CVE-2026-85802

A Use after free vulnerability exists in the Windows Win32 Kernel Subsystem . This flaw allows an authorized attacker to perform a local elevation of privilege . The severity is rated as HIGH with a CVSS 3.1 score of 7.0. While the vulnerability is confirmed, specific exploit information or links...

CVE-2026-85795

A Use after free vulnerability exists in the Windows Text Services Framework . This flaw allows an authorized attacker to achieve local privilege elevation . No specific technical root cause, affected versions, or exploit links are provided in the documentation; however, an official fix is noted ...

CVE-2026-85377

A type confusion vulnerability (CWE-843) exists in the Windows CD-ROM Driver . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is reported as having a HIGH base severity score of 7.8. While specific affected versions are not detailed in the provid...

CVE-2026-85791

A heap-based buffer overflow vulnerability exists in the Windows Encrypting File System (EFS) . This flaw allows an authorized attacker to perform a local elevation of privilege . While the documents confirm the vulnerability type and potential impact, specific details regarding the affected comp...

CVE-2026-85374

An out-of-bounds read vulnerability exists in Windows Installer , which could allow an authorized attacker to perform a local information disclosure . The impact is categorized as a medium severity risk with a CVSS 3.1 score of 5.5. No specific exploit details or in-the-wild exploitation informat...

CVE-2026-85372

A Use after free vulnerability exists in the Windows Kernel . This flaw allows an authorized attacker to perform a local privilege escalation . The vulnerability is confirmed and has an associated OFFICIAL_FIX ; however, specific affected versions and detailed exploit information are not provided...

CVE-2026-85375

A Use after free vulnerability exists in the Windows Universal Plug and Play (UPnP) Device Host component. This flaw allows an authorized attacker to achieve local privilege escalation . No specific exploit details or technical root cause analysis beyond the vulnerability type are provided in the...

CVE-2026-85373

A heap-based buffer overflow exists in the Windows Universal Plug and Play (UPnP) Device Host . This vulnerability allows an authorized attacker to achieve local privilege escalation . No specific version numbers, root causes, or remediation steps are provided in the documents beyond the general ...

CVE-2026-85376

CVE-2026-85376 involves weak authentication within the Windows Print Spooler Components . This vulnerability allows an authorized attacker to perform a local privilege escalation . The CVSS 3.1 score is 7.8 (High) , indicating significant impact on confidentiality, integrity, and availability. No...

CVE-2026-85792

A Remote Code Execution vulnerability exists in the Windows Routing and Remote Access Service (RRAS) . This flaw allows an attacker to gain unauthorized access to a victim's machine. The vulnerability is associated with CWE-416 (Use After Free) and has a CVSS score of 9.8 . Exploitation can occur...

CVE-2026-85369

Windows Hyper-V is affected by an out-of-bounds read vulnerability. This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is classified as High severity with a CVSS 3.1 score of 8.2. No specific exploit information or remediation steps are provided in th...

CVE-2026-85364

A Use after free vulnerability in Windows Installer allows an authorized attacker to achieve local privilege escalation . The vulnerability's base severity score is 7.0 (HIGH) , with impacts on confidentiality, integrity, and availability. No specific exploit information or remediation versions a...

CVE-2026-85354

A Use after free vulnerability exists in Windows Error Reporting , which could allow an authorized attacker to achieve local privilege escalation . The vulnerability is classified with a High severity base score of 7.0. No specific exploit links or remediation details beyond the official Microsof...

CVE-2026-85362

A Release of invalid pointer or reference vulnerability exists in Windows Management Instrumentation . This flaw allows an authorized attacker to perform a local privilege escalation . No specific exploit details or version-specific information are provided in the documents, and no exploits are c...

CVE-2026-85356

An out-of-bounds read vulnerability exists in the Windows Volume Manager Extension Driver . This flaw allows an authorized attacker to perform a local privilege escalation . While the vulnerability is confirmed with a HIGH base severity score of 7.8, specific exploit details or in-the-wild exploi...

CVE-2026-85367

A Use after free vulnerability exists in the Windows Cash Drawer Protocol Provider . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability has a CVSS 3.1 base score of 7.0 (High) . Specific details regarding the underlying root cause, affected versions, ...

CVE-2026-85361

A Use after free vulnerability exists in Windows Installer , which could allow an authorized attacker to achieve local privilege elevation . The severity is rated as High (CVSS 3.1 score of 7.0). No specific exploit details or in-the-wild exploitation information are provided in the documents. Re...

CVE-2026-85359

A code injection vulnerability (CWE-94) exists in Windows Performance Monitor , where improper control of code generation allows an authorized attacker to achieve local privilege elevation . The vulnerability has a CVSS 3.1 base score of 7.8 and is categorized as high severity. Official remediati...

CVE-2026-85368

A heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to perform a local privilege escalation . The vulnerability is confirmed by Microsoft and carries a CVSS v3.1 score of 7.8 (High) . While the technical root cause is a buffer overflow, the documents do not provide specif...

CVE-2026-85355

The Windows Common Log File System Driver is vulnerable to an elevation of privilege flaw due to the inclusion of functionality from an untrusted control sphere (CWE-829 ). An authorized attacker can exploit this issue to gain higher privileges locally. The vulnerability has been assigned a HIGH ...