CVE-2026-85901

A heap-based buffer overflow vulnerability exists in the Windows Win32K - GRFX component. This flaw allows an authorized attacker to perform a local privilege escalation . The severity is rated as HIGH with a CVSS score of 7.8. Documentation does not provide specific exploit links or detailed rem...

CVE-2026-85905

A heap-based buffer overflow exists in the Windows UI Immersive Server . This vulnerability allows an authorized attacker to achieve local privilege escalation . The impact includes high levels of risk to confidentiality, integrity, and availability. Remediation is available through an official f...

CVE-2026-85902

A heap-based buffer overflow exists in Windows Direct Composition that allows an authorized attacker to achieve local privilege escalation . The vulnerability is categorized under CWE-122 and has a CVSS 3.1 base score of 7.8 (High). No specific exploit information or in-the-wild exploitation deta...

CVE-2026-83903

A heap-based buffer overflow exists in Windows Direct Composition . This vulnerability allows an authorized attacker to perform a local privilege escalation . While the technical root cause is identified as a heap overflow, specific affected versions or patch details are not provided in the docum...

CVE-2026-83895

A heap-based buffer overflow exists in the Windows Win32 Kernel Subsystem . This vulnerability allows an unauthorized attacker to elevate privileges through a physical attack . No specific exploit information or remediation steps are provided in the documents.

CVE-2026-83863

A heap-based buffer overflow vulnerability exists in Servicing Stack Updates . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is categorized under CWE-122 and has a CVSS 3.1 base score of 7.8 (High) . No specific information regarding exploitatio...

CVE-2026-83860

A stack-based buffer overflow vulnerability exists in Windows GDI . This flaw allows an unauthorized attacker to perform a denial of service (DoS) attack over a network. The vulnerability is categorized under CWE-121 . No specific software versions, internal component files, or remediation detail...

CVE-2026-83850

A heap-based buffer overflow exists in the Microsoft Windows Search Component . This vulnerability allows an authorized attacker to achieve local privilege elevation . The vulnerability is classified with a CVSS 3.1 base score of 7.8 (High) . No specific exploit details or in-the-wild exploitatio...

CVE-2026-83874

A heap-based buffer overflow exists in Windows Event Tracing which could allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability carries a high severity score of 8.8, indicating significant impact on confidentiality, integrity, and availability. While the...

CVE-2026-83861

A heap-based buffer overflow exists in the Windows Remote Desktop Protocol . This vulnerability allows an authorized attacker to achieve local privilege escalation . No specific exploit details or remediation instructions are provided in the documents beyond the mention of an official fix .

CVE-2026-83881

A Heap-based buffer overflow exists in the Windows exFAT File System , which could allow an authorized attacker to perform a local privilege escalation . The vulnerability is confirmed with a CVSS 3.1 score of 7.8. No specific exploit information or version-specific details are provided in the do...

CVE-2026-83829

A heap-based buffer overflow exists in the Microsoft Windows Search Component . This vulnerability allows an authorized attacker to achieve local privilege escalation . The impact includes potential high levels of confidentiality, integrity, and availability loss. No specific exploit code or in-t...

CVE-2026-83830

A heap-based buffer overflow exists in the Windows COM+ Event System Service . This vulnerability allows an authorized attacker to achieve local privilege escalation . No specific details regarding the root cause, affected versions, or available exploits are provided in the documents. Remediation...

CVE-2026-83795

A heap-based buffer overflow exists in the Windows IKE Extension , which could allow an unauthorized attacker to cause a denial of service over a network. The vulnerability is associated with CWE-122 and CWE-125 . While the risk is categorized as high availability impact, specific details regardi...

CVE-2026-83777

A heap-based buffer overflow exists in the Windows Bluetooth Service . This vulnerability allows an unauthorized attacker to elevate privileges over an adjacent network. Exploitation details and specific affected versions are not provided in the documents, but the vulnerability is associated with...

CVE-2026-83783

A heap-based buffer overflow vulnerability exists in Windows Management Instrumentation . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is categorized as a High severity issue (CVSS 3.1 score of 7.8). Remediation is available via an official fix ...

CVE-2026-83789

A heap-based buffer overflow exists in the Windows SMB Client component. This vulnerability allows an unauthorized attacker to elevate privileges over a network. The CVSS 3.1 score is 8.8 (High) , indicating significant impact on confidentiality, integrity, and availability. While an official fix...

CVE-2026-83770

A heap-based buffer overflow exists in Windows Text Shaping that allows an unauthorized attacker to execute arbitrary code over a network. This vulnerability is classified as CRITICAL with a CVSS score of 9.8. Systems connected to public networks are at a higher risk, as the vulnerability can be ...

CVE-2026-83767

A stack-based buffer overflow vulnerability exists in the Windows Installer component. This flaw allows an authorized attacker to perform a local privilege escalation on affected systems. The vulnerability is characterized by a High severity base score of 7.8. No specific details regarding exploi...

CVE-2026-83778

A heap-based buffer overflow vulnerability exists in the Microsoft Internet Messaging API . This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a high severity rating (CVSS 8.8) and requires user interaction. No specific exploit details...