CVE-2026-85918

A Use after free vulnerability exists in the Windows Universal Plug and Play (UPnP) Device Host . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is confirmed with a high severity base score of 7.0. No specific exploit information or remediation de...

CVE-2026-85871

A heap-based buffer overflow exists in Windows Kernel-Mode Drivers , which may allow an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-122 . No specific exploited versions, specific impacted files, or exploit links are provided in the documents...

CVE-2026-71347

A race condition vulnerability exists in the Windows Security Center due to concurrent execution using a shared resource with improper synchronization. This flaw allows an authorized attacker to achieve local privilege escalation . The impact includes high levels of confidentiality, integrity, an...

CVE-2026-85857

A vulnerability in Windows Kernel-Mode Drivers allows an authorized attacker to perform a local information disclosure . The issue is caused by the insertion of sensitive information into a log file (CWE-532). The impact is characterized as a high level of confidentiality loss for local users. Re...

CVE-2026-85854

A Use after free vulnerability exists in the Windows DWM Core Library . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability has a CVSS 3.1 score of 7.0, indicating a high impact on confidentiality, integrity, and availability. No specific patch versio...

CVE-2026-85858

An out-of-bounds read vulnerability exists within the Windows Win32 Kernel Subsystem . This flaw allows an authorized attacker to achieve local privilege escalation . While the specific root cause is not detailed, the impact includes unauthorized access to elevated permissions. Remediation is ava...

CVE-2026-85856

A heap-based buffer overflow vulnerability exists in Windows Internet Connection Sharing (ICS) . This flaw allows an authorized attacker to achieve remote code execution over an adjacent network . The vulnerability has a CVSS 3.1 base score of 7.1 (High) , with impacts on confidentiality, integri...

CVE-2026-85853

An out-of-bounds read vulnerability exists in the Windows DWM Core Library . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability has been confirmed with a HIGH severity rating (CVSS 3.1 score of 7.0). While the technical root cause is identified as an ...

CVE-2026-85855

A Use after free vulnerability in the Windows DWM Core Library allows an authorized attacker to achieve local privilege elevation . The vulnerability is classified with a High base severity (7.0) and requires low privileges to exploit. No specific exploit code or in-the-wild exploitation details ...

CVE-2026-85852

An out-of-bounds read vulnerability exists in Windows Management Instrumentation . This flaw allows an authorized attacker to disclose information locally on the affected system. The vulnerability is categorized as a local information disclosure with a CVSS 3.1 score of 5.5 . No specific exploit ...

CVE-2026-85861

A Use after free vulnerability exists in the Windows Clipboard User Service . This flaw allows an authorized attacker to perform a local privilege escalation . The CVSS 3.1 score of 7.8 reflects a high severity with a high complexity requirement and a local attack vector. No specific exploit info...

CVE-2026-85863

A Use after free vulnerability exists in the Windows Clipboard User Service . This flaw allows an authorized attacker to achieve local privilege elevation . The impact includes high levels of confidentiality, integrity, and availability loss. Remediation is available via an official fix provided ...

CVE-2026-85860

A Use after free vulnerability exists in the Windows Message Queuing Queue Manager . This flaw allows an authorized attacker to achieve local privilege escalation . No specific affected versions, root cause details, or exploit links are provided in the documents. Remediation is noted as an offici...

CVE-2026-85859

A Null pointer dereference vulnerability exists in the Windows Message Queuing Queue Manager . This flaw allows an authorized attacker to perform a denial of service (DoS) attack over a network. The vulnerability is categorized under CWE-476 and has a CVSS 3.1 score of 6.5. No specific exploit in...

CVE-2026-85851

A Use after free vulnerability in Windows SmartScreen allows an authorized attacker to achieve local privilege elevation . The vulnerability is classified with a CVSS v3.1 base score of 7.8 (High) . While specific component details or exploit links are not provided in the documents, an official f...

CVE-2026-85840

A vulnerability in Windows Event Viewer allows an authorized attacker to disclose information over a network. The root cause is that certain files or directories are accessible to external parties , leading to potential information disclosure. The vulnerability is associated with CWE-552 . No spe...

CVE-2026-85842

A vulnerability in Windows Image Acquisition allows an authorized attacker to achieve local privilege escalation . The root cause is the use of an externally-controlled format string (CWE-134). This flaw enables an attacker with existing local access to elevate their privileges on the system. No ...

CVE-2026-85843

The Windows Background Intelligent Transfer Service (BITS) is vulnerable to a local privilege escalation flaw due to the use of uninitialized resource (CWE-908). This vulnerability allows an authorized attacker to elevate their privileges on the local system. No specific details regarding affecte...

CVE-2026-85836

A Use after free vulnerability exists in the Windows Kernel , which could allow an authorized attacker to achieve local privilege escalation . The vulnerability is classified with a CVSS 3.1 base score of 7.8 (High) . No specific exploit details or in-the-wild exploitation information are provide...

CVE-2026-85837

A vulnerability exists in the Windows Kernel due to an out-of-bounds read (CWE-125). This flaw allows an authorized attacker to perform a local privilege escalation . While the severity is classified as High , specific details regarding the affected component, root cause, or exploit availability ...