CVE-2026-87709

A vulnerability exists in the Windows Host Guardian Service due to improper access control . This flaw allows an authorized attacker to perform tampering locally . The vulnerability is associated with CWE-250 (Execution with Unnecessary Privileges) . While the technical root cause is not detailed...

CVE-2026-87694

A Use after free vulnerability in Windows Installer allows an authorized attacker to achieve local privilege elevation . The vulnerability is classified with a High base severity (CVSS 3.1 score of 7.8). While the technical root cause is identified as a use after free, specific file paths or func...

CVE-2026-87693

A use after free vulnerability exists in Windows Installer that allows an authorized attacker to achieve local privilege escalation . The vulnerability is characterized by a high base severity score of 7.0 and impacts confidentiality, integrity, and availability. No specific exploit links or deta...

CVE-2026-88076

A null pointer dereference vulnerability exists in the Windows Installer component. This flaw allows an authorized attacker to perform a local privilege escalation . The CVSS 3.1 score is 7.0 (High) , with the impact affecting confidentiality, integrity, and availability. No specific exploit deta...

CVE-2026-87704

A Use after free vulnerability exists in Windows Installer which allows an authorized attacker to achieve local privilege escalation . The vulnerability is categorized under CWE-416 . Technical details regarding the specific root cause or affected versions are not provided in the documents, but t...

CVE-2026-87700

A Use after free vulnerability exists in Windows Installer , which may allow an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-416 . While specific affected versions or detailed root causes are not provided in the documents, a remediation leve...

CVE-2026-87705

A vulnerability in Windows Hyper-V arises from the improper verification of the source of a communication channel . This flaw allows an unauthorized attacker to bypass a security feature when operating over an adjacent network . The vulnerability is associated with CWE-940 and has been assigned a...

CVE-2026-85941

A race condition exists in Windows Installer due to concurrent execution using a shared resource with improper synchronization. This vulnerability allows an authorized attacker to achieve local privilege elevation . The impact includes high levels of confidentiality, integrity, and availability. ...

CVE-2026-87698

A Windows Remote Access Service Infrastructure component is vulnerable to an out-of-bounds read (CWE-125). This flaw allows an authorized attacker to perform a local information disclosure on the affected system. The CVSS 3.1 score is 5.5, reflecting a medium severity with a local attack vector a...

EUVD-2026-100061

Stack-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network...

CVE-2026-83931

A heap-based buffer overflow vulnerability exists in Windows Hyper-V . This flaw allows an authorized attacker to achieve local code execution . The vulnerability has a high severity rating and the official remediation is provided via Microsoft updates.

CVE-2026-85874

A Use after free vulnerability exists in the Windows Message Queuing Queue Manager . This flaw allows an authorized attacker to achieve local code execution . The vulnerability is categorized under CWE-416 and has a high severity rating with a CVSS 3.1 base score of 7.8 . No specific exploit info...

CVE-2026-83933

The Windows Update Orchestrator Service is vulnerable to an improper link resolution before file access (link following) vulnerability. This flaw allows an authorized attacker to perform a local information disclosure . No specific software versions, exploit links, or remediation steps are provid...

CVE-2026-83924

A Use after free vulnerability exists in the Windows Kernel . This flaw allows an authorized attacker to achieve local privilege elevation . No specific component, version, or remediation steps are provided in the documents. No exploit information is available.

CVE-2026-69798

A Use after free vulnerability exists in the Windows Wired AutoConfig Service . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is classified with a High severity rating (CVSS 3.1 score of 7.8). Specific details regarding the root cause component ...

CVE-2026-83934

A stack-based buffer overflow vulnerability exists in Windows GDI+ , which could allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability is rated as HIGH severity with a CVSS 3.1 score of 8.8, as it could impact confidentiality, integrity, and availabilit...

CVE-2026-85879

A Time-of-check time-of-use (TOCTOU) race condition exists in the Windows Subsystem for Linux . This vulnerability allows an authorized attacker to achieve local privilege elevation . The impact includes high levels of confidentiality, integrity, and availability. Official fixes are available; ho...

CVE-2026-83925

A vulnerability exists in the Windows Kernel involving the use of uninitialized resource (CWE-908). This flaw allows an authorized attacker to perform a local information disclosure (CWE-497). The vulnerability has a Medium base severity score of 4.7, requiring local access and high complexity to...

CVE-2026-83930

A Use after free vulnerability exists in the Windows Update Orchestrator Service . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is assigned a High base severity score of 7.0. No specific details regarding the root cause, affected versions, or a...

CVE-2026-83915

A Use after free vulnerability exists in the Windows Diagnostic Policy Service . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-416 and carries a High base severity score. No specific details regarding the root cause, affec...