128 matches found
CVE-2026-96939
Time-of-check time-of-use toctou race condition in Servicing Stack Updates allows an authorized attacker to elevate privileges locally...
EUVD-2026-100264
Time-of-check time-of-use toctou race condition in Servicing Stack Updates allows an authorized attacker to elevate privileges locally...
CVE-2026-96939
A Time-of-check time-of-use (TOCTOU) race condition exists in Servicing Stack Updates , which allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-367 and carries a HIGH base severity score of 7.0. No specific exploit code or in-the-wild e...
CVE-2026-83863
A heap-based buffer overflow vulnerability exists in Servicing Stack Updates . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is categorized under CWE-122 and has a CVSS 3.1 base score of 7.8 (High) . No specific information regarding exploitatio...
CVE-2026-83506
An untrusted search path vulnerability in Servicing Stack Updates allows an authorized attacker to perform a local privilege escalation . The vulnerability is associated with CWE-426 and has a HIGH base severity score of 7.8 . While the vulnerability is confirmed, specific details regarding affec...
CVE-2026-85835
A buffer over-read vulnerability exists in Servicing Stack Updates . This flaw allows an authorized attacker to disclose information locally. The vulnerability has a Medium severity (CVSS 3.1 score of 5.5) and requires local access and low privileges. No specific exploit code or information on in...
CVE-2026-85365
A Heap-based buffer overflow exists in Servicing Stack Updates , which allows an authorized attacker to achieve local privilege escalation . The vulnerability has a CVSS 3.1 base score of 7.0, indicating high severity. Remediation is provided via an official fix from Microsoft. No specific exploi...
CVE-2026-85318
A heap-based buffer overflow vulnerability exists in Servicing Stack Updates . This flaw allows an authorized attacker to perform a local privilege escalation . The vulnerability is associated with CWE-122 and has been assigned a HIGH severity score of 7.8. No specific exploit details or links ar...
CVE-2026-83719
A buffer over-read vulnerability exists in Servicing Stack Updates , which allows an authorized attacker to disclose information locally . The vulnerability is associated with a MEDIUM severity rating (CVSS 3.1: 5.5) and is characterized by a LOCAL attack vector with LOW complexity. No specific e...
Servicing Stack Updates Elevation of Privilege Vulnerability
Time-of-check time-of-use toctou race condition in Servicing Stack Updates allows an authorized attacker to elevate privileges locally...
Servicing Stack Updates Information Disclosure Vulnerability
Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information locally...
PT-2026-112711
Name of the Vulnerable Software and Affected Versions Servicing Stack Updates affected versions not specified Description A heap-based buffer overflow exists in Servicing Stack Updates. This issue allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occurs whe...
PT-2026-112745
Name of the Vulnerable Software and Affected Versions Servicing Stack Updates affected versions not specified Description A heap-based buffer overflow exists in Servicing Stack Updates. This flaw allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occurs when...
PT-2026-113144
Time-of-check time-of-use toctou race condition in Servicing Stack Updates allows an authorized attacker to elevate privileges locally...
January 24, 2026—KB5078133 (OS Build 25398.2097) Out-of-band
None None...
May 13, 2025—Hotpatch KB5058500 (OS Build 20348.3630)
None None...
June 11, 2025—KB5063060 (OS Build 26100.4351) Out-of-band
None None...
March 11, 2025—KB5053599 (OS Build 25398.1486)
None None...