CVE-2026-88127

Use after free in Windows SMB Server allows an authorized attacker to elevate privileges locally...

CVE-2026-88126

Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally...

CVE-2026-88101

Weak authentication in Microsoft Input Method Editor IME allows an authorized attacker to elevate privileges locally...

CVE-2026-88105

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally...

CVE-2026-88109

Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally...

CVE-2026-88106

Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-88100

Use after free in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally...

CVE-2026-88094

Improper neutralization of special elements in output used by a downstream component 'injection' in Azure Storage Library allows an authorized attacker to elevate privileges over a network...

CVE-2026-88073

Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-88079

Null pointer dereference in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...

CVE-2026-88091

Deserialization of untrusted data in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally...

CVE-2026-88080

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-88071

Double free in Windows Hyper-V allows an authorized attacker to elevate privileges locally...

CVE-2026-87715

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-87713

Use after free in Windows Bluetooth Port Driver allows an unauthorized attacker to elevate privileges over an adjacent network...

CVE-2026-87711

Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-87704

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-87708

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-87695

Inclusion of functionality from untrusted control sphere in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally...

CVE-2026-87692

Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally...