CVE-2026-88171

A double free vulnerability in the Windows DHCP Server allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is categorized under CWE-415 . While the severity is high, the exploit code maturity is currently listed as unproven . No specific exploit link...

CVE-2026-88139

A Use after free vulnerability exists in the Windows Kernel . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is categorized under CWE-416 and has a CVSS 3.1 base score of 7.0 . No specific software versions, root causes, or exploit links are provi...

CVE-2026-88149

A double free vulnerability exists in the Windows Ancillary Function Driver for WinSock . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability has a high severity rating with a CVSS 3.1 score of 7.0. No specific exploit details or direct links to in-th...

CVE-2026-88121

A Use after free vulnerability in the Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is associated with CWE-416 and carries a CVSS 3.1 base score of 8.0 (High) . While the impact includes hi...

CVE-2026-88147

A heap-based buffer overflow exists in the Windows Secure Socket Tunneling Protocol (SSTP) . This vulnerability allows an authorized attacker to perform a local privilege escalation . The impact includes high levels of confidentiality, integrity, and availability loss as reported in the CVSS metr...

CVE-2026-88174

A race condition exists in Windows Deployment Services due to improper synchronization during concurrent execution using a shared resource. This vulnerability allows an unauthorized attacker to achieve remote code execution over the network. No specific exploit details or official patch versions ...

CVE-2026-88141

A Use after free vulnerability exists in the Windows Kernel . This flaw allows an authorized attacker to achieve local privilege elevation . No specific component, file, or version is identified in the provided documents, and no exploit information or remediation details are available.

CVE-2026-88115

An out-of-bounds read vulnerability exists in Windows Server for NFS , which may allow an unauthorized attacker to achieve remote code execution over a network. The CVSS 3.1 score is 8.8 (HIGH) , indicating significant impact on confidentiality, integrity, and availability. While the vulnerabilit...

CVE-2026-88142

A use after free vulnerability exists in the Windows Background Intelligent Transfer Service (BITS) . This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is associated with CWE-122 (Heap-based Buffer Overflow) and carries a High severity ra...

CVE-2026-88110

A heap-based buffer overflow exists in the Windows Graphics Kernel . This vulnerability allows an authorized attacker to achieve local privilege elevation . No specific versions, root causes, or remediation details are provided in the documents. Exploitation details are not present.

CVE-2026-88127

A Use after free vulnerability in the Windows SMB Server allows an authorized attacker to perform a local privilege escalation . The vulnerability is associated with CWE-416 and carries a High base severity score of 7.0. Remediation is available via an official fix provided by Microsoft. No speci...

CVE-2026-87715

A Use after free vulnerability exists in Windows Installer , which could allow an authorized attacker to achieve local privilege escalation . The vulnerability is classified as HIGH severity (CVSS 3.1 score of 7.0). No specific exploit details or in-the-wild exploitation information are provided ...

CVE-2026-88134

A Use after free vulnerability in the Windows Kernel allows an authorized attacker to achieve local privilege escalation . The vulnerability is assigned a CVSS 3.1 base score of 7.8 (High) . No specific details regarding the affected component or root cause are provided in the documents. No explo...

CVE-2026-88105

A use after free vulnerability in the Windows Broadcast DVR User Service allows an authorized attacker to achieve local privilege escalation . This flaw is characterized by a HIGH base severity score of 7.8 (CVSS v3.1). Remediation is available via an official fix provided by Microsoft.

CVE-2026-88072

A vulnerability in Windows Host Guardian Service involves improper access control that allows an authorized attacker to achieve local privilege escalation . The root cause is associated with CWE-59 (Improper Link Resolution Before File Access). The impact includes high levels of confidentiality, ...

CVE-2026-88103

A Use after free vulnerability exists in the Windows Broadcast DVR User Service . This flaw allows an authorized attacker to achieve local privilege elevation . The CVSS 3.1 score for this vulnerability is 7.0 (High) , with a local attack vector and high complexity. No specific exploit informatio...

CVE-2026-88079

A Null pointer dereference vulnerability exists in the Windows MIDI Service Module . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is assigned a CVSS 3.1 base score of 7.0 (High) . No specific exploit information or direct remediation steps are p...

CVE-2026-88113

A Use after free vulnerability exists in the Windows Broadcast DVR User Service . This flaw allows an authorized attacker to achieve local privilege escalation . While the technical root cause is identified as a memory management issue, specific exploit details and in-the-wild exploitation inform...

CVE-2026-87702

A vulnerability in Windows Resource Management (MRM) involving an integer overflow or wraparound allows an authorized attacker to achieve local privilege elevation . The vulnerability is characterized by a high base severity score of 7.8. No specific patch versions, workarounds, or exploit detail...

CVE-2026-85884

The Windows Health and Optimized Experiences Service is vulnerable to a privilege escalation flaw due to missing authentication for a critical function (CWE-306). An authorized attacker can exploit this to elevate privileges locally on the affected system. While the CVSS 3.1 score is 7.8 (High) ,...