CVE-2026-85866

This vulnerability exists in Windows ALPC , where the exposure of sensitive system information to an unauthorized control sphere allows an authorized attacker to disclose information locally . The root cause is associated with CWE-497 . The base CVSS 3.1 score is 4.7 (Medium) , reflecting a high ...

EUVD-2026-100254

Out-of-bounds read in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to disclose information locally...

CVE-2026-96927

An out-of-bounds read vulnerability exists in the Windows NTFS file system. This flaw allows an authorized attacker to perform a local information disclosure , potentially accessing data they are not permitted to view. The vulnerability is categorized under CWE-125 and has a CVSS 3.1 base score o...

EUVD-2026-100253

Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally...

CVE-2026-96933

The Windows COM+ Event System Service is vulnerable to an untrusted pointer dereference . This security flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is assigned a CVSS v3.1 score of 7.8 (High) , indicating significant impact on confidentiality, integ...

EUVD-2026-100252

Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally...

CVE-2026-96925

An integer underflow (wrap or wraparound) vulnerability exists in Windows NTFS . This flaw allows an authorized attacker to perform a local information disclosure . The vulnerability is associated with CWE-191 . No specific exploit information or remediation details are provided in the documents.

EUVD-2026-100250

Integer underflow wrap or wraparound in Windows NTFS allows an authorized attacker to disclose information locally...

CVE-2026-96919

A Use after free vulnerability exists in the Windows Broadcast DVR User Service . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-416 (Use After Free) and CWE-362 (Race Condition). Exploitation details are not provided in th...

CVE-2026-96923

A Use after free vulnerability exists in the Windows Workstation Service . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-416 and has a CVSS 3.1 base score of 7.0 . No specific exploit details or in-the-wild exploitation inf...

CVE-2026-96924

A critical untrusted pointer dereference vulnerability exists in Windows OLE , allowing an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a CVSS v3.1 score of 9.8 and is categorized under CWE-822 . According to the NCSC, this vulnerability allows for ...

CVE-2026-96930

An out-of-bounds read vulnerability exists in the Windows Universal Disk Format File System Driver (UDFS) . This flaw allows an authorized attacker to perform a local information disclosure , potentially exposing sensitive data. No specific exploit details or patch versions are provided in the do...

EUVD-2026-100243

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-96913

A heap-based buffer overflow exists in the Windows Kernel , which could allow an authorized attacker to achieve local privilege escalation . The vulnerability is assigned a CVSS 3.1 score of 8.8 (High) , indicating significant impact on confidentiality, integrity, and availability. No specific so...

CVE-2026-96912

A Use after free vulnerability in the Windows Client License Service allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-416 and has a CVSS 3.1 base score of 7.8 . While the documents confirm the impact of privilege elevation, no specific...

CVE-2026-96911

The Microsoft Windows Search Component is vulnerable to an improper link resolution before file access (link following) vulnerability. This flaw allows an authorized attacker to achieve local privilege escalation . The CVSS 3.1 score is 7.8 (High), with high impacts on confidentiality, integrity,...

CVE-2026-96858

A missing authentication vulnerability in the Windows Security Account Manager allows an authorized attacker to perform tampering locally . The root cause is identified as CWE-306 . While no specific exploit code is provided, the vulnerability has an official fix available via Microsoft. Detailed...

CVE-2026-96914

An integer overflow or wraparound vulnerability exists within the Windows Virtualization-Based Security (VBS) Enclave . This flaw allows an authorized attacker to achieve local privilege escalation . While the vulnerability is confirmed and has a high severity score (8.8), specific details regard...

CVE-2026-96910

An untrusted pointer dereference vulnerability exists in the Microsoft Windows Search Component . This flaw allows an authorized attacker to perform a local information disclosure attack. The vulnerability is associated with CWE-822 . No specific software versions, root cause details, or exploit ...

CVE-2026-96917

A heap-based buffer overflow exists in the Windows PCI Bus Driver . This vulnerability allows an authorized attacker to achieve local privilege elevation . The impact includes high levels of risk to confidentiality, integrity, and availability . An official fix is available via the provided Micro...