CVE-2026-88182

A Use after free vulnerability exists in the Microsoft Windows Search Component . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability has been assigned a High severity rating (CVSS 3.1 score of 7.8) with an official fix available. No specific exploit ...

CVE-2026-83850

A heap-based buffer overflow exists in the Microsoft Windows Search Component . This vulnerability allows an authorized attacker to achieve local privilege elevation . The vulnerability is classified with a CVSS 3.1 base score of 7.8 (High) . No specific exploit details or in-the-wild exploitatio...

CVE-2026-83829

A heap-based buffer overflow exists in the Microsoft Windows Search Component . This vulnerability allows an authorized attacker to achieve local privilege escalation . The impact includes potential high levels of confidentiality, integrity, and availability loss. No specific exploit code or in-t...

CVE-2026-83725

A heap-based buffer overflow exists in the Microsoft Windows Search Component , which could allow an unauthorized attacker to execute code over a network. The vulnerability is associated with CWE-122 and CWE-190 . Detailed information regarding specific affected versions, the exact root cause, or...

CVE-2026-83686

The Microsoft Windows Search Component is susceptible to an out-of-bounds read vulnerability. This flaw allows an authorized attacker to disclose information locally. The severity is rated as MEDIUM with a CVSS 3.1 score of 5.5, characterized by a high confidentiality impact and low attack comple...

CVE-2026-83570

A Use after free vulnerability exists in the Microsoft Windows Search Component . This flaw allows an authorized attacker to achieve local privilege escalation . While the CVSS v3.1 score of 7.8 indicates a high severity with high impact on confidentiality, integrity, and availability, specific e...

CVE-2026-83574

A Use after free vulnerability exists in the Microsoft Windows Search Component . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability impacts the Windows Search Service and has a CVSS 3.1 base score of 7.0. No specific exploit details or manual workar...

CVE-2026-83564

A Use after free vulnerability exists in the Microsoft Windows Search Component . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-416 and has a base CVSS 3.1 score of 7.0. No specific exploit details or in-the-wild exploitat...

CVE-2026-77496

A Heap-based buffer overflow exists in the Windows Imaging Component , which could allow an unauthorized attacker to achieve Remote Code Execution (RCE) over a network. The vulnerability has a HIGH base severity score of 8.8. No specific exploit details or in-the-wild exploitation information are...

CVE-2026-96859

An out-of-bounds read vulnerability exists in the Windows Imaging Component . This flaw allows an authorized attacker to disclose information locally on the affected system. The vulnerability is associated with CWE-125 . While the impact is categorized as high for confidentiality, no specific exp...

CVE-2026-88160

A race condition vulnerability exists in the Microsoft Windows Search Component due to concurrent execution using a shared resource with improper synchronization. This flaw allows an authorized attacker to achieve local privilege elevation . Remediation is available via an official fix provided b...

CVE-2026-85869

A Heap-based buffer overflow vulnerability exists in the Microsoft Windows Search Component . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability impacts the confidentiality, integrity, and availability of the affected system. A formal remediation is ...

CVE-2026-85881

A stack-based buffer overflow exists in the Microsoft Graphics Component , which may be leveraged by an authorized attacker to elevate privileges over a network. The vulnerability is associated with Microsoft Office Graphics. Remediation is available through official fixes provided by Microsoft.

CVE-2026-85338

An out-of-bounds read vulnerability exists in the Microsoft Graphics Component . This flaw allows an authorized attacker to perform a local privilege escalation . The impact includes high confidentiality, integrity, and availability impacts as indicated by the CVSS 3.1 score of 7.8. Specific expl...

CVE-2026-69886

A heap-based buffer overflow vulnerability exists in the Windows Imaging Component . This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a CVSS 3.1 score of 9.8 (CRITICAL) . While the documents do not provide specific exploit links or v...

CVE-2026-83920

A heap-based buffer overflow exists in the Microsoft Windows Search Component . This vulnerability allows an authorized attacker to achieve local privilege escalation . No specific versions, exploit details, or remediation steps are provided in the documents beyond the existence of an official fix.

CVE-2026-83921

A heap-based buffer overflow exists in the Microsoft Windows Search Component (Windows Search Service). This vulnerability allows an authorized attacker to achieve local privilege escalation . While the technical root cause is identified as a heap-based buffer overflow, specific exploit details o...

CVE-2026-70086

A use after free vulnerability exists in the Microsoft Windows Search Component . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is confirmed with a CVSS 3.1 base score of 7.0 . Remediation is available via an official fix provided by Microsoft.

CVE-2026-83704

The Microsoft Windows Search Component is vulnerable to an elevation of privilege vulnerability due to improper link resolution before file access (link following). An authorized attacker can exploit this flaw to elevate privileges locally. While the documents confirm the vulnerability and its im...

CVE-2026-83575

A use after free vulnerability exists in the Microsoft Windows Search Component . This flaw allows an authorized attacker to achieve local privilege escalation . No specific exploit details or in-the-wild exploitation information are provided in the documents. Remediation is available via an offi...