CVE-2026-85374

An out-of-bounds read vulnerability exists in Windows Installer , which could allow an authorized attacker to perform a local information disclosure . The impact is categorized as a medium severity risk with a CVSS 3.1 score of 5.5. No specific exploit details or in-the-wild exploitation informat...

EUVD-2026-99498

Out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locally...

CVE-2026-85369

Windows Hyper-V is affected by an out-of-bounds read vulnerability. This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is classified as High severity with a CVSS 3.1 score of 8.2. No specific exploit information or remediation steps are provided in th...

EUVD-2026-99493

Use after free in WebDAV allows an authorized attacker to elevate privileges locally...

EUVD-2026-99490

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-85362

A Release of invalid pointer or reference vulnerability exists in Windows Management Instrumentation . This flaw allows an authorized attacker to perform a local privilege escalation . No specific exploit details or version-specific information are provided in the documents, and no exploits are c...

EUVD-2026-99481

Inclusion of functionality from untrusted control sphere in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...

EUVD-2026-99488

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-85361

A Use after free vulnerability exists in Windows Installer , which could allow an authorized attacker to achieve local privilege elevation . The severity is rated as High (CVSS 3.1 score of 7.0). No specific exploit details or in-the-wild exploitation information are provided in the documents. Re...

CVE-2026-85364

A Use after free vulnerability in Windows Installer allows an authorized attacker to achieve local privilege escalation . The vulnerability's base severity score is 7.0 (HIGH) , with impacts on confidentiality, integrity, and availability. No specific exploit information or remediation versions a...

CVE-2026-85333

A race condition exists in the Windows Performance Monitor due to concurrent execution using a shared resource with improper synchronization. This vulnerability allows an authorized attacker to achieve local privilege elevation . No specific exploit details or remediation versions are provided in...

EUVD-2026-99478

Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-85343

Windows Hyper-V is affected by an Improper link resolution before file access (link following) vulnerability. This flaw allows an authorized attacker to perform a local privilege escalation . No specific software versions or exploit links are provided in the documents, but the vulnerability has a...

EUVD-2026-99459

Use of uninitialized resource in Windows Print Spooler Components allows an authorized attacker to disclose information locally...

CVE-2026-85320

A vulnerability in Windows Print Spooler Components arises from the use of uninitialized resource (CWE-908). This flaw allows an authorized attacker to perform a local information disclosure . The vulnerability has a CVSS 3.1 base score of 5.5 (Medium) . No specific exploit information or technic...

CVE-2026-85321

A vulnerability in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform a Denial of Service (DoS) attack over a network. The root cause is the allocation of resources without limits or throttling (CWE-770). This flaw can lead to high availability impact. Remedia...

CVE-2026-85319

A vulnerability in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform a Denial of Service (DoS) over a network. This is caused by the allocation of resources without limits or throttling (CWE-770). The impact is a high-severity loss of availability. An officia...

EUVD-2026-99467

Weak authentication in Windows Projected File System allows an authorized attacker to elevate privileges locally...

CVE-2026-84017

A Null pointer dereference vulnerability exists in the Windows Routing and Remote Access Service (RRAS) . This flaw allows an unauthorized attacker to perform a Denial of Service (DoS) attack over the network. The vulnerability is characterized by a CVSS 3.1 base score of 7.5 with High availabili...

CVE-2026-83932

A heap-based buffer overflow exists in Windows Group Policy , which could allow an authorized attacker to achieve local privilege escalation . The vulnerability is categorized as High severity (CVSS 3.1 score of 7.8) due to its potential impact on confidentiality, integrity, and availability. No ...