CVE-2026-87716

A heap-based buffer overflow vulnerability exists in the Windows Storage Spaces Controller . This flaw allows an unauthorized attacker to perform a denial of service (DoS) attack over a network. The CVSS 3.1 score of 7.5 (High) reflects an attack vector that requires no privileges or user interac...

CVE-2026-88073

A Use after free vulnerability exists in the Windows Graphics Kernel . This flaw allows an authorized attacker to achieve local privilege elevation . While the specific root cause component is not detailed beyond the kernel level, the impact includes high levels of confidentiality, integrity, and...

CVE-2026-87706

A heap-based buffer overflow vulnerability exists in the Windows Storage Spaces Controller . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability has a HIGH severity score of 7.8. No specific version numbers, exploit links, or detailed remediation step...

CVE-2026-87707

A heap-based buffer overflow in the Windows Fax and Scan Service allows an authorized attacker to achieve local privilege escalation . The vulnerability has a high CVSS 3.1 base score of 7.8 . Official remediation is available through a Microsoft fix .

CVE-2026-87712

A Use after free vulnerability exists in the Windows Quality of Service (QoS) Packet Scheduler (also referred to as the QoS Scheduler Driver ). This flaw allows an authorized attacker to achieve local privilege elevation . No specific versions, exploit links, or remediation details are provided i...

CVE-2026-88070

An out-of-bounds read vulnerability in Windows BitLocker allows an authorized attacker to achieve local privilege elevation . The vulnerability impacts the BitLocker encryption feature, enabling an attacker with existing local access to increase their privileges on the system. Exploitation detail...

CVE-2026-85933

A Use after free vulnerability exists in the Windows Print Spooler Components . This flaw allows an authorized attacker to perform a local privilege escalation . The vulnerability is assigned a CVSS 3.1 base score of 7.8 (High) . No specific exploit details or remediation steps are provided in th...

CVE-2026-85931

A heap-based buffer overflow in the Windows Distributed File System (DFS) allows an authorized attacker to achieve remote code execution over a network. The vulnerability impacts the Windows environment and carries a high severity score of 8.8. No specific exploit links or manual workarounds are ...

CVE-2026-85934

A Use after free vulnerability in the Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally . The vulnerability is identified with a CVSSv3.1 score of 7.0, indicating a high severity. No specific remediation details or exploit links are provided in the docume...

CVE-2026-85935

A buffer over-read vulnerability exists in the Windows USB Driver . This flaw allows an authorized attacker to disclose information locally on the affected system. The vulnerability is categorized under CWE-126 and has a CVSS 3.1 base score of 5.5, indicating a MEDIUM severity. Official remediati...

CVE-2026-85930

A Use after free vulnerability in Windows Image Acquisition allows an authorized attacker to achieve local privilege escalation . The vulnerability is categorized under CWE-416 . While the impact includes high severity for confidentiality, integrity, and availability, specific exploitation detail...

CVE-2026-85938

The Windows Broadcast DVR User Service is impacted by an improper access control vulnerability (CWE-862). This flaw allows an authorized attacker to perform a local information disclosure attack. The vulnerability has been assigned a CVSS 3.1 base score of 5.5 (Medium) , with a high impact on con...

CVE-2026-85939

A weak authentication vulnerability in the Windows Kernel allows an authorized attacker to bypass a security feature over a network. The vulnerability is associated with CWE-1390 and carries a Medium severity rating. While the impact is noted as High for integrity , the documents do not provide s...

CVE-2026-85945

A Use after free vulnerability exists in the Windows Kernel . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability has a HIGH severity rating with a CVSS 3.1 score of 7.8. No specific component, file, or exploit code details are provided in the document...

CVE-2026-87691

A Use after free vulnerability exists in Windows Management Services . This flaw allows an authorized attacker to achieve local privilege escalation . No specific software versions, root cause files, or remediation steps are provided in the documents. No exploits or in-the-wild exploitation detai...

CVE-2026-85928

A heap-based buffer overflow exists in the Windows Volume Manager Extension Driver , which may allow an unauthorized attacker to execute arbitrary code over a network. This vulnerability is rated as CRITICAL with a CVSS 3.1 score of 9.80 . No specific exploit details or remediation instructions a...

CVE-2026-85936

A Double free vulnerability in the Windows Shell allows an unauthorized attacker to execute arbitrary code over a network. This vulnerability is categorized under CWE-415 (Double Free) and CWE-122 (Heap-based Buffer Overflow). The issue results in High severity impacts on confidentiality, integri...

CVE-2026-83710

A Use after free vulnerability exists in the Windows Device Association Service . This flaw allows an authorized attacker to achieve local privilege escalation . While the CVSS score indicates a High severity (7.0), specific details regarding the underlying component or file are not provided. Exp...

CVE-2026-70277

The Windows Fast FAT Driver is affected by an out-of-bounds read vulnerability. This flaw allows an unauthorized attacker to disclose information locally . No specific details regarding the root cause, affected versions, or a specific patch are provided in the documents beyond the general driver ...

CVE-2026-85926

A Use after free vulnerability exists in the Windows Secure Socket Tunneling Protocol (SSTP) . This flaw allows an unauthorized attacker to achieve remote code execution over a network. The CVSS 3.1 score is 8.1 (High) , with high impact across confidentiality, integrity, and availability. Docume...