CVE-2026-83499

The Windows Server Update Service is impacted by an insufficient granularity of access control vulnerability (CWE-1220). This flaw allows an authorized attacker to achieve local privilege escalation . While the technical root cause is not further detailed in the provided documents, the vulnerabil...

CVE-2026-83510

A Time-of-check time-of-use (TOCTOU) race condition exists in Windows Setup Files Cleanup . This vulnerability allows an authorized attacker to achieve local privilege escalation . The security impact includes high consequences for confidentiality, integrity, and availability. While the vulnerabi...

CVE-2026-83584

A Use after free vulnerability exists in Windows Smart Card , which allows an authorized attacker to achieve local privilege escalation . The vulnerability is categorized under CWE-416 . No specific affected versions, root causes, or exploit details are provided in the documentation. Remediation ...

CVE-2026-83641

A heap-based buffer overflow vulnerability exists in Windows Media . This flaw allows an authorized attacker to achieve local privilege escalation . The documents do not provide specific details regarding the affected component, underlying root cause, or practical exploit paths. Remediation invol...

CVE-2026-83571

A null pointer dereference vulnerability exists in the Windows Audio Service . This flaw allows an authorized attacker to perform a local information disclosure . The CVSS 3.1 score is 5.5 (Medium) , indicating a local attack vector with low complexity requiring low privileges. Exploitation detai...

CVE-2026-83575

A use after free vulnerability exists in the Microsoft Windows Search Component . This flaw allows an authorized attacker to achieve local privilege escalation . No specific exploit details or in-the-wild exploitation information are provided in the documents. Remediation is available via an offi...

CVE-2026-69882

A vulnerability in Windows Update involving an untrusted search path allows an authorized attacker to achieve local privilege elevation . The flaw is associated with CWE-426 . The risk is categorized as HIGH with a CVSS 3.1 base score of 7.8 . No specific software versions or exploit details are ...

CVE-2026-69633

A heap-based buffer overflow vulnerability exists in Windows Update . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is categorized under CWE-122 . Remediation involves applying the official fix provided by Microsoft. No specific exploit details ...

CVE-2026-69743

A Use after free vulnerability exists in the Windows Program Compatibility Assistant Service . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-401 (Use After Free) and has a HIGH base severity score of 7.0. No specific exploi...

CVE-2026-72969

A Use after free vulnerability exists in the Windows Program Compatibility Assistant Service . This flaw allows an authorized attacker to achieve local privilege elevation . While the vulnerability is confirmed, specific technical details regarding the root cause component or specific file are no...

CVE-2026-83504

A Time-of-check time-of-use (TOCTOU) race condition exists in Windows SmartScreen . This vulnerability allows an authorized attacker to perform a local information disclosure . Exploitation details are not provided in the documentation, but the vulnerability is confirmed to have a MEDIUM base sev...

CVE-2026-81969

The Windows Server Update Service is affected by a vulnerability involving insufficient granularity of access control . This flaw allows an authorized attacker to perform a local privilege escalation . The vulnerability is characterized by a HIGH base severity score of 7.8 and is associated with ...

CVE-2026-81964

The Windows Update Orchestrator Service is affected by a security feature bypass vulnerability. This issue is caused by the use of hard-coded credentials , which allows an authorized attacker to perform the bypass locally . The vulnerability is associated with CWE-798 . While the impact on integr...

CVE-2026-69673

A vulnerability exists in Windows Update due to improper link resolution before file access (link following). This flaw allows an authorized attacker to perform a local elevation of privilege attack. The vulnerability is associated with CWE-59 . No specific exploit details or links are provided i...

CVE-2026-69718

A command injection vulnerability exists in Windows Update due to the improper neutralization of special elements used in a command. This flaw allows an authorized attacker to achieve local privilege escalation . No specific exploit information or code is provided in the documents. Remediation in...

CVE-2026-69650

The Windows Key Distribution Center is vulnerable to an elevation of privilege flaw due to the improper verification of cryptographic signatures . This vulnerability allows an authorized attacker to achieve local privilege escalation. The CVSS 3.1 score is 7.8 (HIGH) , with a LOCAL attack vector ...

CVE-2026-69387

A Use after free vulnerability exists in Windows Error Reporting , which could allow an authorized attacker to elevate privileges locally . The vulnerability is categorized with a CVSS 3.1 base score of 7.0 (High) . No specific exploit details or remediation steps are provided in the documents be...

CVE-2026-72934

A Use after free vulnerability exists in the Windows Program Compatibility Assistant Service . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is confirmed with a HIGH base severity score of 7.0. No specific technical root cause details or remedia...

CVE-2026-72955

A Use after free vulnerability in the Windows Application Compatibility Cache allows an authorized attacker to achieve local privilege elevation . The vulnerability is categorized under CWE-416 and has a CVSS 3.1 base score of 7.0 . While the root cause is identified as a use after free error, sp...

CVE-2026-69721

An out-of-bounds read vulnerability exists in Windows iSCSI , which could allow an authorized attacker to disclose information locally . The vulnerability is associated with CWE-125 and has been assigned a CVSS v3.1 base score of 5.5 (Medium), reflecting high confidentiality impact with low compl...