Microsoft Windows: CVE-2026-85830: Windows Installer Information Disclosure Vulnerability

Out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-96860: Windows USB Print Driver Information Disclosure Vulnerability

Out-of-bounds read in Windows USB Print Driver allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-85833: Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability

Use after free in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-70085: Role: DNS Server Tampering Vulnerability

Missing authorization in DNS Server allows an authorized attacker to perform tampering locally...

Microsoft Windows: CVE-2026-88101: Microsoft Input Method Editor (IME) Elevation of Privilege Vulnerability

Weak authentication in Microsoft Input Method Editor IME allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-70148: Windows Broadcast DVR User Service Information Disclosure Vulnerability

Improper authorization in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-70222: Windows Shell Elevation of Privilege Vulnerability

Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-70284: Win32k Information Disclosure Vulnerability

Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-88158: Microsoft Digest Authentication Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Digest Authentication allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-83722: Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability

Use after free in Microsoft Local Security Authority Server lsasrv allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85826: Windows Fast FAT Driver Elevation of Privilege Vulnerability

Out-of-bounds write in Windows Fast FAT Driver allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-69718: Windows Update Elevation of Privilege Vulnerability

Improper neutralization of special elements used in a command 'command injection' in Windows Update allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-49785: UEFI Secure Boot Security Feature Bypass Vulnerability

Improper resource shutdown or release in Windows UEFI allows an authorized attacker to bypass a security feature locally...

Microsoft Windows: CVE-2026-97793: Windows Setup and Deployment Elevation of Privilege Vulnerability

Missing authentication for critical function in Windows Setup and Deployment allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-96851: Windows Management Instrumentation Information Disclosure Vulnerability

Buffer over-read in Windows Management Instrumentation allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-96315: Windows Overlay Filter Tampering Vulnerability

Missing authorization in Windows Overlay Filter allows an authorized attacker to perform tampering locally...

Microsoft Windows: CVE-2026-85365: Servicing Stack Updates Elevation of Privilege Vulnerability

Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85864: Python Elevation of Privilege Vulnerability

Improper privilege management in Python allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-96316: Windows Routing and Remote Access Service (RRAS) Tampering Vulnerability

Improper access control in Windows Routing and Remote Access Service RRAS allows an authorized attacker to perform tampering locally...

Microsoft Windows: CVE-2026-96917: Windows PCI Bus Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows PCI Bus Driver allows an authorized attacker to elevate privileges locally...