CVE-2026-85799

A Use after free vulnerability exists in the Network Policy Server (NPS) . This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is confirmed with a CVSS 3.1 base score of 8.1 (High) , indicating significant potential impact on confidentialit...

CVE-2026-85372

A Use after free vulnerability exists in the Windows Kernel . This flaw allows an authorized attacker to perform a local privilege escalation . The vulnerability is confirmed and has an associated OFFICIAL_FIX ; however, specific affected versions and detailed exploit information are not provided...

CVE-2026-85370

A Use after free vulnerability exists in WebDAV , which allows an authorized attacker to achieve local privilege escalation . The vulnerability impacts the confidentiality, integrity, and availability of the affected system, as indicated by its high severity metrics. No specific technical root ca...

CVE-2026-85371

A Use after free vulnerability exists in Network Policy Server (NPS) , which could allow an unauthorized attacker to execute code over a network . The vulnerability is associated with CWE-416 and has a CVSS 3.1 base score of 8.1 . No specific affected versions, root causes, or exploit links are p...

CVE-2026-85375

A Use after free vulnerability exists in the Windows Universal Plug and Play (UPnP) Device Host component. This flaw allows an authorized attacker to achieve local privilege escalation . No specific exploit details or technical root cause analysis beyond the vulnerability type are provided in the...

CVE-2026-85790

A Use after free vulnerability in Microsoft QUIC allows an unauthorized attacker to disclose information over a network. The vulnerability is characterized by a high confidentiality impact, though it does not affect integrity or availability. Remediation is available via an official fix provided ...

CVE-2026-85790

Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network...

EUVD-2026-99502

Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network...

CVE-2026-85790

Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network...

CVE-2026-85364

A Use after free vulnerability in Windows Installer allows an authorized attacker to achieve local privilege escalation . The vulnerability's base severity score is 7.0 (HIGH) , with impacts on confidentiality, integrity, and availability. No specific exploit information or remediation versions a...

CVE-2026-85354

A Use after free vulnerability exists in Windows Error Reporting , which could allow an authorized attacker to achieve local privilege escalation . The vulnerability is classified with a High severity base score of 7.0. No specific exploit links or remediation details beyond the official Microsof...

CVE-2026-85367

A Use after free vulnerability exists in the Windows Cash Drawer Protocol Provider . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability has a CVSS 3.1 base score of 7.0 (High) . Specific details regarding the underlying root cause, affected versions, ...

CVE-2026-85361

A Use after free vulnerability exists in Windows Installer , which could allow an authorized attacker to achieve local privilege elevation . The severity is rated as High (CVSS 3.1 score of 7.0). No specific exploit details or in-the-wild exploitation information are provided in the documents. Re...

CVE-2026-85352

A Use after free vulnerability exists in the Windows Device Association Service . This flaw allows an authorized attacker to achieve local privilege escalation . No specific versions, root causes, or exploit links are provided in the documents, but an official fix is indicated by the remediation ...

CVE-2026-85342

A Use after free vulnerability exists in the Windows Device Association Service . This flaw allows an authorized attacker to achieve local privilege elevation . The CVSS 3.1 score is 7.0 (High) , with a local attack vector and high complexity. No specific exploitations or exploit links are provid...

CVE-2026-85332

A Use after free vulnerability in the Windows Device Association Service allows an authorized attacker to achieve local privilege escalation . The vulnerability's impact includes high severity for confidentiality, integrity, and availability. A remediation is available via an official fix ; howev...

CVE-2026-84020

A Use after free vulnerability in the Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to achieve local privilege escalation . The impact includes high levels of confidentiality, integrity, and availability. Exploitation details are not provided in the documents.

CVE-2026-84019

A Use after free vulnerability exists in the Windows Advanced Rasterization Platform . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is categorized under CWE-416 . Exploitation details are not provided in the documents. Remediation is available ...

CVE-2026-84018

A Use after free vulnerability exists in Windows Print Spooler Components . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-416 (Use After Free) and CWE-367 (Time-of-check Time-of-use Race Condition). No specific exploit det...

CVE-2026-84012

A double free vulnerability exists in the Remote Desktop Gateway Service . This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is associated with CWE-415 . While the specific software versions and detailed root causes are not explicitly lis...