CVE-2026-87706

A heap-based buffer overflow vulnerability exists in the Windows Storage Spaces Controller . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability has a HIGH severity score of 7.8. No specific version numbers, exploit links, or detailed remediation step...

CVE-2026-85930

A Use after free vulnerability in Windows Image Acquisition allows an authorized attacker to achieve local privilege escalation . The vulnerability is categorized under CWE-416 . While the impact includes high severity for confidentiality, integrity, and availability, specific exploitation detail...

CVE-2026-85934

A Use after free vulnerability in the Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally . The vulnerability is identified with a CVSSv3.1 score of 7.0, indicating a high severity. No specific remediation details or exploit links are provided in the docume...

CVE-2026-85939

A weak authentication vulnerability in the Windows Kernel allows an authorized attacker to bypass a security feature over a network. The vulnerability is associated with CWE-1390 and carries a Medium severity rating. While the impact is noted as High for integrity , the documents do not provide s...

CVE-2026-87691

A Use after free vulnerability exists in Windows Management Services . This flaw allows an authorized attacker to achieve local privilege escalation . No specific software versions, root cause files, or remediation steps are provided in the documents. No exploits or in-the-wild exploitation detai...

CVE-2026-85945

A Use after free vulnerability exists in the Windows Kernel . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability has a HIGH severity rating with a CVSS 3.1 score of 7.8. No specific component, file, or exploit code details are provided in the document...

CVE-2026-85935

A buffer over-read vulnerability exists in the Windows USB Driver . This flaw allows an authorized attacker to disclose information locally on the affected system. The vulnerability is categorized under CWE-126 and has a CVSS 3.1 base score of 5.5, indicating a MEDIUM severity. Official remediati...

CVE-2026-85938

The Windows Broadcast DVR User Service is impacted by an improper access control vulnerability (CWE-862). This flaw allows an authorized attacker to perform a local information disclosure attack. The vulnerability has been assigned a CVSS 3.1 base score of 5.5 (Medium) , with a high impact on con...

CVE-2026-85931

A heap-based buffer overflow in the Windows Distributed File System (DFS) allows an authorized attacker to achieve remote code execution over a network. The vulnerability impacts the Windows environment and carries a high severity score of 8.8. No specific exploit links or manual workarounds are ...

CVE-2026-85933

A Use after free vulnerability exists in the Windows Print Spooler Components . This flaw allows an authorized attacker to perform a local privilege escalation . The vulnerability is assigned a CVSS 3.1 base score of 7.8 (High) . No specific exploit details or remediation steps are provided in th...

CVE-2026-85928

A heap-based buffer overflow exists in the Windows Volume Manager Extension Driver , which may allow an unauthorized attacker to execute arbitrary code over a network. This vulnerability is rated as CRITICAL with a CVSS 3.1 score of 9.80 . No specific exploit details or remediation instructions a...

CVE-2026-85936

A Double free vulnerability in the Windows Shell allows an unauthorized attacker to execute arbitrary code over a network. This vulnerability is categorized under CWE-415 (Double Free) and CWE-122 (Heap-based Buffer Overflow). The issue results in High severity impacts on confidentiality, integri...

CVE-2026-85867

A heap-based buffer overflow exists in the Windows Remote Access Connection Manager . This vulnerability allows an authorized attacker to achieve local privilege elevation . No specific exploit details or remediation versions are provided in the documentation.

CVE-2026-85904

A race condition vulnerability exists in the Windows Device Association Service due to concurrent execution using a shared resource with improper synchronization. This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-362 (Race Cond...

CVE-2026-85926

A Use after free vulnerability exists in the Windows Secure Socket Tunneling Protocol (SSTP) . This flaw allows an unauthorized attacker to achieve remote code execution over a network. The CVSS 3.1 score is 8.1 (High) , with high impact across confidentiality, integrity, and availability. Docume...

CVE-2026-85914

A Use after free vulnerability exists in the Windows Embedded Mode Service . This flaw allows an authorized attacker to achieve local privilege escalation . No specific exploit information or remediation details are provided in the documents.

CVE-2026-83888

A buffer over-read vulnerability exists in the Windows CD-ROM Driver . This flaw allows an unauthorized attacker to elevate privileges over a network. The vulnerability is listed with a Medium severity (CVSS 3.1 score of 6.5), indicating that while it allows for privilege escalation, it requires ...

CVE-2026-83710

A Use after free vulnerability exists in the Windows Device Association Service . This flaw allows an authorized attacker to achieve local privilege escalation . While the CVSS score indicates a High severity (7.0), specific details regarding the underlying component or file are not provided. Exp...

CVE-2026-70303

A vulnerability in the Windows Kernel involves an out-of-bounds write (CWE-787). This flaw allows an authorized attacker to achieve local privilege escalation . While the specific component or file is not identified in the provided documents, the impact includes high severity for confidentiality,...

CVE-2026-70277

The Windows Fast FAT Driver is affected by an out-of-bounds read vulnerability. This flaw allows an unauthorized attacker to disclose information locally . No specific details regarding the root cause, affected versions, or a specific patch are provided in the documents beyond the general driver ...