CVE-2026-85824

A Use after free vulnerability exists in the Windows Composite Image File System . This flaw allows an authorized attacker to perform a local privilege escalation . While the vulnerability is confirmed, specific technical details regarding the root cause or affected components are not provided in...

CVE-2026-85821

An out-of-bounds read vulnerability exists in the Windows Universal Disk Format File System Driver (UDFS) . This flaw allows an authorized attacker to disclose information locally . The vulnerability is associated with CWE-125 . Official remediation is available via Microsoft's security updates. ...

CVE-2026-85820

A Use after free vulnerability exists in the Windows Universal Disk Format File System Driver (UDFS) . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-122 (Heap-based Buffer Overflow) and CWE-190 (Integer Overflow or Wraparo...

CVE-2026-85827

A Heap-based buffer overflow exists in WebDAV that allows an authorized attacker to perform a local privilege escalation . The vulnerability is confirmed with a CVSS 3.1 base score of 7.0 (High). No specific exploitative details or evidence of in-the-wild exploitation are provided in the document...

CVE-2026-85828

A heap-based buffer overflow vulnerability exists in WebDAV , which could allow an authorized attacker to achieve local privilege escalation . The vulnerability is categorized under CWE-122 . While the specific affected versions and internal components are not detailed in the provided documents, ...

CVE-2026-85826

An out-of-bounds write vulnerability exists in the Windows Fast FAT Driver . This flaw allows an authorized attacker to achieve local privilege elevation . The official CVSS 3.1 score is 7.0 (High) , with a high impact on confidentiality, integrity, and availability. No specific exploit details o...

CVE-2026-85825

A Use after free vulnerability exists in the Windows Universal Disk Format File System Driver (UDFS) . This flaw allows an authorized attacker to achieve local privilege elevation . No specific exploit information or detailed remediation steps are provided in the documents beyond the mention of a...

CVE-2026-85830

An out-of-bounds read vulnerability exists in the Windows Installer component. This flaw allows an authorized attacker to perform a local information disclosure , potentially revealing sensitive data. Exploitation details or specific affected versions are not provided in the documents. Remediatio...

CVE-2026-85831

A heap-based buffer overflow exists in the Windows Biometric Service . This vulnerability allows an authorized attacker to perform a local information disclosure . The provided documents do not specify the exact root cause, affected versions, or available remediation steps beyond the existence of...

CVE-2026-85822

A heap-based buffer overflow vulnerability exists in the Windows exFAT File System . This flaw allows an authorized attacker to achieve local privilege escalation . The CVSS 3.1 base score is 7.8 (High) , reflecting high impact on confidentiality, integrity, and availability. Exploitation details...

CVE-2026-85832

A heap-based buffer overflow exists in the Windows Background Intelligent Transfer Service (BITS) . This vulnerability allows an authorized attacker to achieve local privilege elevation . While the CVSS score indicates high impact on confidentiality, integrity, and availability, specific details ...

CVE-2026-85829

A double free vulnerability exists in the Windows Wired AutoConfig Service . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-415 . No specific exploitation details or remediation steps are provided in the documents beyond th...

CVE-2026-85812

The Windows Bind Filter Driver is affected by an information disclosure vulnerability (CWE-552) where certain files or directories are accessible to external parties. An authorized attacker can exploit this flaw to disclose information locally . No specific exploit information or technical root c...

CVE-2026-85815

The Windows Device Association Service is affected by an out-of-bounds read vulnerability (CWE-125). This flaw allows an authorized attacker to disclose information locally . No specific exploitation details, exploit links, or remediations are provided in the documentation beyond the existence of...

CVE-2026-85803

A Use after free vulnerability exists in the Windows Camera Frame Server Monitor . This flaw allows an authorized attacker to achieve local privilege escalation . No specific version numbers, root cause details, or exploit links are provided in the documents; however, an official fix is noted as ...

CVE-2026-85795

A Use after free vulnerability exists in the Windows Text Services Framework . This flaw allows an authorized attacker to achieve local privilege elevation . No specific technical root cause, affected versions, or exploit links are provided in the documentation; however, an official fix is noted ...

CVE-2026-85794

An out-of-bounds read vulnerability exists in the Windows Routing and Remote Access Service (RRAS) . This flaw allows an authorized attacker to perform a local information disclosure, potentially exposing sensitive data. No specific exploit details or proof-of-concept code are provided in the doc...

CVE-2026-85800

A Heap-based buffer overflow exists in Windows Error Reporting that allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-122 . No specific exploit details or direct links to in-the-wild exploitation are provided in the documentation. Remed...

CVE-2026-85802

A Use after free vulnerability exists in the Windows Win32 Kernel Subsystem . This flaw allows an authorized attacker to perform a local elevation of privilege . The severity is rated as HIGH with a CVSS 3.1 score of 7.0. While the vulnerability is confirmed, specific exploit information or links...

CVE-2026-85793

The Windows Sysmain Service is affected by a vulnerability that allows an authorized attacker to disclose sensitive system information locally. This flaw is categorized as an exposure of sensitive system information to an unauthorized control sphere (CWE-497). The vulnerability results in a high ...