CVE-2026-70260

The Microsoft Trace Data Helper component is vulnerable to an information disclosure flaw (CWE-497) that allows an authorized attacker to disclose sensitive system information locally. The vulnerability results from exposure to an unauthorized control sphere. The CVSS 3.1 score is 5.5 (Medium) , ...

CVE-2026-70261

The Microsoft Trace Data Helper component is affected by a vulnerability that allows an authorized attacker to disclose sensitive system information locally. This issue is categorized as CWE-497 (Exposure of Sensitive System Information to an Unauthorized Control Sphere). The vulnerability has a ...

CVE-2026-70264

The Microsoft Defender software is affected by an improper link resolution (link following) vulnerability. This flaw allows an authorized attacker to perform a local attack to disclose information or access sensitive data . Microsoft has released updates to address this vulnerability; users are e...

CVE-2026-88191

The Microsoft Windows Search Component is vulnerable to an improper link resolution before file access (link following) flaw. This vulnerability allows an authorized attacker to achieve local privilege escalation . While the specific root cause details are limited to the link-following mechanism,...

CVE-2026-88182

A Use after free vulnerability exists in the Microsoft Windows Search Component . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability has been assigned a High severity rating (CVSS 3.1 score of 7.8) with an official fix available. No specific exploit ...

CVE-2026-88193

A heap-based buffer overflow exists in the Microsoft Scripting Engine , which can be exploited by an authorized attacker to achieve local privilege elevation . The vulnerability is confirmed with a CVSS 3.1 base score of 7.8, indicating a High severity impact on confidentiality, integrity, and av...

CVE-2026-88109

A use after free vulnerability exists in Microsoft Office Click-To-Run , which could allow an authorized attacker to achieve local privilege escalation . The vulnerability is assigned a High base severity score of 7.8. No specific exploit links or remediation details are provided in the documents...

CVE-2026-83935

A heap-based buffer overflow vulnerability exists in Microsoft XML , which allows an unauthorized attacker to achieve remote code execution over a network. This vulnerability is categorized as CRITICAL with a CVSSv3.1 score of 9.8 . The NCSC confirms that this flaw allows malicious actors to exec...

CVE-2026-83850

A heap-based buffer overflow exists in the Microsoft Windows Search Component . This vulnerability allows an authorized attacker to achieve local privilege elevation . The vulnerability is classified with a CVSS 3.1 base score of 7.8 (High) . No specific exploit details or in-the-wild exploitatio...

CVE-2026-83829

A heap-based buffer overflow exists in the Microsoft Windows Search Component . This vulnerability allows an authorized attacker to achieve local privilege escalation . The impact includes potential high levels of confidentiality, integrity, and availability loss. No specific exploit code or in-t...

CVE-2026-83778

A heap-based buffer overflow vulnerability exists in the Microsoft Internet Messaging API . This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a high severity rating (CVSS 8.8) and requires user interaction. No specific exploit details...

CVE-2026-83725

A heap-based buffer overflow exists in the Microsoft Windows Search Component , which could allow an unauthorized attacker to execute code over a network. The vulnerability is associated with CWE-122 and CWE-190 . Detailed information regarding specific affected versions, the exact root cause, or...

CVE-2026-83686

The Microsoft Windows Search Component is susceptible to an out-of-bounds read vulnerability. This flaw allows an authorized attacker to disclose information locally. The severity is rated as MEDIUM with a CVSS 3.1 score of 5.5, characterized by a high confidentiality impact and low attack comple...

CVE-2026-83570

A Use after free vulnerability exists in the Microsoft Windows Search Component . This flaw allows an authorized attacker to achieve local privilege escalation . While the CVSS v3.1 score of 7.8 indicates a high severity with high impact on confidentiality, integrity, and availability, specific e...

CVE-2026-83574

A Use after free vulnerability exists in the Microsoft Windows Search Component . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability impacts the Windows Search Service and has a CVSS 3.1 base score of 7.0. No specific exploit details or manual workar...

CVE-2026-83564

A Use after free vulnerability exists in the Microsoft Windows Search Component . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-416 and has a base CVSS 3.1 score of 7.0. No specific exploit details or in-the-wild exploitat...

CVE-2026-83517

A heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to achieve remote code execution over a network. This vulnerability is rated as CRITICAL with a CVSS score of 9.80 , as it enables an attacker to execute arbitrary code without prior authentication ...

CVE-2026-69577

The Microsoft Azure Attestation service and Device Health Attestation Service are affected by an out-of-bounds read vulnerability (CWE-125). This flaw allows an unauthorized attacker to disclose information over a network . The vulnerability has a HIGH base severity score of 7.5, as it is remotel...

CVE-2026-69454

The Microsoft Azure Attestation service and Device Health Attestation Service are affected by an out-of-bounds read vulnerability (CWE-125). This flaw allows an unauthorized attacker to disclose information over a network. The vulnerability has a CVSS 3.1 score of 7.5 (High) and is mitigated by a...

CVE-2026-77902

A heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. Exploitation of this vulnerability requires the victim to open a malicious file or click a malicious link. Microsoft has released updates to address this and other vulnerabilitie...