CVE-2026-69886

A heap-based buffer overflow vulnerability exists in the Windows Imaging Component . This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a CVSS 3.1 score of 9.8 (CRITICAL) . While the documents do not provide specific exploit links or v...

CVE-2026-84015

A heap-based buffer overflow exists in the Remote Access Point-to-Point Protocol (PPP) EAP-TLS component within Microsoft Windows . This vulnerability allows an unauthorized attacker to execute arbitrary code over a network. The impact is rated as CRITICAL with a CVSS score of 9.80 . No specific ...

CVE-2026-83919

A heap-based buffer overflow exists in the Microsoft Internet Messaging API . This vulnerability allows an authorized attacker to achieve local code execution . No specific versions are listed as affected, and no exploit information is provided in the documents. Remediation is indicated as an off...

CVE-2026-83921

A heap-based buffer overflow exists in the Microsoft Windows Search Component (Windows Search Service). This vulnerability allows an authorized attacker to achieve local privilege escalation . While the technical root cause is identified as a heap-based buffer overflow, specific exploit details o...

CVE-2026-83920

A heap-based buffer overflow exists in the Microsoft Windows Search Component . This vulnerability allows an authorized attacker to achieve local privilege escalation . No specific versions, exploit details, or remediation steps are provided in the documents beyond the existence of an official fix.

CVE-2026-83871

A Heap-based buffer overflow exists in OpenSSH for Windows , which allows an authorized attacker to achieve local privilege elevation . The vulnerability involves a Time-of-check Time-of-use (TOCTOU) Race Condition (CWE-367) and a Heap-based Buffer Overflow (CWE-122). The CVSS 3.1 base score is 7...

CVE-2026-83911

A heap-based buffer overflow exists in Windows Storage which can be leveraged by an authorized attacker to achieve local privilege elevation . The vulnerability is classified as High severity with a CVSS 3.1 score of 7.0. No specific exploit details or in-the-wild exploitation information are pro...

CVE-2026-70089

A heap-based buffer overflow vulnerability exists in the Windows GDI component. This flaw could allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability is characterized by a HIGH base severity score of 8.8. No specific exploit details or patch versions ar...

CVE-2026-83569

A heap-based buffer overflow exists in the HID Parser Library , which could allow an authorized attacker to achieve local privilege elevation . The vulnerability is characterized by a high severity score of 7.8 (CVSS v3.1), indicating significant impacts on confidentiality, integrity, and availab...

CVE-2026-70286

A heap-based buffer overflow exists in the Windows Win32K - GRFX component. This vulnerability allows an authorized attacker to achieve local privilege elevation . No specific exploit details or in-the-wild exploitation instances are provided in the documents. Remediation is indicated as an offic...

CVE-2026-83882

A heap-based buffer overflow vulnerability exists in the Windows Kernel . This flaw allows an authorized attacker to achieve local privilege elevation . No specific component, file, or version information is provided in the documents, and no exploit details or remediation instructions are specifi...

CVE-2026-83867

A heap-based buffer overflow vulnerability exists in Windows Push Notifications . This flaw allows an authorized attacker to achieve local privilege elevation . The CVSS 3.1 score of 7.8 indicates a High severity, with high impact on confidentiality, integrity, and availability. No specific explo...

CVE-2026-83902

A heap-based buffer overflow exists in Windows Direct Composition which could allow an authorized attacker to perform a local elevation of privilege . The vulnerability is characterized by a HIGH base severity score of 7.8. No specific exploit details or in-the-wild exploitation information are p...

CVE-2026-83896

A heap-based buffer overflow vulnerability exists in Windows Direct Composition . This flaw allows an authorized attacker to achieve local privilege elevation . No specific details regarding the affected component versions, root cause, or exploit code are provided in the documents. Remediation is...

CVE-2026-83851

A heap-based buffer overflow exists in the Windows Partition Management Driver . This vulnerability allows an unauthorized attacker to elevate privileges over a network. The CVSS 3.1 score is 8.8 (High) , indicating significant impact on confidentiality, integrity, and availability. No specific e...

CVE-2026-83836

A Heap-based buffer overflow exists in Windows Event Tracing which could allow an unauthorized attacker to execute code locally . The vulnerability involves a CWE-122 (Heap-based Buffer Overflow) and CWE-191 (Integer Underflow) condition. The Base Severity is High (7.8), with the attack vector be...

CVE-2026-83847

A Heap-based buffer overflow and Integer Overflow (CWE-122, CWE-190) exist in Microsoft Account , which may allow an authorized attacker to achieve local privilege elevation . The vulnerability has a CVSS 3.1 base score of 7.8 (High) . Specific exploitation details or proof-of-concept code are no...

CVE-2026-83782

A Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute arbitrary code over a network. This vulnerability is classified as CRITICAL with a CVSS v3.1 score of 9.8 . The impact includes the execution of arbitrary code , potentially allowing malicious actors to imper...

CVE-2026-83833

A heap-based buffer overflow exists in the Windows Kernel , which could allow an authorized attacker to achieve local privilege escalation . The vulnerability impacts the core kernel component of the Windows operating system. Specific details regarding the underlying cause, affected versions, or ...

CVE-2026-83827

A heap-based buffer overflow vulnerability exists in the Windows Bluetooth Port Driver . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is confirmed with a CVSS 3.1 score of 7.0, indicating a high severity impact on confidentiality, integrity, and...