Microsoft Windows: CVE-2026-84009: Windows Projected File System Tampering Vulnerability

Time-of-check time-of-use toctou race condition in Windows Projected File System allows an authorized attacker to perform tampering locally...

Microsoft Windows: CVE-2026-83769: Microsoft OpenSSH for Windows Elevation of Privilege Vulnerability

Use after free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85320: Windows Print Spooler Components Information Disclosure Vulnerability

Use of uninitialized resource in Windows Print Spooler Components allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-70115: Microsoft Windows Search Component Elevation of Privilege Vulnerability

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-70118: Windows Audio Service Elevation of Privilege Vulnerability

Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-70135: Windows Remote POS Driver Information Disclosure Vulnerability

Out-of-bounds read in Windows Remote POS Driver allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-70141: Microsoft Windows Search Component Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-70173: Microsoft Windows Search Component Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-83926: Windows Hello Security Feature Bypass Vulnerability

Improper certificate validation in Windows Hello allows an authorized attacker to bypass a security feature locally...

Microsoft Windows: CVE-2026-83879: Windows Overlay Filter Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Overlay Filter allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83896: Windows Direct Composition Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83909: Windows Win32 Kernel Subsystem Information Disclosure Vulnerability

Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-83586: Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability

Weak authentication in Windows Resilient File System ReFS Deduplication Service allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83741: Internet Explorer Elevation of Privilege Vulnerability

Use after free in Internet Explorer allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83866: Windows Win32k Elevation of Privilege Vulnerability

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83867: Windows Push Notifications Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Push Notifications allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83893: Windows Clipboard User Service Information Disclosure Vulnerability

Exposure of sensitive system information to an unauthorized control sphere in Windows Clipboard User Service allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-83827: Windows Bluetooth Port Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Bluetooth Port Driver allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83828: Windows MIDI Service Module Elevation of Privileges Vulnerability

Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83839: Windows Hyper-V Elevation of Privilege Vulnerability

Time-of-check time-of-use toctou race condition in Windows Hyper-V allows an authorized attacker to elevate privileges locally...