EUVD-2026-100091

Improper access control in WebDAV allows an authorized attacker to elevate privileges locally...

EUVD-2026-100095

Heap-based buffer overflow in Windows Secure Socket Tunneling Protocol SSTP allows an authorized attacker to elevate privileges locally...

EUVD-2026-100093

Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...

CVE-2026-88118

An integer overflow or wraparound vulnerability exists in the Windows Background Intelligent Transfer Service (BITS) . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-190 (Integer Overflow or Wraparound) and CWE-122 (Heap-bas...

EUVD-2026-100098

Improper authorization in Windows Portable Device Enumerator Service allows an authorized attacker to elevate privileges locally...

CVE-2026-88072

A vulnerability in Windows Host Guardian Service involves improper access control that allows an authorized attacker to achieve local privilege escalation . The root cause is associated with CWE-59 (Improper Link Resolution Before File Access). The impact includes high levels of confidentiality, ...

CVE-2026-88109

A use after free vulnerability exists in Microsoft Office Click-To-Run , which could allow an authorized attacker to achieve local privilege escalation . The vulnerability is assigned a High base severity score of 7.8. No specific exploit links or remediation details are provided in the documents...

CVE-2026-88105

A use after free vulnerability in the Windows Broadcast DVR User Service allows an authorized attacker to achieve local privilege escalation . This flaw is characterized by a HIGH base severity score of 7.8 (CVSS v3.1). Remediation is available via an official fix provided by Microsoft.

EUVD-2026-100079

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-88126

An untrusted pointer dereference vulnerability exists in WebDAV , which allows an authorized attacker to perform a local privilege elevation . This issue is categorized under CWE-822 . The vulnerability has a HIGH base severity score of 7.8 (CVSS 3.1). While the impact on confidentiality, integri...

EUVD-2026-100082

Null pointer dereference in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...

EUVD-2026-100080

Improper access control in Windows Host Guardian Service allows an authorized attacker to elevate privileges locally...

CVE-2026-87715

A Use after free vulnerability exists in Windows Installer , which could allow an authorized attacker to achieve local privilege escalation . The vulnerability is classified as HIGH severity (CVSS 3.1 score of 7.0). No specific exploit details or in-the-wild exploitation information are provided ...

EUVD-2026-100068

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Installer allows an authorized attacker to elevate privileges locally...

EUVD-2026-100070

Heap-based buffer overflow in Winlogon allows an authorized attacker to elevate privileges locally...

CVE-2026-87699

A heap-based buffer overflow exists in Winlogon , which allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-122 . Official remediation is available via Microsoft updates.

CVE-2026-87700

A Use after free vulnerability exists in Windows Installer , which may allow an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-416 . While specific affected versions or detailed root causes are not provided in the documents, a remediation leve...

EUVD-2026-100067

Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to elevate privileges locally...

CVE-2026-87693

A use after free vulnerability exists in Windows Installer that allows an authorized attacker to achieve local privilege escalation . The vulnerability is characterized by a high base severity score of 7.0 and impacts confidentiality, integrity, and availability. No specific exploit links or deta...

CVE-2026-87694

A Use after free vulnerability in Windows Installer allows an authorized attacker to achieve local privilege elevation . The vulnerability is classified with a High base severity (CVSS 3.1 score of 7.8). While the technical root cause is identified as a use after free, specific file paths or func...