Microsoft Windows: CVE-2026-88100: Windows Storage Spaces Controller Elevation of Privilege Vulnerability

Use after free in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-87713: Windows Bluetooth Port Driver Remote Code Execution

Use after free in Windows Bluetooth Port Driver allows an unauthorized attacker to elevate privileges over an adjacent network...

Microsoft Windows: CVE-2026-87711: Windows Installer Elevation of Privilege Vulnerability

Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-87710: Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability

Improper access control in Microsoft Local Security Authority Server lsasrv allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-88080: Windows Installer Elevation of Privilege Vulnerability

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-88091: Windows Management Instrumentation Elevation of Privilege Vulnerability

Deserialization of untrusted data in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-87715: Windows Installer Elevation of Privilege Vulnerability

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-88070: Windows BitLocker Elevation of Privilege Vulnerability

Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-96305: Windows Installer Elevation of Privilege Vulnerability

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-96306: Windows Sysmain Service Elevation of Privilege Vulnerability

Out-of-bounds read in Windows Sysmain Service allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-96308: Windows Installer Elevation of Privilege Vulnerability

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85375: Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability

Use after free in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85338: Microsoft Graphics Component Elevation of Privilege Vulnerability

Out-of-bounds read in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85365: Servicing Stack Updates Elevation of Privilege Vulnerability

Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85372: Windows Kernel Elevation of Privilege Vulnerability

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85373: Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85332: Windows Device Association Service Elevation of Privilege Vulnerability

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85333: Windows Performance Monitor Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Performance Monitor allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85329: Microsoft Account Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Account allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85327: Windows Print Spooler Components Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally...