CVE-2026-85808

An out-of-bounds read vulnerability exists in the Windows Routing and Remote Access Service (RRAS) . This flaw allows an unauthorized attacker to perform a denial of service (DoS) over a network. The vulnerability has been assigned a high severity (CVSS 7.5) and an official fix is available throu...

CVE-2026-85810

A Use after free vulnerability in the Windows Telephony Server allows an authorized attacker to achieve local privilege elevation . The vulnerability is categorized under CWE-416 . While the CVSS 3.1 score indicates a High severity (7.0) with local access and low privileges required, specific tec...

CVE-2026-85793

The Windows Sysmain Service is affected by a vulnerability that allows an authorized attacker to disclose sensitive system information locally. This flaw is categorized as an exposure of sensitive system information to an unauthorized control sphere (CWE-497). The vulnerability results in a high ...

CVE-2026-85794

An out-of-bounds read vulnerability exists in the Windows Routing and Remote Access Service (RRAS) . This flaw allows an authorized attacker to perform a local information disclosure, potentially exposing sensitive data. No specific exploit details or proof-of-concept code are provided in the doc...

CVE-2026-85795

A Use after free vulnerability exists in the Windows Text Services Framework . This flaw allows an authorized attacker to achieve local privilege elevation . No specific technical root cause, affected versions, or exploit links are provided in the documentation; however, an official fix is noted ...

CVE-2026-85802

A Use after free vulnerability exists in the Windows Win32 Kernel Subsystem . This flaw allows an authorized attacker to perform a local elevation of privilege . The severity is rated as HIGH with a CVSS 3.1 score of 7.0. While the vulnerability is confirmed, specific exploit information or links...

CVE-2026-85803

A Use after free vulnerability exists in the Windows Camera Frame Server Monitor . This flaw allows an authorized attacker to achieve local privilege escalation . No specific version numbers, root cause details, or exploit links are provided in the documents; however, an official fix is noted as ...

CVE-2026-85805

A security flaw in Windows PowerShell arises from an improperly implemented security check for standard. This vulnerability allows an unauthorized attacker to bypass a security feature over a network. The impact is characterized as having high integrity impact with a CVSS 3.1 base score of 6.5 . ...

CVE-2026-85804

A Use after free vulnerability exists in the Windows Win32 Kernel Subsystem . This flaw allows an authorized attacker to achieve local privilege escalation . No specific affected versions, root cause details, or exploit links are provided in the documentation. Remediation is indicated as an OFFIC...

CVE-2026-85796

A numeric truncation error within the Windows Installer component allows an authorized attacker to perform a local privilege escalation . The vulnerability is associated with CWE-197 (Numeric Truncation Error) and CWE-121 (Stack-based Buffer Overflow). Detailed information regarding specific affe...

CVE-2026-85798

A heap-based buffer overflow exists in the Windows Distributed File System (DFS) . This vulnerability allows an authorized attacker to achieve remote code execution over a network. The CVSS 3.1 score is 7.2, reflecting high impact on confidentiality, integrity, and availability. No specific explo...

CVE-2026-85800

A Heap-based buffer overflow exists in Windows Error Reporting that allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-122 . No specific exploit details or direct links to in-the-wild exploitation are provided in the documentation. Remed...

CVE-2026-85797

An out-of-bounds read vulnerability exists in the Windows GDI component. This flaw allows an unauthorized attacker to disclose information over a network. While the technical root cause is identified as improper input validation (CWE-20) and an out-of-bounds read (CWE-125), specific exploit detai...

CVE-2026-85792

A Remote Code Execution vulnerability exists in the Windows Routing and Remote Access Service (RRAS) . This flaw allows an attacker to gain unauthorized access to a victim's machine. The vulnerability is associated with CWE-416 (Use After Free) and has a CVSS score of 9.8 . Exploitation can occur...

CVE-2026-85376

CVE-2026-85376 involves weak authentication within the Windows Print Spooler Components . This vulnerability allows an authorized attacker to perform a local privilege escalation . The CVSS 3.1 score is 7.8 (High) , indicating significant impact on confidentiality, integrity, and availability. No...

CVE-2026-85377

A type confusion vulnerability (CWE-843) exists in the Windows CD-ROM Driver . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is reported as having a HIGH base severity score of 7.8. While specific affected versions are not detailed in the provid...

CVE-2026-85369

Windows Hyper-V is affected by an out-of-bounds read vulnerability. This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is classified as High severity with a CVSS 3.1 score of 8.2. No specific exploit information or remediation steps are provided in th...

CVE-2026-85372

A Use after free vulnerability exists in the Windows Kernel . This flaw allows an authorized attacker to perform a local privilege escalation . The vulnerability is confirmed and has an associated OFFICIAL_FIX ; however, specific affected versions and detailed exploit information are not provided...

CVE-2026-85373

A heap-based buffer overflow exists in the Windows Universal Plug and Play (UPnP) Device Host . This vulnerability allows an authorized attacker to achieve local privilege escalation . No specific version numbers, root causes, or remediation steps are provided in the documents beyond the general ...

CVE-2026-85374

An out-of-bounds read vulnerability exists in Windows Installer , which could allow an authorized attacker to perform a local information disclosure . The impact is categorized as a medium severity risk with a CVSS 3.1 score of 5.5. No specific exploit details or in-the-wild exploitation informat...