CVE-2026-88161

A Use after free vulnerability exists in the Windows Local Security Authority (LSA) . This flaw allows an authorized attacker to perform a local privilege escalation . The CVSS 3.1 score is 7.0 (High) , with an attack complexity of high and requirements for low-level privileges. Remediation is av...

CVE-2026-87708

A Use after free vulnerability in Windows Installer allows an authorized attacker to achieve local privilege escalation . The vulnerability is categorized under CWE-416 . The CVSS 3.1 base score is 7.0 (High) , indicating significant impact on confidentiality, integrity, and availability. An offi...

CVE-2026-85915

A heap-based buffer overflow exists in the Windows PCI Bus Driver . This vulnerability allows an authorized attacker to achieve local privilege elevation . No specific exploit details or in-the-wild exploitation information are provided in the documents. Remediation is listed as an official fix v...

CVE-2026-85864

A local privilege escalation vulnerability exists in Python due to improper privilege management . This flaw allows an authorized attacker to elevate their privileges on a local system. The vulnerability is associated with CWE-641 (Improper Restriction of Names for Files and Other Resources). Whi...

CVE-2026-85870

A heap-based buffer overflow exists in the Windows Common Log File System Driver . This vulnerability allows an authorized attacker to achieve local privilege elevation . No specific exploit details or in-the-wild exploitation information are provided in the documents. Remediation is indicated as...

CVE-2026-71347

A race condition vulnerability exists in the Windows Security Center due to concurrent execution using a shared resource with improper synchronization. This flaw allows an authorized attacker to achieve local privilege escalation . The impact includes high levels of confidentiality, integrity, an...

CVE-2026-85858

An out-of-bounds read vulnerability exists within the Windows Win32 Kernel Subsystem . This flaw allows an authorized attacker to achieve local privilege escalation . While the specific root cause is not detailed, the impact includes unauthorized access to elevated permissions. Remediation is ava...

CVE-2026-85853

An out-of-bounds read vulnerability exists in the Windows DWM Core Library . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability has been confirmed with a HIGH severity rating (CVSS 3.1 score of 7.0). While the technical root cause is identified as an ...

CVE-2026-85855

A Use after free vulnerability in the Windows DWM Core Library allows an authorized attacker to achieve local privilege elevation . The vulnerability is classified with a High base severity (7.0) and requires low privileges to exploit. No specific exploit code or in-the-wild exploitation details ...

CVE-2026-85863

A Use after free vulnerability exists in the Windows Clipboard User Service . This flaw allows an authorized attacker to achieve local privilege elevation . The impact includes high levels of confidentiality, integrity, and availability loss. Remediation is available via an official fix provided ...

CVE-2026-85850

The Windows Kernel is susceptible to a vulnerability involving the release of an invalid pointer or reference . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-763 . No specific exploit details or proof-of-concept code are pr...

CVE-2026-85833

A Use after free vulnerability in Windows Modern Device Management (MDM) allows an authorized attacker to achieve local privilege escalation . The vulnerability is assigned a CVSS 3.1 base score of 7.8 (High) . No specific component files, exploit links, or patch versions are provided in the docu...

CVE-2026-85836

A Use after free vulnerability exists in the Windows Kernel , which could allow an authorized attacker to achieve local privilege escalation . The vulnerability is classified with a CVSS 3.1 base score of 7.8 (High) . No specific exploit details or in-the-wild exploitation information are provide...

CVE-2026-85834

A heap-based buffer overflow exists in the Windows TCP/IP stack. This vulnerability allows an authorized attacker to perform a local privilege escalation . While the CVSS 3.1 score is 7.0, specific details regarding the exact function or file affected are not provided in the documents. Exploitati...

CVE-2026-85826

An out-of-bounds write vulnerability exists in the Windows Fast FAT Driver . This flaw allows an authorized attacker to achieve local privilege elevation . The official CVSS 3.1 score is 7.0 (High) , with a high impact on confidentiality, integrity, and availability. No specific exploit details o...

CVE-2026-85822

A heap-based buffer overflow vulnerability exists in the Windows exFAT File System . This flaw allows an authorized attacker to achieve local privilege escalation . The CVSS 3.1 base score is 7.8 (High) , reflecting high impact on confidentiality, integrity, and availability. Exploitation details...

CVE-2026-85832

A heap-based buffer overflow exists in the Windows Background Intelligent Transfer Service (BITS) . This vulnerability allows an authorized attacker to achieve local privilege elevation . While the CVSS score indicates high impact on confidentiality, integrity, and availability, specific details ...

CVE-2026-85828

A heap-based buffer overflow vulnerability exists in WebDAV , which could allow an authorized attacker to achieve local privilege escalation . The vulnerability is categorized under CWE-122 . While the specific affected versions and internal components are not detailed in the provided documents, ...

CVE-2026-85807

An integer overflow or wraparound vulnerability exists in the Windows USB Video Driver . This flaw allows an authorized attacker to achieve local privilege escalation . No specific exploit details or exploit links are provided in the documents. Remediation information is indicated as an official ...

CVE-2026-85800

A Heap-based buffer overflow exists in Windows Error Reporting that allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-122 . No specific exploit details or direct links to in-the-wild exploitation are provided in the documentation. Remed...