CVE-2026-87698

A Windows Remote Access Service Infrastructure component is vulnerable to an out-of-bounds read (CWE-125). This flaw allows an authorized attacker to perform a local information disclosure on the affected system. The CVSS 3.1 score is 5.5, reflecting a medium severity with a local attack vector a...

EUVD-2026-100077

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

EUVD-2026-100074

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

EUVD-2026-100073

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

EUVD-2026-100078

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

EUVD-2026-100071

Null pointer dereference in Windows Installer allows an authorized attacker to elevate privileges locally...

EUVD-2026-100076

Out-of-bounds read in Windows Remote Access Service Infrastructure allows an authorized attacker to disclose information locally...

CVE-2026-83933

The Windows Update Orchestrator Service is vulnerable to an improper link resolution before file access (link following) vulnerability. This flaw allows an authorized attacker to perform a local information disclosure . No specific software versions, exploit links, or remediation steps are provid...

CVE-2026-83925

A vulnerability exists in the Windows Kernel involving the use of uninitialized resource (CWE-908). This flaw allows an authorized attacker to perform a local information disclosure (CWE-497). The vulnerability has a Medium base severity score of 4.7, requiring local access and high complexity to...

CVE-2026-83924

A Use after free vulnerability exists in the Windows Kernel . This flaw allows an authorized attacker to achieve local privilege elevation . No specific component, version, or remediation steps are provided in the documents. No exploit information is available.

EUVD-2026-100065

Heap-based buffer overflow in Reliable Multicast Transport Driver RMCAST allows an unauthorized attacker to execute code over an adjacent network...

EUVD-2026-100060

Improper link resolution before file access 'link following' in Windows Update Orchestrator Service allows an authorized attacker to disclose information locally...

EUVD-2026-100059

Use after free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-100057

Use of uninitialized resource in Windows Kernel allows an authorized attacker to disclose information locally...

EUVD-2026-100054

Integer overflow or wraparound in Windows Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-83913

A Use after free vulnerability in the Windows Kernel allows an authorized attacker to achieve local privilege elevation . While the specific component or file is not detailed in the provided documents, the impact includes high levels of confidentiality, integrity, and availability loss. No specif...

EUVD-2026-100048

Out-of-bounds read in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to disclose information locally...

CVE-2026-85909

An out-of-bounds read vulnerability exists in the Windows Universal Disk Format File System Driver (UDFS) . This flaw allows an authorized attacker to perform a local information disclosure . While specific exploit details are not provided, the vulnerability is associated with CWE-822 (Untrusted ...

CVE-2026-85910

A buffer over-read vulnerability exists in the Windows StateRepository API . This flaw allows an authorized attacker to perform a local information disclosure, potentially exposing sensitive data. The vulnerability is associated with CWE-126 . No specific exploit details or active in-the-wild exp...

CVE-2026-83923

A relative path traversal vulnerability exists in OpenSSH for Windows , potentially allowing an unauthorized attacker to achieve remote code execution over a network. The vulnerability is categorized under CWE-23 . While the specific component or file is not detailed in the provided documents, th...