CVE-2026-85341

A heap-based buffer overflow exists in the Windows USB Video Driver . This vulnerability allows an authorized attacker to perform a local privilege escalation . The CVSS 3.1 score is 7.8 (High) , with impacts to confidentiality, integrity, and availability. Remediation is available via an officia...

CVE-2026-85332

A Use after free vulnerability in the Windows Device Association Service allows an authorized attacker to achieve local privilege escalation . The vulnerability's impact includes high severity for confidentiality, integrity, and availability. A remediation is available via an official fix ; howev...

CVE-2026-85333

A race condition exists in the Windows Performance Monitor due to concurrent execution using a shared resource with improper synchronization. This vulnerability allows an authorized attacker to achieve local privilege elevation . No specific exploit details or remediation versions are provided in...

CVE-2026-85336

An out-of-bounds read vulnerability exists in the Windows Device Association Service . This flaw allows an authorized attacker to perform a local information disclosure by reading data outside of intended boundaries. The vulnerability is assigned CWE-125 and has been confirmed by Microsoft. No sp...

CVE-2026-85352

A Use after free vulnerability exists in the Windows Device Association Service . This flaw allows an authorized attacker to achieve local privilege escalation . No specific versions, root causes, or exploit links are provided in the documents, but an official fix is indicated by the remediation ...

CVE-2026-85342

A Use after free vulnerability exists in the Windows Device Association Service . This flaw allows an authorized attacker to achieve local privilege elevation . The CVSS 3.1 score is 7.0 (High) , with a local attack vector and high complexity. No specific exploitations or exploit links are provid...

CVE-2026-85338

An out-of-bounds read vulnerability exists in the Microsoft Graphics Component . This flaw allows an authorized attacker to perform a local privilege escalation . The impact includes high confidentiality, integrity, and availability impacts as indicated by the CVSS 3.1 score of 7.8. Specific expl...

CVE-2026-85318

A heap-based buffer overflow vulnerability exists in Servicing Stack Updates . This flaw allows an authorized attacker to perform a local privilege escalation . The vulnerability is associated with CWE-122 and has been assigned a HIGH severity score of 7.8. No specific exploit details or links ar...

CVE-2026-85327

A heap-based buffer overflow vulnerability exists in the Windows Print Spooler Components . This flaw allows an authorized attacker to perform a local elevation of privilege attack. While the vulnerability's impact is classified as High (CVSS 3.1 score of 7.8), specific details regarding the root...

CVE-2026-85328

A weak authentication vulnerability exists in the Windows Projected File System . This flaw allows an authorized attacker to perform a local privilege elevation . No specific software versions, root causes, or remediation steps are provided in the documents beyond the existence of an official fix...

CVE-2026-84020

A Use after free vulnerability in the Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to achieve local privilege escalation . The impact includes high levels of confidentiality, integrity, and availability. Exploitation details are not provided in the documents.

CVE-2026-85320

A vulnerability in Windows Print Spooler Components arises from the use of uninitialized resource (CWE-908). This flaw allows an authorized attacker to perform a local information disclosure . The vulnerability has a CVSS 3.1 base score of 5.5 (Medium) . No specific exploit information or technic...

CVE-2026-84019

A Use after free vulnerability exists in the Windows Advanced Rasterization Platform . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is categorized under CWE-416 . Exploitation details are not provided in the documents. Remediation is available ...

CVE-2026-84016

The Windows EAPHost Service is affected by an out-of-bounds write vulnerability (CWE-787). This flaw allows an authorized attacker to perform a local privilege escalation . While the vulnerability is confirmed with a high severity score of 7.8, specific details regarding the affected versions, ro...

CVE-2026-84018

A Use after free vulnerability exists in Windows Print Spooler Components . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-416 (Use After Free) and CWE-367 (Time-of-check Time-of-use Race Condition). No specific exploit det...

CVE-2026-83928

An out-of-bounds write vulnerability exists in the Windows Local Security Authority Subsystem Service (LSASS) . This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a HIGH base severity score of 8.8. No specific exploit details or direct...

CVE-2026-84013

A use after free vulnerability exists in the Windows Telephony Server component. This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is confirmed with a CVSS 3.1 base score of 7.8. No specific exploit links or detailed remediation steps are provided i...

CVE-2026-83927

The Windows Registry is susceptible to an improper link resolution before file access (link following) vulnerability. This security flaw allows an authorized attacker to achieve local privilege escalation . While the specific affected versions and technical root causes are not detailed beyond the...

CVE-2026-83932

A heap-based buffer overflow exists in Windows Group Policy , which could allow an authorized attacker to achieve local privilege escalation . The vulnerability is categorized as High severity (CVSS 3.1 score of 7.8) due to its potential impact on confidentiality, integrity, and availability. No ...

CVE-2026-84014

A Heap-based buffer overflow exists in the Windows Device Association Service . This vulnerability allows an authorized attacker to achieve local privilege elevation . The issue is associated with CWE-122 (Heap-based Buffer Overflow) and CWE-362 (Race Condition). No specific exploit links or deta...