CVE-2026-70213

An origin validation error in Microsoft Power Apps allows an authorized attacker to perform remote code execution over a network. This vulnerability has a HIGH severity rating with a CVSS score of 8.0. Documentation confirms the impact is the execution of arbitrary code . No specific exploit link...

CVE-2026-88160

A race condition vulnerability exists in the Microsoft Windows Search Component due to concurrent execution using a shared resource with improper synchronization. This flaw allows an authorized attacker to achieve local privilege elevation . Remediation is available via an official fix provided b...

CVE-2026-69943

A path traversal vulnerability (improper limitation of a pathname to a restricted directory) exists in Microsoft Office SharePoint . This flaw allows an authorized attacker to achieve arbitrary code execution over a network. Microsoft has released updates to address this vulnerability; users are ...

CVE-2026-88158

An out-of-bounds read vulnerability exists in Microsoft Digest Authentication . This flaw allows an authorized attacker to disclose information locally . The vulnerability is characterized by a MEDIUM severity (CVSS 3.1 score of 5.5) and involves an attack vector originating from the local system...

CVE-2026-88101

A weak authentication vulnerability in the Microsoft Input Method Editor (IME) allows an authorized attacker to perform a local elevation of privilege . The vulnerability is associated with CWE-1390 . While the base severity is rated as HIGH (7.8), the documents do not provide specific details re...

CVE-2026-85869

A Heap-based buffer overflow vulnerability exists in the Microsoft Windows Search Component . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability impacts the confidentiality, integrity, and availability of the affected system. A formal remediation is ...

CVE-2026-85881

A stack-based buffer overflow exists in the Microsoft Graphics Component , which may be leveraged by an authorized attacker to elevate privileges over a network. The vulnerability is associated with Microsoft Office Graphics. Remediation is available through official fixes provided by Microsoft.

CVE-2026-85814

A heap-based buffer overflow exists in Microsoft Windows Media Foundation , which could allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a CVSS v3.1 score of 9.8 (CRITICAL), indicating a high impact on confidentiality, integrity, and availabili...

CVE-2026-85790

A Use after free vulnerability in Microsoft QUIC allows an unauthorized attacker to disclose information over a network. The vulnerability is characterized by a high confidentiality impact, though it does not affect integrity or availability. Remediation is available via an official fix provided ...

CVE-2026-85338

An out-of-bounds read vulnerability exists in the Microsoft Graphics Component . This flaw allows an authorized attacker to perform a local privilege escalation . The impact includes high confidentiality, integrity, and availability impacts as indicated by the CVSS 3.1 score of 7.8. Specific expl...

CVE-2026-83921

A heap-based buffer overflow exists in the Microsoft Windows Search Component (Windows Search Service). This vulnerability allows an authorized attacker to achieve local privilege escalation . While the technical root cause is identified as a heap-based buffer overflow, specific exploit details o...

CVE-2026-83920

A heap-based buffer overflow exists in the Microsoft Windows Search Component . This vulnerability allows an authorized attacker to achieve local privilege escalation . No specific versions, exploit details, or remediation steps are provided in the documents beyond the existence of an official fix.

CVE-2026-83914

A use after free vulnerability in Microsoft XML allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is classified as HIGH severity with a CVSS 3.1 score of 8.1 . No specific versions or exploit links are provided in the documents, but an official fix...

CVE-2026-83919

A heap-based buffer overflow exists in the Microsoft Internet Messaging API . This vulnerability allows an authorized attacker to achieve local code execution . No specific versions are listed as affected, and no exploit information is provided in the documents. Remediation is indicated as an off...

CVE-2026-70086

A use after free vulnerability exists in the Microsoft Windows Search Component . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is confirmed with a CVSS 3.1 base score of 7.0 . Remediation is available via an official fix provided by Microsoft.

CVE-2026-83868

A race condition exists in the Microsoft Bluetooth Driver due to improper synchronization during concurrent execution using a shared resource. This vulnerability allows an authorized attacker to achieve local privilege escalation . The CVSS 3.1 score is 7.0 (High), reflecting high impacts on conf...

CVE-2026-83847

A Heap-based buffer overflow and Integer Overflow (CWE-122, CWE-190) exist in Microsoft Account , which may allow an authorized attacker to achieve local privilege elevation . The vulnerability has a CVSS 3.1 base score of 7.8 (High) . Specific exploitation details or proof-of-concept code are no...

CVE-2026-83776

A vulnerability exists in the Microsoft Bluetooth Driver due to an out-of-bounds read (CWE-125). This flaw could allow an unauthorized attacker to elevate privileges by conducting a physical attack . Exploitation details and specific affected versions are not provided in the documents; however, a...

CVE-2026-83760

An out-of-bounds read vulnerability exists in the Microsoft Bluetooth Driver . This flaw allows an authorized attacker to perform a local information disclosure by reading data outside the intended memory boundaries. The vulnerability has a MEDIUM severity rating with a CVSS 3.1 score of 5.5, pri...

CVE-2026-83722

A Use after free vulnerability exists in the Microsoft Local Security Authority Server (lsasrv) . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-416 (Use After Free) and CWE-362 (Race Condition). While the documentation con...