CVE-2026-85327

A heap-based buffer overflow vulnerability exists in the Windows Print Spooler Components . This flaw allows an authorized attacker to perform a local elevation of privilege attack. While the vulnerability's impact is classified as High (CVSS 3.1 score of 7.8), specific details regarding the root...

CVE-2026-85328

A weak authentication vulnerability exists in the Windows Projected File System . This flaw allows an authorized attacker to perform a local privilege elevation . No specific software versions, root causes, or remediation steps are provided in the documents beyond the existence of an official fix...

CVE-2026-85322

A use of uninitialized resource vulnerability exists in the Windows Routing and Remote Access Service (RRAS) . This flaw allows an unauthorized attacker to disclose information over a network. The vulnerability has been assigned a CVSS v3.1 base score of 7.5 (High) . No specific exploit details o...

CVE-2026-85320

A vulnerability in Windows Print Spooler Components arises from the use of uninitialized resource (CWE-908). This flaw allows an authorized attacker to perform a local information disclosure . The vulnerability has a CVSS 3.1 base score of 5.5 (Medium) . No specific exploit information or technic...

CVE-2026-85331

An out-of-bounds read vulnerability exists in the Windows Device Association Service . This flaw allows an authorized attacker to disclose information over a network. While the base severity is rated as MEDIUM (CVSS 3.1: 6.5), the confidentiality impact is noted as HIGH . No specific exploit deta...

CVE-2026-84020

A Use after free vulnerability in the Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to achieve local privilege escalation . The impact includes high levels of confidentiality, integrity, and availability. Exploitation details are not provided in the documents.

CVE-2026-84018

A Use after free vulnerability exists in Windows Print Spooler Components . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-416 (Use After Free) and CWE-367 (Time-of-check Time-of-use Race Condition). No specific exploit det...

CVE-2026-84016

The Windows EAPHost Service is affected by an out-of-bounds write vulnerability (CWE-787). This flaw allows an authorized attacker to perform a local privilege escalation . While the vulnerability is confirmed with a high severity score of 7.8, specific details regarding the affected versions, ro...

CVE-2026-84019

A Use after free vulnerability exists in the Windows Advanced Rasterization Platform . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is categorized under CWE-416 . Exploitation details are not provided in the documents. Remediation is available ...

CVE-2026-84017

A Null pointer dereference vulnerability exists in the Windows Routing and Remote Access Service (RRAS) . This flaw allows an unauthorized attacker to perform a Denial of Service (DoS) attack over the network. The vulnerability is characterized by a CVSS 3.1 base score of 7.5 with High availabili...

CVE-2026-69886

A heap-based buffer overflow vulnerability exists in the Windows Imaging Component . This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a CVSS 3.1 score of 9.8 (CRITICAL) . While the documents do not provide specific exploit links or v...

CVE-2026-84009

A Time-of-check time-of-use (TOCTOU) race condition exists in the Windows Projected File System . This vulnerability allows an authorized attacker to perform tampering locally . The vulnerability is associated with CWE-367 . No specific exploit details or remediation steps are provided in the doc...

CVE-2026-83932

A heap-based buffer overflow exists in Windows Group Policy , which could allow an authorized attacker to achieve local privilege escalation . The vulnerability is categorized as High severity (CVSS 3.1 score of 7.8) due to its potential impact on confidentiality, integrity, and availability. No ...

CVE-2026-84013

A use after free vulnerability exists in the Windows Telephony Server component. This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is confirmed with a CVSS 3.1 base score of 7.8. No specific exploit links or detailed remediation steps are provided i...

CVE-2026-83929

An out-of-bounds write vulnerability exists in Windows GDI . This flaw could allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability's severity is rated as HIGH with a CVSS 3.1 score of 8.8, requiring user interaction. Documentation does not provide speci...

CVE-2026-83927

The Windows Registry is susceptible to an improper link resolution before file access (link following) vulnerability. This security flaw allows an authorized attacker to achieve local privilege escalation . While the specific affected versions and technical root causes are not detailed beyond the...

CVE-2026-83928

An out-of-bounds write vulnerability exists in the Windows Local Security Authority Subsystem Service (LSASS) . This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a HIGH base severity score of 8.8. No specific exploit details or direct...

CVE-2026-84011

The Windows SMB Client is susceptible to an incorrect authorization vulnerability (CWE-863) that allows an authorized attacker to bypass a security feature locally. The vulnerability results in a high integrity impact but no impact on confidentiality or availability. Remediation is provided via a...

CVE-2026-84014

A Heap-based buffer overflow exists in the Windows Device Association Service . This vulnerability allows an authorized attacker to achieve local privilege elevation . The issue is associated with CWE-122 (Heap-based Buffer Overflow) and CWE-362 (Race Condition). No specific exploit links or deta...

CVE-2026-85841

A use after free vulnerability in the Windows DHCP Server allows an authorized attacker to execute arbitrary code over a network. The vulnerability impacts the server's ability to handle DHCP requests securely, potentially leading to high levels of confidentiality, integrity, and availability imp...