CVE-2026-88113

A Use after free vulnerability exists in the Windows Broadcast DVR User Service . This flaw allows an authorized attacker to achieve local privilege escalation . While the technical root cause is identified as a memory management issue, specific exploit details and in-the-wild exploitation inform...

CVE-2026-85884

The Windows Health and Optimized Experiences Service is vulnerable to a privilege escalation flaw due to missing authentication for a critical function (CWE-306). An authorized attacker can exploit this to elevate privileges locally on the affected system. While the CVSS 3.1 score is 7.8 (High) ,...

CVE-2026-87694

A Use after free vulnerability in Windows Installer allows an authorized attacker to achieve local privilege elevation . The vulnerability is classified with a High base severity (CVSS 3.1 score of 7.8). While the technical root cause is identified as a use after free, specific file paths or func...

CVE-2026-87709

A vulnerability exists in the Windows Host Guardian Service due to improper access control . This flaw allows an authorized attacker to perform tampering locally . The vulnerability is associated with CWE-250 (Execution with Unnecessary Privileges) . While the technical root cause is not detailed...

CVE-2026-85943

A Time-of-check time-of-use (TOCTOU) race condition exists in the Reliable Multicast Transport Driver (RMCAST) . This vulnerability allows an authorized attacker to achieve local privilege elevation . While the specific affected versions are not detailed in the provided documents, the vulnerabili...

CVE-2026-87700

A Use after free vulnerability exists in Windows Installer , which may allow an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-416 . While specific affected versions or detailed root causes are not provided in the documents, a remediation leve...

CVE-2026-87699

A heap-based buffer overflow exists in Winlogon , which allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-122 . Official remediation is available via Microsoft updates.

CVE-2026-87693

A use after free vulnerability exists in Windows Installer that allows an authorized attacker to achieve local privilege escalation . The vulnerability is characterized by a high base severity score of 7.0 and impacts confidentiality, integrity, and availability. No specific exploit links or deta...

CVE-2026-87698

A Windows Remote Access Service Infrastructure component is vulnerable to an out-of-bounds read (CWE-125). This flaw allows an authorized attacker to perform a local information disclosure on the affected system. The CVSS 3.1 score is 5.5, reflecting a medium severity with a local attack vector a...

CVE-2026-85941

A race condition exists in Windows Installer due to concurrent execution using a shared resource with improper synchronization. This vulnerability allows an authorized attacker to achieve local privilege elevation . The impact includes high levels of confidentiality, integrity, and availability. ...

CVE-2026-85874

A Use after free vulnerability exists in the Windows Message Queuing Queue Manager . This flaw allows an authorized attacker to achieve local code execution . The vulnerability is categorized under CWE-416 and has a high severity rating with a CVSS 3.1 base score of 7.8 . No specific exploit info...

CVE-2026-83924

A Use after free vulnerability exists in the Windows Kernel . This flaw allows an authorized attacker to achieve local privilege elevation . No specific component, version, or remediation steps are provided in the documents. No exploit information is available.

CVE-2026-83931

A heap-based buffer overflow vulnerability exists in Windows Hyper-V . This flaw allows an authorized attacker to achieve local code execution . The vulnerability has a high severity rating and the official remediation is provided via Microsoft updates.

CVE-2026-83933

The Windows Update Orchestrator Service is vulnerable to an improper link resolution before file access (link following) vulnerability. This flaw allows an authorized attacker to perform a local information disclosure . No specific software versions, exploit links, or remediation steps are provid...

CVE-2026-85879

A Time-of-check time-of-use (TOCTOU) race condition exists in the Windows Subsystem for Linux . This vulnerability allows an authorized attacker to achieve local privilege elevation . The impact includes high levels of confidentiality, integrity, and availability. Official fixes are available; ho...

CVE-2026-83930

A Use after free vulnerability exists in the Windows Update Orchestrator Service . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is assigned a High base severity score of 7.0. No specific details regarding the root cause, affected versions, or a...

CVE-2026-83925

A vulnerability exists in the Windows Kernel involving the use of uninitialized resource (CWE-908). This flaw allows an authorized attacker to perform a local information disclosure (CWE-497). The vulnerability has a Medium base severity score of 4.7, requiring local access and high complexity to...

CVE-2026-85911

A use after free vulnerability exists in the Windows StateRepository API . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is assigned a CVSS 3.1 base score of 7.8 (High Severity). No specific exploit links or remediation details are provided in t...

CVE-2026-85909

An out-of-bounds read vulnerability exists in the Windows Universal Disk Format File System Driver (UDFS) . This flaw allows an authorized attacker to perform a local information disclosure . While specific exploit details are not provided, the vulnerability is associated with CWE-822 (Untrusted ...

CVE-2026-83913

A Use after free vulnerability in the Windows Kernel allows an authorized attacker to achieve local privilege elevation . While the specific component or file is not detailed in the provided documents, the impact includes high levels of confidentiality, integrity, and availability loss. No specif...