CVE-2026-87691

A Use after free vulnerability exists in Windows Management Services . This flaw allows an authorized attacker to achieve local privilege escalation . No specific software versions, root cause files, or remediation steps are provided in the documents. No exploits or in-the-wild exploitation detai...

CVE-2026-85930

A Use after free vulnerability in Windows Image Acquisition allows an authorized attacker to achieve local privilege escalation . The vulnerability is categorized under CWE-416 . While the impact includes high severity for confidentiality, integrity, and availability, specific exploitation detail...

CVE-2026-85934

A Use after free vulnerability in the Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally . The vulnerability is identified with a CVSSv3.1 score of 7.0, indicating a high severity. No specific remediation details or exploit links are provided in the docume...

CVE-2026-85933

A Use after free vulnerability exists in the Windows Print Spooler Components . This flaw allows an authorized attacker to perform a local privilege escalation . The vulnerability is assigned a CVSS 3.1 base score of 7.8 (High) . No specific exploit details or remediation steps are provided in th...

CVE-2026-85945

A Use after free vulnerability exists in the Windows Kernel . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability has a HIGH severity rating with a CVSS 3.1 score of 7.8. No specific component, file, or exploit code details are provided in the document...

CVE-2026-85936

A Double free vulnerability in the Windows Shell allows an unauthorized attacker to execute arbitrary code over a network. This vulnerability is categorized under CWE-415 (Double Free) and CWE-122 (Heap-based Buffer Overflow). The issue results in High severity impacts on confidentiality, integri...

CVE-2026-85926

A Use after free vulnerability exists in the Windows Secure Socket Tunneling Protocol (SSTP) . This flaw allows an unauthorized attacker to achieve remote code execution over a network. The CVSS 3.1 score is 8.1 (High) , with high impact across confidentiality, integrity, and availability. Docume...

CVE-2026-83710

A Use after free vulnerability exists in the Windows Device Association Service . This flaw allows an authorized attacker to achieve local privilege escalation . While the CVSS score indicates a High severity (7.0), specific details regarding the underlying component or file are not provided. Exp...

CVE-2026-85914

A Use after free vulnerability exists in the Windows Embedded Mode Service . This flaw allows an authorized attacker to achieve local privilege escalation . No specific exploit information or remediation details are provided in the documents.

CVE-2026-70164

A Use after free vulnerability exists in Windows TCP/IP which allows an authorized attacker to achieve local privilege elevation . The vulnerability is confirmed with a HIGH base severity score of 7.0. No specific exploit links or internal component details are provided in the documents, and no d...

CVE-2026-70187

A Use after free vulnerability exists in the Remote Desktop Gateway Service on Windows systems. This flaw allows an unauthorized attacker to achieve Remote Code Execution (RCE) over a network. The vulnerability is associated with CWE-416 . While the impact is classified as HIGH with a CVSS 3.1 sc...

CVE-2026-88159

A Use after free vulnerability exists in the Windows Background Intelligent Transfer Service (BITS) . This flaw allows an unauthorized attacker to execute code over a network . The vulnerability is associated with CWE-125 (Out-of-bounds Read). No specific exploit details or in-the-wild exploitati...

CVE-2026-88173

A Use after free vulnerability in the Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network . The vulnerability is associated with CWE-416 (Use After Free) and CWE-367 (Time-of-check Time-of-use Race Condition). The impact includes h...

CVE-2026-88080

A Use after free vulnerability in Windows Installer allows an authorized attacker to achieve local privilege elevation . The vulnerability is confirmed with a CVSS 3.1 score of 7.8. No specific versions, exploit links, or detailed remediation steps are provided in the documents, though an officia...

CVE-2026-88124

A Use after free vulnerability in Windows Installer allows an authorized attacker to achieve local privilege elevation . The vulnerability is rated as HIGH severity with a CVSS 3.1 score of 7.0. No specific exploit links or in-the-wild exploitation details are provided in the documents.

CVE-2026-87708

A Use after free vulnerability in Windows Installer allows an authorized attacker to achieve local privilege escalation . The vulnerability is categorized under CWE-416 . The CVSS 3.1 base score is 7.0 (High) , indicating significant impact on confidentiality, integrity, and availability. An offi...

CVE-2026-88161

A Use after free vulnerability exists in the Windows Local Security Authority (LSA) . This flaw allows an authorized attacker to perform a local privilege escalation . The CVSS 3.1 score is 7.0 (High) , with an attack complexity of high and requirements for low-level privileges. Remediation is av...

CVE-2026-85918

A Use after free vulnerability exists in the Windows Universal Plug and Play (UPnP) Device Host . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is confirmed with a high severity base score of 7.0. No specific exploit information or remediation de...

CVE-2026-85868

A Use after free vulnerability exists in the Windows Common Log File System Driver . This flaw allows an authorized attacker to achieve local privilege elevation . No specific versions, root causes, or exploit details are provided in the documentation. Remediation is indicated as an OFFICIAL_FIX ...

CVE-2026-85855

A Use after free vulnerability in the Windows DWM Core Library allows an authorized attacker to achieve local privilege elevation . The vulnerability is classified with a High base severity (7.0) and requires low privileges to exploit. No specific exploit code or in-the-wild exploitation details ...