CVE-2026-83925

A vulnerability exists in the Windows Kernel involving the use of uninitialized resource (CWE-908). This flaw allows an authorized attacker to perform a local information disclosure (CWE-497). The vulnerability has a Medium base severity score of 4.7, requiring local access and high complexity to...

CVE-2026-83930

A Use after free vulnerability exists in the Windows Update Orchestrator Service . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is assigned a High base severity score of 7.0. No specific details regarding the root cause, affected versions, or a...

CVE-2026-83931

A heap-based buffer overflow vulnerability exists in Windows Hyper-V . This flaw allows an authorized attacker to achieve local code execution . The vulnerability has a high severity rating and the official remediation is provided via Microsoft updates.

CVE-2026-85879

A Time-of-check time-of-use (TOCTOU) race condition exists in the Windows Subsystem for Linux . This vulnerability allows an authorized attacker to achieve local privilege elevation . The impact includes high levels of confidentiality, integrity, and availability. Official fixes are available; ho...

CVE-2026-83915

A Use after free vulnerability exists in the Windows Diagnostic Policy Service . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-416 and carries a High base severity score. No specific details regarding the root cause, affec...

CVE-2026-85910

A buffer over-read vulnerability exists in the Windows StateRepository API . This flaw allows an authorized attacker to perform a local information disclosure, potentially exposing sensitive data. The vulnerability is associated with CWE-126 . No specific exploit details or active in-the-wild exp...

CVE-2026-85909

An out-of-bounds read vulnerability exists in the Windows Universal Disk Format File System Driver (UDFS) . This flaw allows an authorized attacker to perform a local information disclosure . While specific exploit details are not provided, the vulnerability is associated with CWE-822 (Untrusted ...

CVE-2026-83918

An integer overflow or wraparound vulnerability exists in the Windows Kernel . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is assigned a High base severity score of 7.8. No specific exploit information or remediation details are provided in th...

CVE-2026-85912

A race condition exists in the Windows Clipboard User Service due to improper synchronization during concurrent execution using a shared resource. This vulnerability allows an authorized attacker to achieve local privilege escalation . No specific exploit code or in-the-wild exploitation details ...

CVE-2026-83913

A Use after free vulnerability in the Windows Kernel allows an authorized attacker to achieve local privilege elevation . While the specific component or file is not detailed in the provided documents, the impact includes high levels of confidentiality, integrity, and availability loss. No specif...

CVE-2026-85911

A use after free vulnerability exists in the Windows StateRepository API . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is assigned a CVSS 3.1 base score of 7.8 (High Severity). No specific exploit links or remediation details are provided in t...

CVE-2026-85901

A heap-based buffer overflow vulnerability exists in the Windows Win32K - GRFX component. This flaw allows an authorized attacker to perform a local privilege escalation . The severity is rated as HIGH with a CVSS score of 7.8. Documentation does not provide specific exploit links or detailed rem...

CVE-2026-85905

A heap-based buffer overflow exists in the Windows UI Immersive Server . This vulnerability allows an authorized attacker to achieve local privilege escalation . The impact includes high levels of risk to confidentiality, integrity, and availability. Remediation is available through an official f...

CVE-2026-83908

A Release of Invalid Pointer or Reference vulnerability exists in the RPC Runtime . This flaw allows an authorized attacker to perform a local privilege escalation . The vulnerability is associated with CWE-763 and has a CVSS 3.1 base score of 7.0 (High) . No specific software versions, root caus...

CVE-2026-85906

A Use after free vulnerability exists in Windows Direct Composition . This flaw allows an authorized attacker to perform a local privilege escalation . The vulnerability is assigned CWE-416 and carries a High base severity score of 7.8. No specific exploit code or in-the-wild exploitation details...

CVE-2026-85902

A heap-based buffer overflow exists in Windows Direct Composition that allows an authorized attacker to achieve local privilege escalation . The vulnerability is categorized under CWE-122 and has a CVSS 3.1 base score of 7.8 (High). No specific exploit information or in-the-wild exploitation deta...

CVE-2026-83905

The Windows Shell is affected by an information disclosure vulnerability where sensitive system information is exposed to an unauthorized control sphere. This allows an authorized attacker to disclose information locally . The vulnerability is associated with CWE-497 . No specific exploit details...

CVE-2026-83904

An out-of-bounds read vulnerability exists in the HID Parser Library . This flaw allows an authorized attacker to perform a local information disclosure . The vulnerability is associated with CWE-125 and has a CVSS 3.1 base score of 5.5. No specific software versions or exploit details are provid...

CVE-2026-83907

A vulnerability in Windows Hello allows an authorized attacker to disclose sensitive system information locally. The issue is categorized as an exposure of sensitive system information to an unauthorized control sphere (CWE-497). The impact involves a high level of confidentiality loss, with a CV...

CVE-2026-83897

The Windows Win32 Kernel Subsystem is vulnerable to an information disclosure flaw (CWE-497 ). An authorized attacker can exploit this vulnerability to disclose sensitive system information locally. The vulnerability has a MEDIUM base severity (4.7) with a LOCAL attack vector and HIGH attack comp...