CVE-2026-83588

A heap-based buffer overflow exists in the Windows USB Driver . This vulnerability allows an authorized attacker to achieve local privilege escalation . No specific exploit details or in-the-wild exploitation information are provided in the documents.

CVE-2026-83579

A heap-based buffer overflow exists in the Windows Smart Card component. This vulnerability allows an authorized attacker to achieve local privilege escalation . No specific software versions, root causes, or exploit details are provided in the documents, but an official fix is indicated by the r...

CVE-2026-83566

A Use after free vulnerability exists in Windows Win32K - ICOMP , which allows an authorized attacker to achieve local privilege elevation . The vulnerability is assigned a High severity base score of 7.0. While the root cause is identified as a Use after free, specific technical details regardin...

CVE-2026-83564

A Use after free vulnerability exists in the Microsoft Windows Search Component . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-416 and has a base CVSS 3.1 score of 7.0. No specific exploit details or in-the-wild exploitat...

CVE-2026-83565

A buffer over-read vulnerability exists in the Windows Encrypting File System (EFS) . This flaw allows an authorized attacker to perform a local information disclosure , potentially exposing sensitive data. The vulnerability is associated with CWE-126 . While the documents confirm the existence o...

CVE-2026-83514

A heap-based buffer overflow vulnerability exists in the Windows Partition Management Driver . This flaw allows an authorized attacker to achieve local privilege escalation . While the technical root cause is identified as a heap-based buffer overflow (CWE-122), specific exploit details or in-the...

CVE-2026-83513

A Use after free vulnerability exists in the Windows Universal Disk Format File System Driver (UDFS) . This flaw allows an authorized attacker to achieve local privilege elevation . The CVSS 3.1 score is 7.8 (High) , with an official fix available via Microsoft. No specific exploit information or...

CVE-2026-83506

An untrusted search path vulnerability in Servicing Stack Updates allows an authorized attacker to perform a local privilege escalation . The vulnerability is associated with CWE-426 and has a HIGH base severity score of 7.8 . While the vulnerability is confirmed, specific details regarding affec...

CVE-2026-83508

Windows NTFS is affected by an out-of-bounds read vulnerability. This flaw allows an authorized attacker to achieve local privilege elevation . While the CVSS v3.1 score indicates a High severity (7.8), specific technical details regarding the affected component, root cause, or exploitability are...

CVE-2026-83507

The Windows Update Orchestrator Service is vulnerable to an improper link resolution before file access (link following) flaw. This vulnerability allows an authorized attacker to perform a local information disclosure . No specific exploit details or remediation steps are provided in the document...

CVE-2026-83509

An untrusted search path vulnerability in Windows Setup Files Cleanup allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-426 . While the root cause is identified as an untrusted search path, specific exploitation details are not provided ...

CVE-2026-73027

The Windows Setup Files Cleanup component is vulnerable to an elevation of privilege vulnerability due to external control of system or configuration settings. This flaw allows an authorized attacker to perform a local privilege escalation. While the impact is categorized as High for confidential...

CVE-2026-69596

A Use after free vulnerability exists in the Windows Program Compatibility Assistant Service . This flaw allows an authorized attacker to achieve local privilege escalation . No specific exploit details or remediation steps are provided in the documents beyond the official fix status.

CVE-2026-81971

A race condition vulnerability exists in Windows NTFS due to concurrent execution using a shared resource with improper synchronization. This flaw allows an authorized attacker to achieve local privilege elevation . No specific exploit details or patch versions are provided in the documents, but ...

CVE-2026-69471

A heap-based buffer overflow exists in the Windows Installer component. This vulnerability allows an authorized attacker to achieve local privilege escalation . The documentation identifies the root cause as a heap-based buffer overflow (CWE-122) and an out-of-bounds read (CWE-125). While the CVS...

CVE-2026-78459

A heap-based buffer overflow vulnerability exists in Windows Internet Information Services . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability has a CVSS 3.1 score of 7.8 (High) . Official remediation is available via Microsoft's update guide.

CVE-2026-70292

An out-of-bounds read vulnerability exists in the Windows Win32 Kernel Subsystem . This flaw allows an authorized attacker to disclose information locally. The vulnerability is categorized under CWE-125 and carries a medium severity score of 5.5. No specific exploit details or remediation version...

CVE-2026-70293

A use of uninitialized resource vulnerability exists in the Windows Win32 Kernel Subsystem . This flaw allows an authorized attacker to perform a local information disclosure . No specific software versions or remediation steps are provided in the documents, though the CVE is confirmed by Microso...

CVE-2026-69733

Windows Update is affected by an untrusted search path vulnerability (CWE-426). This flaw allows an authorized attacker to achieve local privilege escalation . The base severity score is 7.8 (High) , indicating significant impacts on confidentiality, integrity, and availability. No specific explo...

CVE-2026-70295

A vulnerability in the Windows Win32 Kernel Subsystem allows an authorized attacker to perform an out-of-bounds read to disclose information locally. The vulnerability is categorized as an information disclosure issue. No specific exploit details or in-the-wild exploitation records are provided i...