CVE-2026-96312

A heap-based buffer overflow exists in the Windows Kernel that enables an authorized attacker to perform a local privilege escalation . The vulnerability is categorized under CWE-122 . While the specific component or function is not detailed in the provided documents, the impact involves a high s...

CVE-2026-96848

A buffer over-read vulnerability exists in the Windows Win32 Kernel Subsystem . This flaw allows an authorized attacker to perform a local information disclosure , potentially exposing sensitive data. While the CVSS v3.1 score is 5.5 (Medium) , the vulnerability has a high confidentiality impact....

CVE-2026-96849

A use of uninitialized resource vulnerability in Windows Kernel-Mode Drivers allows an authorized attacker to perform a local information disclosure . The vulnerability is associated with CWE-904 . No specific software versions, root cause details, or exploit links are provided in the documentati...

CVE-2026-96317

A use after free vulnerability exists in the Windows Kernel . This flaw allows an authorized attacker to perform a local privilege escalation . While the impact includes high levels of confidentiality, integrity, and availability, the documents do not provide specific details regarding the vulner...

CVE-2026-96247

A vulnerability exists in Windows Kernel-Mode Drivers due to the use of uninitialized resources (CWE-908). This flaw allows an authorized attacker to perform a local information disclosure . No specific versions or detailed remediation steps are provided in the documents beyond the existence of a...

CVE-2026-96216

A Use after free vulnerability exists in the Windows Kernel (associated with CWE-416 and CWE-822 ). This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is rated with a High base severity (CVSS 3.1 score of 7.0). No specific exploit details or in-the-wi...

CVE-2026-88073

A Use after free vulnerability exists in the Windows Graphics Kernel . This flaw allows an authorized attacker to achieve local privilege elevation . While the specific root cause component is not detailed beyond the kernel level, the impact includes high levels of confidentiality, integrity, and...

CVE-2026-85939

A weak authentication vulnerability in the Windows Kernel allows an authorized attacker to bypass a security feature over a network. The vulnerability is associated with CWE-1390 and carries a Medium severity rating. While the impact is noted as High for integrity , the documents do not provide s...

CVE-2026-85945

A Use after free vulnerability exists in the Windows Kernel . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability has a HIGH severity rating with a CVSS 3.1 score of 7.8. No specific component, file, or exploit code details are provided in the document...

CVE-2026-70303

A vulnerability in the Windows Kernel involves an out-of-bounds write (CWE-787). This flaw allows an authorized attacker to achieve local privilege escalation . While the specific component or file is not identified in the provided documents, the impact includes high severity for confidentiality,...

CVE-2026-70170

A vulnerability exists in the Windows Kernel due to an untrusted pointer dereference . This flaw allows an authorized attacker to cause a denial of service (DoS) over a network. No specific exploitation details or patch versions are provided in the documents.

CVE-2026-85871

A heap-based buffer overflow exists in Windows Kernel-Mode Drivers , which may allow an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-122 . No specific exploited versions, specific impacted files, or exploit links are provided in the documents...

CVE-2026-85858

An out-of-bounds read vulnerability exists within the Windows Win32 Kernel Subsystem . This flaw allows an authorized attacker to achieve local privilege escalation . While the specific root cause is not detailed, the impact includes unauthorized access to elevated permissions. Remediation is ava...

CVE-2026-85857

A vulnerability in Windows Kernel-Mode Drivers allows an authorized attacker to perform a local information disclosure . The issue is caused by the insertion of sensitive information into a log file (CWE-532). The impact is characterized as a high level of confidentiality loss for local users. Re...

CVE-2026-85836

A Use after free vulnerability exists in the Windows Kernel , which could allow an authorized attacker to achieve local privilege escalation . The vulnerability is classified with a CVSS 3.1 base score of 7.8 (High) . No specific exploit details or in-the-wild exploitation information are provide...

CVE-2026-85837

A vulnerability exists in the Windows Kernel due to an out-of-bounds read (CWE-125). This flaw allows an authorized attacker to perform a local privilege escalation . While the severity is classified as High , specific details regarding the affected component, root cause, or exploit availability ...

CVE-2026-85850

The Windows Kernel is susceptible to a vulnerability involving the release of an invalid pointer or reference . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-763 . No specific exploit details or proof-of-concept code are pr...

CVE-2026-85804

A Use after free vulnerability exists in the Windows Win32 Kernel Subsystem . This flaw allows an authorized attacker to achieve local privilege escalation . No specific affected versions, root cause details, or exploit links are provided in the documentation. Remediation is indicated as an OFFIC...

CVE-2026-85802

A Use after free vulnerability exists in the Windows Win32 Kernel Subsystem . This flaw allows an authorized attacker to perform a local elevation of privilege . The severity is rated as HIGH with a CVSS 3.1 score of 7.0. While the vulnerability is confirmed, specific exploit information or links...

CVE-2026-85372

A Use after free vulnerability exists in the Windows Kernel . This flaw allows an authorized attacker to perform a local privilege escalation . The vulnerability is confirmed and has an associated OFFICIAL_FIX ; however, specific affected versions and detailed exploit information are not provided...