CVE-2026-96937

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

CVE-2026-96910

Untrusted pointer dereference in Microsoft Windows Search Component allows an authorized attacker to disclose information locally...

CVE-2026-96911

Improper link resolution before file access 'link following' in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

CVE-2026-96324

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

CVE-2026-88191

Improper link resolution before file access 'link following' in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

CVE-2026-88182

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

CVE-2026-88160

Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

CVE-2026-105010

A Use after free vulnerability exists in the Microsoft Windows Search Component . This flaw allows an unauthorized attacker to achieve privilege elevation over a network. The vulnerability has been assigned a CRITICAL CVSS v3.1 base score of 9.8 and is associated with CWE-416 . Official remediati...

CVE-2026-96937

A Use after free vulnerability exists in the Microsoft Windows Search Component . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is characterized by a CVSS 3.1 base score of 7.0 (High) , with impacts on confidentiality, integrity, and availability...

CVE-2026-96911

The Microsoft Windows Search Component is vulnerable to an improper link resolution before file access (link following) vulnerability. This flaw allows an authorized attacker to achieve local privilege escalation . The CVSS 3.1 score is 7.8 (High), with high impacts on confidentiality, integrity,...

CVE-2026-96324

A Use after free vulnerability in the Microsoft Windows Search Component allows an authorized attacker to achieve local privilege escalation . This issue (tracked as CWE-416 ) impacts the integrity, confidentiality, and availability of the system. While the root cause is identified as a memory ma...

CVE-2026-88182

A Use after free vulnerability exists in the Microsoft Windows Search Component . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability has been assigned a High severity rating (CVSS 3.1 score of 7.8) with an official fix available. No specific exploit ...

CVE-2026-88191

The Microsoft Windows Search Component is vulnerable to an improper link resolution before file access (link following) flaw. This vulnerability allows an authorized attacker to achieve local privilege escalation . While the specific root cause details are limited to the link-following mechanism,...

CVE-2026-83850

A heap-based buffer overflow exists in the Microsoft Windows Search Component . This vulnerability allows an authorized attacker to achieve local privilege elevation . The vulnerability is classified with a CVSS 3.1 base score of 7.8 (High) . No specific exploit details or in-the-wild exploitatio...

CVE-2026-83829

A heap-based buffer overflow exists in the Microsoft Windows Search Component . This vulnerability allows an authorized attacker to achieve local privilege escalation . The impact includes potential high levels of confidentiality, integrity, and availability loss. No specific exploit code or in-t...

CVE-2026-83725

A heap-based buffer overflow exists in the Microsoft Windows Search Component , which could allow an unauthorized attacker to execute code over a network. The vulnerability is associated with CWE-122 and CWE-190 . Detailed information regarding specific affected versions, the exact root cause, or...

CVE-2026-83686

The Microsoft Windows Search Component is susceptible to an out-of-bounds read vulnerability. This flaw allows an authorized attacker to disclose information locally. The severity is rated as MEDIUM with a CVSS 3.1 score of 5.5, characterized by a high confidentiality impact and low attack comple...

CVE-2026-83570

A Use after free vulnerability exists in the Microsoft Windows Search Component . This flaw allows an authorized attacker to achieve local privilege escalation . While the CVSS v3.1 score of 7.8 indicates a high severity with high impact on confidentiality, integrity, and availability, specific e...

CVE-2026-83564

A Use after free vulnerability exists in the Microsoft Windows Search Component . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-416 and has a base CVSS 3.1 score of 7.0. No specific exploit details or in-the-wild exploitat...

CVE-2026-88160

A race condition vulnerability exists in the Microsoft Windows Search Component due to concurrent execution using a shared resource with improper synchronization. This flaw allows an authorized attacker to achieve local privilege elevation . Remediation is available via an official fix provided b...