CVE-2026-85926

A Use after free vulnerability exists in the Windows Secure Socket Tunneling Protocol (SSTP) . This flaw allows an unauthorized attacker to achieve remote code execution over a network. The CVSS 3.1 score is 8.1 (High) , with high impact across confidentiality, integrity, and availability. Docume...

CVE-2026-85914

A Use after free vulnerability exists in the Windows Embedded Mode Service . This flaw allows an authorized attacker to achieve local privilege escalation . No specific exploit information or remediation details are provided in the documents.

CVE-2026-85867

A heap-based buffer overflow exists in the Windows Remote Access Connection Manager . This vulnerability allows an authorized attacker to achieve local privilege elevation . No specific exploit details or remediation versions are provided in the documentation.

CVE-2026-70270

A vulnerability in the Windows Container Isolation FS Filter Driver allows an authorized attacker to achieve local privilege elevation via an untrusted pointer dereference . This flaw is identified with CWE-822 . The CVSS v3.1 score is 5.5 , indicating a medium severity risk with a local attack v...

CVE-2026-85904

A race condition vulnerability exists in the Windows Device Association Service due to concurrent execution using a shared resource with improper synchronization. This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-362 (Race Cond...

CVE-2026-70303

A vulnerability in the Windows Kernel involves an out-of-bounds write (CWE-787). This flaw allows an authorized attacker to achieve local privilege escalation . While the specific component or file is not identified in the provided documents, the impact includes high severity for confidentiality,...

CVE-2026-70172

A vulnerability in Windows NTFS involves an untrusted pointer dereference , which could allow an authorized attacker to achieve local privilege elevation . The CVSS 3.1 score is 7.8, indicating a high severity impact on confidentiality, integrity, and availability. No specific exploit details or ...

CVE-2026-70185

A protection mechanism failure in Windows PowerShell allows an authorized attacker to bypass a security feature locally. The vulnerability is associated with CWE-639 (Authorization Bypass Through User-Controlled Key). The impact includes potential high consequences for confidentiality, integrity,...

CVE-2026-70216

A vulnerability exists in Windows Mobile Device Management due to insufficient granularity of access control . This flaw allows an authorized attacker to perform tampering locally . The vulnerability has a CVSS 3.1 score of 5.5 (Medium) and is associated with CWE-1220 . No specific details regard...

CVE-2026-70164

A Use after free vulnerability exists in Windows TCP/IP which allows an authorized attacker to achieve local privilege elevation . The vulnerability is confirmed with a HIGH base severity score of 7.0. No specific exploit links or internal component details are provided in the documents, and no d...

CVE-2026-70170

A vulnerability exists in the Windows Kernel due to an untrusted pointer dereference . This flaw allows an authorized attacker to cause a denial of service (DoS) over a network. No specific exploitation details or patch versions are provided in the documents.

CVE-2026-70238

A heap-based buffer overflow exists in the Windows Storage Spaces Controller . This vulnerability allows an authorized attacker to achieve local privilege elevation . No specific version numbers, underlying code files, or remediation steps are provided in the documents. Exploitation details are n...

CVE-2026-70210

A heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to achieve elevation of privilege over a network. The vulnerability (CWE-122, CWE-125) has a CVSS 3.1 base score of 8.8 . Exploitation details are not provided in the documents. Remediation via an official fix is indic...

CVE-2026-88159

A Use after free vulnerability exists in the Windows Background Intelligent Transfer Service (BITS) . This flaw allows an unauthorized attacker to execute code over a network . The vulnerability is associated with CWE-125 (Out-of-bounds Read). No specific exploit details or in-the-wild exploitati...

CVE-2026-70052

An integer overflow or wraparound vulnerability exists in Windows PowerShell . This flaw allows an authorized attacker to achieve local code execution . While the technical root cause is identified as an integer overflow or wraparound, specific affected versions or files are not detailed in the p...

CVE-2026-69916

A vulnerability in Windows NTFS caused by an integer overflow or wraparound allows an authorized attacker to achieve local privilege elevation . No specific affected versions, root cause details, or remediation steps are provided in the documents. Exploitation details are not provided.

CVE-2026-88160

A race condition vulnerability exists in the Microsoft Windows Search Component due to concurrent execution using a shared resource with improper synchronization. This flaw allows an authorized attacker to achieve local privilege elevation . Remediation is available via an official fix provided b...

CVE-2026-88173

A Use after free vulnerability in the Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network . The vulnerability is associated with CWE-416 (Use After Free) and CWE-367 (Time-of-check Time-of-use Race Condition). The impact includes h...

CVE-2026-70041

A buffer over-read vulnerability exists in the Windows CD-ROM Driver . This flaw allows an authorized attacker to disclose information locally on the affected system. The CVSS 3.1 score is 5.5 (Medium) , reflecting a local attack vector requiring low privileges. Specific details regarding the und...

CVE-2026-70048

A heap-based buffer overflow exists in the Windows Resilient File System (ReFS) . This vulnerability allows an authorized attacker to achieve local privilege elevation . The technical root cause is a memory management issue within the ReFS component. Information regarding specific affected versio...