CVE-2026-88143

A heap-based buffer overflow exists in the Windows Storage Spaces Controller . This vulnerability allows an authorized attacker to perform a local privilege escalation . The technical root cause is associated with CWE-122 (Heap-based Buffer Overflow) and CWE-191 (Integer Underflow). No specific e...

CVE-2026-69923

A vulnerability exists in Windows AI due to an uncontrolled search path element (CWE-427). This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability has a CVSS 3.1 base score of 7.8 (High) . No specific exploit links or technical remediation versions are pr...

CVE-2026-88146

A race condition vulnerability exists in the Windows Background Intelligent Transfer Service (BITS) due to concurrent execution using a shared resource with improper synchronization. This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated wit...

CVE-2026-88102

A Use after free vulnerability exists in Windows Failover Cluster , which allows an unauthorized attacker to execute arbitrary code over a network. This vulnerability has a CRITICAL CVSS score of 9.80 . No specific exploit details, affected versions, or remediation steps are provided in the docum...

CVE-2026-88106

A use after free vulnerability exists in the Windows Cloud Files Mini Filter Driver . This flaw allows an authorized attacker to achieve local privilege elevation . No specific software versions or remediation details are provided in the documents, and there are no reports of active exploits.

CVE-2026-88107

A Use after free vulnerability exists in the Windows Cloud Files Mini Filter Driver . This flaw allows an authorized attacker to perform a local privilege escalation . The vulnerability is associated with CWE-416 (Use After Free) and CWE-362 (Race Condition). Official remediation is available via...

CVE-2026-88099

An uncaught exception in the Windows Failover Cluster allows an unauthorized attacker to perform a denial of service (DoS) over a network. The vulnerability is associated with CWE-248 . While the specific software versions and root cause files are not detailed in the provided documents, an offici...

CVE-2026-88098

A vulnerability exists in the Windows Security Support Provider Interface due to an untrusted pointer dereference . This flaw allows an authorized attacker to perform a local elevation of privilege . The CVSS v3.1 score is 7.0 (High) , indicating high impact on confidentiality, integrity, and ava...

CVE-2026-88100

A Use after free vulnerability exists in the Windows Storage Spaces Controller . This flaw allows an authorized attacker to achieve local privilege escalation . While the vulnerability is confirmed with a CVSSv3.1 base score of 7.8 , no specific exploit details or in-the-wild exploitation reports...

CVE-2026-88074

An integer overflow or wraparound vulnerability exists within the Windows Virtualization-Based Security (VBS) Enclave . This flaw allows an authorized attacker to perform a local privilege escalation . No specific exploit details or patch versions are provided in the documents, but the official M...

CVE-2026-87712

A Use after free vulnerability exists in the Windows Quality of Service (QoS) Packet Scheduler (also referred to as the QoS Scheduler Driver ). This flaw allows an authorized attacker to achieve local privilege elevation . No specific versions, exploit links, or remediation details are provided i...

CVE-2026-88070

An out-of-bounds read vulnerability in Windows BitLocker allows an authorized attacker to achieve local privilege elevation . The vulnerability impacts the BitLocker encryption feature, enabling an attacker with existing local access to increase their privileges on the system. Exploitation detail...

CVE-2026-88073

A Use after free vulnerability exists in the Windows Graphics Kernel . This flaw allows an authorized attacker to achieve local privilege elevation . While the specific root cause component is not detailed beyond the kernel level, the impact includes high levels of confidentiality, integrity, and...

CVE-2026-88071

A double free vulnerability exists in Windows Hyper-V , which can be exploited by an authorized attacker to achieve local privilege escalation . While the CVSS 3.1 score indicates a High severity (7.8), the documents do not provide specific details regarding the affected component, file, or speci...

CVE-2026-87716

A heap-based buffer overflow vulnerability exists in the Windows Storage Spaces Controller . This flaw allows an unauthorized attacker to perform a denial of service (DoS) attack over a network. The CVSS 3.1 score of 7.5 (High) reflects an attack vector that requires no privileges or user interac...

CVE-2026-87713

A Use after free vulnerability exists in the Windows Bluetooth Port Driver . This flaw allows an unauthorized attacker to elevate privileges over an adjacent network. No specific software versions or exploit details are provided in the documents. Remediation is indicated as an official fix via th...

CVE-2026-87706

A heap-based buffer overflow vulnerability exists in the Windows Storage Spaces Controller . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability has a HIGH severity score of 7.8. No specific version numbers, exploit links, or detailed remediation step...

CVE-2026-87707

A heap-based buffer overflow in the Windows Fax and Scan Service allows an authorized attacker to achieve local privilege escalation . The vulnerability has a high CVSS 3.1 base score of 7.8 . Official remediation is available through a Microsoft fix .

CVE-2026-85930

A Use after free vulnerability in Windows Image Acquisition allows an authorized attacker to achieve local privilege escalation . The vulnerability is categorized under CWE-416 . While the impact includes high severity for confidentiality, integrity, and availability, specific exploitation detail...

CVE-2026-85933

A Use after free vulnerability exists in the Windows Print Spooler Components . This flaw allows an authorized attacker to perform a local privilege escalation . The vulnerability is assigned a CVSS 3.1 base score of 7.8 (High) . No specific exploit details or remediation steps are provided in th...