CVE-2026-83564

A Use after free vulnerability exists in the Microsoft Windows Search Component . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-416 and has a base CVSS 3.1 score of 7.0. No specific exploit details or in-the-wild exploitat...

CVE-2026-83517

A heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to achieve remote code execution over a network. This vulnerability is rated as CRITICAL with a CVSS score of 9.80 , as it enables an attacker to execute arbitrary code without prior authentication ...

CVE-2026-70258

A heap-based buffer overflow exists in Microsoft Windows Media Foundation , which could allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability is associated with CWE-122 (Heap-based Buffer Overflow) and CWE-190 (Integer Overflow or Wraparound). No specif...

CVE-2026-70044

An out-of-bounds read vulnerability exists in Microsoft Windows Media Foundation . This flaw allows an unauthorized attacker to disclose information locally on an affected system. While the specific component or root cause is not detailed beyond the out-of-bounds read, the vulnerability has a MED...

CVE-2026-70131

A heap-based buffer overflow exists in Microsoft Windows Media Foundation . This vulnerability allows an unauthorized attacker to achieve local privilege elevation . While the specific component or file causing the overflow is not detailed in the provided documents, the impact is categorized as H...

CVE-2026-88160

A race condition vulnerability exists in the Microsoft Windows Search Component due to concurrent execution using a shared resource with improper synchronization. This flaw allows an authorized attacker to achieve local privilege elevation . Remediation is available via an official fix provided b...

CVE-2026-85869

A Heap-based buffer overflow vulnerability exists in the Microsoft Windows Search Component . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability impacts the confidentiality, integrity, and availability of the affected system. A formal remediation is ...

CVE-2026-85814

A heap-based buffer overflow exists in Microsoft Windows Media Foundation , which could allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a CVSS v3.1 score of 9.8 (CRITICAL), indicating a high impact on confidentiality, integrity, and availabili...

CVE-2026-83920

A heap-based buffer overflow exists in the Microsoft Windows Search Component . This vulnerability allows an authorized attacker to achieve local privilege escalation . No specific versions, exploit details, or remediation steps are provided in the documents beyond the existence of an official fix.

CVE-2026-83921

A heap-based buffer overflow exists in the Microsoft Windows Search Component (Windows Search Service). This vulnerability allows an authorized attacker to achieve local privilege escalation . While the technical root cause is identified as a heap-based buffer overflow, specific exploit details o...

CVE-2026-70086

A use after free vulnerability exists in the Microsoft Windows Search Component . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is confirmed with a CVSS 3.1 base score of 7.0 . Remediation is available via an official fix provided by Microsoft.

CVE-2026-83704

The Microsoft Windows Search Component is vulnerable to an elevation of privilege vulnerability due to improper link resolution before file access (link following). An authorized attacker can exploit this flaw to elevate privileges locally. While the documents confirm the vulnerability and its im...

CVE-2026-83575

A use after free vulnerability exists in the Microsoft Windows Search Component . This flaw allows an authorized attacker to achieve local privilege escalation . No specific exploit details or in-the-wild exploitation information are provided in the documents. Remediation is available via an offi...

CVE-2026-70278

A Heap-based buffer overflow exists in Microsoft Windows Media Foundation . This vulnerability allows an authorized attacker to achieve local privilege escalation . While the specific component or function is not detailed in the provided documents, the impact is categorized as high for confidenti...

CVE-2026-70150

A Use after free vulnerability in the Microsoft Windows Search Component allows an authorized attacker to achieve local privilege escalation . This vulnerability is tracked as CVE-2026-70150 and has a CVSS 3.1 base score of 7.0. Specific details regarding the internal root cause or affected versi...

CVE-2026-70177

A numeric truncation error within the Microsoft Windows Search Component allows an authorized attacker to achieve local privilege escalation . The vulnerability is caused by improper input validation (CWE-20) and numeric truncation (CWE-197). While the specific affected versions are not detailed ...

CVE-2026-70156

A Use after free vulnerability exists in the Microsoft Windows Search Component . This flaw allows an authorized attacker to achieve local privilege escalation . While the underlying technical root cause is not detailed in the provided documents, the vulnerability has a CVSS 3.1 score of 7.0 (Hig...

CVE-2026-70173

The Microsoft Windows Search Component contains an out-of-bounds read vulnerability. This flaw allows an authorized attacker to perform a local information disclosure , potentially accessing data they are not normally permitted to view. While the vulnerability is confirmed with a CVSS 3.1 base sc...

CVE-2026-70115

A Use after free vulnerability exists in the Microsoft Windows Search Component . This flaw allows an authorized attacker to perform a local privilege escalation . No specific exploit details or patch versions are provided in the documents.

CVE-2026-70136

A Use after free vulnerability exists in the Microsoft Windows Search Component . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability's CVSS 3.1 score is 7.0 (High) , with an attack complexity rated as high and requiring low privileges for exploitatio...