CVE-2026-87702

A vulnerability in Windows Resource Management (MRM) involving an integer overflow or wraparound allows an authorized attacker to achieve local privilege elevation . The vulnerability is characterized by a high base severity score of 7.8. No specific patch versions, workarounds, or exploit detail...

CVE-2026-88109

A use after free vulnerability exists in Microsoft Office Click-To-Run , which could allow an authorized attacker to achieve local privilege escalation . The vulnerability is assigned a High base severity score of 7.8. No specific exploit links or remediation details are provided in the documents...

CVE-2026-87699

A heap-based buffer overflow exists in Winlogon , which allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-122 . Official remediation is available via Microsoft updates.

CVE-2026-87700

A Use after free vulnerability exists in Windows Installer , which may allow an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-416 . While specific affected versions or detailed root causes are not provided in the documents, a remediation leve...

CVE-2026-85884

The Windows Health and Optimized Experiences Service is vulnerable to a privilege escalation flaw due to missing authentication for a critical function (CWE-306). An authorized attacker can exploit this to elevate privileges locally on the affected system. While the CVSS 3.1 score is 7.8 (High) ,...

CVE-2026-87694

A Use after free vulnerability in Windows Installer allows an authorized attacker to achieve local privilege elevation . The vulnerability is classified with a High base severity (CVSS 3.1 score of 7.8). While the technical root cause is identified as a use after free, specific file paths or func...

CVE-2026-83924

A Use after free vulnerability exists in the Windows Kernel . This flaw allows an authorized attacker to achieve local privilege elevation . No specific component, version, or remediation steps are provided in the documents. No exploit information is available.

CVE-2026-83913

A Use after free vulnerability in the Windows Kernel allows an authorized attacker to achieve local privilege elevation . While the specific component or file is not detailed in the provided documents, the impact includes high levels of confidentiality, integrity, and availability loss. No specif...

CVE-2026-83918

An integer overflow or wraparound vulnerability exists in the Windows Kernel . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is assigned a High base severity score of 7.8. No specific exploit information or remediation details are provided in th...

CVE-2026-83899

A local privilege escalation vulnerability exists in the Windows Installer component due to improper privilege management . An authorized attacker can exploit this flaw to elevate their privileges locally on an affected system. The vulnerability is associated with CWE-362 (Race Condition). No spe...

CVE-2026-83903

A heap-based buffer overflow exists in Windows Direct Composition . This vulnerability allows an authorized attacker to perform a local privilege escalation . While the technical root cause is identified as a heap overflow, specific affected versions or patch details are not provided in the docum...

CVE-2026-83877

An integer overflow or wraparound vulnerability exists in the HID Parser Library , affecting Windows Devices . This flaw allows an authorized attacker to achieve local privilege elevation . While the vulnerability is confirmed with a CVSS3.1 base score of 7.8 , the provided documents do not speci...

CVE-2026-83873

A Relative path traversal vulnerability exists in Windows Shell , which allows an authorized attacker to achieve local privilege escalation . The vulnerability is categorized under CWE-23 . While the documents confirm the existence of the vulnerability and the potential for privilege elevation, s...

CVE-2026-83895

A heap-based buffer overflow exists in the Windows Win32 Kernel Subsystem . This vulnerability allows an unauthorized attacker to elevate privileges through a physical attack . No specific exploit information or remediation steps are provided in the documents.

CVE-2026-83863

A heap-based buffer overflow vulnerability exists in Servicing Stack Updates . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is categorized under CWE-122 and has a CVSS 3.1 base score of 7.8 (High) . No specific information regarding exploitatio...

CVE-2026-83881

A Heap-based buffer overflow exists in the Windows exFAT File System , which could allow an authorized attacker to perform a local privilege escalation . The vulnerability is confirmed with a CVSS 3.1 score of 7.8. No specific exploit information or version-specific details are provided in the do...

CVE-2026-83859

A Use after free vulnerability in Windows NTFS allows an authorized attacker to perform a local privilege elevation . The vulnerability is associated with CWE-416 and has been assigned a CVSS 3.1 base score of 7.8 (High). Specific details regarding the affected component, root cause, or remediati...

CVE-2026-83840

A weak authentication vulnerability in Windows Error Reporting allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-1390 . While the CVSS v3.1 score is 7.8 (High) , the documents do not provide specific software versions, root cause detail...

CVE-2026-83841

A race condition vulnerability exists in Windows Win32K due to concurrent execution using a shared resource with improper synchronization. This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability has an official fix available, but no specific exploit detail...

CVE-2026-83777

A heap-based buffer overflow exists in the Windows Bluetooth Service . This vulnerability allows an unauthorized attacker to elevate privileges over an adjacent network. Exploitation details and specific affected versions are not provided in the documents, but the vulnerability is associated with...