CVE-2026-85800

A Heap-based buffer overflow exists in Windows Error Reporting that allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-122 . No specific exploit details or direct links to in-the-wild exploitation are provided in the documentation. Remed...

CVE-2026-85791

A heap-based buffer overflow vulnerability exists in the Windows Encrypting File System (EFS) . This flaw allows an authorized attacker to perform a local elevation of privilege . While the documents confirm the vulnerability type and potential impact, specific details regarding the affected comp...

CVE-2026-85373

A heap-based buffer overflow exists in the Windows Universal Plug and Play (UPnP) Device Host . This vulnerability allows an authorized attacker to achieve local privilege escalation . No specific version numbers, root causes, or remediation steps are provided in the documents beyond the general ...

CVE-2026-85358

A Heap-based buffer overflow vulnerability exists in Windows Installer . This flaw allows an authorized attacker to perform a local elevation of privilege . The CVSS 3.1 score is 7.8 (High) , with an attack vector of Local and low complexity. No specific exploit information or direct mitigation s...

CVE-2026-85365

A Heap-based buffer overflow exists in Servicing Stack Updates , which allows an authorized attacker to achieve local privilege escalation . The vulnerability has a CVSS 3.1 base score of 7.0, indicating high severity. Remediation is provided via an official fix from Microsoft. No specific exploi...

CVE-2026-85366

A heap-based buffer overflow vulnerability exists in Windows Installer . This flaw allows an authorized attacker to perform a local elevation of privileges . The severity is rated as High (CVSS 3.1 score of 7.8). No specific exploit links or remediation versions are provided in the documents beyo...

CVE-2026-85368

A heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to perform a local privilege escalation . The vulnerability is confirmed by Microsoft and carries a CVSS v3.1 score of 7.8 (High) . While the technical root cause is a buffer overflow, the documents do not provide specif...

CVE-2026-85341

A heap-based buffer overflow exists in the Windows USB Video Driver . This vulnerability allows an authorized attacker to perform a local privilege escalation . The CVSS 3.1 score is 7.8 (High) , with impacts to confidentiality, integrity, and availability. Remediation is available via an officia...

CVE-2026-85327

A heap-based buffer overflow vulnerability exists in the Windows Print Spooler Components . This flaw allows an authorized attacker to perform a local elevation of privilege attack. While the vulnerability's impact is classified as High (CVSS 3.1 score of 7.8), specific details regarding the root...

CVE-2026-85318

A heap-based buffer overflow vulnerability exists in Servicing Stack Updates . This flaw allows an authorized attacker to perform a local privilege escalation . The vulnerability is associated with CWE-122 and has been assigned a HIGH severity score of 7.8. No specific exploit details or links ar...

CVE-2026-84015

A heap-based buffer overflow exists in the Remote Access Point-to-Point Protocol (PPP) EAP-TLS component within Microsoft Windows . This vulnerability allows an unauthorized attacker to execute arbitrary code over a network. The impact is rated as CRITICAL with a CVSS score of 9.80 . No specific ...

CVE-2026-69886

A heap-based buffer overflow vulnerability exists in the Windows Imaging Component . This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a CVSS 3.1 score of 9.8 (CRITICAL) . While the documents do not provide specific exploit links or v...

CVE-2026-84014

A Heap-based buffer overflow exists in the Windows Device Association Service . This vulnerability allows an authorized attacker to achieve local privilege elevation . The issue is associated with CWE-122 (Heap-based Buffer Overflow) and CWE-362 (Race Condition). No specific exploit links or deta...

CVE-2026-83932

A heap-based buffer overflow exists in Windows Group Policy , which could allow an authorized attacker to achieve local privilege escalation . The vulnerability is categorized as High severity (CVSS 3.1 score of 7.8) due to its potential impact on confidentiality, integrity, and availability. No ...

CVE-2026-83919

A heap-based buffer overflow exists in the Microsoft Internet Messaging API . This vulnerability allows an authorized attacker to achieve local code execution . No specific versions are listed as affected, and no exploit information is provided in the documents. Remediation is indicated as an off...

CVE-2026-83920

A heap-based buffer overflow exists in the Microsoft Windows Search Component . This vulnerability allows an authorized attacker to achieve local privilege escalation . No specific versions, exploit details, or remediation steps are provided in the documents beyond the existence of an official fix.

CVE-2026-83921

A heap-based buffer overflow exists in the Microsoft Windows Search Component (Windows Search Service). This vulnerability allows an authorized attacker to achieve local privilege escalation . While the technical root cause is identified as a heap-based buffer overflow, specific exploit details o...

CVE-2026-83871

A Heap-based buffer overflow exists in OpenSSH for Windows , which allows an authorized attacker to achieve local privilege elevation . The vulnerability involves a Time-of-check Time-of-use (TOCTOU) Race Condition (CWE-367) and a Heap-based Buffer Overflow (CWE-122). The CVSS 3.1 base score is 7...

CVE-2026-83911

A heap-based buffer overflow exists in Windows Storage which can be leveraged by an authorized attacker to achieve local privilege elevation . The vulnerability is classified as High severity with a CVSS 3.1 score of 7.0. No specific exploit details or in-the-wild exploitation information are pro...

CVE-2026-70286

A heap-based buffer overflow exists in the Windows Win32K - GRFX component. This vulnerability allows an authorized attacker to achieve local privilege elevation . No specific exploit details or in-the-wild exploitation instances are provided in the documents. Remediation is indicated as an offic...