CVE-2026-85856

A heap-based buffer overflow vulnerability exists in Windows Internet Connection Sharing (ICS) . This flaw allows an authorized attacker to achieve remote code execution over an adjacent network . The vulnerability has a CVSS 3.1 base score of 7.1 (High) , with impacts on confidentiality, integri...

CVE-2026-85834

A heap-based buffer overflow exists in the Windows TCP/IP stack. This vulnerability allows an authorized attacker to perform a local privilege escalation . While the CVSS 3.1 score is 7.0, specific details regarding the exact function or file affected are not provided in the documents. Exploitati...

CVE-2026-85835

A buffer over-read vulnerability exists in Servicing Stack Updates . This flaw allows an authorized attacker to disclose information locally. The vulnerability has a Medium severity (CVSS 3.1 score of 5.5) and requires local access and low privileges. No specific exploit code or information on in...

CVE-2026-85848

A heap-based buffer overflow exists in the Windows Background Intelligent Transfer Service (BITS) . This vulnerability allows an authorized attacker to achieve local privilege elevation . The provided documents do not specify the exact component or file responsible for the overflow, nor do they p...

CVE-2026-85827

A Heap-based buffer overflow exists in WebDAV that allows an authorized attacker to perform a local privilege escalation . The vulnerability is confirmed with a CVSS 3.1 base score of 7.0 (High). No specific exploitative details or evidence of in-the-wild exploitation are provided in the document...

CVE-2026-85831

A heap-based buffer overflow exists in the Windows Biometric Service . This vulnerability allows an authorized attacker to perform a local information disclosure . The provided documents do not specify the exact root cause, affected versions, or available remediation steps beyond the existence of...

CVE-2026-85822

A heap-based buffer overflow vulnerability exists in the Windows exFAT File System . This flaw allows an authorized attacker to achieve local privilege escalation . The CVSS 3.1 base score is 7.8 (High) , reflecting high impact on confidentiality, integrity, and availability. Exploitation details...

CVE-2026-85832

A heap-based buffer overflow exists in the Windows Background Intelligent Transfer Service (BITS) . This vulnerability allows an authorized attacker to achieve local privilege elevation . While the CVSS score indicates high impact on confidentiality, integrity, and availability, specific details ...

CVE-2026-85828

A heap-based buffer overflow vulnerability exists in WebDAV , which could allow an authorized attacker to achieve local privilege escalation . The vulnerability is categorized under CWE-122 . While the specific affected versions and internal components are not detailed in the provided documents, ...

CVE-2026-85814

A heap-based buffer overflow exists in Microsoft Windows Media Foundation , which could allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a CVSS v3.1 score of 9.8 (CRITICAL), indicating a high impact on confidentiality, integrity, and availabili...

CVE-2026-85800

A Heap-based buffer overflow exists in Windows Error Reporting that allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-122 . No specific exploit details or direct links to in-the-wild exploitation are provided in the documentation. Remed...

CVE-2026-85798

A heap-based buffer overflow exists in the Windows Distributed File System (DFS) . This vulnerability allows an authorized attacker to achieve remote code execution over a network. The CVSS 3.1 score is 7.2, reflecting high impact on confidentiality, integrity, and availability. No specific explo...

CVE-2026-85791

A heap-based buffer overflow vulnerability exists in the Windows Encrypting File System (EFS) . This flaw allows an authorized attacker to perform a local elevation of privilege . While the documents confirm the vulnerability type and potential impact, specific details regarding the affected comp...

CVE-2026-85373

A heap-based buffer overflow exists in the Windows Universal Plug and Play (UPnP) Device Host . This vulnerability allows an authorized attacker to achieve local privilege escalation . No specific version numbers, root causes, or remediation steps are provided in the documents beyond the general ...

CVE-2026-85366

A heap-based buffer overflow vulnerability exists in Windows Installer . This flaw allows an authorized attacker to perform a local elevation of privileges . The severity is rated as High (CVSS 3.1 score of 7.8). No specific exploit links or remediation versions are provided in the documents beyo...

CVE-2026-85365

A Heap-based buffer overflow exists in Servicing Stack Updates , which allows an authorized attacker to achieve local privilege escalation . The vulnerability has a CVSS 3.1 base score of 7.0, indicating high severity. Remediation is provided via an official fix from Microsoft. No specific exploi...

CVE-2026-85358

A Heap-based buffer overflow vulnerability exists in Windows Installer . This flaw allows an authorized attacker to perform a local elevation of privilege . The CVSS 3.1 score is 7.8 (High) , with an attack vector of Local and low complexity. No specific exploit information or direct mitigation s...

CVE-2026-85368

A heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to perform a local privilege escalation . The vulnerability is confirmed by Microsoft and carries a CVSS v3.1 score of 7.8 (High) . While the technical root cause is a buffer overflow, the documents do not provide specif...

CVE-2026-85341

A heap-based buffer overflow exists in the Windows USB Video Driver . This vulnerability allows an authorized attacker to perform a local privilege escalation . The CVSS 3.1 score is 7.8 (High) , with impacts to confidentiality, integrity, and availability. Remediation is available via an officia...

CVE-2026-85318

A heap-based buffer overflow vulnerability exists in Servicing Stack Updates . This flaw allows an authorized attacker to perform a local privilege escalation . The vulnerability is associated with CWE-122 and has been assigned a HIGH severity score of 7.8. No specific exploit details or links ar...