EUVD-2026-100019

Heap-based buffer overflow in Windows Remote Desktop Protocol allows an authorized attacker to elevate privileges locally...

CVE-2026-83861

A heap-based buffer overflow exists in the Windows Remote Desktop Protocol . This vulnerability allows an authorized attacker to achieve local privilege escalation . No specific exploit details or remediation instructions are provided in the documents beyond the mention of an official fix .

EUVD-2026-100012

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Win32K allows an authorized attacker to elevate privileges locally...

EUVD-2026-100011

Weak authentication in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

EUVD-2026-100013

Improper privilege management in Windows Internet wininet.dll allows an authorized attacker to perform spoofing locally...

CVE-2026-83794

The Windows Portable Device MTP Driver contains an out-of-bounds read vulnerability. This flaw allows an authorized attacker to perform a local information disclosure , potentially exposing sensitive data. The vulnerability is associated with CWE-125 . While the risk is classified as MEDIUM , the...

EUVD-2026-99999

Buffer over-read in Windows RNDIS allows an unauthorized attacker to disclose information with a physical attack...

EUVD-2026-99998

Generation of error message containing sensitive information in Windows NTFS allows an authorized attacker to disclose information locally...

EUVD-2026-100003

Incorrect authorization in Windows Device Install Service allows an authorized attacker to elevate privileges locally...

CVE-2026-83785

A Use after free vulnerability exists in the Windows COM+ Event System Service . This flaw allows an authorized attacker to achieve local privilege escalation . No specific software versions or exploit links are provided in the documents; however, a remediation level of OFFICIAL_FIX is indicated.

CVE-2026-83786

A vulnerability in Windows NTFS allows an authorized attacker to disclose sensitive information locally through the generation of error messages. This issue is classified as an information disclosure vulnerability (CWE-209) with a Medium base severity score. While the vulnerability allows for loc...

CVE-2026-83788

A buffer over-read vulnerability exists in the Windows RNDIS component, specifically within rndismp6.sys . This flaw allows an unauthorized attacker to perform an information disclosure by conducting a physical attack . No specific exploit details or in-the-wild exploitation information are provi...

CVE-2026-83790

A Use after free vulnerability in Windows Hello allows an authorized attacker to achieve local privilege escalation . The issue is classified with a High base severity score of 7.0. While specific technical component details or exploit links are not provided in the documents, the vulnerability is...

EUVD-2026-99997

Improper null termination in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-100001

Use after free in Windows Hello allows an authorized attacker to elevate privileges locally...

CVE-2026-83781

The Windows Program Compatibility Assistant Service is vulnerable to an improper null termination (CWE-170) flaw. This vulnerability allows an authorized attacker to achieve local privilege escalation . No specific versions or exploit details are provided in the documents; however, a remediation ...

EUVD-2026-99983

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally...

CVE-2026-83767

A stack-based buffer overflow vulnerability exists in the Windows Installer component. This flaw allows an authorized attacker to perform a local privilege escalation on affected systems. The vulnerability is characterized by a High severity base score of 7.8. No specific details regarding exploi...

CVE-2026-83765

An out-of-bounds read vulnerability exists in the Windows DWM Core Library . This flaw allows an authorized attacker to perform a local information disclosure . The CVSS 3.1 score is 5.5 (Medium) , with a high impact on confidentiality. No specific exploit information or remediation details are p...

CVE-2026-83774

A vulnerability in the Windows Win32 Kernel Subsystem allows an authorized attacker to disclose sensitive system information locally. The root cause is the exposure of this information to an unauthorized control sphere (CWE-497). The impact is a high level of confidentiality loss, though integrit...