Microsoft Windows: CVE-2026-83714: HTTP.sys Information Disclosure Vulnerability

Use of uninitialized resource in Windows HTTP.sys allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-83709: Windows NTLM Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows NTLM allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83702: Windows Installer Elevation of Privilege Vulnerability

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-88151: Out-of-bounds Read

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network...

CVE-2026-88150: Use of Uninitialized Resource

Use of uninitialized resource in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

CVE-2026-88153: Out-of-bounds Read

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network...

CVE-2026-85900: Deserialization of Untrusted Data

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

CVE-2026-88137: Files or Directories Accessible to External Parties

Files or directories accessible to external parties in WebDAV allows an authorized attacker to disclose information over a network...

CVE-2026-88106: Use After Free

Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-85945: Use After Free

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-85934: Use After Free

Use after free in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally...

CVE-2026-85930: Use After Free

Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally...

CVE-2026-83888: Buffer Over-read

Buffer over-read in Windows CD-ROM Driver allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-70277: Out-of-bounds Read

Out-of-bounds read in Windows Fast FAT Driver allows an unauthorized attacker to disclose information locally...

CVE-2026-70270: Untrusted Pointer Dereference

Untrusted pointer dereference in Windows Container Isolation FS Filter Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-85816: Out-of-bounds Read

Out-of-bounds read in Windows Wi-Fi Driver allows an authorized attacker to disclose information over an adjacent network...

CVE-2026-85370: Use After Free

Use after free in WebDAV allows an authorized attacker to elevate privileges locally...

CVE-2026-85356: Out-of-bounds Read

Out-of-bounds read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-85341: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-85343: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in Windows Hyper-V allows an authorized attacker to elevate privileges locally...

CVE-2026-85342: Use After Free

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally...

CVE-2026-85321: Allocation of Resources Without Limits or Throttling

Allocation of resources without limits or throttling in Active Directory Federation Services AD FS allows an unauthorized attacker to deny service over a network...

CVE-2026-85319: Allocation of Resources Without Limits or Throttling

Allocation of resources without limits or throttling in Active Directory Federation Services AD FS allows an unauthorized attacker to deny service over a network...

CVE-2026-85318: Heap-based Buffer Overflow

Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally...

CVE-2026-83929: Out-of-bounds Write

Out-of-bounds write in Windows GDI allows an unauthorized attacker to execute code over a network...

CVE-2026-83927: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in Windows Registry allows an authorized attacker to elevate privileges locally...

CVE-2026-83928: Missing Authentication for Critical Function

Out-of-bounds write in Windows Local Security Authority Subsystem Service LSASS allows an unauthorized attacker to execute code over a network...

CVE-2026-83926: Improper Certificate Validation

Improper certificate validation in Windows Hello allows an authorized attacker to bypass a security feature locally...

CVE-2026-83922: Use After Free

Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally...

CVE-2026-83917: Use After Free

Use after free in Windows ALPC allows an authorized attacker to elevate privileges locally...

CVE-2026-83886: Use After Free

Use after free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally...

CVE-2026-83769: Use After Free

Use after free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally...

CVE-2026-83892: Out-of-bounds Read

Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally...

CVE-2026-83885: Inadequate Encryption Strength

Inadequate encryption strength in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to perform spoofing locally...

CVE-2026-83879: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Overlay Filter allows an authorized attacker to elevate privileges locally...

CVE-2026-83868: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-83901: Use After Free

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally...

CVE-2026-83875: Out-of-bounds Read

Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally...

CVE-2026-83865: Relative Path Traversal

Relative path traversal in Windows Internet wininet.dll allows an authorized attacker to perform tampering locally...

CVE-2026-83864: Authentication Bypass by Spoofing

Improper access control in Windows NTFS allows an authorized attacker to disclose information locally...

CVE-2026-83852: Use After Free

Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-83848: Untrusted Pointer Dereference

Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally...

CVE-2026-83849: Out-of-bounds Read

Out-of-bounds read in Windows Hello allows an authorized attacker to disclose information locally...

CVE-2026-83844: Out-of-bounds Read

Out-of-bounds read in Windows Paint allows an unauthorized attacker to execute code over a network...

CVE-2026-83839: Time-of-check Time-of-use (TOCTOU) Race Condition

Time-of-check time-of-use toctou race condition in Windows Hyper-V allows an authorized attacker to elevate privileges locally...

CVE-2026-83834: Use After Free

Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally...

CVE-2026-83826: Untrusted Pointer Dereference

Untrusted pointer dereference in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

CVE-2026-83796: Use After Free

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-83798: Improper Verification of Cryptographic Signature

Improper verification of cryptographic signature in Windows Update Stack allows an authorized attacker to perform spoofing locally...

CVE-2026-83793: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally...