CVE-2026-88180

An out-of-bounds read vulnerability exists in the Windows DWM Core Library . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-125 and has a CVSS 3.1 base score of 7.8 (High). Remediation is available via an official fix from M...

CVE-2026-88182

A Use after free vulnerability exists in the Microsoft Windows Search Component . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability has been assigned a High severity rating (CVSS 3.1 score of 7.8) with an official fix available. No specific exploit ...

CVE-2026-88188

The Windows DWM Core Library is affected by an out-of-bounds read vulnerability (CWE-125). This flaw allows an authorized attacker to perform a local privilege escalation . The severity is rated as High with a CVSS 3.1 score of 7.8. Remediation is available via an official fix provided by Microso...

CVE-2026-69884

A buffer over-read vulnerability exists in Windows GDI . This flaw allows an authorized attacker to perform a local privilege elevation . The vulnerability is associated with CWE-126 . While the documents confirm the impact is high for confidentiality, integrity, and availability, no specific exp...

CVE-2026-69902

A vulnerability exists in Windows NTFS due to an untrusted pointer dereference . This flaw allows an authorized attacker to achieve local code execution . The vulnerability is associated with CWE-822 . While the CVSS score indicates a Medium severity, the potential impact includes high levels of ...

CVE-2026-88149

A double free vulnerability exists in the Windows Ancillary Function Driver for WinSock . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability has a high severity rating with a CVSS 3.1 score of 7.0. No specific exploit details or direct links to in-th...

CVE-2026-88139

A Use after free vulnerability exists in the Windows Kernel . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is categorized under CWE-416 and has a CVSS 3.1 base score of 7.0 . No specific software versions, root causes, or exploit links are provi...

CVE-2026-88152

A Use after free vulnerability in the Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to achieve local privilege elevation . The vulnerability is categorized under CWE-416 . While the documents confirm the technical nature of the flaw and its impact, no specif...

CVE-2026-88128

A heap-based buffer overflow exists in the Windows DWM Core Library . This vulnerability allows an authorized attacker to achieve local privilege elevation . The CVSS 3.1 score is 7.8 (High), with an official fix available. No specific exploit details or in-the-wild exploitation information are p...

CVE-2026-88133

The Windows Portable Device Enumerator Service is vulnerable to an improper authorization flaw. This vulnerability allows an authorized attacker to perform a local privilege escalation . The root cause is identified as CWE-59 (Improper Link Resolution Before File Access). Impact includes high lev...

CVE-2026-88141

A Use after free vulnerability exists in the Windows Kernel . This flaw allows an authorized attacker to achieve local privilege elevation . No specific component, file, or version is identified in the provided documents, and no exploit information or remediation details are available.

CVE-2026-88135

A vulnerability in WebDAV involving improper access control allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-862 (Missing Authorization) . The CVSS 3.1 score is 7.8 (High) , indicating high impact on confidentiality, integrity, and avai...

CVE-2026-88147

A heap-based buffer overflow exists in the Windows Secure Socket Tunneling Protocol (SSTP) . This vulnerability allows an authorized attacker to perform a local privilege escalation . The impact includes high levels of confidentiality, integrity, and availability loss as reported in the CVSS metr...

CVE-2026-88118

An integer overflow or wraparound vulnerability exists in the Windows Background Intelligent Transfer Service (BITS) . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-190 (Integer Overflow or Wraparound) and CWE-122 (Heap-bas...

CVE-2026-88113

A Use after free vulnerability exists in the Windows Broadcast DVR User Service . This flaw allows an authorized attacker to achieve local privilege escalation . While the technical root cause is identified as a memory management issue, specific exploit details and in-the-wild exploitation inform...

CVE-2026-88105

A use after free vulnerability in the Windows Broadcast DVR User Service allows an authorized attacker to achieve local privilege escalation . This flaw is characterized by a HIGH base severity score of 7.8 (CVSS v3.1). Remediation is available via an official fix provided by Microsoft.

CVE-2026-87702

A vulnerability in Windows Resource Management (MRM) involving an integer overflow or wraparound allows an authorized attacker to achieve local privilege elevation . The vulnerability is characterized by a high base severity score of 7.8. No specific patch versions, workarounds, or exploit detail...

CVE-2026-88126

An untrusted pointer dereference vulnerability exists in WebDAV , which allows an authorized attacker to perform a local privilege elevation . This issue is categorized under CWE-822 . The vulnerability has a HIGH base severity score of 7.8 (CVSS 3.1). While the impact on confidentiality, integri...

CVE-2026-88127

A Use after free vulnerability in the Windows SMB Server allows an authorized attacker to perform a local privilege escalation . The vulnerability is associated with CWE-416 and carries a High base severity score of 7.0. Remediation is available via an official fix provided by Microsoft. No speci...

CVE-2026-88109

A use after free vulnerability exists in Microsoft Office Click-To-Run , which could allow an authorized attacker to achieve local privilege escalation . The vulnerability is assigned a High base severity score of 7.8. No specific exploit links or remediation details are provided in the documents...