CVE-2026-85366

A heap-based buffer overflow vulnerability exists in Windows Installer . This flaw allows an authorized attacker to perform a local elevation of privileges . The severity is rated as High (CVSS 3.1 score of 7.8). No specific exploit links or remediation versions are provided in the documents beyo...

CVE-2026-85356

An out-of-bounds read vulnerability exists in the Windows Volume Manager Extension Driver . This flaw allows an authorized attacker to perform a local privilege escalation . While the vulnerability is confirmed with a HIGH base severity score of 7.8, specific exploit details or in-the-wild exploi...

CVE-2026-85367

A Use after free vulnerability exists in the Windows Cash Drawer Protocol Provider . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability has a CVSS 3.1 base score of 7.0 (High) . Specific details regarding the underlying root cause, affected versions, ...

CVE-2026-85365

A Heap-based buffer overflow exists in Servicing Stack Updates , which allows an authorized attacker to achieve local privilege escalation . The vulnerability has a CVSS 3.1 base score of 7.0, indicating high severity. Remediation is provided via an official fix from Microsoft. No specific exploi...

CVE-2026-85343

Windows Hyper-V is affected by an Improper link resolution before file access (link following) vulnerability. This flaw allows an authorized attacker to perform a local privilege escalation . No specific software versions or exploit links are provided in the documents, but the vulnerability has a...

CVE-2026-85327

A heap-based buffer overflow vulnerability exists in the Windows Print Spooler Components . This flaw allows an authorized attacker to perform a local elevation of privilege attack. While the vulnerability's impact is classified as High (CVSS 3.1 score of 7.8), specific details regarding the root...

CVE-2026-84020

A Use after free vulnerability in the Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to achieve local privilege escalation . The impact includes high levels of confidentiality, integrity, and availability. Exploitation details are not provided in the documents.

CVE-2026-85328

A weak authentication vulnerability exists in the Windows Projected File System . This flaw allows an authorized attacker to perform a local privilege elevation . No specific software versions, root causes, or remediation steps are provided in the documents beyond the existence of an official fix...

CVE-2026-83927

The Windows Registry is susceptible to an improper link resolution before file access (link following) vulnerability. This security flaw allows an authorized attacker to achieve local privilege escalation . While the specific affected versions and technical root causes are not detailed beyond the...

CVE-2026-83932

A heap-based buffer overflow exists in Windows Group Policy , which could allow an authorized attacker to achieve local privilege escalation . The vulnerability is categorized as High severity (CVSS 3.1 score of 7.8) due to its potential impact on confidentiality, integrity, and availability. No ...

CVE-2026-84014

A Heap-based buffer overflow exists in the Windows Device Association Service . This vulnerability allows an authorized attacker to achieve local privilege elevation . The issue is associated with CWE-122 (Heap-based Buffer Overflow) and CWE-362 (Race Condition). No specific exploit links or deta...

CVE-2026-83922

A Use after free vulnerability exists in Windows Direct Composition . This flaw allows an authorized attacker to achieve local privilege escalation . No specific software versions, exploit details, or remediation steps are provided in the documents.

CVE-2026-83920

A heap-based buffer overflow exists in the Microsoft Windows Search Component . This vulnerability allows an authorized attacker to achieve local privilege escalation . No specific versions, exploit details, or remediation steps are provided in the documents beyond the existence of an official fix.

CVE-2026-83921

A heap-based buffer overflow exists in the Microsoft Windows Search Component (Windows Search Service). This vulnerability allows an authorized attacker to achieve local privilege escalation . While the technical root cause is identified as a heap-based buffer overflow, specific exploit details o...

CVE-2026-83911

A heap-based buffer overflow exists in Windows Storage which can be leveraged by an authorized attacker to achieve local privilege elevation . The vulnerability is classified as High severity with a CVSS 3.1 score of 7.0. No specific exploit details or in-the-wild exploitation information are pro...

CVE-2026-83586

The Windows Resilient File System (ReFS) Deduplication Service is vulnerable to weak authentication (CWE-1390), which allows an authorized attacker to perform a local privilege elevation . The impact includes high risks to confidentiality, integrity, and availability. An official fix is available...

CVE-2026-70299

The Windows Bind Filter Driver contains an improper access control vulnerability (CWE-863) that allows an authorized attacker to perform a local privilege escalation . The vulnerability has a High base severity score of 8.8. No specific exploit code or details regarding the underlying root cause ...

CVE-2026-70286

A heap-based buffer overflow exists in the Windows Win32K - GRFX component. This vulnerability allows an authorized attacker to achieve local privilege elevation . No specific exploit details or in-the-wild exploitation instances are provided in the documents. Remediation is indicated as an offic...

CVE-2026-83879

A race condition vulnerability exists in the Windows Overlay Filter due to concurrent execution using a shared resource with improper synchronization. This flaw allows an authorized attacker to achieve local privilege elevation . The CVSS 3.1 base score is 7.0 (HIGH) , with impacts noted across c...

CVE-2026-83901

A Use after free vulnerability exists in the Windows Win32 Kernel Subsystem . This flaw allows an authorized attacker to achieve local privilege escalation . The CVSS 3.1 score of 7.0 (High) reflects high impact on confidentiality, integrity, and availability. No specific exploit code or direct l...