CVE-2026-96911

The Microsoft Windows Search Component is vulnerable to an improper link resolution before file access (link following) vulnerability. This flaw allows an authorized attacker to achieve local privilege escalation . The CVSS 3.1 score is 7.8 (High), with high impacts on confidentiality, integrity,...

CVE-2026-96910

An untrusted pointer dereference vulnerability exists in the Microsoft Windows Search Component . This flaw allows an authorized attacker to perform a local information disclosure attack. The vulnerability is associated with CWE-822 . No specific software versions, root cause details, or exploit ...

CVE-2026-96324

A Use after free vulnerability in the Microsoft Windows Search Component allows an authorized attacker to achieve local privilege escalation . This issue (tracked as CWE-416 ) impacts the integrity, confidentiality, and availability of the system. While the root cause is identified as a memory ma...

CVE-2026-88191

The Microsoft Windows Search Component is vulnerable to an improper link resolution before file access (link following) flaw. This vulnerability allows an authorized attacker to achieve local privilege escalation . While the specific root cause details are limited to the link-following mechanism,...

CVE-2026-88182

A Use after free vulnerability exists in the Microsoft Windows Search Component . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability has been assigned a High severity rating (CVSS 3.1 score of 7.8) with an official fix available. No specific exploit ...

CVE-2026-83850

A heap-based buffer overflow exists in the Microsoft Windows Search Component . This vulnerability allows an authorized attacker to achieve local privilege elevation . The vulnerability is classified with a CVSS 3.1 base score of 7.8 (High) . No specific exploit details or in-the-wild exploitatio...

CVE-2026-83829

A heap-based buffer overflow exists in the Microsoft Windows Search Component . This vulnerability allows an authorized attacker to achieve local privilege escalation . The impact includes potential high levels of confidentiality, integrity, and availability loss. No specific exploit code or in-t...

CVE-2026-83725

A heap-based buffer overflow exists in the Microsoft Windows Search Component , which could allow an unauthorized attacker to execute code over a network. The vulnerability is associated with CWE-122 and CWE-190 . Detailed information regarding specific affected versions, the exact root cause, or...

CVE-2026-83686

The Microsoft Windows Search Component is susceptible to an out-of-bounds read vulnerability. This flaw allows an authorized attacker to disclose information locally. The severity is rated as MEDIUM with a CVSS 3.1 score of 5.5, characterized by a high confidentiality impact and low attack comple...

CVE-2026-83574

A Use after free vulnerability exists in the Microsoft Windows Search Component . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability impacts the Windows Search Service and has a CVSS 3.1 base score of 7.0. No specific exploit details or manual workar...

CVE-2026-83570

A Use after free vulnerability exists in the Microsoft Windows Search Component . This flaw allows an authorized attacker to achieve local privilege escalation . While the CVSS v3.1 score of 7.8 indicates a high severity with high impact on confidentiality, integrity, and availability, specific e...

CVE-2026-83564

A Use after free vulnerability exists in the Microsoft Windows Search Component . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-416 and has a base CVSS 3.1 score of 7.0. No specific exploit details or in-the-wild exploitat...

CVE-2026-77496

A Heap-based buffer overflow exists in the Windows Imaging Component , which could allow an unauthorized attacker to achieve Remote Code Execution (RCE) over a network. The vulnerability has a HIGH base severity score of 8.8. No specific exploit details or in-the-wild exploitation information are...

CVE-2026-96859

An out-of-bounds read vulnerability exists in the Windows Imaging Component . This flaw allows an authorized attacker to disclose information locally on the affected system. The vulnerability is associated with CWE-125 . While the impact is categorized as high for confidentiality, no specific exp...

CVE-2026-88160

A race condition vulnerability exists in the Microsoft Windows Search Component due to concurrent execution using a shared resource with improper synchronization. This flaw allows an authorized attacker to achieve local privilege elevation . Remediation is available via an official fix provided b...

CVE-2026-85869

A Heap-based buffer overflow vulnerability exists in the Microsoft Windows Search Component . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability impacts the confidentiality, integrity, and availability of the affected system. A formal remediation is ...

CVE-2026-85881

A stack-based buffer overflow exists in the Microsoft Graphics Component , which may be leveraged by an authorized attacker to elevate privileges over a network. The vulnerability is associated with Microsoft Office Graphics. Remediation is available through official fixes provided by Microsoft.

CVE-2026-85338

An out-of-bounds read vulnerability exists in the Microsoft Graphics Component . This flaw allows an authorized attacker to perform a local privilege escalation . The impact includes high confidentiality, integrity, and availability impacts as indicated by the CVSS 3.1 score of 7.8. Specific expl...

CVE-2026-69886

A heap-based buffer overflow vulnerability exists in the Windows Imaging Component . This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a CVSS 3.1 score of 9.8 (CRITICAL) . While the documents do not provide specific exploit links or v...

CVE-2026-83920

A heap-based buffer overflow exists in the Microsoft Windows Search Component . This vulnerability allows an authorized attacker to achieve local privilege escalation . No specific versions, exploit details, or remediation steps are provided in the documents beyond the existence of an official fix.