CVE-2026-70052

An integer overflow or wraparound vulnerability exists in Windows PowerShell . This flaw allows an authorized attacker to achieve local code execution . While the technical root cause is identified as an integer overflow or wraparound, specific affected versions or files are not detailed in the p...

CVE-2026-69934

A vulnerability in Windows Spaceport.sys involves an integer overflow or wraparound (CWE-190) combined with improper input validation (CWE-20). This flaw enables an authorized attacker to achieve local privilege escalation . The impact is categorized as high for confidentiality, integrity, and av...

CVE-2026-88173

A Use after free vulnerability in the Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network . The vulnerability is associated with CWE-416 (Use After Free) and CWE-367 (Time-of-check Time-of-use Race Condition). The impact includes h...

CVE-2026-69916

A vulnerability in Windows NTFS caused by an integer overflow or wraparound allows an authorized attacker to achieve local privilege elevation . No specific affected versions, root cause details, or remediation steps are provided in the documents. Exploitation details are not provided.

CVE-2026-70041

A buffer over-read vulnerability exists in the Windows CD-ROM Driver . This flaw allows an authorized attacker to disclose information locally on the affected system. The CVSS 3.1 score is 5.5 (Medium) , reflecting a local attack vector requiring low privileges. Specific details regarding the und...

CVE-2026-88159

A Use after free vulnerability exists in the Windows Background Intelligent Transfer Service (BITS) . This flaw allows an unauthorized attacker to execute code over a network . The vulnerability is associated with CWE-125 (Out-of-bounds Read). No specific exploit details or in-the-wild exploitati...

CVE-2026-88091

A vulnerability in Windows Management Instrumentation allows an authorized attacker to achieve local privilege escalation . The root cause is the deserialization of untrusted data . This flaw poses a high risk to system integrity and confidentiality for users with low-level privileges. No specifi...

CVE-2026-87711

A stack-based buffer overflow in Windows Installer allows an authorized attacker to achieve local privilege escalation . The vulnerability enables an attacker with local access to elevate their privileges on the affected system. No specific exploit information or exploit links are provided in the...

CVE-2026-88096

A race condition vulnerability exists in the Windows DCOM Server due to concurrent execution using a shared resource with improper synchronization. This flaw allows an authorized attacker to achieve local privilege elevation . No specific details regarding affected versions or exploit availabilit...

CVE-2026-88124

A Use after free vulnerability in Windows Installer allows an authorized attacker to achieve local privilege elevation . The vulnerability is rated as HIGH severity with a CVSS 3.1 score of 7.0. No specific exploit links or in-the-wild exploitation details are provided in the documents.

CVE-2026-88080

A Use after free vulnerability in Windows Installer allows an authorized attacker to achieve local privilege elevation . The vulnerability is confirmed with a CVSS 3.1 score of 7.8. No specific versions, exploit links, or detailed remediation steps are provided in the documents, though an officia...

CVE-2026-88161

A Use after free vulnerability exists in the Windows Local Security Authority (LSA) . This flaw allows an authorized attacker to perform a local privilege escalation . The CVSS 3.1 score is 7.0 (High) , with an attack complexity of high and requirements for low-level privileges. Remediation is av...

CVE-2026-88157

A heap-based buffer overflow exists in OpenSSH for Windows , which may allow an unauthorized attacker to execute code over a network . The vulnerability is confirmed and carries a High base severity score of 8.8. While the specific component or file is not detailed in the provided documents, the ...

CVE-2026-87708

A Use after free vulnerability in Windows Installer allows an authorized attacker to achieve local privilege escalation . The vulnerability is categorized under CWE-416 . The CVSS 3.1 base score is 7.0 (High) , indicating significant impact on confidentiality, integrity, and availability. An offi...

CVE-2026-85927

A heap-based buffer overflow exists in the Windows Universal Plug and Play (UPnP) Device Host . This vulnerability allows an authorized attacker to achieve local privilege escalation . While the documents confirm the existence of the flaw and its impact on local security, specific details regardi...

CVE-2026-85865

The Windows DHCP Server is susceptible to an improper authentication vulnerability, which allows an authorized attacker to bypass a security feature locally. The vulnerability is associated with CWE-288 (Authentication Bypass Using an Alternate Path or Channel). Exploitation details are not provi...

CVE-2026-85868

A Use after free vulnerability exists in the Windows Common Log File System Driver . This flaw allows an authorized attacker to achieve local privilege elevation . No specific versions, root causes, or exploit details are provided in the documentation. Remediation is indicated as an OFFICIAL_FIX ...

CVE-2026-85869

A Heap-based buffer overflow vulnerability exists in the Microsoft Windows Search Component . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability impacts the confidentiality, integrity, and availability of the affected system. A formal remediation is ...

CVE-2026-85871

A heap-based buffer overflow exists in Windows Kernel-Mode Drivers , which may allow an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-122 . No specific exploited versions, specific impacted files, or exploit links are provided in the documents...

CVE-2026-85870

A heap-based buffer overflow exists in the Windows Common Log File System Driver . This vulnerability allows an authorized attacker to achieve local privilege elevation . No specific exploit details or in-the-wild exploitation information are provided in the documents. Remediation is indicated as...