CVE-2026-88099

An uncaught exception in the Windows Failover Cluster allows an unauthorized attacker to perform a denial of service (DoS) over a network. The vulnerability is associated with CWE-248 . While the specific software versions and root cause files are not detailed in the provided documents, an offici...

CVE-2026-88100

A Use after free vulnerability exists in the Windows Storage Spaces Controller . This flaw allows an authorized attacker to achieve local privilege escalation . While the vulnerability is confirmed with a CVSSv3.1 base score of 7.8 , no specific exploit details or in-the-wild exploitation reports...

CVE-2026-88074

An integer overflow or wraparound vulnerability exists within the Windows Virtualization-Based Security (VBS) Enclave . This flaw allows an authorized attacker to perform a local privilege escalation . No specific exploit details or patch versions are provided in the documents, but the official M...

CVE-2026-87707

A heap-based buffer overflow in the Windows Fax and Scan Service allows an authorized attacker to achieve local privilege escalation . The vulnerability has a high CVSS 3.1 base score of 7.8 . Official remediation is available through a Microsoft fix .

CVE-2026-87716

A heap-based buffer overflow vulnerability exists in the Windows Storage Spaces Controller . This flaw allows an unauthorized attacker to perform a denial of service (DoS) attack over a network. The CVSS 3.1 score of 7.5 (High) reflects an attack vector that requires no privileges or user interac...

CVE-2026-88070

An out-of-bounds read vulnerability in Windows BitLocker allows an authorized attacker to achieve local privilege elevation . The vulnerability impacts the BitLocker encryption feature, enabling an attacker with existing local access to increase their privileges on the system. Exploitation detail...

CVE-2026-87712

A Use after free vulnerability exists in the Windows Quality of Service (QoS) Packet Scheduler (also referred to as the QoS Scheduler Driver ). This flaw allows an authorized attacker to achieve local privilege elevation . No specific versions, exploit links, or remediation details are provided i...

CVE-2026-87713

A Use after free vulnerability exists in the Windows Bluetooth Port Driver . This flaw allows an unauthorized attacker to elevate privileges over an adjacent network. No specific software versions or exploit details are provided in the documents. Remediation is indicated as an official fix via th...

CVE-2026-88071

A double free vulnerability exists in Windows Hyper-V , which can be exploited by an authorized attacker to achieve local privilege escalation . While the CVSS 3.1 score indicates a High severity (7.8), the documents do not provide specific details regarding the affected component, file, or speci...

CVE-2026-88073

A Use after free vulnerability exists in the Windows Graphics Kernel . This flaw allows an authorized attacker to achieve local privilege elevation . While the specific root cause component is not detailed beyond the kernel level, the impact includes high levels of confidentiality, integrity, and...

CVE-2026-87706

A heap-based buffer overflow vulnerability exists in the Windows Storage Spaces Controller . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability has a HIGH severity score of 7.8. No specific version numbers, exploit links, or detailed remediation step...

CVE-2026-85928

A heap-based buffer overflow exists in the Windows Volume Manager Extension Driver , which may allow an unauthorized attacker to execute arbitrary code over a network. This vulnerability is rated as CRITICAL with a CVSS 3.1 score of 9.80 . No specific exploit details or remediation instructions a...

CVE-2026-85930

A Use after free vulnerability in Windows Image Acquisition allows an authorized attacker to achieve local privilege escalation . The vulnerability is categorized under CWE-416 . While the impact includes high severity for confidentiality, integrity, and availability, specific exploitation detail...

CVE-2026-85934

A Use after free vulnerability in the Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally . The vulnerability is identified with a CVSSv3.1 score of 7.0, indicating a high severity. No specific remediation details or exploit links are provided in the docume...

CVE-2026-85939

A weak authentication vulnerability in the Windows Kernel allows an authorized attacker to bypass a security feature over a network. The vulnerability is associated with CWE-1390 and carries a Medium severity rating. While the impact is noted as High for integrity , the documents do not provide s...

CVE-2026-87691

A Use after free vulnerability exists in Windows Management Services . This flaw allows an authorized attacker to achieve local privilege escalation . No specific software versions, root cause files, or remediation steps are provided in the documents. No exploits or in-the-wild exploitation detai...

CVE-2026-85945

A Use after free vulnerability exists in the Windows Kernel . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability has a HIGH severity rating with a CVSS 3.1 score of 7.8. No specific component, file, or exploit code details are provided in the document...

CVE-2026-85935

A buffer over-read vulnerability exists in the Windows USB Driver . This flaw allows an authorized attacker to disclose information locally on the affected system. The vulnerability is categorized under CWE-126 and has a CVSS 3.1 base score of 5.5, indicating a MEDIUM severity. Official remediati...

CVE-2026-85938

The Windows Broadcast DVR User Service is impacted by an improper access control vulnerability (CWE-862). This flaw allows an authorized attacker to perform a local information disclosure attack. The vulnerability has been assigned a CVSS 3.1 base score of 5.5 (Medium) , with a high impact on con...

CVE-2026-85931

A heap-based buffer overflow in the Windows Distributed File System (DFS) allows an authorized attacker to achieve remote code execution over a network. The vulnerability impacts the Windows environment and carries a high severity score of 8.8. No specific exploit links or manual workarounds are ...