Microsoft Windows: CVE-2026-85791: Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Encrypting File System EFS allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85825: Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

Use after free in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85848: Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Background Intelligent Transfer Service BITS allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85868: Windows Common Log File System Driver Elevation of Privilege Vulnerability

Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85870: Windows Common Log File System Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85874: Windows Message Queuing Queue Manager Remote Code Execution Vulnerability

Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to execute code locally...

Microsoft Windows: CVE-2026-85901: Windows Graphics Component Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-88070: Windows BitLocker Elevation of Privilege Vulnerability

Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-88079: Windows MIDI Service Module Elevation of Privileges Vulnerability

Null pointer dereference in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-88103: Windows Broadcast DVR User Service Elevation of Privilege Vulnerability

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-88146: Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Background Intelligent Transfer Service BITS allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-88182: Microsoft Windows Search Component Elevation of Privilege Vulnerability

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-96216: Windows Kernel Elevation of Privilege Vulnerability

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-96218: Windows Update Stack Tampering Vulnerability

Improper access control in Windows Update Stack allows an authorized attacker to perform tampering locally...

Microsoft Windows: CVE-2026-96848: Windows Win32 Kernel Subsystem Information Disclosure Vulnerability

Buffer over-read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-96854: Windows Device Association Service Information Disclosure Vulnerability

Access of resource using incompatible type 'type confusion' in Windows Device Association Service allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-96914: Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability

Integer overflow or wraparound in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-96919: Windows Broadcast DVR User Service Elevation of Privilege Vulnerability

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-96926: Role: DNS Server Tampering Vulnerability

Missing authorization in DNS Server allows an authorized attacker to perform tampering locally...

Microsoft Windows: CVE-2026-96939: Servicing Stack Updates Elevation of Privilege Vulnerability

Time-of-check time-of-use toctou race condition in Servicing Stack Updates allows an authorized attacker to elevate privileges locally...