CVE-2026-88096

A race condition vulnerability exists in the Windows DCOM Server due to concurrent execution using a shared resource with improper synchronization. This flaw allows an authorized attacker to achieve local privilege elevation . No specific details regarding affected versions or exploit availabilit...

CVE-2026-85865

The Windows DHCP Server is susceptible to an improper authentication vulnerability, which allows an authorized attacker to bypass a security feature locally. The vulnerability is associated with CWE-288 (Authentication Bypass Using an Alternate Path or Channel). Exploitation details are not provi...

CVE-2026-85811

A Use after free vulnerability exists in Network Policy Server (NPS) , which could allow an unauthorized attacker to execute code over an adjacent network. The vulnerability is classified as having a High severity base score of 7.5. No specific versions, affected components, or remediation steps ...

CVE-2026-85806

A critical integer underflow (wrap or wraparound) vulnerability exists in the Network Policy Server (NPS) . This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is rated as CRITICAL with a CVSS 3.1 score of 9.80 . While the documents confirm...

CVE-2026-85810

A Use after free vulnerability in the Windows Telephony Server allows an authorized attacker to achieve local privilege elevation . The vulnerability is categorized under CWE-416 . While the CVSS 3.1 score indicates a High severity (7.0) with local access and low privileges required, specific tec...

CVE-2026-85799

A Use after free vulnerability exists in the Network Policy Server (NPS) . This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is confirmed with a CVSS 3.1 base score of 8.1 (High) , indicating significant potential impact on confidentialit...

CVE-2026-85803

A Use after free vulnerability exists in the Windows Camera Frame Server Monitor . This flaw allows an authorized attacker to achieve local privilege escalation . No specific version numbers, root cause details, or exploit links are provided in the documents; however, an official fix is noted as ...

CVE-2026-85371

A Use after free vulnerability exists in Network Policy Server (NPS) , which could allow an unauthorized attacker to execute code over a network . The vulnerability is associated with CWE-416 and has a CVSS 3.1 base score of 8.1 . No specific affected versions, root causes, or exploit links are p...

CVE-2026-84013

A use after free vulnerability exists in the Windows Telephony Server component. This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is confirmed with a CVSS 3.1 base score of 7.8. No specific exploit links or detailed remediation steps are provided i...

CVE-2026-85841

A use after free vulnerability in the Windows DHCP Server allows an authorized attacker to execute arbitrary code over a network. The vulnerability impacts the server's ability to handle DHCP requests securely, potentially leading to high levels of confidentiality, integrity, and availability imp...

CVE-2026-83869

A critical integer underflow (wrap or wraparound) vulnerability in the Windows Domain Name Service (DNS) Server allows an unauthorized attacker to achieve remote code execution over a network. This vulnerability, identified as CVE-2026-83869 , carries a CVSS v3.1 score of 9.8 , indicating a high ...

CVE-2026-83787

The Windows DHCP Server is affected by a vulnerability involving insufficient verification of data authenticity . This flaw allows an authorized attacker to perform a local security feature bypass . The vulnerability is associated with CWE-288 (Authentication Bypass Using an Alternate Path or Cha...

CVE-2026-83753

A heap-based buffer overflow exists in the Windows Camera Frame Server Monitor . This vulnerability allows an authorized attacker to perform a local privilege escalation . No specific exploitation details or direct links to exploit code are provided in the documents, though an official fix is ind...

CVE-2026-83722

A Use after free vulnerability exists in the Microsoft Local Security Authority Server (lsasrv) . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-416 (Use After Free) and CWE-362 (Race Condition). While the documentation con...

CVE-2026-83691

A heap-based buffer overflow exists in the Windows DHCP Server component. This vulnerability allows an authorized attacker to perform a local privilege escalation . While the specific root cause or affected version numbers are not detailed in the provided documents, the vulnerability carries a Hi...

CVE-2026-83655

The Network Policy Server (NPS) is affected by an out-of-bounds read vulnerability (CWE-125). This flaw allows an unauthorized attacker to cause a denial of service (DoS) over a network. The vulnerability has a High severity rating with a CVSS 3.1 score of 7.5 . No specific exploit details or inf...

CVE-2026-83642

A type confusion vulnerability exists in the Windows Domain Name Service (DNS Server). This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is categorized under CWE-843 . No specific exploit information or remediation steps are provided in t...

CVE-2026-83499

The Windows Server Update Service is impacted by an insufficient granularity of access control vulnerability (CWE-1220). This flaw allows an authorized attacker to achieve local privilege escalation . While the technical root cause is not further detailed in the provided documents, the vulnerabil...

CVE-2026-83635

A vulnerability exists in the DNS Server caused by an out-of-bounds read (CWE-125). This flaw allows an unauthorized attacker to perform a denial of service (DoS) over the network. The vulnerability has a HIGH base severity score of 7.5 (CVSS 3.1). While specific affected versions or internal com...

CVE-2026-81969

The Windows Server Update Service is affected by a vulnerability involving insufficient granularity of access control . This flaw allows an authorized attacker to perform a local privilege escalation . The vulnerability is characterized by a HIGH base severity score of 7.8 and is associated with ...