CVE-2026-88193

A heap-based buffer overflow exists in the Microsoft Scripting Engine , which can be exploited by an authorized attacker to achieve local privilege elevation . The vulnerability is confirmed with a CVSS 3.1 base score of 7.8, indicating a High severity impact on confidentiality, integrity, and av...

CVE-2026-88128

A heap-based buffer overflow exists in the Windows DWM Core Library . This vulnerability allows an authorized attacker to achieve local privilege elevation . The CVSS 3.1 score is 7.8 (High), with an official fix available. No specific exploit details or in-the-wild exploitation information are p...

CVE-2026-88118

An integer overflow or wraparound vulnerability exists in the Windows Background Intelligent Transfer Service (BITS) . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-190 (Integer Overflow or Wraparound) and CWE-122 (Heap-bas...

CVE-2026-88147

A heap-based buffer overflow exists in the Windows Secure Socket Tunneling Protocol (SSTP) . This vulnerability allows an authorized attacker to perform a local privilege escalation . The impact includes high levels of confidentiality, integrity, and availability loss as reported in the CVSS metr...

CVE-2026-87702

A vulnerability in Windows Resource Management (MRM) involving an integer overflow or wraparound allows an authorized attacker to achieve local privilege elevation . The vulnerability is characterized by a high base severity score of 7.8. No specific patch versions, workarounds, or exploit detail...

CVE-2026-88110

A heap-based buffer overflow exists in the Windows Graphics Kernel . This vulnerability allows an authorized attacker to achieve local privilege elevation . No specific versions, root causes, or remediation details are provided in the documents. Exploitation details are not present.

CVE-2026-87699

A heap-based buffer overflow exists in Winlogon , which allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-122 . Official remediation is available via Microsoft updates.

CVE-2026-83934

A stack-based buffer overflow vulnerability exists in Windows GDI+ , which could allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability is rated as HIGH severity with a CVSS 3.1 score of 8.8, as it could impact confidentiality, integrity, and availabilit...

CVE-2026-83931

A heap-based buffer overflow vulnerability exists in Windows Hyper-V . This flaw allows an authorized attacker to achieve local code execution . The vulnerability has a high severity rating and the official remediation is provided via Microsoft updates.

CVE-2026-69789

A heap-based buffer overflow exists in the Reliable Multicast Transport Driver (RMCAST) . This vulnerability allows an unauthorized attacker to achieve remote code execution over an adjacent network. The vulnerability is classified with a HIGH base severity score (7.5) and requires high attack co...

EUVD-2026-100061

Stack-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network...

EUVD-2026-100065

Heap-based buffer overflow in Reliable Multicast Transport Driver RMCAST allows an unauthorized attacker to execute code over an adjacent network...

CVE-2026-83935

A heap-based buffer overflow vulnerability exists in Microsoft XML , which allows an unauthorized attacker to achieve remote code execution over a network. This vulnerability is categorized as CRITICAL with a CVSSv3.1 score of 9.8 . The NCSC confirms that this flaw allows malicious actors to exec...

CVE-2026-85908

A heap-based buffer overflow exists in the Windows Win32K - GRFX component. This vulnerability allows an authorized attacker to perform a local privilege escalation . The issue is associated with CWE-122 (Heap-based Buffer Overflow) and CWE-190 (Integer Overflow or Wraparound). While the severity...

CVE-2026-83918

An integer overflow or wraparound vulnerability exists in the Windows Kernel . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is assigned a High base severity score of 7.8. No specific exploit information or remediation details are provided in th...

CVE-2026-85901

A heap-based buffer overflow vulnerability exists in the Windows Win32K - GRFX component. This flaw allows an authorized attacker to perform a local privilege escalation . The severity is rated as HIGH with a CVSS score of 7.8. Documentation does not provide specific exploit links or detailed rem...

CVE-2026-85902

A heap-based buffer overflow exists in Windows Direct Composition that allows an authorized attacker to achieve local privilege escalation . The vulnerability is categorized under CWE-122 and has a CVSS 3.1 base score of 7.8 (High). No specific exploit information or in-the-wild exploitation deta...

CVE-2026-85905

A heap-based buffer overflow exists in the Windows UI Immersive Server . This vulnerability allows an authorized attacker to achieve local privilege escalation . The impact includes high levels of risk to confidentiality, integrity, and availability. Remediation is available through an official f...

CVE-2026-83903

A heap-based buffer overflow exists in Windows Direct Composition . This vulnerability allows an authorized attacker to perform a local privilege escalation . While the technical root cause is identified as a heap overflow, specific affected versions or patch details are not provided in the docum...

CVE-2026-83895

A heap-based buffer overflow exists in the Windows Win32 Kernel Subsystem . This vulnerability allows an unauthorized attacker to elevate privileges through a physical attack . No specific exploit information or remediation steps are provided in the documents.