CVE-2026-85916

A vulnerability in Azure Active Directory allows an unauthorized attacker to perform a local disclosure of private personal information. The vulnerability is categorized under CWE-359 , which involves the exposure of private personal information to an unauthorized actor. The CVSS 3.1 score is 6.2...

CVE-2026-70303

A vulnerability in the Windows Kernel involves an out-of-bounds write (CWE-787). This flaw allows an authorized attacker to achieve local privilege escalation . While the specific component or file is not identified in the provided documents, the impact includes high severity for confidentiality,...

EUVD-2026-99616

Out-of-bounds read in Windows Fast FAT Driver allows an unauthorized attacker to disclose information locally...

EUVD-2026-99624

Use after free in Windows Embedded Mode Service allows an authorized attacker to elevate privileges locally...

CVE-2026-85329

A race condition vulnerability exists in Microsoft Account due to concurrent execution using a shared resource with improper synchronization. This flaw allows an authorized attacker to achieve local privilege elevation . While the CVE details specify a HIGH base severity score of 7.0, no specific...

CVE-2026-70270

A vulnerability in the Windows Container Isolation FS Filter Driver allows an authorized attacker to achieve local privilege elevation via an untrusted pointer dereference . This flaw is identified with CWE-822 . The CVSS v3.1 score is 5.5 , indicating a medium severity risk with a local attack v...

CVE-2026-83888

A buffer over-read vulnerability exists in the Windows CD-ROM Driver , which could allow an unauthorized attacker to elevate privileges over a network. While the specific affected versions are not provided, the vulnerability involves the driver reading more data from a buffer than intended, poten...

CVE-2026-70164

A Use after free vulnerability exists in Windows TCP/IP which allows an authorized attacker to achieve local privilege elevation . The vulnerability is confirmed with a HIGH base severity score of 7.0. No specific exploit links or internal component details are provided in the documents, and no d...

EUVD-2026-99607

Protection mechanism failure in Windows PowerShell allows an authorized attacker to bypass a security feature locally...

CVE-2026-70216

A vulnerability exists in Windows Mobile Device Management due to insufficient granularity of access control . This flaw allows an authorized attacker to perform tampering locally . The vulnerability has a CVSS 3.1 score of 5.5 (Medium) and is associated with CWE-1220 . No specific details regard...

EUVD-2026-99603

Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally...

EUVD-2026-99598

Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally...

EUVD-2026-99589

Use after free in Windows Local Security Authority LSA allows an authorized attacker to elevate privileges locally...

EUVD-2026-99580

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

EUVD-2026-99582

Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-88158

An out-of-bounds read vulnerability exists in Microsoft Digest Authentication . This flaw allows an authorized attacker to disclose information locally . The vulnerability is characterized by a MEDIUM severity (CVSS 3.1 score of 5.5) and involves an attack vector originating from the local system...

EUVD-2026-99579

Heap-based buffer overflow in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges locally...

CVE-2026-71347

A race condition (improper synchronization during concurrent execution) exists in Windows Security Center , which allows an authorized attacker to achieve local elevation of privilege . Technical details regarding specific components or root causes are not provided in the documents, and no exploi...

CVE-2026-85864

A local privilege escalation vulnerability exists in Python due to improper privilege management . This flaw allows an authorized attacker to elevate their privileges on a local system. The vulnerability is associated with CWE-641 (Improper Restriction of Names for Files and Other Resources). Whi...

CVE-2026-85915

A heap-based buffer overflow exists in the Windows PCI Bus Driver . This vulnerability allows an authorized attacker to achieve local privilege elevation . No specific exploit details or in-the-wild exploitation information are provided in the documents. Remediation is listed as an official fix v...