attacker able to run code as a standard user or manipulate CLFS‑read inputs can...