CVE-2026-96916

A heap-based buffer overflow exists in the Windows NTFS file system. This vulnerability allows an authorized attacker to perform a local privilege escalation . The severity is rated as HIGH with a CVSS 3.1 score of 7.8. No specific exploitations are mentioned in the provided documents. Remediatio...

CVE-2026-96918

An improper access control vulnerability exists in Windows NTFS , which allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-863 (Incorrect Authorization) and carries a HIGH base severity score of 7.8. Remediation involves an official fix ...

CVE-2026-96915

An integer overflow or wraparound vulnerability exists in Windows Kernel-Mode Drivers . This flaw allows an authorized attacker to achieve local privilege elevation . While the vulnerability's impact is categorized as high for confidentiality, integrity, and availability, specific exploit code or...

CVE-2026-96914

An integer overflow or wraparound vulnerability exists within the Windows Virtualization-Based Security (VBS) Enclave . This flaw allows an authorized attacker to achieve local privilege escalation . While the vulnerability is confirmed and has a high severity score (8.8), specific details regard...

CVE-2026-96917

A heap-based buffer overflow exists in the Windows PCI Bus Driver . This vulnerability allows an authorized attacker to achieve local privilege elevation . The impact includes high levels of risk to confidentiality, integrity, and availability . An official fix is available via the provided Micro...

CVE-2026-96850

A vulnerability in Windows Modern Device Management (MDM) involving the use of uninitialized resource (CWE-908) and improper null termination (CWE-170) allows an authorized attacker to disclose information locally . The vulnerability has a CVSS 3.1 base score of 5.5 with a local attack vector and...

CVE-2026-96847

A vulnerability in WebDAV involves an untrusted pointer dereference that allows an authorized attacker to perform a local privilege elevation . The issue is associated with CWE-822 and has a CVSS 3.1 base score of 7.8 (High) . No specific affected versions, root causes, or exploit links are provi...

CVE-2026-96853

A Time-of-check time-of-use (TOCTOU) race condition exists in the Windows Win32 Kernel Subsystem . This vulnerability allows an authorized attacker to perform a local information disclosure . While the technical details of the root cause are limited to the TOCTOU classification (CWE-367), the imp...

CVE-2026-96843

A heap-based buffer overflow vulnerability exists in WebDAV that allows an authorized attacker to achieve local privilege elevation . The vulnerability is assigned a High severity rating (CVSS 3.1 score of 7.8). No specific affected versions, root cause details, or remediation steps are provided ...

CVE-2026-96324

A Use after free vulnerability in the Microsoft Windows Search Component allows an authorized attacker to achieve local privilege escalation . This issue (tracked as CWE-416 ) impacts the integrity, confidentiality, and availability of the system. While the root cause is identified as a memory ma...

CVE-2026-96854

A type confusion vulnerability exists in the Windows Device Association Service . This flaw allows an authorized attacker to perform an information disclosure locally by accessing a resource using an incompatible type. The vulnerability is associated with CWE-843 and has a CVSS 3.1 base score of ...

CVE-2026-96852

A Use after free vulnerability exists in Windows TCP/IP that allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-416 . While the CVSS 3.1 score indicates a High severity (7.0), specific technical details regarding the vulnerable component ...

CVE-2026-96846

An out-of-bounds read vulnerability in WebDAV allows an authorized attacker to disclose information locally. The vulnerability is associated with CWE-125 and has a CVSS 3.1 score of 5.5, indicating a medium severity. Exploitation details and specific affected versions are not provided in the docu...

CVE-2026-96321

An out-of-bounds read vulnerability exists in the Remote Desktop Display Driver . This flaw allows an authorized attacker to perform a local information disclosure . The vulnerability is categorized under CWE-125 and has been assigned a CVSS 3.1 base score of 5.5 (Medium). While the technical roo...

CVE-2026-96253

A Use after free vulnerability in the Windows USB Print Driver allows an authorized attacker to achieve local privilege escalation . The vulnerability has a CVSS 3.1 base score of 7.0 (High) . While the documents confirm the existence of the flaw and its impact on local privileges, no specific te...

CVE-2026-96322

A Use after free vulnerability in the Windows Remote Desktop Protocol allows an authorized attacker to elevate privileges locally . The vulnerability has a CVSS 3.1 base score of 7.0 (HIGH) . While specific affected versions and the exact component/file are not detailed in the provided documents,...

CVE-2026-96304

A Use after free vulnerability exists in the Windows USB Print Driver . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is classified with a CVSS 3.1 base score of 7.0 (High) . While the technical root cause is specified as Use after free, no spec...

CVE-2026-96310

A use after free vulnerability exists in the Windows USB Print Driver . This flaw allows an authorized attacker to achieve local privilege elevation . No specific version numbers, root causes, or exploit details are provided in the documents. Remediation is categorized as an official fix .

CVE-2026-96323

A Use after free vulnerability in Windows Update allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-416 and has a High base severity score of 7.0. No specific exploit links or remediation details are provided in the documents beyond the m...

CVE-2026-96254

A Use after free vulnerability exists in the Windows USB Print Driver . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-416 and has been assigned a High base severity score of 7.0. While the root cause is identified as a Use...