Microsoft Windows: CVE-2026-83908: RPC Runtime Elevation of Privilege Vulnerability

Release of invalid pointer or reference in RPC Runtime allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85906: Windows Direct Composition Elevation of Privilege Vulnerability

Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85905: Windows UI Immersive Server API Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows UI Immersive Server allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85902: Windows Direct Composition Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85901: Windows Graphics Component Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85872: Windows Storage VSP Driver Elevation of Privilege Vulnerability

Use after free in Windows Storage VSP Driver allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83903: Windows Direct Composition Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83900: Windows Bind Filter Driver Elevation of Privilege Vulnerability

Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83899: Windows Installer Elevation of Privilege Vulnerability

Improper privilege management in Windows Installer allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83873: Windows Shell Elevation of Privilege Vulnerability

Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83877: Windows Devices Human Interface Elevation of Privilege Vulnerability

Integer overflow or wraparound in HID Parser Library allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83895: Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an unauthorized attacker to elevate privileges with a physical attack...

Microsoft Windows: CVE-2026-83881: Windows exFAT File System Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83883: Windows Win32k Elevation of Privilege Vulnerability

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83863: Servicing Stack Updates Elevation of Privilege Vulnerability

Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83861: Windows Remote Desktop Protocol Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Remote Desktop Protocol allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83859: Windows NTFS Elevation of Privilege Vulnerability

Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83857: Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

Use after free in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83845: Windows Internet (wininet.dll) Spoofing Vulnerability

Improper privilege management in Windows Internet wininet.dll allows an authorized attacker to perform spoofing locally...

Microsoft Windows: CVE-2026-83792: Windows Device Install Service Elevation of Privilege Vulnerability

Incorrect authorization in Windows Device Install Service allows an authorized attacker to elevate privileges locally...