CVE-2026-83913

A Use after free vulnerability in the Windows Kernel allows an authorized attacker to achieve local privilege elevation . While the specific component or file is not detailed in the provided documents, the impact includes high levels of confidentiality, integrity, and availability loss. No specif...

CVE-2026-85909

An out-of-bounds read vulnerability exists in the Windows Universal Disk Format File System Driver (UDFS) . This flaw allows an authorized attacker to perform a local information disclosure . While specific exploit details are not provided, the vulnerability is associated with CWE-822 (Untrusted ...

CVE-2026-85911

A use after free vulnerability exists in the Windows StateRepository API . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is assigned a CVSS 3.1 base score of 7.8 (High Severity). No specific exploit links or remediation details are provided in t...

CVE-2026-85912

A race condition exists in the Windows Clipboard User Service due to improper synchronization during concurrent execution using a shared resource. This vulnerability allows an authorized attacker to achieve local privilege escalation . No specific exploit code or in-the-wild exploitation details ...

CVE-2026-83907

A vulnerability in Windows Hello allows an authorized attacker to disclose sensitive system information locally. The issue is categorized as an exposure of sensitive system information to an unauthorized control sphere (CWE-497). The impact involves a high level of confidentiality loss, with a CV...

CVE-2026-83908

A Release of Invalid Pointer or Reference vulnerability exists in the RPC Runtime . This flaw allows an authorized attacker to perform a local privilege escalation . The vulnerability is associated with CWE-763 and has a CVSS 3.1 base score of 7.0 (High) . No specific software versions, root caus...

CVE-2026-85902

A heap-based buffer overflow exists in Windows Direct Composition that allows an authorized attacker to achieve local privilege escalation . The vulnerability is categorized under CWE-122 and has a CVSS 3.1 base score of 7.8 (High). No specific exploit information or in-the-wild exploitation deta...

CVE-2026-85905

A heap-based buffer overflow exists in the Windows UI Immersive Server . This vulnerability allows an authorized attacker to achieve local privilege escalation . The impact includes high levels of risk to confidentiality, integrity, and availability. Remediation is available through an official f...

CVE-2026-85906

A Use after free vulnerability exists in Windows Direct Composition . This flaw allows an authorized attacker to perform a local privilege escalation . The vulnerability is assigned CWE-416 and carries a High base severity score of 7.8. No specific exploit code or in-the-wild exploitation details...

CVE-2026-85901

A heap-based buffer overflow vulnerability exists in the Windows Win32K - GRFX component. This flaw allows an authorized attacker to perform a local privilege escalation . The severity is rated as HIGH with a CVSS score of 7.8. Documentation does not provide specific exploit links or detailed rem...

CVE-2026-83904

An out-of-bounds read vulnerability exists in the HID Parser Library . This flaw allows an authorized attacker to perform a local information disclosure . The vulnerability is associated with CWE-125 and has a CVSS 3.1 base score of 5.5. No specific software versions or exploit details are provid...

CVE-2026-83905

The Windows Shell is affected by an information disclosure vulnerability where sensitive system information is exposed to an unauthorized control sphere. This allows an authorized attacker to disclose information locally . The vulnerability is associated with CWE-497 . No specific exploit details...

CVE-2026-83903

A heap-based buffer overflow exists in Windows Direct Composition . This vulnerability allows an authorized attacker to perform a local privilege escalation . While the technical root cause is identified as a heap overflow, specific affected versions or patch details are not provided in the docum...

CVE-2026-85872

A Use after free vulnerability exists in the Windows Storage VSP Driver . This flaw allows an authorized attacker to perform a local privilege escalation . The vulnerability is categorized under CWE-416 . No specific exploit details or remediation instructions are provided in the documents, but t...

CVE-2026-83897

The Windows Win32 Kernel Subsystem is vulnerable to an information disclosure flaw (CWE-497 ). An authorized attacker can exploit this vulnerability to disclose sensitive system information locally. The vulnerability has a MEDIUM base severity (4.7) with a LOCAL attack vector and HIGH attack comp...

CVE-2026-83899

A local privilege escalation vulnerability exists in the Windows Installer component due to improper privilege management . An authorized attacker can exploit this flaw to elevate their privileges locally on an affected system. The vulnerability is associated with CWE-362 (Race Condition). No spe...

CVE-2026-83898

An out-of-bounds read vulnerability exists in the HID Parser Library . This flaw allows an authorized attacker to perform a local information disclosure , potentially exposing sensitive data from the system. The vulnerability is associated with CWE-125 . While specific affected versions and remed...

CVE-2026-83870

The Windows Aggregated Data Platform Service is susceptible to an out-of-bounds read vulnerability (CWE-125). This flaw allows an authorized attacker to perform a local information disclosure , potentially exposing sensitive data. The vulnerability has a CVSS 3.1 base score of 5.5 (Medium). No sp...

CVE-2026-83887

An out-of-bounds read vulnerability exists in the HID Parser Library . This flaw allows an authorized attacker to perform a local information disclosure . No specific versions, exploit details, or remediation steps are provided in the documents.

CVE-2026-83884

An out-of-bounds read vulnerability exists in the HID Parser Library on Windows. This flaw allows an authorized attacker to perform a local information disclosure . No specific exploit details or information regarding in-the-wild exploitation are provided in the documents.