CVE-2026-85803

A Use after free vulnerability exists in the Windows Camera Frame Server Monitor . This flaw allows an authorized attacker to achieve local privilege escalation . No specific version numbers, root cause details, or exploit links are provided in the documents; however, an official fix is noted as ...

CVE-2026-85804

A Use after free vulnerability exists in the Windows Win32 Kernel Subsystem . This flaw allows an authorized attacker to achieve local privilege escalation . No specific affected versions, root cause details, or exploit links are provided in the documentation. Remediation is indicated as an OFFIC...

CVE-2026-85802

A Use after free vulnerability exists in the Windows Win32 Kernel Subsystem . This flaw allows an authorized attacker to perform a local elevation of privilege . The severity is rated as HIGH with a CVSS 3.1 score of 7.0. While the vulnerability is confirmed, specific exploit information or links...

CVE-2026-85794

An out-of-bounds read vulnerability exists in the Windows Routing and Remote Access Service (RRAS) . This flaw allows an authorized attacker to perform a local information disclosure, potentially exposing sensitive data. No specific exploit details or proof-of-concept code are provided in the doc...

CVE-2026-85373

A heap-based buffer overflow exists in the Windows Universal Plug and Play (UPnP) Device Host . This vulnerability allows an authorized attacker to achieve local privilege escalation . No specific version numbers, root causes, or remediation steps are provided in the documents beyond the general ...

CVE-2026-85370

A Use after free vulnerability exists in WebDAV , which allows an authorized attacker to achieve local privilege escalation . The vulnerability impacts the confidentiality, integrity, and availability of the affected system, as indicated by its high severity metrics. No specific technical root ca...

CVE-2026-85377

A type confusion vulnerability (CWE-843) exists in the Windows CD-ROM Driver . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is reported as having a HIGH base severity score of 7.8. While specific affected versions are not detailed in the provid...

CVE-2026-85369

Windows Hyper-V is affected by an out-of-bounds read vulnerability. This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is classified as High severity with a CVSS 3.1 score of 8.2. No specific exploit information or remediation steps are provided in th...

CVE-2026-85375

A Use after free vulnerability exists in the Windows Universal Plug and Play (UPnP) Device Host component. This flaw allows an authorized attacker to achieve local privilege escalation . No specific exploit details or technical root cause analysis beyond the vulnerability type are provided in the...

CVE-2026-85372

A Use after free vulnerability exists in the Windows Kernel . This flaw allows an authorized attacker to perform a local privilege escalation . The vulnerability is confirmed and has an associated OFFICIAL_FIX ; however, specific affected versions and detailed exploit information are not provided...

CVE-2026-85376

CVE-2026-85376 involves weak authentication within the Windows Print Spooler Components . This vulnerability allows an authorized attacker to perform a local privilege escalation . The CVSS 3.1 score is 7.8 (High) , indicating significant impact on confidentiality, integrity, and availability. No...

CVE-2026-85374

An out-of-bounds read vulnerability exists in Windows Installer , which could allow an authorized attacker to perform a local information disclosure . The impact is categorized as a medium severity risk with a CVSS 3.1 score of 5.5. No specific exploit details or in-the-wild exploitation informat...

CVE-2026-85791

A heap-based buffer overflow vulnerability exists in the Windows Encrypting File System (EFS) . This flaw allows an authorized attacker to perform a local elevation of privilege . While the documents confirm the vulnerability type and potential impact, specific details regarding the affected comp...

CVE-2026-85365

A Heap-based buffer overflow exists in Servicing Stack Updates , which allows an authorized attacker to achieve local privilege escalation . The vulnerability has a CVSS 3.1 base score of 7.0, indicating high severity. Remediation is provided via an official fix from Microsoft. No specific exploi...

CVE-2026-85357

The Windows Phone Service is vulnerable to a race condition caused by concurrent execution using a shared resource with improper synchronization. This flaw allows an authorized attacker to achieve local privilege elevation . No specific details regarding affected versions, underlying files, or ex...

CVE-2026-85359

A code injection vulnerability (CWE-94) exists in Windows Performance Monitor , where improper control of code generation allows an authorized attacker to achieve local privilege elevation . The vulnerability has a CVSS 3.1 base score of 7.8 and is categorized as high severity. Official remediati...

CVE-2026-85368

A heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to perform a local privilege escalation . The vulnerability is confirmed by Microsoft and carries a CVSS v3.1 score of 7.8 (High) . While the technical root cause is a buffer overflow, the documents do not provide specif...

CVE-2026-85367

A Use after free vulnerability exists in the Windows Cash Drawer Protocol Provider . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability has a CVSS 3.1 base score of 7.0 (High) . Specific details regarding the underlying root cause, affected versions, ...

CVE-2026-85362

A Release of invalid pointer or reference vulnerability exists in Windows Management Instrumentation . This flaw allows an authorized attacker to perform a local privilege escalation . No specific exploit details or version-specific information are provided in the documents, and no exploits are c...

CVE-2026-85366

A heap-based buffer overflow vulnerability exists in Windows Installer . This flaw allows an authorized attacker to perform a local elevation of privileges . The severity is rated as High (CVSS 3.1 score of 7.8). No specific exploit links or remediation versions are provided in the documents beyo...