CVE-2026-85851

A Use after free vulnerability in Windows SmartScreen allows an authorized attacker to achieve local privilege elevation . The vulnerability is classified with a CVSS v3.1 base score of 7.8 (High) . While specific component details or exploit links are not provided in the documents, an official f...

CVE-2026-85836

A Use after free vulnerability exists in the Windows Kernel , which could allow an authorized attacker to achieve local privilege escalation . The vulnerability is classified with a CVSS 3.1 base score of 7.8 (High) . No specific exploit details or in-the-wild exploitation information are provide...

CVE-2026-85850

The Windows Kernel is susceptible to a vulnerability involving the release of an invalid pointer or reference . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-763 . No specific exploit details or proof-of-concept code are pr...

CVE-2026-85843

The Windows Background Intelligent Transfer Service (BITS) is vulnerable to a local privilege escalation flaw due to the use of uninitialized resource (CWE-908). This vulnerability allows an authorized attacker to elevate their privileges on the local system. No specific details regarding affecte...

CVE-2026-85833

A Use after free vulnerability in Windows Modern Device Management (MDM) allows an authorized attacker to achieve local privilege escalation . The vulnerability is assigned a CVSS 3.1 base score of 7.8 (High) . No specific component files, exploit links, or patch versions are provided in the docu...

CVE-2026-85834

A heap-based buffer overflow exists in the Windows TCP/IP stack. This vulnerability allows an authorized attacker to perform a local privilege escalation . While the CVSS 3.1 score is 7.0, specific details regarding the exact function or file affected are not provided in the documents. Exploitati...

CVE-2026-85849

The Windows AppX Deployment Service is vulnerable to an elevation of privilege flaw caused by improper link resolution before file access (link following). This vulnerability allows an authorized attacker to perform local privilege escalation. The CVSS v3.1 score is 7.8 , reflecting high impact o...

CVE-2026-85846

A Use after free vulnerability in the Windows Web Account Manager allows an authorized attacker to achieve local privilege escalation . The vulnerability has a CVSS 3.1 score of 7.0 (High) , indicating high impact on confidentiality, integrity, and availability. Official remediation is available ...

CVE-2026-85848

A heap-based buffer overflow exists in the Windows Background Intelligent Transfer Service (BITS) . This vulnerability allows an authorized attacker to achieve local privilege elevation . The provided documents do not specify the exact component or file responsible for the overflow, nor do they p...

CVE-2026-85840

A vulnerability in Windows Event Viewer allows an authorized attacker to disclose information over a network. The root cause is that certain files or directories are accessible to external parties , leading to potential information disclosure. The vulnerability is associated with CWE-552 . No spe...

CVE-2026-85837

A vulnerability exists in the Windows Kernel due to an out-of-bounds read (CWE-125). This flaw allows an authorized attacker to perform a local privilege escalation . While the severity is classified as High , specific details regarding the affected component, root cause, or exploit availability ...

CVE-2026-85847

An out-of-bounds read vulnerability exists in the Windows Print Spooler Components . This flaw allows an unauthorized attacker to disclose information over a network. The vulnerability is associated with CWE-125 and carries a Medium base severity (CVSS 3.1 score of 6.5). Exploitation details are ...

CVE-2026-85842

A vulnerability in Windows Image Acquisition allows an authorized attacker to achieve local privilege escalation . The root cause is the use of an externally-controlled format string (CWE-134). This flaw enables an attacker with existing local access to elevate their privileges on the system. No ...

CVE-2026-85829

A double free vulnerability exists in the Windows Wired AutoConfig Service . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-415 . No specific exploitation details or remediation steps are provided in the documents beyond th...

CVE-2026-85821

An out-of-bounds read vulnerability exists in the Windows Universal Disk Format File System Driver (UDFS) . This flaw allows an authorized attacker to disclose information locally . The vulnerability is associated with CWE-125 . Official remediation is available via Microsoft's security updates. ...

CVE-2026-85823

A Use after free vulnerability in the Windows Composite Image File System allows an authorized attacker to achieve local privilege escalation . The vulnerability is assigned a CVSS 3.1 base score of 7.0 (High) . While the documentation confirms the existence of an official fix, specific details r...

CVE-2026-85824

A Use after free vulnerability exists in the Windows Composite Image File System . This flaw allows an authorized attacker to perform a local privilege escalation . While the vulnerability is confirmed, specific technical details regarding the root cause or affected components are not provided in...

CVE-2026-85830

An out-of-bounds read vulnerability exists in the Windows Installer component. This flaw allows an authorized attacker to perform a local information disclosure , potentially revealing sensitive data. Exploitation details or specific affected versions are not provided in the documents. Remediatio...

CVE-2026-85822

A heap-based buffer overflow vulnerability exists in the Windows exFAT File System . This flaw allows an authorized attacker to achieve local privilege escalation . The CVSS 3.1 base score is 7.8 (High) , reflecting high impact on confidentiality, integrity, and availability. Exploitation details...

CVE-2026-85826

An out-of-bounds write vulnerability exists in the Windows Fast FAT Driver . This flaw allows an authorized attacker to achieve local privilege elevation . The official CVSS 3.1 score is 7.0 (High) , with a high impact on confidentiality, integrity, and availability. No specific exploit details o...