CVE-2026-88114

A vulnerability exists in the DNS Server (Windows Domain Name Service) where an untrusted pointer dereference allows an unauthorized attacker to achieve remote code execution over a network. This flaw has a CVSS v3.1 score of 8.8 (High) . While the impact includes high severity for confidentialit...

CVE-2026-70111

An untrusted pointer dereference vulnerability exists in the Windows Kernel . This flaw allows an unauthorized attacker to elevate privileges over a network. The vulnerability is associated with CWE-822 and carries a CVSS 3.1 base score of 8.1 (High) . While the vulnerability is confirmed, no spe...

CVE-2026-69902

A vulnerability exists in Windows NTFS due to an untrusted pointer dereference . This flaw allows an authorized attacker to achieve local code execution . The vulnerability is associated with CWE-822 . While the CVSS score indicates a Medium severity, the potential impact includes high levels of ...

CVE-2026-88126

An untrusted pointer dereference vulnerability exists in WebDAV , which allows an authorized attacker to perform a local privilege elevation . This issue is categorized under CWE-822 . The vulnerability has a HIGH base severity score of 7.8 (CVSS 3.1). While the impact on confidentiality, integri...

CVE-2026-88079

A Null pointer dereference vulnerability exists in the Windows MIDI Service Module . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is assigned a CVSS 3.1 base score of 7.0 (High) . No specific exploit information or direct remediation steps are p...

CVE-2026-88076

A null pointer dereference vulnerability exists in the Windows Installer component. This flaw allows an authorized attacker to perform a local privilege escalation . The CVSS 3.1 score is 7.0 (High) , with the impact affecting confidentiality, integrity, and availability. No specific exploit deta...

CVE-2026-83908

A Release of Invalid Pointer or Reference vulnerability exists in the RPC Runtime . This flaw allows an authorized attacker to perform a local privilege escalation . The vulnerability is associated with CWE-763 and has a CVSS 3.1 base score of 7.0 (High) . No specific software versions, root caus...

CVE-2026-85903

A vulnerability exists in the Windows Domain Name Service (DNS Server) caused by an untrusted pointer dereference . This flaw allows an unauthorized attacker to achieve Remote Code Execution (RCE) over a network. The vulnerability is rated as High severity with a CVSS score of 8.8. While exploita...

CVE-2026-83735

A Release of invalid pointer or reference vulnerability in the Windows Kernel allows an authorized attacker to perform a local privilege escalation . This issue is associated with CWE-763 . While the vulnerability has a high severity score, specific details regarding the affected component, preci...

CVE-2026-83665

A null pointer dereference vulnerability exists in the Windows DHCP Server , which could allow an unauthorized attacker to cause a denial of service over the network. The vulnerability is associated with CWE-476 . No specific versions, root cause files, or exploit links are provided in the docume...

CVE-2026-83636

A null pointer dereference vulnerability exists in Windows Hyper-V . This flaw allows an authorized attacker to perform a local denial of service (DoS) attack. While the documents confirm the impact on availability, no specific component, file, or version details are provided. No exploits are cur...

CVE-2026-83587

A vulnerability exists in Windows Core Messaging due to an untrusted pointer dereference . This flaw allows an authorized attacker to achieve local privilege escalation . No specific version numbers or exploitation details are provided in the documentation, but an official fix is noted as the rem...

CVE-2026-70300

A Remote Code Execution (RCE) vulnerability exists in Microsoft Office Word due to an untrusted pointer dereference . An unauthorized attacker can exploit this flaw to execute arbitrary code over a network. Microsoft has released security updates to address this vulnerability, and users are encou...

CVE-2026-88098

A vulnerability exists in the Windows Security Support Provider Interface due to an untrusted pointer dereference . This flaw allows an authorized attacker to perform a local elevation of privilege . The CVSS v3.1 score is 7.0 (High) , indicating high impact on confidentiality, integrity, and ava...

CVE-2026-70270

A vulnerability in the Windows Container Isolation FS Filter Driver allows an authorized attacker to achieve local privilege elevation via an untrusted pointer dereference . This flaw is identified with CWE-822 . The CVSS v3.1 score is 5.5 , indicating a medium severity risk with a local attack v...

CVE-2026-70172

A vulnerability in Windows NTFS involves an untrusted pointer dereference , which could allow an authorized attacker to achieve local privilege elevation . The CVSS 3.1 score is 7.8, indicating a high severity impact on confidentiality, integrity, and availability. No specific exploit details or ...

CVE-2026-70170

A vulnerability exists in the Windows Kernel due to an untrusted pointer dereference . This flaw allows an authorized attacker to cause a denial of service (DoS) over a network. No specific exploitation details or patch versions are provided in the documents.

CVE-2026-85859

A Null pointer dereference vulnerability exists in the Windows Message Queuing Queue Manager . This flaw allows an authorized attacker to perform a denial of service (DoS) attack over a network. The vulnerability is categorized under CWE-476 and has a CVSS 3.1 score of 6.5. No specific exploit in...

CVE-2026-85362

A Release of invalid pointer or reference vulnerability exists in Windows Management Instrumentation . This flaw allows an authorized attacker to perform a local privilege escalation . No specific exploit details or version-specific information are provided in the documents, and no exploits are c...

CVE-2026-84017

A Null pointer dereference vulnerability exists in the Windows Routing and Remote Access Service (RRAS) . This flaw allows an unauthorized attacker to perform a Denial of Service (DoS) attack over the network. The vulnerability is characterized by a CVSS 3.1 base score of 7.5 with High availabili...