CVE-2026-88158

An out-of-bounds read vulnerability exists in Microsoft Digest Authentication . This flaw allows an authorized attacker to disclose information locally . The vulnerability is characterized by a MEDIUM severity (CVSS 3.1 score of 5.5) and involves an attack vector originating from the local system...

EUVD-2026-99579

Heap-based buffer overflow in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges locally...

CVE-2026-71347

A race condition (improper synchronization during concurrent execution) exists in Windows Security Center , which allows an authorized attacker to achieve local elevation of privilege . Technical details regarding specific components or root causes are not provided in the documents, and no exploi...

CVE-2026-85864

A local privilege escalation vulnerability exists in Python due to improper privilege management . This flaw allows an authorized attacker to elevate their privileges on a local system. The vulnerability is associated with CWE-641 (Improper Restriction of Names for Files and Other Resources). Whi...

CVE-2026-85915

A heap-based buffer overflow exists in the Windows PCI Bus Driver . This vulnerability allows an authorized attacker to achieve local privilege elevation . No specific exploit details or in-the-wild exploitation information are provided in the documents. Remediation is listed as an official fix v...

CVE-2026-85857

A vulnerability in Windows Kernel-Mode Drivers allows an authorized attacker to perform a local information disclosure . The issue is caused by the insertion of sensitive information into a log file (CWE-532). The impact is characterized as a high level of confidentiality loss for local users. Re...

CVE-2026-85859

A Null pointer dereference vulnerability exists in the Windows Message Queuing Queue Manager . This flaw allows an authorized attacker to perform a denial of service (DoS) attack over a network. The vulnerability is categorized under CWE-476 and has a CVSS 3.1 score of 6.5. No specific exploit in...

EUVD-2026-99566

Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally...

CVE-2026-85852

An out-of-bounds read vulnerability exists in Windows Management Instrumentation . This flaw allows an authorized attacker to disclose information locally on the affected system. The vulnerability is categorized as a local information disclosure with a CVSS 3.1 score of 5.5 . No specific exploit ...

EUVD-2026-99559

Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...

EUVD-2026-99555

Use after free in Windows SmartScreen allows an authorized attacker to elevate privileges locally...

EUVD-2026-99561

Insertion of sensitive information into log file in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally...

EUVD-2026-99556

Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose information locally...

EUVD-2026-99549

Use of uninitialized resource in Windows Background Intelligent Transfer Service BITS allows an authorized attacker to elevate privileges locally...

EUVD-2026-99544

Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information locally...

CVE-2026-85835

A buffer over-read vulnerability exists in Servicing Stack Updates . This flaw allows an authorized attacker to disclose information locally. The vulnerability has a Medium severity (CVSS 3.1 score of 5.5) and requires local access and low privileges. No specific exploit code or information on in...

CVE-2026-85843

The Windows Background Intelligent Transfer Service (BITS) is vulnerable to a local privilege escalation flaw due to the use of uninitialized resource (CWE-908). This vulnerability allows an authorized attacker to elevate their privileges on the local system. No specific details regarding affecte...

CVE-2026-85847

An out-of-bounds read vulnerability exists in the Windows Print Spooler Components . This flaw allows an unauthorized attacker to disclose information over a network. The vulnerability is associated with CWE-125 and carries a Medium base severity (CVSS 3.1 score of 6.5). Exploitation details are ...

EUVD-2026-99554

Release of invalid pointer or reference in Windows Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-85836

A Use after free vulnerability exists in the Windows Kernel , which could allow an authorized attacker to achieve local privilege escalation . The vulnerability is classified with a CVSS 3.1 base score of 7.8 (High) . No specific exploit details or in-the-wild exploitation information are provide...