CVE-2026-88134

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-88126

Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally...

CVE-2026-88124

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-88109

Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally...

CVE-2026-88096

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows DCOM Server allows an authorized attacker to elevate privileges locally...

CVE-2026-88080

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-88091

Deserialization of untrusted data in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally...

CVE-2026-88071

Double free in Windows Hyper-V allows an authorized attacker to elevate privileges locally...

CVE-2026-87711

Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-87710

Improper access control in Microsoft Local Security Authority Server lsasrv allows an authorized attacker to elevate privileges locally...

CVE-2026-87704

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-87708

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-87700

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-87695

Inclusion of functionality from untrusted control sphere in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally...

CVE-2026-87693

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-85935

Buffer over-read in Windows USB Driver allows an authorized attacker to disclose information locally...

CVE-2026-85916

Exposure of private personal information to an unauthorized actor in Azure Active Directory allows an unauthorized attacker to disclose information locally...

CVE-2026-85903

Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network...

CVE-2026-85904

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Device Association Service allows an authorized attacker to elevate privileges locally...

CVE-2026-85909

Out-of-bounds read in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to disclose information locally...