CVE-2026-88101

Weak authentication in Microsoft Input Method Editor IME allows an authorized attacker to elevate privileges locally...

CVE-2026-85939

Weak authentication in Windows Kernel allows an authorized attacker to bypass a security feature over a network...

CVE-2026-85922

Weak authentication in Azure Key Vault allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-85376

Weak authentication in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally...

CVE-2026-85323

Weak authentication in Network Device Enrollment Service NDES allows an authorized attacker to perform spoofing over a network...

CVE-2026-83840

Weak authentication in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

CVE-2026-83681

Weak authentication in Microsoft PowerToys allows an authorized attacker to perform tampering locally...

CVE-2026-83674

Weak authentication in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-69802

Weak authentication in Network Device Enrollment Service NDES allows an unauthorized attacker to execute code over a network...

CVE-2026-69802

The Network Device Enrollment Service (NDES) is impacted by a weak authentication vulnerability (CWE-1390). This flaw allows an unauthorized attacker to achieve remote code execution over the network. The vulnerability carries a HIGH base severity score of 8.1. While the documents confirm the imp...

EUVD-2026-100160

Weak authentication in Network Device Enrollment Service NDES allows an unauthorized attacker to execute code over a network...

CVE-2026-85922

A weak authentication vulnerability in Azure Key Vault allows an unauthorized attacker to bypass a security feature over a network. This security control bypass has a CVSS v3.1 score of 7.4 and is categorized as HIGH severity. Microsoft has released updates to address this vulnerability; users ar...

CVE-2026-83840

A weak authentication vulnerability in Windows Error Reporting allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-1390 . While the CVSS v3.1 score is 7.8 (High) , the documents do not provide specific software versions, root cause detail...

CVE-2026-85939

A weak authentication vulnerability in the Windows Kernel allows an authorized attacker to bypass a security feature over a network. The vulnerability is associated with CWE-1390 and carries a Medium severity rating. While the impact is noted as High for integrity , the documents do not provide s...

CVE-2026-83674

A weak authentication vulnerability exists in Active Directory Federation Services (AD FS) , which may allow an unauthorized attacker to perform spoofing over a network. The vulnerability is classified with a HIGH severity base score of 8.1. No specific component-level details, exploit links, or ...

CVE-2026-88101

A weak authentication vulnerability in the Microsoft Input Method Editor (IME) allows an authorized attacker to perform a local elevation of privilege . The vulnerability is associated with CWE-1390 . While the base severity is rated as HIGH (7.8), the documents do not provide specific details re...

CVE-2026-85376

CVE-2026-85376 involves weak authentication within the Windows Print Spooler Components . This vulnerability allows an authorized attacker to perform a local privilege escalation . The CVSS 3.1 score is 7.8 (High) , indicating significant impact on confidentiality, integrity, and availability. No...

CVE-2026-85328

A weak authentication vulnerability exists in the Windows Projected File System . This flaw allows an authorized attacker to perform a local privilege elevation . No specific software versions, root causes, or remediation steps are provided in the documents beyond the existence of an official fix...

CVE-2026-85323

Weak authentication in the Network Device Enrollment Service (NDES) allows an authorized attacker to perform spoofing over a network. The vulnerability is associated with CWE-1390 (Weak Authentication). No specific software versions, root causes, or exploit links are provided in the documents, bu...

CVE-2026-83586

The Windows Resilient File System (ReFS) Deduplication Service is vulnerable to weak authentication (CWE-1390), which allows an authorized attacker to perform a local privilege elevation . The impact includes high risks to confidentiality, integrity, and availability. An official fix is available...