Microsoft Windows: CVE-2026-85904: Windows Device Association Service Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Device Association Service allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85901: Windows Graphics Component Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83848: Windows COM+ Event System Service Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83832: Windows Spaceport.sys Elevation of Privilege Vulnerability

Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83794: Windows Portable Device MTP Driver Information Disclosure Vulnerability

Out-of-bounds read in Windows Portable Device MTP Driver allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-83791: Windows Virtual Input Elevation of Privilege Vulnerability

Improper authorization in Windows Virtual Input allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83786: Windows NTFS Information Disclosure Vulnerability

Generation of error message containing sensitive information in Windows NTFS allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-83774: Windows Win32 Kernel Subsystem Information Disclosure Vulnerability

Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-83849: Windows Hello Information Disclosure Vulnerability

Out-of-bounds read in Windows Hello allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-83837: Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability

Improper access control in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83792: Windows Device Install Service Elevation of Privilege Vulnerability

Incorrect authorization in Windows Device Install Service allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83790: Windows Hello Elevation of Privilege Vulnerability

Use after free in Windows Hello allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83764: Windows Clipboard User Service Information Disclosure Vulnerability

Incorrect authorization in Windows Clipboard User Service allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-83741: Internet Explorer Elevation of Privilege Vulnerability

Use after free in Internet Explorer allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83737: Windows NTFS Information Disclosure Vulnerability

Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-83733: Windows Print Spooler Components Information Disclosure Vulnerability

Out-of-bounds read in Windows Print Spooler Components allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-83728: Windows Hyper-V Spoofing Vulnerability

Improper validation of syntactic correctness of input in Windows Hyper-V allows an authorized attacker to perform spoofing locally...

Microsoft Windows: CVE-2026-83722: Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability

Use after free in Microsoft Local Security Authority Server lsasrv allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83718: Windows Installer Elevation of Privilege Vulnerability

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83712: Windows NTFS Remote Code Execution Vulnerability

Out-of-bounds write in Windows NTFS allows an authorized attacker to execute code locally...