CVE-2026-85931

A heap-based buffer overflow in the Windows Distributed File System (DFS) allows an authorized attacker to achieve remote code execution over a network. The vulnerability impacts the Windows environment and carries a high severity score of 8.8. No specific exploit links or manual workarounds are ...

CVE-2026-85928

A heap-based buffer overflow exists in the Windows Volume Manager Extension Driver , which may allow an unauthorized attacker to execute arbitrary code over a network. This vulnerability is rated as CRITICAL with a CVSS 3.1 score of 9.80 . No specific exploit details or remediation instructions a...

CVE-2026-85867

A heap-based buffer overflow exists in the Windows Remote Access Connection Manager . This vulnerability allows an authorized attacker to achieve local privilege elevation . No specific exploit details or remediation versions are provided in the documentation.

CVE-2026-70262

A heap-based buffer overflow vulnerability exists in WebDAV , which could allow an unauthorized attacker to elevate privileges over a network. The provided documents do not specify the exact affected software version, specific component, or root cause. Exploitation details and specific remediatio...

CVE-2026-70210

A heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to achieve elevation of privilege over a network. The vulnerability (CWE-122, CWE-125) has a CVSS 3.1 base score of 8.8 . Exploitation details are not provided in the documents. Remediation via an official fix is indic...

CVE-2026-70238

A heap-based buffer overflow exists in the Windows Storage Spaces Controller . This vulnerability allows an authorized attacker to achieve local privilege elevation . No specific version numbers, underlying code files, or remediation steps are provided in the documents. Exploitation details are n...

CVE-2026-70052

An integer overflow or wraparound vulnerability exists in Windows PowerShell . This flaw allows an authorized attacker to achieve local code execution . While the technical root cause is identified as an integer overflow or wraparound, specific affected versions or files are not detailed in the p...

CVE-2026-70048

A heap-based buffer overflow exists in the Windows Resilient File System (ReFS) . This vulnerability allows an authorized attacker to achieve local privilege elevation . The technical root cause is a memory management issue within the ReFS component. Information regarding specific affected versio...

CVE-2026-69934

A vulnerability in Windows Spaceport.sys involves an integer overflow or wraparound (CWE-190) combined with improper input validation (CWE-20). This flaw enables an authorized attacker to achieve local privilege escalation . The impact is categorized as high for confidentiality, integrity, and av...

CVE-2026-69916

A vulnerability in Windows NTFS caused by an integer overflow or wraparound allows an authorized attacker to achieve local privilege elevation . No specific affected versions, root cause details, or remediation steps are provided in the documents. Exploitation details are not provided.

CVE-2026-88168

A heap-based buffer overflow exists in the Windows Bind Filter Driver . This vulnerability enables an authorized attacker to achieve local privilege elevation . While the technical root cause is identified as a heap overflow, specific details regarding the vulnerable function or file are not prov...

CVE-2026-85927

A heap-based buffer overflow exists in the Windows Universal Plug and Play (UPnP) Device Host . This vulnerability allows an authorized attacker to achieve local privilege escalation . While the documents confirm the existence of the flaw and its impact on local security, specific details regardi...

CVE-2026-87711

A stack-based buffer overflow in Windows Installer allows an authorized attacker to achieve local privilege escalation . The vulnerability enables an attacker with local access to elevate their privileges on the affected system. No specific exploit information or exploit links are provided in the...

CVE-2026-88157

A heap-based buffer overflow exists in OpenSSH for Windows , which may allow an unauthorized attacker to execute code over a network . The vulnerability is confirmed and carries a High base severity score of 8.8. While the specific component or file is not detailed in the provided documents, the ...

CVE-2026-85871

A heap-based buffer overflow exists in Windows Kernel-Mode Drivers , which may allow an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-122 . No specific exploited versions, specific impacted files, or exploit links are provided in the documents...

CVE-2026-85870

A heap-based buffer overflow exists in the Windows Common Log File System Driver . This vulnerability allows an authorized attacker to achieve local privilege elevation . No specific exploit details or in-the-wild exploitation information are provided in the documents. Remediation is indicated as...

CVE-2026-85915

A heap-based buffer overflow exists in the Windows PCI Bus Driver . This vulnerability allows an authorized attacker to achieve local privilege elevation . No specific exploit details or in-the-wild exploitation information are provided in the documents. Remediation is listed as an official fix v...

CVE-2026-85869

A Heap-based buffer overflow vulnerability exists in the Microsoft Windows Search Component . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability impacts the confidentiality, integrity, and availability of the affected system. A formal remediation is ...

CVE-2026-85881

A stack-based buffer overflow exists in the Microsoft Graphics Component , which may be leveraged by an authorized attacker to elevate privileges over a network. The vulnerability is associated with Microsoft Office Graphics. Remediation is available through official fixes provided by Microsoft.

CVE-2026-85856

A heap-based buffer overflow vulnerability exists in Windows Internet Connection Sharing (ICS) . This flaw allows an authorized attacker to achieve remote code execution over an adjacent network . The vulnerability has a CVSS 3.1 base score of 7.1 (High) , with impacts on confidentiality, integri...