Microsoft Windows: CVE-2026-87693: Windows Installer Elevation of Privilege Vulnerability

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-87691: Windows Management Services Elevation of Privilege Vulnerability

Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83659: Windows User Profile Service Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in Windows User Profile Service allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85933: Windows Print Spooler Components Elevation of Privilege Vulnerability

Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85920: Windows BitLocker Elevation of Privilege Vulnerability

Time-of-check time-of-use toctou race condition in Windows BitLocker allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85916: Azure Active Directory Information Disclosure Vulnerability

Exposure of private personal information to an unauthorized actor in Azure Active Directory allows an unauthorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-85915: Windows PCI Bus Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows PCI Bus Driver allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85918: Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability

Use after free in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85945: Windows Kernel Elevation of Privilege Vulnerability

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85943: Reliable Multicast Transport Driver (RMCAST) Elevation of Privilege Vulnerability

Time-of-check time-of-use toctou race condition in Reliable Multicast Transport Driver RMCAST allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85941: Windows Installer Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Installer allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-88146: Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Background Intelligent Transfer Service BITS allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85934: Windows AppX Deployment Service Elevation of Privilege Vulnerability

Use after free in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-87700: Windows Installer Elevation of Privilege Vulnerability

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-87702: Windows Resource Management (MRM) Elevation of Privilege Vulnerability

Integer overflow or wraparound in Windows Resource Management MRM allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-87698: Windows Remote Access Service Infrastructure Information Disclosure Vulnerability

Out-of-bounds read in Windows Remote Access Service Infrastructure allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-87699: Winlogon Elevation of Privilege Vulnerability

Heap-based buffer overflow in Winlogon allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-97800: Windows Mobile Broadband Elevation of Privilege Vulnerability

Incorrect permission assignment for critical resource in Windows Mobile Broadband allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-97812: Windows Update Orchestrator Service Elevation of Privilege Vulnerability

Double free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-97809: Windows Broadcast DVR User Service Elevation of Privilege Vulnerability

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally...