CVE-2026-71347

A race condition vulnerability exists in the Windows Security Center due to concurrent execution using a shared resource with improper synchronization. This flaw allows an authorized attacker to achieve local privilege escalation . The impact includes high levels of confidentiality, integrity, an...

CVE-2026-85858

An out-of-bounds read vulnerability exists within the Windows Win32 Kernel Subsystem . This flaw allows an authorized attacker to achieve local privilege escalation . While the specific root cause is not detailed, the impact includes unauthorized access to elevated permissions. Remediation is ava...

CVE-2026-85856

A heap-based buffer overflow vulnerability exists in Windows Internet Connection Sharing (ICS) . This flaw allows an authorized attacker to achieve remote code execution over an adjacent network . The vulnerability has a CVSS 3.1 base score of 7.1 (High) , with impacts on confidentiality, integri...

CVE-2026-85855

A Use after free vulnerability in the Windows DWM Core Library allows an authorized attacker to achieve local privilege elevation . The vulnerability is classified with a High base severity (7.0) and requires low privileges to exploit. No specific exploit code or in-the-wild exploitation details ...

CVE-2026-85854

A Use after free vulnerability exists in the Windows DWM Core Library . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability has a CVSS 3.1 score of 7.0, indicating a high impact on confidentiality, integrity, and availability. No specific patch versio...

CVE-2026-85860

A Use after free vulnerability exists in the Windows Message Queuing Queue Manager . This flaw allows an authorized attacker to achieve local privilege escalation . No specific affected versions, root cause details, or exploit links are provided in the documents. Remediation is noted as an offici...

CVE-2026-85859

A Null pointer dereference vulnerability exists in the Windows Message Queuing Queue Manager . This flaw allows an authorized attacker to perform a denial of service (DoS) attack over a network. The vulnerability is categorized under CWE-476 and has a CVSS 3.1 score of 6.5. No specific exploit in...

CVE-2026-85863

A Use after free vulnerability exists in the Windows Clipboard User Service . This flaw allows an authorized attacker to achieve local privilege elevation . The impact includes high levels of confidentiality, integrity, and availability loss. Remediation is available via an official fix provided ...

CVE-2026-85857

A vulnerability in Windows Kernel-Mode Drivers allows an authorized attacker to perform a local information disclosure . The issue is caused by the insertion of sensitive information into a log file (CWE-532). The impact is characterized as a high level of confidentiality loss for local users. Re...

CVE-2026-85853

An out-of-bounds read vulnerability exists in the Windows DWM Core Library . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability has been confirmed with a HIGH severity rating (CVSS 3.1 score of 7.0). While the technical root cause is identified as an ...

CVE-2026-85861

A Use after free vulnerability exists in the Windows Clipboard User Service . This flaw allows an authorized attacker to perform a local privilege escalation . The CVSS 3.1 score of 7.8 reflects a high severity with a high complexity requirement and a local attack vector. No specific exploit info...

CVE-2026-85852

An out-of-bounds read vulnerability exists in Windows Management Instrumentation . This flaw allows an authorized attacker to disclose information locally on the affected system. The vulnerability is categorized as a local information disclosure with a CVSS 3.1 score of 5.5 . No specific exploit ...

CVE-2026-85851

A Use after free vulnerability in Windows SmartScreen allows an authorized attacker to achieve local privilege elevation . The vulnerability is classified with a CVSS v3.1 base score of 7.8 (High) . While specific component details or exploit links are not provided in the documents, an official f...

CVE-2026-85836

A Use after free vulnerability exists in the Windows Kernel , which could allow an authorized attacker to achieve local privilege escalation . The vulnerability is classified with a CVSS 3.1 base score of 7.8 (High) . No specific exploit details or in-the-wild exploitation information are provide...

CVE-2026-85849

The Windows AppX Deployment Service is vulnerable to an elevation of privilege flaw caused by improper link resolution before file access (link following). This vulnerability allows an authorized attacker to perform local privilege escalation. The CVSS v3.1 score is 7.8 , reflecting high impact o...

CVE-2026-85834

A heap-based buffer overflow exists in the Windows TCP/IP stack. This vulnerability allows an authorized attacker to perform a local privilege escalation . While the CVSS 3.1 score is 7.0, specific details regarding the exact function or file affected are not provided in the documents. Exploitati...

CVE-2026-85848

A heap-based buffer overflow exists in the Windows Background Intelligent Transfer Service (BITS) . This vulnerability allows an authorized attacker to achieve local privilege elevation . The provided documents do not specify the exact component or file responsible for the overflow, nor do they p...

CVE-2026-85833

A Use after free vulnerability in Windows Modern Device Management (MDM) allows an authorized attacker to achieve local privilege escalation . The vulnerability is assigned a CVSS 3.1 base score of 7.8 (High) . No specific component files, exploit links, or patch versions are provided in the docu...

CVE-2026-85850

The Windows Kernel is susceptible to a vulnerability involving the release of an invalid pointer or reference . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-763 . No specific exploit details or proof-of-concept code are pr...

CVE-2026-85843

The Windows Background Intelligent Transfer Service (BITS) is vulnerable to a local privilege escalation flaw due to the use of uninitialized resource (CWE-908). This vulnerability allows an authorized attacker to elevate their privileges on the local system. No specific details regarding affecte...