CVE-2026-88105

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally...

CVE-2026-88106

Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-88109

Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally...

CVE-2026-88094

Improper neutralization of special elements in output used by a downstream component 'injection' in Azure Storage Library allows an authorized attacker to elevate privileges over a network...

CVE-2026-88100

Use after free in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally...

CVE-2026-88080

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-88073

Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-88079

Null pointer dereference in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...

CVE-2026-88091

Deserialization of untrusted data in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally...

CVE-2026-87715

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-88071

Double free in Windows Hyper-V allows an authorized attacker to elevate privileges locally...

CVE-2026-87711

Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-87713

Use after free in Windows Bluetooth Port Driver allows an unauthorized attacker to elevate privileges over an adjacent network...

CVE-2026-87704

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-87708

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-87695

Inclusion of functionality from untrusted control sphere in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally...

CVE-2026-87693

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-85945

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-87692

Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally...

CVE-2026-85912

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally...