CVE-2026-85901

A heap-based buffer overflow vulnerability exists in the Windows Win32K - GRFX component. This flaw allows an authorized attacker to perform a local privilege escalation . The severity is rated as HIGH with a CVSS score of 7.8. Documentation does not provide specific exploit links or detailed rem...

CVE-2026-85905

A heap-based buffer overflow exists in the Windows UI Immersive Server . This vulnerability allows an authorized attacker to achieve local privilege escalation . The impact includes high levels of risk to confidentiality, integrity, and availability. Remediation is available through an official f...

CVE-2026-83897

The Windows Win32 Kernel Subsystem is vulnerable to an information disclosure flaw (CWE-497 ). An authorized attacker can exploit this vulnerability to disclose sensitive system information locally. The vulnerability has a MEDIUM base severity (4.7) with a LOCAL attack vector and HIGH attack comp...

CVE-2026-85872

A Use after free vulnerability exists in the Windows Storage VSP Driver . This flaw allows an authorized attacker to perform a local privilege escalation . The vulnerability is categorized under CWE-416 . No specific exploit details or remediation instructions are provided in the documents, but t...

CVE-2026-83899

A local privilege escalation vulnerability exists in the Windows Installer component due to improper privilege management . An authorized attacker can exploit this flaw to elevate their privileges locally on an affected system. The vulnerability is associated with CWE-362 (Race Condition). No spe...

CVE-2026-83903

A heap-based buffer overflow exists in Windows Direct Composition . This vulnerability allows an authorized attacker to perform a local privilege escalation . While the technical root cause is identified as a heap overflow, specific affected versions or patch details are not provided in the docum...

CVE-2026-83870

The Windows Aggregated Data Platform Service is susceptible to an out-of-bounds read vulnerability (CWE-125). This flaw allows an authorized attacker to perform a local information disclosure , potentially exposing sensitive data. The vulnerability has a CVSS 3.1 base score of 5.5 (Medium). No sp...

CVE-2026-83877

An integer overflow or wraparound vulnerability exists in the HID Parser Library , affecting Windows Devices . This flaw allows an authorized attacker to achieve local privilege elevation . While the vulnerability is confirmed with a CVSS3.1 base score of 7.8 , the provided documents do not speci...

CVE-2026-83887

An out-of-bounds read vulnerability exists in the HID Parser Library . This flaw allows an authorized attacker to perform a local information disclosure . No specific versions, exploit details, or remediation steps are provided in the documents.

CVE-2026-83884

An out-of-bounds read vulnerability exists in the HID Parser Library on Windows. This flaw allows an authorized attacker to perform a local information disclosure . No specific exploit details or information regarding in-the-wild exploitation are provided in the documents.

CVE-2026-83898

An out-of-bounds read vulnerability exists in the HID Parser Library . This flaw allows an authorized attacker to perform a local information disclosure , potentially exposing sensitive data from the system. The vulnerability is associated with CWE-125 . While specific affected versions and remed...

CVE-2026-83873

A Relative path traversal vulnerability exists in Windows Shell , which allows an authorized attacker to achieve local privilege escalation . The vulnerability is categorized under CWE-23 . While the documents confirm the existence of the vulnerability and the potential for privilege elevation, s...

CVE-2026-83883

A use after free vulnerability exists in Windows Win32K , which allows an authorized attacker to achieve local privilege escalation . The vulnerability is confirmed with a HIGH base severity score of 7.8. No specific exploit details or proof-of-concept code are provided in the documents. Remediat...

CVE-2026-83881

A Heap-based buffer overflow exists in the Windows exFAT File System , which could allow an authorized attacker to perform a local privilege escalation . The vulnerability is confirmed with a CVSS 3.1 score of 7.8. No specific exploit information or version-specific details are provided in the do...

CVE-2026-83863

A heap-based buffer overflow vulnerability exists in Servicing Stack Updates . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is categorized under CWE-122 and has a CVSS 3.1 base score of 7.8 (High) . No specific information regarding exploitatio...

CVE-2026-83861

A heap-based buffer overflow exists in the Windows Remote Desktop Protocol . This vulnerability allows an authorized attacker to achieve local privilege escalation . No specific exploit details or remediation instructions are provided in the documents beyond the mention of an official fix .

CVE-2026-83857

A use after free vulnerability exists in the Windows Universal Disk Format File System Driver (UDFS) . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-121 (Stack-based Buffer Overflow) . Details regarding specific affected v...

CVE-2026-83850

A heap-based buffer overflow exists in the Microsoft Windows Search Component . This vulnerability allows an authorized attacker to achieve local privilege elevation . The vulnerability is classified with a CVSS 3.1 base score of 7.8 (High) . No specific exploit details or in-the-wild exploitatio...

CVE-2026-83859

A Use after free vulnerability in Windows NTFS allows an authorized attacker to perform a local privilege elevation . The vulnerability is associated with CWE-416 and has been assigned a CVSS 3.1 base score of 7.8 (High). Specific details regarding the affected component, root cause, or remediati...

CVE-2026-83845

Improper privilege management in Windows Internet (wininet.dll) allows an authorized attacker to perform spoofing locally. The vulnerability is associated with CWE-290 (Authentication Bypass by Spoofing). According to the CVSS 3.1 metrics, the flaw has a High severity score of 8.4, affecting Conf...