CVE-2026-85333

A race condition exists in the Windows Performance Monitor component due to concurrent execution using a shared resource with improper synchronization. This vulnerability allows an authorized attacker to achieve local privilege escalation . No specific exploit information or exploit links are pro...

CVE-2026-85321

A vulnerability in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform a Denial of Service (DoS) attack over a network. The root cause is the allocation of resources without limits or throttling (CWE-770). This flaw can lead to high availability impact. Remedia...

CVE-2026-85320

A vulnerability in Windows Print Spooler Components arises from the use of uninitialized resource (CWE-908). This flaw allows an authorized attacker to perform a local information disclosure . The vulnerability has a CVSS 3.1 base score of 5.5 (Medium) . No specific exploit information or technic...

CVE-2026-85319

A vulnerability in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform a Denial of Service (DoS) over a network. This is caused by the allocation of resources without limits or throttling (CWE-770). The impact is a high-severity loss of availability. An officia...

CVE-2026-84017

A Null pointer dereference vulnerability exists in the Windows Routing and Remote Access Service (RRAS) . This flaw allows an unauthorized attacker to perform a Denial of Service (DoS) attack over the network. The vulnerability is characterized by a CVSS 3.1 base score of 7.5 with High availabili...

CVE-2026-83927

The Windows Registry is susceptible to an improper link resolution before file access (link following) vulnerability. This security flaw allows an authorized attacker to achieve local privilege escalation . While the specific affected versions and technical root causes are not detailed beyond the...

CVE-2026-84011

The Windows SMB Client is susceptible to an incorrect authorization vulnerability (CWE-863) that allows an authorized attacker to bypass a security feature locally. The vulnerability results in a high integrity impact but no impact on confidentiality or availability. Remediation is provided via a...

CVE-2026-83932

A heap-based buffer overflow exists in Windows Group Policy , which could allow an authorized attacker to achieve local privilege escalation . The vulnerability is categorized as High severity (CVSS 3.1 score of 7.8) due to its potential impact on confidentiality, integrity, and availability. No ...

CVE-2026-83920

A heap-based buffer overflow exists in the Microsoft Windows Search Component . This vulnerability allows an authorized attacker to achieve local privilege escalation . No specific versions, exploit details, or remediation steps are provided in the documents beyond the existence of an official fix.

CVE-2026-83916

A double free vulnerability in Windows Error Reporting allows an authorized attacker to achieve local code execution . The vulnerability is characterized by a CWE-415 flaw, which can lead to significant impacts on confidentiality, integrity, and availability . An official fix is available, and sp...

CVE-2026-83886

A Use after free vulnerability exists in the Windows Update Orchestrator Service . This flaw allows an authorized attacker to achieve local privilege elevation . While the specific technical root cause is not detailed in the provided documents, the impact includes high levels of confidentiality, ...

CVE-2026-83769

A Use after free vulnerability exists in OpenSSH for Windows , which allows an authorized attacker to achieve local privilege escalation . The vulnerability is classified with a CVSS 3.1 base score of 7.8 , indicating a high severity. No specific exploit details or in-the-wild exploitation record...

CVE-2026-70248

A null pointer dereference vulnerability exists in Windows Hyper-V . This flaw allows an authorized attacker to perform a local denial of service (DoS) attack. No specific versions or exploit links are provided in the documents, but the vulnerability has an official fix available.

CVE-2026-70163

The OpenSSH for Windows software is vulnerable to a Denial of Service (DoS) attack due to the allocation of resources without limits or throttling . An unauthorized attacker can exploit this flaw over a network to disrupt service. The vulnerability is associated with CWE-770 . Remediation is avai...

CVE-2026-70222

A Relative path traversal vulnerability exists in Windows Shell . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-23 . No specific exploit information or specific internal component details are provided in the documentation.

CVE-2026-70128

An out-of-bounds read vulnerability exists in the HID Parser Library , which allows an authorized attacker to disclose information locally . The vulnerability results in a high confidentiality impact as it enables local information disclosure. No specific exploitation details or exploit links are...

CVE-2026-83896

A heap-based buffer overflow vulnerability exists in Windows Direct Composition . This flaw allows an authorized attacker to achieve local privilege elevation . No specific details regarding the affected component versions, root cause, or exploit code are provided in the documents. Remediation is...

CVE-2026-83885

The Windows Virtualization-Based Security (VBS) Enclave is vulnerable to a flaw characterized by inadequate encryption strength . This security weakness allows an authorized attacker to perform spoofing locally . The vulnerability is associated with CWE-326 . No specific exploit code or details r...

CVE-2026-83892

A vulnerability exists in the HID Parser Library component of Windows , where an out-of-bounds read allows an authorized attacker to disclose information locally . The severity is rated as MEDIUM with a CVSS 3.1 score of 5.5. No specific exploit details or in-the-wild exploitation data are provid...

CVE-2026-83872

A vulnerability exists in Windows TCP/IP due to an incorrect conversion between numeric types (CWE-681). This flaw allows an authorized attacker to perform a local elevation of privilege . The impact includes high severity for confidentiality, integrity, and availability. No specific exploit deta...