CVE-2026-85341

A heap-based buffer overflow exists in the Windows USB Video Driver . This vulnerability allows an authorized attacker to perform a local privilege escalation . The CVSS 3.1 score is 7.8 (High) , with impacts to confidentiality, integrity, and availability. Remediation is available via an officia...

CVE-2026-85343

Windows Hyper-V is affected by an Improper link resolution before file access (link following) vulnerability. This flaw allows an authorized attacker to perform a local privilege escalation . No specific software versions or exploit links are provided in the documents, but the vulnerability has a...

CVE-2026-85332

A Use after free vulnerability in the Windows Device Association Service allows an authorized attacker to achieve local privilege escalation . The vulnerability's impact includes high severity for confidentiality, integrity, and availability. A remediation is available via an official fix ; howev...

CVE-2026-85352

A Use after free vulnerability exists in the Windows Device Association Service . This flaw allows an authorized attacker to achieve local privilege escalation . No specific versions, root causes, or exploit links are provided in the documents, but an official fix is indicated by the remediation ...

CVE-2026-85342

A Use after free vulnerability exists in the Windows Device Association Service . This flaw allows an authorized attacker to achieve local privilege elevation . The CVSS 3.1 score is 7.0 (High) , with a local attack vector and high complexity. No specific exploitations or exploit links are provid...

CVE-2026-85336

An out-of-bounds read vulnerability exists in the Windows Device Association Service . This flaw allows an authorized attacker to perform a local information disclosure by reading data outside of intended boundaries. The vulnerability is assigned CWE-125 and has been confirmed by Microsoft. No sp...

CVE-2026-85339

A Remote Code Execution vulnerability exists in the Windows Routing and Remote Access Service (RRAS) . This flaw is caused by an Integer Underflow (CWE-191) and a Heap-based Buffer Overflow (CWE-122), which could allow an attacker to gain unauthorized access to a victim's machine. The vulnerabili...

CVE-2026-85331

An out-of-bounds read vulnerability exists in the Windows Device Association Service . This flaw allows an authorized attacker to disclose information over a network. While the base severity is rated as MEDIUM (CVSS 3.1: 6.5), the confidentiality impact is noted as HIGH . No specific exploit deta...

CVE-2026-85322

A use of uninitialized resource vulnerability exists in the Windows Routing and Remote Access Service (RRAS) . This flaw allows an unauthorized attacker to disclose information over a network. The vulnerability has been assigned a CVSS v3.1 base score of 7.5 (High) . No specific exploit details o...

CVE-2026-85320

A vulnerability in Windows Print Spooler Components arises from the use of uninitialized resource (CWE-908). This flaw allows an authorized attacker to perform a local information disclosure . The vulnerability has a CVSS 3.1 base score of 5.5 (Medium) . No specific exploit information or technic...

CVE-2026-85328

A weak authentication vulnerability exists in the Windows Projected File System . This flaw allows an authorized attacker to perform a local privilege elevation . No specific software versions, root causes, or remediation steps are provided in the documents beyond the existence of an official fix...

CVE-2026-85327

A heap-based buffer overflow vulnerability exists in the Windows Print Spooler Components . This flaw allows an authorized attacker to perform a local elevation of privilege attack. While the vulnerability's impact is classified as High (CVSS 3.1 score of 7.8), specific details regarding the root...

CVE-2026-84020

A Use after free vulnerability in the Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to achieve local privilege escalation . The impact includes high levels of confidentiality, integrity, and availability. Exploitation details are not provided in the documents.

CVE-2026-84019

A Use after free vulnerability exists in the Windows Advanced Rasterization Platform . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is categorized under CWE-416 . Exploitation details are not provided in the documents. Remediation is available ...

CVE-2026-84018

A Use after free vulnerability exists in Windows Print Spooler Components . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-416 (Use After Free) and CWE-367 (Time-of-check Time-of-use Race Condition). No specific exploit det...

CVE-2026-84017

A Null pointer dereference vulnerability exists in the Windows Routing and Remote Access Service (RRAS) . This flaw allows an unauthorized attacker to perform a Denial of Service (DoS) attack over the network. The vulnerability is characterized by a CVSS 3.1 base score of 7.5 with High availabili...

CVE-2026-84016

The Windows EAPHost Service is affected by an out-of-bounds write vulnerability (CWE-787). This flaw allows an authorized attacker to perform a local privilege escalation . While the vulnerability is confirmed with a high severity score of 7.8, specific details regarding the affected versions, ro...

CVE-2026-69886

A heap-based buffer overflow vulnerability exists in the Windows Imaging Component . This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a CVSS 3.1 score of 9.8 (CRITICAL) . While the documents do not provide specific exploit links or v...

CVE-2026-83932

A heap-based buffer overflow exists in Windows Group Policy , which could allow an authorized attacker to achieve local privilege escalation . The vulnerability is categorized as High severity (CVSS 3.1 score of 7.8) due to its potential impact on confidentiality, integrity, and availability. No ...

CVE-2026-84011

The Windows SMB Client is susceptible to an incorrect authorization vulnerability (CWE-863) that allows an authorized attacker to bypass a security feature locally. The vulnerability results in a high integrity impact but no impact on confidentiality or availability. Remediation is provided via a...