CVE-2026-85366

A heap-based buffer overflow vulnerability exists in Windows Installer . This flaw allows an authorized attacker to perform a local elevation of privileges . The severity is rated as High (CVSS 3.1 score of 7.8). No specific exploit links or remediation versions are provided in the documents beyo...

CVE-2026-85358

A Heap-based buffer overflow vulnerability exists in Windows Installer . This flaw allows an authorized attacker to perform a local elevation of privilege . The CVSS 3.1 score is 7.8 (High) , with an attack vector of Local and low complexity. No specific exploit information or direct mitigation s...

CVE-2026-85367

A Use after free vulnerability exists in the Windows Cash Drawer Protocol Provider . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability has a CVSS 3.1 base score of 7.0 (High) . Specific details regarding the underlying root cause, affected versions, ...

CVE-2026-85357

The Windows Phone Service is vulnerable to a race condition caused by concurrent execution using a shared resource with improper synchronization. This flaw allows an authorized attacker to achieve local privilege elevation . No specific details regarding affected versions, underlying files, or ex...

CVE-2026-85362

A Release of invalid pointer or reference vulnerability exists in Windows Management Instrumentation . This flaw allows an authorized attacker to perform a local privilege escalation . No specific exploit details or version-specific information are provided in the documents, and no exploits are c...

CVE-2026-85359

A code injection vulnerability (CWE-94) exists in Windows Performance Monitor , where improper control of code generation allows an authorized attacker to achieve local privilege elevation . The vulnerability has a CVSS 3.1 base score of 7.8 and is categorized as high severity. Official remediati...

CVE-2026-85354

A Use after free vulnerability exists in Windows Error Reporting , which could allow an authorized attacker to achieve local privilege escalation . The vulnerability is classified with a High severity base score of 7.0. No specific exploit links or remediation details beyond the official Microsof...

CVE-2026-85355

The Windows Common Log File System Driver is vulnerable to an elevation of privilege flaw due to the inclusion of functionality from an untrusted control sphere (CWE-829 ). An authorized attacker can exploit this issue to gain higher privileges locally. The vulnerability has been assigned a HIGH ...

CVE-2026-85361

A Use after free vulnerability exists in Windows Installer , which could allow an authorized attacker to achieve local privilege elevation . The severity is rated as High (CVSS 3.1 score of 7.0). No specific exploit details or in-the-wild exploitation information are provided in the documents. Re...

CVE-2026-85339

A Remote Code Execution vulnerability exists in the Windows Routing and Remote Access Service (RRAS) . This flaw is caused by an Integer Underflow (CWE-191) and a Heap-based Buffer Overflow (CWE-122), which could allow an attacker to gain unauthorized access to a victim's machine. The vulnerabili...

CVE-2026-85342

A Use after free vulnerability exists in the Windows Device Association Service . This flaw allows an authorized attacker to achieve local privilege elevation . The CVSS 3.1 score is 7.0 (High) , with a local attack vector and high complexity. No specific exploitations or exploit links are provid...

CVE-2026-85341

A heap-based buffer overflow exists in the Windows USB Video Driver . This vulnerability allows an authorized attacker to perform a local privilege escalation . The CVSS 3.1 score is 7.8 (High) , with impacts to confidentiality, integrity, and availability. Remediation is available via an officia...

CVE-2026-85352

A Use after free vulnerability exists in the Windows Device Association Service . This flaw allows an authorized attacker to achieve local privilege escalation . No specific versions, root causes, or exploit links are provided in the documents, but an official fix is indicated by the remediation ...

CVE-2026-85353

An out-of-bounds read vulnerability exists in Windows Print Spooler Components . This flaw allows an unauthorized attacker to disclose information over a network. The vulnerability is associated with CWE-125 and has a CVSS 3.1 base score of 7.5 (High) . While specific exploit details and a patch ...

CVE-2026-85343

Windows Hyper-V is affected by an Improper link resolution before file access (link following) vulnerability. This flaw allows an authorized attacker to perform a local privilege escalation . No specific software versions or exploit links are provided in the documents, but the vulnerability has a...

CVE-2026-85334

An out-of-bounds read vulnerability exists in the Windows Message Queuing Queue Manager . This flaw allows an unauthorized attacker to disclose information over a network. No specific affected versions, root cause technicalities, or exploit links are provided in the documents. Remediation involve...

CVE-2026-85333

A race condition exists in the Windows Performance Monitor component due to concurrent execution using a shared resource with improper synchronization. This vulnerability allows an authorized attacker to achieve local privilege escalation . No specific exploit information or exploit links are pro...

CVE-2026-85332

A Use after free vulnerability in the Windows Device Association Service allows an authorized attacker to achieve local privilege escalation . The vulnerability's impact includes high severity for confidentiality, integrity, and availability. A remediation is available via an official fix ; howev...

CVE-2026-85336

An out-of-bounds read vulnerability exists in the Windows Device Association Service . This flaw allows an authorized attacker to perform a local information disclosure by reading data outside of intended boundaries. The vulnerability is assigned CWE-125 and has been confirmed by Microsoft. No sp...

CVE-2026-84020

A Use after free vulnerability in the Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to achieve local privilege escalation . The impact includes high levels of confidentiality, integrity, and availability. Exploitation details are not provided in the documents.