CVE-2026-85850

The Windows Kernel is susceptible to a vulnerability involving the release of an invalid pointer or reference . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-763 . No specific exploit details or proof-of-concept code are pr...

CVE-2026-85840

A vulnerability in Windows Event Viewer allows an authorized attacker to disclose information over a network. The root cause is that certain files or directories are accessible to external parties , leading to potential information disclosure. The vulnerability is associated with CWE-552 . No spe...

CVE-2026-85836

A Use after free vulnerability exists in the Windows Kernel , which could allow an authorized attacker to achieve local privilege escalation . The vulnerability is classified with a CVSS 3.1 base score of 7.8 (High) . No specific exploit details or in-the-wild exploitation information are provide...

CVE-2026-85842

A vulnerability in Windows Image Acquisition allows an authorized attacker to achieve local privilege escalation . The root cause is the use of an externally-controlled format string (CWE-134). This flaw enables an attacker with existing local access to elevate their privileges on the system. No ...

CVE-2026-85837

A vulnerability exists in the Windows Kernel due to an out-of-bounds read (CWE-125). This flaw allows an authorized attacker to perform a local privilege escalation . While the severity is classified as High , specific details regarding the affected component, root cause, or exploit availability ...

CVE-2026-85820

A Use after free vulnerability exists in the Windows Universal Disk Format File System Driver (UDFS) . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-122 (Heap-based Buffer Overflow) and CWE-190 (Integer Overflow or Wraparo...

CVE-2026-85822

A heap-based buffer overflow vulnerability exists in the Windows exFAT File System . This flaw allows an authorized attacker to achieve local privilege escalation . The CVSS 3.1 base score is 7.8 (High) , reflecting high impact on confidentiality, integrity, and availability. Exploitation details...

CVE-2026-85824

A Use after free vulnerability exists in the Windows Composite Image File System . This flaw allows an authorized attacker to perform a local privilege escalation . While the vulnerability is confirmed, specific technical details regarding the root cause or affected components are not provided in...

CVE-2026-85826

An out-of-bounds write vulnerability exists in the Windows Fast FAT Driver . This flaw allows an authorized attacker to achieve local privilege elevation . The official CVSS 3.1 score is 7.0 (High) , with a high impact on confidentiality, integrity, and availability. No specific exploit details o...

CVE-2026-85821

An out-of-bounds read vulnerability exists in the Windows Universal Disk Format File System Driver (UDFS) . This flaw allows an authorized attacker to disclose information locally . The vulnerability is associated with CWE-125 . Official remediation is available via Microsoft's security updates. ...

CVE-2026-85823

A Use after free vulnerability in the Windows Composite Image File System allows an authorized attacker to achieve local privilege escalation . The vulnerability is assigned a CVSS 3.1 base score of 7.0 (High) . While the documentation confirms the existence of an official fix, specific details r...

CVE-2026-85825

A Use after free vulnerability exists in the Windows Universal Disk Format File System Driver (UDFS) . This flaw allows an authorized attacker to achieve local privilege elevation . No specific exploit information or detailed remediation steps are provided in the documents beyond the mention of a...

CVE-2026-85831

A heap-based buffer overflow exists in the Windows Biometric Service . This vulnerability allows an authorized attacker to perform a local information disclosure . The provided documents do not specify the exact root cause, affected versions, or available remediation steps beyond the existence of...

CVE-2026-85830

An out-of-bounds read vulnerability exists in the Windows Installer component. This flaw allows an authorized attacker to perform a local information disclosure , potentially revealing sensitive data. Exploitation details or specific affected versions are not provided in the documents. Remediatio...

CVE-2026-85829

A double free vulnerability exists in the Windows Wired AutoConfig Service . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-415 . No specific exploitation details or remediation steps are provided in the documents beyond th...

CVE-2026-85816

An out-of-bounds read vulnerability exists in the Windows Wi-Fi Driver . This flaw allows an authorized attacker to disclose information over an adjacent network . No specific software versions, file paths, or remediation steps are provided in the documentation; however, an official fix is indica...

CVE-2026-85817

A vulnerability in Windows PowerShell allows an unauthorized attacker to execute code over a network due to reliance on untrusted inputs in a security decision. The impact is rated as HIGH with a CVSS 3.1 score of 8.8, affecting confidentiality, integrity, and availability. Official fix informati...

CVE-2026-85814

A heap-based buffer overflow exists in Microsoft Windows Media Foundation , which could allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a CVSS v3.1 score of 9.8 (CRITICAL), indicating a high impact on confidentiality, integrity, and availabili...

CVE-2026-85818

A critical vulnerability exists in Windows Schannel due to the improper verification of cryptographic signatures . This flaw allows an unauthorized attacker to perform spoofing over a network . The vulnerability has a CVSS v3.1 base score of 9.0 , resulting in high impacts on confidentiality, int...

CVE-2026-85815

The Windows Device Association Service is affected by an out-of-bounds read vulnerability (CWE-125). This flaw allows an authorized attacker to disclose information locally . No specific exploitation details, exploit links, or remediations are provided in the documentation beyond the existence of...