CVE-2026-85827

A Heap-based buffer overflow exists in WebDAV that allows an authorized attacker to perform a local privilege escalation . The vulnerability is confirmed with a CVSS 3.1 base score of 7.0 (High). No specific exploitative details or evidence of in-the-wild exploitation are provided in the document...

CVE-2026-85821

An out-of-bounds read vulnerability exists in the Windows Universal Disk Format File System Driver (UDFS) . This flaw allows an authorized attacker to disclose information locally . The vulnerability is associated with CWE-125 . Official remediation is available via Microsoft's security updates. ...

CVE-2026-85831

A heap-based buffer overflow exists in the Windows Biometric Service . This vulnerability allows an authorized attacker to perform a local information disclosure . The provided documents do not specify the exact root cause, affected versions, or available remediation steps beyond the existence of...

CVE-2026-85817

A vulnerability in Windows PowerShell allows an unauthorized attacker to execute code over a network due to reliance on untrusted inputs in a security decision. The impact is rated as HIGH with a CVSS 3.1 score of 8.8, affecting confidentiality, integrity, and availability. Official fix informati...

CVE-2026-85370

A Use after free vulnerability exists in WebDAV , which allows an authorized attacker to achieve local privilege escalation . The vulnerability impacts the confidentiality, integrity, and availability of the affected system, as indicated by its high severity metrics. No specific technical root ca...

CVE-2026-85369

Windows Hyper-V is affected by an out-of-bounds read vulnerability. This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is classified as High severity with a CVSS 3.1 score of 8.2. No specific exploit information or remediation steps are provided in th...

CVE-2026-85374

An out-of-bounds read vulnerability exists in Windows Installer , which could allow an authorized attacker to perform a local information disclosure . The impact is categorized as a medium severity risk with a CVSS 3.1 score of 5.5. No specific exploit details or in-the-wild exploitation informat...

CVE-2026-85364

A Use after free vulnerability in Windows Installer allows an authorized attacker to achieve local privilege escalation . The vulnerability's base severity score is 7.0 (HIGH) , with impacts on confidentiality, integrity, and availability. No specific exploit information or remediation versions a...

CVE-2026-85362

A Release of invalid pointer or reference vulnerability exists in Windows Management Instrumentation . This flaw allows an authorized attacker to perform a local privilege escalation . No specific exploit details or version-specific information are provided in the documents, and no exploits are c...

CVE-2026-85361

A Use after free vulnerability exists in Windows Installer , which could allow an authorized attacker to achieve local privilege elevation . The severity is rated as High (CVSS 3.1 score of 7.0). No specific exploit details or in-the-wild exploitation information are provided in the documents. Re...

CVE-2026-85343

Windows Hyper-V is affected by an Improper link resolution before file access (link following) vulnerability. This flaw allows an authorized attacker to perform a local privilege escalation . No specific software versions or exploit links are provided in the documents, but the vulnerability has a...

CVE-2026-85333

A race condition exists in the Windows Performance Monitor component due to concurrent execution using a shared resource with improper synchronization. This vulnerability allows an authorized attacker to achieve local privilege escalation . No specific exploit information or exploit links are pro...

CVE-2026-85321

A vulnerability in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform a Denial of Service (DoS) attack over a network. The root cause is the allocation of resources without limits or throttling (CWE-770). This flaw can lead to high availability impact. Remedia...

CVE-2026-85320

A vulnerability in Windows Print Spooler Components arises from the use of uninitialized resource (CWE-908). This flaw allows an authorized attacker to perform a local information disclosure . The vulnerability has a CVSS 3.1 base score of 5.5 (Medium) . No specific exploit information or technic...

CVE-2026-85319

A vulnerability in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform a Denial of Service (DoS) over a network. This is caused by the allocation of resources without limits or throttling (CWE-770). The impact is a high-severity loss of availability. An officia...

CVE-2026-84017

A Null pointer dereference vulnerability exists in the Windows Routing and Remote Access Service (RRAS) . This flaw allows an unauthorized attacker to perform a Denial of Service (DoS) attack over the network. The vulnerability is characterized by a CVSS 3.1 base score of 7.5 with High availabili...

CVE-2026-83932

A heap-based buffer overflow exists in Windows Group Policy , which could allow an authorized attacker to achieve local privilege escalation . The vulnerability is categorized as High severity (CVSS 3.1 score of 7.8) due to its potential impact on confidentiality, integrity, and availability. No ...

CVE-2026-84011

The Windows SMB Client is susceptible to an incorrect authorization vulnerability (CWE-863) that allows an authorized attacker to bypass a security feature locally. The vulnerability results in a high integrity impact but no impact on confidentiality or availability. Remediation is provided via a...

CVE-2026-83927

The Windows Registry is susceptible to an improper link resolution before file access (link following) vulnerability. This security flaw allows an authorized attacker to achieve local privilege escalation . While the specific affected versions and technical root causes are not detailed beyond the...

CVE-2026-83920

A heap-based buffer overflow exists in the Microsoft Windows Search Component . This vulnerability allows an authorized attacker to achieve local privilege escalation . No specific versions, exploit details, or remediation steps are provided in the documents beyond the existence of an official fix.