CVE-2026-96951

The Windows Shell is vulnerable to a security feature bypass (CVE-2026-96951) caused by improper neutralization of special elements used in a command (command injection). This flaw affects Windows 10 , Windows 11 , and certain Server versions , and was also identified in Outlook.com cloud service...

CVE-2026-70024

A stack-based buffer overflow exists in Windows Internet Information Services (IIS), which could allow an unauthorized attacker to execute arbitrary code over a network. The vulnerability is characterized by improper input validation (CWE-20) and has a CRITICAL severity score of 9.80. This flaw a...

CVE-2026-96219

A critical out-of-bounds write vulnerability exists in the Windows Local Security Authority Subsystem Service (LSASS) . This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is assigned a CVSS v3.1 score of 9.80 , indicating a high severity l...

CVE-2026-97816

A Use after free vulnerability in OpenSSH for Windows allows an unauthorized attacker to execute arbitrary code over a network. The vulnerability has a CVSS 3.1 score of 9.8 and is classified as CRITICAL . Exploitation of this flaw does not require prior authentication or user interaction. While ...

CVE-2026-83869

A critical integer underflow (wrap or wraparound) vulnerability in the Windows Domain Name Service (DNS) Server allows an unauthorized attacker to achieve remote code execution over a network. This vulnerability, identified as CVE-2026-83869 , carries a CVSS v3.1 score of 9.8 , indicating a high ...

CVE-2026-97814

A heap-based buffer overflow vulnerability exists in Windows Text Shaping , which could allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a CVSS score of 9.80 and is characterized by low attack complexity, requiring no privileges or user interac...

CVE-2026-97805

The Windows Partition Management Driver contains an out-of-bounds read vulnerability (CWE-125) caused by improper input validation (CWE-20). This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is rated as CRITICAL with a CVSS 3.1 score of 9...

CVE-2026-85792

A Remote Code Execution vulnerability exists in the Windows Routing and Remote Access Service (RRAS) . This flaw allows an attacker to gain unauthorized access to a victim's machine. The vulnerability is associated with CWE-416 (Use After Free) and has a CVSS score of 9.8 . Exploitation can occur...

CVE-2026-85814

A heap-based buffer overflow exists in Microsoft Windows Media Foundation , which could allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a CVSS v3.1 score of 9.8 (CRITICAL), indicating a high impact on confidentiality, integrity, and availabili...

CVE-2026-69886

A heap-based buffer overflow vulnerability exists in the Windows Imaging Component . This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a CVSS 3.1 score of 9.8 (CRITICAL) . While the documents do not provide specific exploit links or v...

CVE-2026-85806

A critical integer underflow (wrap or wraparound) vulnerability exists in the Network Policy Server (NPS) . This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is rated as CRITICAL with a CVSS 3.1 score of 9.80 . While the documents confirm...

CVE-2026-96096

A Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute arbitrary code over a network. This vulnerability has a CRITICAL CVSS v3.1 base score of 9.8 . No specific version numbers, root causes, or remediation steps are provided in the documents beyond the ge...

CVE-2026-96924

A critical untrusted pointer dereference vulnerability exists in Windows OLE , allowing an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a CVSS v3.1 score of 9.8 and is categorized under CWE-822 . According to the NCSC, this vulnerability allows for ...

CVE-2026-96909

A heap-based buffer overflow in Windows BitLocker allows an unauthorized attacker to achieve remote code execution over a network. This vulnerability is classified with a CRITICAL CVSS score of 9.80 . While specific technical details regarding the underlying component or file are not provided bey...

CVE-2026-85818

A critical vulnerability exists in Windows Schannel due to the improper verification of cryptographic signatures . This flaw allows an unauthorized attacker to perform spoofing over a network . The vulnerability has a CVSS v3.1 base score of 9.0 , resulting in high impacts on confidentiality, int...

CVE-2026-85809

A Remote Code Execution vulnerability exists in the Windows Routing and Remote Access Service (RRAS) . This flaw, identified as a Heap-based Buffer Overflow (CWE-122) , allows an attacker to gain unauthorized access to a victim's machine. The vulnerability is rated as CRITICAL with a CVSS v3.1 sc...

CVE-2026-85790

A Use after free vulnerability in Microsoft QUIC allows an unauthorized attacker to disclose information over a network. The vulnerability is characterized by a high confidentiality impact, though it does not affect integrity or availability. Remediation is available via an official fix provided ...

CVE-2026-96952

A Heap-based buffer overflow vulnerability exists in Microsoft Windows Media Foundation . This flaw could allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability is characterized by a CVSS v3.1 score of 8.8 (High) , indicating significant impacts on confi...

CVE-2026-70045

A Use after free vulnerability in Windows Work Folders allows an authorized attacker to achieve local privilege escalation . The vulnerability's impact includes high levels of confidentiality, integrity, and availability. An official fix is available, as indicated by the remediation level. No spe...

CVE-2026-85793

The Windows Sysmain Service is affected by a vulnerability that allows an authorized attacker to disclose sensitive system information locally. This flaw is categorized as an exposure of sensitive system information to an unauthorized control sphere (CWE-497). The vulnerability results in a high ...

CVE-2026-97798

The Windows Error Reporting service is vulnerable to an argument injection vulnerability (CWE-88) caused by improper neutralization of argument delimiters in a command. An authorized attacker can leverage this flaw to achieve local privilege escalation . The official fix is available via the prov...

CVE-2026-83642

A type confusion vulnerability exists in the Windows Domain Name Service (DNS Server). This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is categorized under CWE-843 . No specific exploit information or remediation steps are provided in t...

CVE-2026-83889

The Windows DNS Server is affected by a vulnerability involving the release of an invalid pointer or reference . This flaw allows an authorized attacker to achieve remote code execution over a network. The vulnerability is associated with CWE-763 . No specific exploit information or remediation d...

CVE-2026-96947

A Use after free vulnerability in the Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to achieve local privilege elevation . The vulnerability is characterized by a HIGH base severity score of 7.8 . Official remediation is available through a confirmed fix, a...

CVE-2026-97815

A heap-based buffer overflow vulnerability exists in Windows Error Reporting , which could allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a CVSS v3.1 score of 9.8 (CRITICAL), indicating a high risk of impact on confidentiality, integrity, and...

CVE-2026-85920

A Time-of-check time-of-use (TOCTOU) race condition exists in Windows BitLocker , which could allow an authorized attacker to achieve local privilege elevation . The vulnerability is categorized under CWE-367 . No specific exploitative code or details regarding the exact component or version are ...

CVE-2026-96217

A heap-based buffer overflow exists in Windows NTFS that allows an authorized attacker to elevate privileges locally . The vulnerability is associated with CWE-122 (Heap-based Buffer Overflow) and CWE-190 (Integer Overflow or Wraparound). No specific exploit information or details on in-the-wild ...

CVE-2026-96946

A use after free vulnerability exists in the Windows Universal Disk Format File System Driver (UDFS) . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability has a CVSS 3.1 base score of 7.8 and is categorized as High severity. No specific exploit detail...

CVE-2026-97799

The Windows Audio Service is vulnerable to a Local Privilege Escalation flaw due to improper verification of cryptographic signatures (CWE-347). An authorized attacker can exploit this weakness to elevate privileges locally. A high-severity OFFICIAL_FIX is available. No specific exploit details o...

CVE-2026-97830

A double free vulnerability in Windows Internet Information Services allows an unauthorized attacker to perform a denial of service over a network. The vulnerability is associated with CWE-415 and has a CVSS 3.1 base score of 7.5 (High). No specific exploit information or direct remediation steps...

CVE-2026-69898

A heap-based buffer overflow exists in the Windows Kernel . This vulnerability allows an authorized attacker to perform a local privilege escalation . Information regarding specific affected versions, the root cause component, or a specific patch is not provided in the documents. No exploit detai...

CVE-2026-69923

A vulnerability exists in Windows AI due to an uncontrolled search path element (CWE-427). This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability has a CVSS 3.1 base score of 7.8 (High) . No specific exploit links or technical remediation versions are pr...

CVE-2026-70017

A type confusion vulnerability exists in Windows Secure Kernel Mode , where accessing a resource using an incompatible type allows an authorized attacker to perform a local information disclosure . The vulnerability is assigned CWE-843 . No specific patch versions, exploit links, or additional te...

CVE-2026-85334

An out-of-bounds read vulnerability exists in the Windows Message Queuing Queue Manager . This flaw allows an unauthorized attacker to disclose information over a network. No specific affected versions, root cause technicalities, or exploit links are provided in the documents. Remediation involve...

CVE-2026-85802

A Use after free vulnerability exists in the Windows Win32 Kernel Subsystem . This flaw allows an authorized attacker to perform a local elevation of privilege . The severity is rated as HIGH with a CVSS 3.1 score of 7.0. While the vulnerability is confirmed, specific exploit information or links...

CVE-2026-88070

An out-of-bounds read vulnerability in Windows BitLocker allows an authorized attacker to achieve local privilege elevation . The vulnerability impacts the BitLocker encryption feature, enabling an attacker with existing local access to increase their privileges on the system. Exploitation detail...

CVE-2026-96216

A Use after free vulnerability exists in the Windows Kernel (associated with CWE-416 and CWE-822 ). This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is rated with a High base severity (CVSS 3.1 score of 7.0). No specific exploit details or in-the-wi...

CVE-2026-97788

An observable discrepancy in Active Directory Federation Services (AD FS) allows an unauthorized attacker to disclose information over a network. The vulnerability is classified as a High severity issue with a CVSS score of 7.5. The provided documents do not specify the exact root cause, affected...

CVE-2026-97794

A heap-based buffer overflow exists in the Windows Container Isolation FS Filter Driver (unionfs.sys) . This vulnerability allows an authorized attacker to achieve local privilege escalation . While the CVSS 3.1 score indicates a High severity (7.8), no specific exploit details or in-the-wild exp...

CVE-2026-85329

A race condition vulnerability exists in Microsoft Account due to concurrent execution using a shared resource with improper synchronization. This flaw allows an authorized attacker to achieve local privilege elevation . While the CVE details specify a HIGH base severity score of 7.0, no specific...

CVE-2026-85926

A Use after free vulnerability exists in the Windows Secure Socket Tunneling Protocol (SSTP) . This flaw allows an unauthorized attacker to achieve remote code execution over a network. The CVSS 3.1 score is 8.1 (High) , with high impact across confidentiality, integrity, and availability. Docume...

CVE-2026-87712

A Use after free vulnerability exists in the Windows Quality of Service (QoS) Packet Scheduler (also referred to as the QoS Scheduler Driver ). This flaw allows an authorized attacker to achieve local privilege elevation . No specific versions, exploit links, or remediation details are provided i...

CVE-2026-88091

A vulnerability in Windows Management Instrumentation allows an authorized attacker to achieve local privilege escalation . The root cause is the deserialization of untrusted data . This flaw poses a high risk to system integrity and confidentiality for users with low-level privileges. No specifi...

CVE-2026-88096

A race condition vulnerability exists in the Windows DCOM Server due to concurrent execution using a shared resource with improper synchronization. This flaw allows an authorized attacker to achieve local privilege elevation . No specific details regarding affected versions or exploit availabilit...

CVE-2026-96215

A race condition exists in Windows Autopilot due to concurrent execution using a shared resource with improper synchronization. This vulnerability allows an authorized attacker to achieve local privilege escalation . While the CVSS v3.1 score indicates a High severity (7.0) with impacts on confid...

CVE-2026-96254

A Use after free vulnerability exists in the Windows USB Print Driver . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-416 and has been assigned a High base severity score of 7.0. While the root cause is identified as a Use...

CVE-2026-96307

A Use after free vulnerability exists in Windows Installer . This flaw allows an authorized attacker to achieve local privilege elevation . The CVSS 3.1 base score is 7.0 (High) , reflecting impacts on confidentiality, integrity, and availability. No specific exploit code or detailed remediation ...

CVE-2026-96313

A missing authentication flaw in Windows Push Notifications allows an authorized attacker to perform a local privilege escalation . The root cause is identified as CWE-307 (Missing Authentication for Critical Function). The vulnerability has a High severity base score of 7.0, indicating significa...

CVE-2026-96322

A Use after free vulnerability in the Windows Remote Desktop Protocol allows an authorized attacker to elevate privileges locally . The vulnerability has a CVSS 3.1 base score of 7.0 (HIGH) . While specific affected versions and the exact component/file are not detailed in the provided documents,...

CVE-2026-96949

A use after free vulnerability exists in the Windows Universal Disk Format File System Driver (UDFS) . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is categorized under CWE-362 (Race Condition). While the impact includes high levels of confiden...