CVE-2026-85846

Use after free in Windows Web Account Manager allows an authorized attacker to elevate privileges locally...

EUVD-2026-99550

Use after free in Windows Web Account Manager allows an authorized attacker to elevate privileges locally...

CVE-2026-85846

A Use after free vulnerability in the Windows Web Account Manager allows an authorized attacker to achieve local privilege escalation . The vulnerability has a CVSS 3.1 score of 7.0 (High) , indicating high impact on confidentiality, integrity, and availability. Official remediation is available ...

Web Account Manager Elevation of Privilege Vulnerability

Use after free in Windows Web Account Manager allows an authorized attacker to elevate privileges locally...

PT-2026-112807

Name of the Vulnerable Software and Affected Versions Windows Web Account Manager affected versions not specified Description A use after free issue in the Windows Web Account Manager allows an authorized attacker to elevate privileges locally. Use after free is a memory corruption flaw that occu...

CVE-2026-85846: Use After Free

Use after free in Windows Web Account Manager allows an authorized attacker to elevate privileges locally...

CVE-2026-69708: Use After Free

Use after free in Windows Web Platform Storage allows an authorized attacker to elevate privileges locally...

CVE-2026-49800

Integer overflow or wraparound in Windows Web Proxy Auto-Discovery Protocol WPAD allows an authorized attacker to elevate privileges locally...

CVE-2026-50480: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Web Proxy Auto-Discovery Protocol WPAD allows an authorized attacker to elevate privileges locally...

PT-2026-58172

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description An integer overflow or wraparound in the Web Proxy Auto-Discovery Protocol WPAD allows an authorized attacker to elevate privileges locally. Recommendations At the moment, there is no...

CVE-2026-49800: Integer Overflow or Wraparound

Integer overflow or wraparound in Windows Web Proxy Auto-Discovery Protocol WPAD allows an authorized attacker to elevate privileges locally...

EUVD-2026-35501

Integer overflow or wraparound in Windows HTTP.sys allows an unauthorized attacker to execute code over a network...

HTTP.sys Remote Code Execution Vulnerability

Integer overflow or wraparound in Windows HTTP.sys allows an unauthorized attacker to execute code over a network...

Windows Web Account Manager Disclosure

The vulnerability of the Windows operating system’s Web Account Manager is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow attackers to disclose confidential information...

CVE-2025-21343 Windows Web Threat Defense User Service Information Disclosure Vulnerability

...

CVE-2025-21343 Windows Web Threat Defense User Service Information Disclosure Vulnerability

...

PT-2025-4222 · Microsoft · Windows Web Threat Defense +1

Name of the Vulnerable Software and Affected Versions: Windows Web Threat Defense affected versions not specified Description: The issue allows attackers to obtain sensitive information and affect the system. It is related to information disclosure in the user service of Windows Web Threat Defens...

CVE-2025-21343: Improper Privilege Management

Windows Web Threat Defense User Service Information Disclosure Vulnerability...

Microsoft Windows security vulnerabilities

Microsoft Windows is a set of operating systems for personal devices from Microsoft Corporation USA.Microsoft Windows Web Account Manager is vulnerable to an information disclosure vulnerability that stems from inadequate protection of sensitive information on network systems or products, which...

WordPress Cost Calculator plugin path traversal vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A path traversal vulnerability exists in WordPress Cost Calculator plugin version 1.4 and earlier, which arise...