Cpe:2.3:a:microsoft:outlook_web:-:*:*:*:*:*:*:* - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/cpes/cpe2.3amicrosoftoutlook_web-/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioFri, 02 Oct 2026 20:23:41 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgMicrosoft Security Updates - October 2026https://feed.craftedsignal.io/briefs/2026-10-microsoft-security-updates/Fri, 02 Oct 2026 20:23:41 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-microsoft-security-updates/Roundup of Microsoft security advisories published in October 2026.This roundup covers 1301 Microsoft security vulnerabilities. CVSS base scores range from 4.7 to 9.9. None are reported as actively exploited at the time of release. The issues affect ASP.NET Core, Access, Active Directory Federation Services, Azure API Center, Azure App Service, Azure Arc, Azure Attestation, Azure CycleCloud, Azure DevOps, Azure Event Grid, Azure HDInsight, Azure Key Vault, Azure SRE Agent, Azure Storage Library, Background Intelligent Transfer Service, BitLocker, Bluetooth Driver, Bookings, CCFFilter Driver, COM, Common Log File System Driver, Configuration Manager, Connected Devices Platform Service, DNS Server, Dataverse, Defender, Defender for Endpoint, Desktop Window Manager, Domain Name Service, Dynamics 365 Business Central, Dynamics Business Central, Encrypting File System, Excel, Exchange Server, Failover Cluster Virtual Driver, Graphic Fonts, Graphics Component, HID Parser Library, HTTP.sys, Hyper-V, Input Method Editor, Internet Connection Sharing, Internet Explorer, Internet Messaging API, Kernel Streaming Service, Libarchive, Local Security Authority Server, Local Security Authority Subsystem Service, MPEG-2 Video Extension, Microsoft Account, Microsoft Defender, Microsoft Office, Microsoft Office Excel, Microsoft Office Word, Microsoft QUIC, Microsoft XML, Network Device Enrollment Service, Network File System, Network Policy Server, Office, Office Access, Office Click-To-Run, Office Excel, Office OneNote, Office Outlook, Office PowerPoint, Office SharePoint, Office Visio, Office Word, OneNote, OpenSSH for Windows, Paint, Partner Center, PostScript Printer Driver, Power Apps, PowerPoint, PowerToys, Quality Windows Audio/Video Experience, RPC Endpoint Mapper Service, RPC Runtime, Remote Desktop Client, Remote Desktop Display Driver, Remote Desktop Gateway Service, Remote Desktop Services, Resilient File System, Routing and Remote Access Service, SQLite, Scripting Engine, Servicing Stack Updates, SharePoint, SharePoint Server, Skype for Business, Software Protection Platform, Streaming Service, SysInternals, Sysinternals, Trace Data Helper, Visual Studio Code, Visual Studio Tools for Applications, WebDAV, Windows, Windows AI, Windows Advanced Rasterization Platform, Windows Aggregated Data Platform Service, Windows Ancillary Function Driver for WinSock, Windows AppX Deployment Service, Windows Audio Service, Windows Autopilot, Windows Background Intelligent Transfer Service, Windows Backup Engine, Windows Bind Filter Driver, Windows Biometric Service, Windows BitLocker, Windows Bluetooth Driver, Windows Bluetooth Port Driver, Windows Bluetooth Service, Windows Broadcast DVR User Service, Windows CD-ROM File System Driver, Windows COM+ Event System Service, Windows Camera Frame Server Monitor, Windows Client License Service, Windows Client for NFS, Windows Client-Side Caching, Windows Clipboard User Service, Windows Cloud Files Mini Filter Driver, Windows Codecs Library, Windows Common Log File System Driver, Windows Composite Image File System, Windows Connected Devices Platform Service, Windows Connected User Experiences and Telemetry, Windows Container Isolation FS Filter Driver, Windows Core Messaging, Windows Credential Guard, Windows Credential Manager, Windows Credential Providers, Windows Cryptographic Services, Windows DCOM Server, Windows DHCP Client, Windows DHCP Server, Windows DNS, Windows DNS Server, Windows DWM Core Library, Windows Defender Firewall Service, Windows Deployment Services, Windows Device Association Service, Windows Device Install Service, Windows Diagnostic Policy Service, Windows Direct Composition, Windows Distributed File System, Windows Domain Name Service, Windows Embedded Mode Service, Windows Encrypting File System, Windows Enterprise App Management, Windows Error Reporting, Windows Event Logging Service, Windows Event Tracing, Windows Event Viewer, Windows Failover Cluster, Windows Fast FAT File System Driver, Windows Fax and Scan Service, Windows GDI+, Windows Graphics Kernel, Windows Group Policy, Windows Health and Optimized Experiences Service, Windows Hello, Windows Host Guardian Service, Windows Hyper-V, Windows IKE Extension, Windows IP Over USB Service, Windows Image Acquisition, Windows Imaging Component, Windows Installer, Windows Internal System User Profile, Windows Internet, Windows Internet Key Exchange, Windows Internet Key Exchange Extension, Windows Kernel, Windows Kernel-Mode Driver, Windows Kernel-Mode Drivers, Windows Key Storage Provider, Windows Local Security Authority Subsystem Service, Windows MIDI Service Module, Windows Management Instrumentation, Windows Management Services, Windows Media, Windows Media Foundation, Windows Media Player, Windows Media Video Decoder, Windows Message Queuing, Windows Message Queuing Queue Manager, Windows Modern Device Management, Windows NTFS, Windows Netlogon, Windows Network File System, Windows Network Load Balancing, Windows Now Playing Session Manager, Windows OLE, Windows OLE DB, Windows Overlay Filter, Windows PCI Bus Driver, Windows PDF, Windows Partition Management Driver, Windows Perception Simulation Service, Windows Performance Monitor, Windows Phone Service, Windows Portable Device File System Driver, Windows Portable Device MTP Driver, Windows Print Spooler, Windows Print Spooler Components, Windows Program Compatibility Assistant Service, Windows Projected File System, Windows Push Notifications, Windows Raw Image Extension, Windows Reliable Multicast Transport Driver, Windows Remote Access Connection Manager, Windows Remote Access Service, Windows Remote Desktop, Windows Remote Desktop Gateway, Windows Remote Desktop Protocol, Windows Remote POS Driver, Windows Resilient File System, Windows Resource Management, Windows Resume, Windows Rich Text Edit Control, Windows Routing and Remote Access Service, Windows SMB Client, Windows SMB Server, Windows Schannel, Windows Search, Windows Search Component, Windows Search Service, Windows Secure Kernel Mode, Windows Secure Socket Tunneling Protocol, Windows Security Account Manager, Windows Security App, Windows Security Center, Windows Sensor Data Service, Windows Server, Windows Server DNS Server, Windows Server Update Service, Windows Servicing Stack, Windows Setup Files Cleanup, Windows Shell, Windows Smart Card, Windows SmartScreen, Windows StateRepository API, Windows Storage, Windows Storage Port Driver, Windows Storage Spaces Controller, Windows Storage VSP Driver, Windows Storport Miniport Driver, Windows Sysmain Service, Windows System Information Console, Windows TCP/IP, Windows Telephony Server, Windows Text Services Framework, Windows Text Shaping, Windows UEFI, Windows UI Immersive Server, Windows USB Driver, Windows USB Print Driver, Windows USB Video Driver, Windows Universal Disk Format File System Driver, Windows Universal Plug and Play, Windows Universal Plug and Play Device Host, Windows Update, Windows Update Delivery Optimization, Windows Update Orchestrator Service, Windows Update Service, Windows Update Stack, Windows User Profile Service, Windows Volume Manager Extension Driver, Windows WLAN Service, Windows WalletService, Windows Web Account Manager, Windows Wi-Fi Driver, Windows Win32 Kernel Subsystem, Windows Wired AutoConfig Service, Windows Work Folders, Windows Workstation Service, Windows exFAT File System, Windows iSCSI, XML, libarchive, pbi-cli.

Summary

CVE Product Severity CVSS EPSS KEV Source
CVE-2026-96940 Exchange Server no MSRC (authoritative)
CVE-2026-69435 Azure SRE Agent Critical 9.6 0.39% no NVD (authoritative)
CVE-2026-77900 Azure App Service no NVD (authoritative)
CVE-2026-88131 Dataverse Critical 9.8 0.84% no NVD (authoritative)
CVE-2026-94510 Bookings Critical 9.9 0.40% no NVD (authoritative)
CVE-2026-96207 Partner Center no NVD (authoritative)
CVE-2026-83943 Azure API Center no NVD (authoritative)
CVE-2026-83947 Azure Event Grid no NVD (authoritative)
CVE-2026-108744 pbi-cli (3.10.1 through 3.12.0) no NVD (authoritative)
CVE-2026-100202 Windows Message Queuing Queue Manager no NVD (authoritative)
CVE-2026-100219 Microsoft QUIC no NVD (authoritative)
CVE-2026-100222 Network Policy Server no NVD (authoritative)
CVE-2026-102210 Windows Text Shaping no NVD (authoritative)
CVE-2026-105010 Windows Search Component no NVD (authoritative)
CVE-2026-105016 Microsoft QUIC no NVD (authoritative)
CVE-2026-69634 Windows iSCSI no NVD (authoritative)
CVE-2026-69705 Windows no NVD (authoritative)
CVE-2026-69883 Windows no NVD (authoritative)
CVE-2026-69886 Windows Imaging Component no NVD (authoritative)
CVE-2026-70096 Windows Rich Text Edit Control no NVD (authoritative)
CVE-2026-70147 PostScript Printer Driver no NVD (authoritative)
CVE-2026-70153 PostScript Printer Driver Critical 9.8 no NVD (authoritative)
CVE-2026-70157 Windows System Information Console no NVD (authoritative)
CVE-2026-70188 ASP.NET Core Critical 9.1 0.83% no NVD (authoritative)
CVE-2026-70300 Office Word no NVD (authoritative)
CVE-2026-83517 Windows Media Foundation no NVD (authoritative)
CVE-2026-83519 Windows Error Reporting no NVD (authoritative)
CVE-2026-83693 Windows Error Reporting no NVD (authoritative)
CVE-2026-83748 Windows Error Reporting no NVD (authoritative)
CVE-2026-83770 Windows no NVD (authoritative)
CVE-2026-83780 CCFFilter Driver no NVD (authoritative)
CVE-2026-83782 Windows Shell no NVD (authoritative)
CVE-2026-83862 Windows Network Load Balancing no NVD (authoritative)
CVE-2026-83935 XML no NVD (authoritative)
CVE-2026-85792 Windows Routing and Remote Access Service no NVD (authoritative)
CVE-2026-85806 Network Policy Server no NVD (authoritative)
CVE-2026-85809 Routing and Remote Access Service no NVD (authoritative)
CVE-2026-85814 Windows Media Foundation no NVD (authoritative)
CVE-2026-85818 Windows Schannel no NVD (authoritative)
CVE-2026-85928 Windows Volume Manager Extension Driver no NVD (authoritative)
CVE-2026-88092 ASP.NET Core Critical 9.4 no NVD (authoritative)
CVE-2026-88102 Windows Failover Cluster Critical 9.8 no NVD (authoritative)
CVE-2026-88156 Office Outlook no NVD (authoritative)
CVE-2026-96113 Windows Server Critical 9.8 0.67% no NVD (authoritative)
CVE-2026-97016 Office Outlook no NVD (authoritative)
CVE-2026-97805 Windows Partition Management Driver no NVD (authoritative)
CVE-2026-97814 Windows no NVD (authoritative)
CVE-2026-97815 Windows Error Reporting no NVD (authoritative)
CVE-2026-97816 OpenSSH for Windows no NVD (authoritative)
CVE-2026-102238 Visual Studio Code no NVD (authoritative)
CVE-2026-100200 Windows Update Service no NVD (authoritative)
CVE-2026-100201 Windows Client License Service no NVD (authoritative)
CVE-2026-100203 Windows Update Service no NVD (authoritative)
CVE-2026-100205 Sysinternals no NVD (authoritative)
CVE-2026-100207 Azure CycleCloud no NVD (authoritative)
CVE-2026-100220 Windows Media Video Decoder High 8.8 no NVD (authoritative)
CVE-2026-102204 Defender for Endpoint High 7.8 no NVD (authoritative)
CVE-2026-102227 Resilient File System (ReFS) High 7.8 0.32% no NVD (authoritative)
CVE-2026-102231 Visual Studio Code no NVD (authoritative)
CVE-2026-102233 Visual Studio Code no NVD (authoritative)
CVE-2026-103569 Windows no NVD (authoritative)
CVE-2026-103577 Microsoft QUIC no NVD (authoritative)
CVE-2026-105717 Office Access no NVD (authoritative)
CVE-2026-105718 Excel no NVD (authoritative)
CVE-2026-105728 Dynamics Business Central no NVD (authoritative)
CVE-2026-108130 Windows no NVD (authoritative)
CVE-2026-108132 Windows no NVD (authoritative)
CVE-2026-108133 Windows Modern Device Management no NVD (authoritative)
CVE-2026-108134 Windows Autopilot no NVD (authoritative)
CVE-2026-108135 Windows Backup Engine no NVD (authoritative)
CVE-2026-108136 Windows Search Component no NVD (authoritative)
CVE-2026-108396 Windows Modern Device Management High 7.0 no NVD (authoritative)
CVE-2026-108399 Hyper-V no NVD (authoritative)
CVE-2026-108400 Windows Codecs Library no NVD (authoritative)
CVE-2026-108457 Windows PDF High 8.1 no NVD (authoritative)
CVE-2026-108458 Remote Desktop Client High 8.8 0.77% no NVD (authoritative)
CVE-2026-108460 Windows Message Queuing High 8.1 no NVD (authoritative)
CVE-2026-108461 Windows Broadcast DVR User Service no NVD (authoritative)
CVE-2026-108463 Windows SmartScreen no NVD (authoritative)
CVE-2026-108464 Software Protection Platform no NVD (authoritative)
CVE-2026-108465 Windows Update Delivery Optimization no NVD (authoritative)
CVE-2026-96951 Windows High 8.8 1.51% no source (authoritative)
CVE-2026-102849 Office Access no MSRC (authoritative)
CVE-2026-102850 Access no MSRC (authoritative)
CVE-2026-103572 Visual Studio Tools for Applications no MSRC (authoritative)
CVE-2026-105725 Windows Security App High 7.0 no MSRC (authoritative)
CVE-2026-105727 Dynamics 365 Business Central High 8.8 0.92% no MSRC (authoritative)
CVE-2026-108468 Windows Installer High 7.0 0.25% no MSRC (authoritative)
CVE-2026-102229 Visual Studio Code no MSRC (authoritative)
CVE-2026-102232 Visual Studio Code High 7.0 0.33% no MSRC (authoritative)
CVE-2026-102234 Visual Studio Code no MSRC (authoritative)
CVE-2026-102235 Visual Studio Code High 8.8 no MSRC (authoritative)
CVE-2026-70098 Visual Studio Code no MSRC (authoritative)
CVE-2026-102855 Office Visio no MSRC (authoritative)
CVE-2026-102856 Office Visio no MSRC (authoritative)
CVE-2026-102857 Office Visio no MSRC (authoritative)
CVE-2026-102858 Office OneNote no MSRC (authoritative)
CVE-2026-102859 SharePoint no MSRC (authoritative)
CVE-2026-102860 SharePoint no MSRC (authoritative)
CVE-2026-102861 SharePoint High 8.8 no MSRC (authoritative)
CVE-2026-102862 SharePoint no MSRC (authoritative)
CVE-2026-102863 SharePoint no MSRC (authoritative)
CVE-2026-102864 Office SharePoint no MSRC (authoritative)
CVE-2026-102865 SharePoint no MSRC (authoritative)
CVE-2026-102866 SharePoint no MSRC (authoritative)
CVE-2026-102867 Office no MSRC (authoritative)
CVE-2026-96183 Windows Health and Optimized Experiences Service no MSRC (authoritative)
CVE-2026-105591 Office Access High 8.8 no MSRC (authoritative)
CVE-2026-105592 Office Access no MSRC (authoritative)
CVE-2026-105593 Office Access no MSRC (authoritative)
CVE-2026-105595 Office Access High 8.8 0.74% no MSRC (authoritative)
CVE-2026-105596 Office Access no MSRC (authoritative)
CVE-2026-105597 Office Access no MSRC (authoritative)
CVE-2026-105598 Office Access no MSRC (authoritative)
CVE-2026-105599 Office PowerPoint no MSRC (authoritative)
CVE-2026-94506 Office Access no MSRC (authoritative)
CVE-2026-105713 Office SharePoint no MSRC (authoritative)
CVE-2026-105714 Office Access no MSRC (authoritative)
CVE-2026-105715 Office Word no MSRC (authoritative)
CVE-2026-105716 Office Access no MSRC (authoritative)
CVE-2026-105720 SharePoint no MSRC (authoritative)
CVE-2026-69370 Visual Studio Code no MSRC (authoritative)
CVE-2026-108467 PostScript Printer Driver no MSRC (authoritative)
CVE-2026-105719 SharePoint Server no MSRC (authoritative)
CVE-2026-105722 Windows Broadcast DVR User Service no MSRC (authoritative)
CVE-2026-105723 Windows Distributed File System no MSRC (authoritative)
CVE-2026-105726 Microsoft Defender Medium 5.5 no MSRC (authoritative)
CVE-2026-70235 Windows no MSRC (authoritative)
CVE-2026-105731 Microsoft Office no MSRC (authoritative)
CVE-2026-105732 SysInternals High 7.3 no MSRC (authoritative)
CVE-2026-105733 Windows Hyper-V no MSRC (authoritative)
CVE-2026-108462 Windows Kernel no MSRC (authoritative)
CVE-2026-108466 Windows Kernel no MSRC (authoritative)
CVE-2026-69898 Windows no MSRC (authoritative)
CVE-2026-49785 Windows UEFI no MSRC (authoritative)
CVE-2026-72968 Windows Program Compatibility Assistant Service High 7.0 no MSRC (authoritative)
CVE-2026-69363 Windows Error Reporting High 8.0 no MSRC (authoritative)
CVE-2026-70566 Windows no MSRC (authoritative)
CVE-2026-61931 Windows Perception Simulation Service no MSRC (authoritative)
CVE-2026-69763 Windows no MSRC (authoritative)
CVE-2026-69766 Windows Storage High 7.0 no MSRC (authoritative)
CVE-2026-69935 Windows Storage no MSRC (authoritative)
CVE-2026-69795 Windows no MSRC (authoritative)
CVE-2026-69867 SQLite no MSRC (authoritative)
CVE-2026-69914 Windows AppX Deployment Service no MSRC (authoritative)
CVE-2026-69840 Windows no MSRC (authoritative)
CVE-2026-69850 Windows no MSRC (authoritative)
CVE-2026-69926 Desktop Window Manager no MSRC (authoritative)
CVE-2026-69905 Windows AppX Deployment Service no MSRC (authoritative)
CVE-2026-69909 COM no MSRC (authoritative)
CVE-2026-69913 Windows no MSRC (authoritative)
CVE-2026-69918 Windows Core Messaging no MSRC (authoritative)
CVE-2026-69942 Windows Overlay Filter no MSRC (authoritative)
CVE-2026-69950 Windows no MSRC (authoritative)
CVE-2026-69947 Windows Overlay Filter no MSRC (authoritative)
CVE-2026-69952 Windows Overlay Filter High 7.8 0.34% no MSRC (authoritative)
CVE-2026-69953 Windows Overlay Filter no MSRC (authoritative)
CVE-2026-69954 Windows Overlay Filter no MSRC (authoritative)
CVE-2026-69958 Windows Overlay Filter no MSRC (authoritative)
CVE-2026-69959 Windows no MSRC (authoritative)
CVE-2026-69963 Streaming Service no MSRC (authoritative)
CVE-2026-69967 Windows Overlay Filter no MSRC (authoritative)
CVE-2026-69966 Kernel Streaming Service no MSRC (authoritative)
CVE-2026-69964 Windows no MSRC (authoritative)
CVE-2026-69968 libarchive no MSRC (authoritative)
CVE-2026-69970 Streaming Service no MSRC (authoritative)
CVE-2026-69969 Windows AppX Deployment Service no MSRC (authoritative)
CVE-2026-69971 Windows Kernel-Mode Drivers no MSRC (authoritative)
CVE-2026-69973 Windows no MSRC (authoritative)
CVE-2026-69974 Desktop Window Manager no MSRC (authoritative)
CVE-2026-69976 Remote Desktop Client no MSRC (authoritative)
CVE-2026-69978 Windows no MSRC (authoritative)
CVE-2026-69979 Windows AppX Deployment Service no MSRC (authoritative)
CVE-2026-70010 Windows no MSRC (authoritative)
CVE-2026-70014 Windows Cryptographic Services no MSRC (authoritative)
CVE-2026-70015 Windows Local Security Authority Subsystem Service (LSASS) High 7.8 no MSRC (authoritative)
CVE-2026-70017 Windows Secure Kernel Mode no MSRC (authoritative)
CVE-2026-70021 Windows no MSRC (authoritative)
CVE-2026-70025 Windows Netlogon no MSRC (authoritative)
CVE-2026-70026 Windows no MSRC (authoritative)
CVE-2026-70033 Windows Remote Desktop Gateway no MSRC (authoritative)
CVE-2026-70056 Windows Update Service no MSRC (authoritative)
CVE-2026-70057 Routing and Remote Access Service no MSRC (authoritative)
CVE-2026-70058 Windows DHCP Server no MSRC (authoritative)
CVE-2026-70059 Windows High 7.8 no MSRC (authoritative)
CVE-2026-70060 Windows no MSRC (authoritative)
CVE-2026-70063 Windows Kernel no MSRC (authoritative)
CVE-2026-70062 libarchive no MSRC (authoritative)
CVE-2026-70076 Windows no MSRC (authoritative)
CVE-2026-70077 Windows no MSRC (authoritative)
CVE-2026-70079 Windows DNS no MSRC (authoritative)
CVE-2026-70082 Windows DNS no MSRC (authoritative)
CVE-2026-70085 DNS Server no MSRC (authoritative)
CVE-2026-70083 DNS Server no MSRC (authoritative)
CVE-2026-70087 DNS Server no MSRC (authoritative)
CVE-2026-70090 Windows no MSRC (authoritative)
CVE-2026-70097 Windows Medium 5.6 no MSRC (authoritative)
CVE-2026-70095 Windows no MSRC (authoritative)
CVE-2026-70103 Windows Error Reporting no MSRC (authoritative)
CVE-2026-70093 Windows Rich Text Edit Control no MSRC (authoritative)
CVE-2026-70106 Windows Kernel no MSRC (authoritative)
CVE-2026-70121 Windows Kernel no MSRC (authoritative)
CVE-2026-70139 Windows Update Service no MSRC (authoritative)
CVE-2026-70108 Windows High 7.8 no MSRC (authoritative)
CVE-2026-70117 Windows no MSRC (authoritative)
CVE-2026-70114 Windows Kernel no MSRC (authoritative)
CVE-2026-70127 Windows Domain Name Service no MSRC (authoritative)
CVE-2026-70123 Graphics Component no MSRC (authoritative)
CVE-2026-70140 Windows Audio Service no MSRC (authoritative)
CVE-2026-70115 Windows no MSRC (authoritative)
CVE-2026-70132 Windows Portable Device File System Driver no MSRC (authoritative)
CVE-2026-70118 Windows Audio Service no MSRC (authoritative)
CVE-2026-70126 Windows Bluetooth Port Driver High 7.1 no MSRC (authoritative)
CVE-2026-70135 Windows Remote POS Driver no MSRC (authoritative)
CVE-2026-70166 Windows DNS no MSRC (authoritative)
CVE-2026-70136 Windows Search Component no MSRC (authoritative)
CVE-2026-70138 Windows OLE no MSRC (authoritative)
CVE-2026-70119 Windows DNS no MSRC (authoritative)
CVE-2026-70155 Windows DNS no MSRC (authoritative)
CVE-2026-70133 Windows SMB Server no MSRC (authoritative)
CVE-2026-70141 Windows Search Component no MSRC (authoritative)
CVE-2026-70173 Windows Search Component no MSRC (authoritative)
CVE-2026-70142 Windows Update Service no MSRC (authoritative)
CVE-2026-70150 Windows Search Component no MSRC (authoritative)
CVE-2026-70176 Windows no MSRC (authoritative)
CVE-2026-70177 Windows Search Component no MSRC (authoritative)
CVE-2026-70156 Windows Search Component no MSRC (authoritative)
CVE-2026-70198 Windows Push Notifications no MSRC (authoritative)
CVE-2026-70169 Windows Connected Devices Platform Service no MSRC (authoritative)
CVE-2026-70168 Windows Ancillary Function Driver for WinSock no MSRC (authoritative)
CVE-2026-70195 Windows no MSRC (authoritative)
CVE-2026-70205 Windows Ancillary Function Driver for WinSock no MSRC (authoritative)
CVE-2026-70233 Windows Common Log File System Driver no MSRC (authoritative)
CVE-2026-70247 HTTP.sys High 7.8 0.31% no MSRC (authoritative)
CVE-2026-70223 Windows High 7.0 no MSRC (authoritative)
CVE-2026-70225 Windows Ancillary Function Driver for WinSock no MSRC (authoritative)
CVE-2026-70234 Desktop Window Manager no MSRC (authoritative)
CVE-2026-70249 Windows no MSRC (authoritative)
CVE-2026-70253 Windows High 7.0 no MSRC (authoritative)
CVE-2026-70255 Desktop Window Manager High 7.8 0.36% no MSRC (authoritative)
CVE-2026-70252 Windows no MSRC (authoritative)
CVE-2026-70271 Windows no MSRC (authoritative)
CVE-2026-70272 Windows Installer no MSRC (authoritative)
CVE-2026-70273 Windows no MSRC (authoritative)
CVE-2026-70274 Windows High 7.8 0.32% no MSRC (authoritative)
CVE-2026-70278 Windows Media Foundation High 7.8 no MSRC (authoritative)
CVE-2026-70280 Windows Hello no MSRC (authoritative)
CVE-2026-70284 Windows no MSRC (authoritative)
CVE-2026-70285 Windows no MSRC (authoritative)
CVE-2026-68836 Windows no MSRC (authoritative)
CVE-2026-69521 Windows no MSRC (authoritative)
CVE-2026-69644 Windows Medium 5.5 no MSRC (authoritative)
CVE-2026-69721 Windows no MSRC (authoritative)
CVE-2026-72955 Windows High 7.0 0.28% no MSRC (authoritative)
CVE-2026-70580 Windows Credential Guard High 8.8 0.30% no MSRC (authoritative)
CVE-2026-69354 Windows Error Reporting High 7.8 no MSRC (authoritative)
CVE-2026-72934 Windows Program Compatibility Assistant Service no MSRC (authoritative)
CVE-2026-69387 Windows Error Reporting no MSRC (authoritative)
CVE-2026-69830 Windows DHCP Server no MSRC (authoritative)
CVE-2026-72969 Windows no MSRC (authoritative)
CVE-2026-69743 Windows Program Compatibility Assistant Service no MSRC (authoritative)
CVE-2026-69633 Windows Update no MSRC (authoritative)
CVE-2026-69673 Windows Update no MSRC (authoritative)
CVE-2026-69718 Windows Update no MSRC (authoritative)
CVE-2026-69882 Windows Update no MSRC (authoritative)
CVE-2026-81964 Windows Update Orchestrator Service no MSRC (authoritative)
CVE-2026-81969 Windows Server Update Service no MSRC (authoritative)
CVE-2026-83504 Windows SmartScreen no MSRC (authoritative)
CVE-2026-83500 BitLocker no MSRC (authoritative)
CVE-2026-83499 Windows Server Update Service no MSRC (authoritative)
CVE-2026-83516 Local Security Authority Subsystem Service no MSRC (authoritative)
CVE-2026-83515 Windows no MSRC (authoritative)
CVE-2026-83518 RPC Runtime no MSRC (authoritative)
CVE-2026-83521 Windows no MSRC (authoritative)
CVE-2026-83571 Windows Audio Service no MSRC (authoritative)
CVE-2026-83575 Windows Search Component no MSRC (authoritative)
CVE-2026-83580 Windows Client-Side Caching (CSC) Service no MSRC (authoritative)
CVE-2026-83584 Windows High 7.0 no MSRC (authoritative)
CVE-2026-83635 DNS Server no MSRC (authoritative)
CVE-2026-83641 Windows Media no MSRC (authoritative)
CVE-2026-83642 Domain Name Service no MSRC (authoritative)
CVE-2026-83644 Windows Audio Service no MSRC (authoritative)
CVE-2026-83646 Active Directory Federation Services no MSRC (authoritative)
CVE-2026-83649 Windows Medium 6.5 no MSRC (authoritative)
CVE-2026-83650 Windows Media no MSRC (authoritative)
CVE-2026-83652 Windows no MSRC (authoritative)
CVE-2026-83654 Windows Modern Device Management no MSRC (authoritative)
CVE-2026-83655 Network Policy Server no MSRC (authoritative)
CVE-2026-83657 Windows Modern Device Management no MSRC (authoritative)
CVE-2026-83658 Windows Error Reporting no MSRC (authoritative)
CVE-2026-83671 Hyper-V Medium 6.5 0.41% no MSRC (authoritative)
CVE-2026-83669 Windows Error Reporting no MSRC (authoritative)
CVE-2026-83675 Windows no MSRC (authoritative)
CVE-2026-83678 Windows no MSRC (authoritative)
CVE-2026-83681 PowerToys no MSRC (authoritative)
CVE-2026-83687 Windows Connected User Experiences and Telemetry no MSRC (authoritative)
CVE-2026-83688 Remote Desktop Client no MSRC (authoritative)
CVE-2026-83690 Windows Kernel no MSRC (authoritative)
CVE-2026-83691 Windows DHCP Server no MSRC (authoritative)
CVE-2026-83692 Windows Bind Filter Driver no MSRC (authoritative)
CVE-2026-83694 Windows Volume Manager Extension Driver no MSRC (authoritative)
CVE-2026-83699 Windows Client-Side Caching (CSC) Service no MSRC (authoritative)
CVE-2026-83700 Windows Now Playing Session Manager no MSRC (authoritative)
CVE-2026-83704 Windows Search Component High 7.8 0.42% no MSRC (authoritative)
CVE-2026-83705 Windows no MSRC (authoritative)
CVE-2026-83706 Windows no MSRC (authoritative)
CVE-2026-83707 Windows no MSRC (authoritative)
CVE-2026-83708 Windows Installer no MSRC (authoritative)
CVE-2026-83712 Windows no MSRC (authoritative)
CVE-2026-83713 Windows Universal Disk Format File System Driver no MSRC (authoritative)
CVE-2026-83715 Windows Error Reporting no MSRC (authoritative)
CVE-2026-83719 Servicing Stack Updates Medium 5.5 no MSRC (authoritative)
CVE-2026-83722 Local Security Authority Server no MSRC (authoritative)
CVE-2026-83723 Windows Event Logging Service no MSRC (authoritative)
CVE-2026-83726 Windows DWM Core Library no MSRC (authoritative)
CVE-2026-83727 Windows Overlay Filter no MSRC (authoritative)
CVE-2026-83733 Windows Print Spooler no MSRC (authoritative)
CVE-2026-83738 Windows no MSRC (authoritative)
CVE-2026-83740 Windows Hello High 7.0 0.25% no MSRC (authoritative)
CVE-2026-83749 Windows Overlay Filter no MSRC (authoritative)
CVE-2026-83753 Windows Camera Frame Server Monitor no MSRC (authoritative)
CVE-2026-83754 OpenSSH for Windows no MSRC (authoritative)
CVE-2026-83761 Windows no MSRC (authoritative)
CVE-2026-83760 Bluetooth Driver no MSRC (authoritative)
CVE-2026-83758 Windows Error Reporting High 7.8 no MSRC (authoritative)
CVE-2026-83759 Windows Encrypting File System no MSRC (authoritative)
CVE-2026-83768 Windows Kernel no MSRC (authoritative)
CVE-2026-83775 Windows Installer no MSRC (authoritative)
CVE-2026-83776 Windows Bluetooth Driver no MSRC (authoritative)
CVE-2026-83779 Windows Installer no MSRC (authoritative)
CVE-2026-83784 Windows Encrypting File System High 8.8 0.95% no MSRC (authoritative)
CVE-2026-83787 Windows DHCP Server Medium 5.5 no MSRC (authoritative)
CVE-2026-83793 Windows Update Orchestrator Service no MSRC (authoritative)
CVE-2026-83798 Windows Update Stack no MSRC (authoritative)
CVE-2026-83796 Windows no MSRC (authoritative)
CVE-2026-83826 Windows Error Reporting High 7.8 no MSRC (authoritative)
CVE-2026-83827 Windows Bluetooth Port Driver no MSRC (authoritative)
CVE-2026-83828 Windows MIDI Service Module no MSRC (authoritative)
CVE-2026-83832 Windows no MSRC (authoritative)
CVE-2026-83833 Windows Kernel no MSRC (authoritative)
CVE-2026-83836 Windows Event Tracing no MSRC (authoritative)
CVE-2026-83834 Windows Kernel-Mode Drivers no MSRC (authoritative)
CVE-2026-83839 Hyper-V no MSRC (authoritative)
CVE-2026-83838 Windows no MSRC (authoritative)
CVE-2026-83842 Windows no MSRC (authoritative)
CVE-2026-83843 Windows Internet Key Exchange (IKE) Extension no MSRC (authoritative)
CVE-2026-83844 Paint no MSRC (authoritative)
CVE-2026-83849 Windows Hello no MSRC (authoritative)
CVE-2026-83847 Microsoft Account no MSRC (authoritative)
CVE-2026-83846 Connected Devices Platform Service no MSRC (authoritative)
CVE-2026-83848 Windows COM+ Event System Service High 7.8 no MSRC (authoritative)
CVE-2026-83851 Windows Partition Management Driver no MSRC (authoritative)
CVE-2026-83852 Windows no MSRC (authoritative)
CVE-2026-83853 Windows Hello no MSRC (authoritative)
CVE-2026-83854 Windows no MSRC (authoritative)
CVE-2026-83855 Windows no MSRC (authoritative)
CVE-2026-83864 Windows no MSRC (authoritative)
CVE-2026-83865 Windows no MSRC (authoritative)
CVE-2026-83875 Windows no MSRC (authoritative)
CVE-2026-83876 Windows no MSRC (authoritative)
CVE-2026-83866 Windows no MSRC (authoritative)
CVE-2026-83882 Windows High 7.8 no MSRC (authoritative)
CVE-2026-83901 Windows no MSRC (authoritative)
CVE-2026-83868 Bluetooth Driver no MSRC (authoritative)
CVE-2026-83867 Windows Push Notifications no MSRC (authoritative)
CVE-2026-83879 Windows Overlay Filter no MSRC (authoritative)
CVE-2026-83902 Windows no MSRC (authoritative)
CVE-2026-83885 Windows no MSRC (authoritative)
CVE-2026-83892 Windows no MSRC (authoritative)
CVE-2026-83893 Windows no MSRC (authoritative)
CVE-2026-83896 Windows no MSRC (authoritative)
CVE-2026-70086 Windows Search Component no MSRC (authoritative)
CVE-2026-70089 Windows no MSRC (authoritative)
CVE-2026-70128 HID Parser Library no MSRC (authoritative)
CVE-2026-70151 Windows no MSRC (authoritative)
CVE-2026-70163 OpenSSH for Windows no MSRC (authoritative)
CVE-2026-70222 Windows Shell no MSRC (authoritative)
CVE-2026-83909 Windows no MSRC (authoritative)
CVE-2026-70241 Windows High 7.0 0.27% no MSRC (authoritative)
CVE-2026-70243 Windows no MSRC (authoritative)
CVE-2026-70248 Hyper-V no MSRC (authoritative)
CVE-2026-70275 Windows CD-ROM File System Driver no MSRC (authoritative)
CVE-2026-70286 Windows no MSRC (authoritative)
CVE-2026-83569 HID Parser Library no MSRC (authoritative)
CVE-2026-83741 Internet Explorer no MSRC (authoritative)
CVE-2026-83769 OpenSSH for Windows no MSRC (authoritative)
CVE-2026-83911 Windows Storage no MSRC (authoritative)
CVE-2026-83871 OpenSSH for Windows no MSRC (authoritative)
CVE-2026-83886 Windows Update Orchestrator Service no MSRC (authoritative)
CVE-2026-83912 Windows no MSRC (authoritative)
CVE-2026-83906 Windows Shell no MSRC (authoritative)
CVE-2026-85841 Windows DHCP Server no MSRC (authoritative)
CVE-2026-83914 Microsoft XML no MSRC (authoritative)
CVE-2026-83916 Windows Error Reporting High 7.0 no MSRC (authoritative)
CVE-2026-83917 Windows no MSRC (authoritative)
CVE-2026-83921 Windows Search no MSRC (authoritative)
CVE-2026-83919 Internet Messaging API no MSRC (authoritative)
CVE-2026-83920 Windows Search Component no MSRC (authoritative)
CVE-2026-83922 Windows no MSRC (authoritative)
CVE-2026-83926 Windows Hello no MSRC (authoritative)
CVE-2026-83928 Windows Local Security Authority Subsystem Service High 8.8 0.58% no MSRC (authoritative)
CVE-2026-83932 Windows no MSRC (authoritative)
CVE-2026-83929 Windows no MSRC (authoritative)
CVE-2026-84009 Windows Projected File System no MSRC (authoritative)
CVE-2026-84007 Remote Desktop Gateway Service no MSRC (authoritative)
CVE-2026-84012 Remote Desktop Gateway Service no MSRC (authoritative)
CVE-2026-84011 Windows SMB Client no MSRC (authoritative)
CVE-2026-84013 Windows Telephony Server no MSRC (authoritative)
CVE-2026-84014 Windows High 7.0 no MSRC (authoritative)
CVE-2026-84016 Windows no MSRC (authoritative)
CVE-2026-84017 Windows Routing and Remote Access Service no MSRC (authoritative)
CVE-2026-84018 Windows Print Spooler no MSRC (authoritative)
CVE-2026-84019 Windows Advanced Rasterization Platform no MSRC (authoritative)
CVE-2026-84020 Routing and Remote Access Service no MSRC (authoritative)
CVE-2026-85318 Servicing Stack Updates no MSRC (authoritative)
CVE-2026-85320 Windows Print Spooler no MSRC (authoritative)
CVE-2026-85319 Active Directory Federation Services no MSRC (authoritative)
CVE-2026-85321 Active Directory Federation Services no MSRC (authoritative)
CVE-2026-85322 Routing and Remote Access Service no MSRC (authoritative)
CVE-2026-85323 Network Device Enrollment Service no MSRC (authoritative)
CVE-2026-85324 Active Directory Federation Services no MSRC (authoritative)
CVE-2026-85327 Windows Print Spooler no MSRC (authoritative)
CVE-2026-85331 Windows Device Association Service no MSRC (authoritative)
CVE-2026-85328 Windows Projected File System no MSRC (authoritative)
CVE-2026-85336 Windows Device Association Service no MSRC (authoritative)
CVE-2026-85332 Windows High 7.8 no MSRC (authoritative)
CVE-2026-85333 Windows Performance Monitor no MSRC (authoritative)
CVE-2026-85334 Windows Message Queuing High 7.5 no MSRC (authoritative)
CVE-2026-85342 Windows Device Association Service no MSRC (authoritative)
CVE-2026-85353 Windows Print Spooler Components High 7.5 no MSRC (authoritative)
CVE-2026-85338 Graphics Component no MSRC (authoritative)
CVE-2026-85337 Remote Desktop Client Medium 6.5 0.89% no MSRC (authoritative)
CVE-2026-85343 Hyper-V no MSRC (authoritative)
CVE-2026-85339 Windows Routing and Remote Access Service no MSRC (authoritative)
CVE-2026-85341 Windows no MSRC (authoritative)
CVE-2026-85352 Windows Device Association Service no MSRC (authoritative)
CVE-2026-85354 Windows Error Reporting no MSRC (authoritative)
CVE-2026-85355 Windows Common Log File System Driver no MSRC (authoritative)
CVE-2026-85356 Windows Volume Manager Extension Driver no MSRC (authoritative)
CVE-2026-85357 Windows Phone Service no MSRC (authoritative)
CVE-2026-85358 Windows Installer no MSRC (authoritative)
CVE-2026-85359 Windows Performance Monitor no MSRC (authoritative)
CVE-2026-85361 Windows Installer no MSRC (authoritative)
CVE-2026-85362 Windows Management Instrumentation no MSRC (authoritative)
CVE-2026-85364 Windows Installer no MSRC (authoritative)
CVE-2026-85365 Servicing Stack Updates no MSRC (authoritative)
CVE-2026-85366 Windows Installer no MSRC (authoritative)
CVE-2026-85368 Windows TCP/IP no MSRC (authoritative)
CVE-2026-85367 Windows no MSRC (authoritative)
CVE-2026-85370 Windows no MSRC (authoritative)
CVE-2026-85369 Windows Hyper-V no MSRC (authoritative)
CVE-2026-85372 Windows Kernel no MSRC (authoritative)
CVE-2026-85371 Network Policy Server no MSRC (authoritative)
CVE-2026-85373 Windows Universal Plug and Play (UPnP) Device Host no MSRC (authoritative)
CVE-2026-85374 Windows Installer no MSRC (authoritative)
CVE-2026-85375 Windows Universal Plug and Play (UPnP) Device Host High 7.8 0.32% no MSRC (authoritative)
CVE-2026-85376 Windows Print Spooler no MSRC (authoritative)
CVE-2026-85790 Microsoft QUIC Medium 5.9 no MSRC (authoritative)
CVE-2026-85791 Windows Encrypting File System no MSRC (authoritative)
CVE-2026-85793 Windows no MSRC (authoritative)
CVE-2026-85794 Windows Routing and Remote Access Service no MSRC (authoritative)
CVE-2026-85795 Windows Text Services Framework no MSRC (authoritative)
CVE-2026-85796 Windows Installer no MSRC (authoritative)
CVE-2026-85797 Windows no MSRC (authoritative)
CVE-2026-85798 Windows Distributed File System no MSRC (authoritative)
CVE-2026-85799 Network Policy Server no MSRC (authoritative)
CVE-2026-85800 Windows Error Reporting no MSRC (authoritative)
CVE-2026-85802 Windows no MSRC (authoritative)
CVE-2026-85803 Windows no MSRC (authoritative)
CVE-2026-85804 Windows no MSRC (authoritative)
CVE-2026-85807 Windows USB Video Driver no MSRC (authoritative)
CVE-2026-85808 Routing and Remote Access Service no MSRC (authoritative)
CVE-2026-85810 Windows Telephony Server no MSRC (authoritative)
CVE-2026-85811 Network Policy Server no MSRC (authoritative)
CVE-2026-85812 Windows Bind Filter Driver no MSRC (authoritative)
CVE-2026-85815 Windows no MSRC (authoritative)
CVE-2026-85816 Windows no MSRC (authoritative)
CVE-2026-85820 Windows Universal Disk Format File System Driver no MSRC (authoritative)
CVE-2026-85821 Windows Universal Disk Format File System Driver no MSRC (authoritative)
CVE-2026-85822 Windows no MSRC (authoritative)
CVE-2026-85825 Windows Universal Disk Format File System Driver no MSRC (authoritative)
CVE-2026-85823 Windows Composite Image File System no MSRC (authoritative)
CVE-2026-85824 Windows Composite Image File System no MSRC (authoritative)
CVE-2026-85826 Windows no MSRC (authoritative)
CVE-2026-85827 Windows no MSRC (authoritative)
CVE-2026-85828 Windows no MSRC (authoritative)
CVE-2026-85829 Windows no MSRC (authoritative)
CVE-2026-85830 Windows Installer no MSRC (authoritative)
CVE-2026-85831 Windows Biometric Service no MSRC (authoritative)
CVE-2026-85832 Windows Background Intelligent Transfer Service no MSRC (authoritative)
CVE-2026-85833 Windows Modern Device Management no MSRC (authoritative)
CVE-2026-85834 Windows TCP/IP no MSRC (authoritative)
CVE-2026-85835 Servicing Stack Updates no MSRC (authoritative)
CVE-2026-85836 Windows Kernel no MSRC (authoritative)
CVE-2026-85837 Windows Kernel no MSRC (authoritative)
CVE-2026-85840 Windows Event Viewer no MSRC (authoritative)
CVE-2026-85842 Windows Image Acquisition no MSRC (authoritative)
CVE-2026-85843 Windows Background Intelligent Transfer Service no MSRC (authoritative)
CVE-2026-85846 Windows Web Account Manager no MSRC (authoritative)
CVE-2026-85847 Windows Print Spooler no MSRC (authoritative)
CVE-2026-85848 Windows Background Intelligent Transfer Service no MSRC (authoritative)
CVE-2026-85849 Windows AppX Deployment Service High 7.8 no MSRC (authoritative)
CVE-2026-85850 Windows no MSRC (authoritative)
CVE-2026-85851 Windows SmartScreen no MSRC (authoritative)
CVE-2026-85852 Windows Management Instrumentation no MSRC (authoritative)
CVE-2026-85853 Windows no MSRC (authoritative)
CVE-2026-85854 Windows High 7.0 no MSRC (authoritative)
CVE-2026-85855 Windows DWM Core Library no MSRC (authoritative)
CVE-2026-85856 Internet Connection Sharing no MSRC (authoritative)
CVE-2026-85857 Windows Kernel-Mode Drivers no MSRC (authoritative)
CVE-2026-85860 Windows Message Queuing no MSRC (authoritative)
CVE-2026-85858 Windows Win32 Kernel Subsystem no MSRC (authoritative)
CVE-2026-85859 Windows Message Queuing no MSRC (authoritative)
CVE-2026-85861 Windows Clipboard User Service no MSRC (authoritative)
CVE-2026-85863 Windows no MSRC (authoritative)
CVE-2026-85865 Windows DHCP Server no MSRC (authoritative)
CVE-2026-85868 Windows Common Log File System Driver no MSRC (authoritative)
CVE-2026-85870 Common Log File System Driver no MSRC (authoritative)
CVE-2026-85869 Windows Search Component no MSRC (authoritative)
CVE-2026-85871 Windows Kernel-Mode Drivers no MSRC (authoritative)
CVE-2026-71347 Windows Security Center no MSRC (authoritative)
CVE-2026-85881 Microsoft Office no MSRC (authoritative)
CVE-2026-85891 Azure HDInsight no MSRC (authoritative)
CVE-2026-85915 Windows no MSRC (authoritative)
CVE-2026-85918 Windows Universal Plug and Play (UPnP) Device Host no MSRC (authoritative)
CVE-2026-85920 BitLocker no MSRC (authoritative)
CVE-2026-85927 Windows Universal Plug and Play Device Host High 7.8 no MSRC (authoritative)
CVE-2026-88080 Windows Installer no MSRC (authoritative)
CVE-2026-87708 Windows Installer no MSRC (authoritative)
CVE-2026-87711 Windows Installer no MSRC (authoritative)
CVE-2026-88091 Windows Management Instrumentation no MSRC (authoritative)
CVE-2026-88096 Windows DCOM Server no MSRC (authoritative)
CVE-2026-88101 Input Method Editor no MSRC (authoritative)
CVE-2026-88124 Windows Installer no MSRC (authoritative)
CVE-2026-88157 OpenSSH for Windows no MSRC (authoritative)
CVE-2026-88158 Windows no MSRC (authoritative)
CVE-2026-88161 Windows no MSRC (authoritative)
CVE-2026-88160 Windows Search Component no MSRC (authoritative)
CVE-2026-88159 Background Intelligent Transfer Service no MSRC (authoritative)
CVE-2026-88168 Windows Bind Filter Driver no MSRC (authoritative)
CVE-2026-88162 Windows Encrypting File System no MSRC (authoritative)
CVE-2026-88173 Background Intelligent Transfer Service no MSRC (authoritative)
CVE-2026-69943 SharePoint no MSRC (authoritative)
CVE-2026-69877 Azure DevOps Medium 6.5 0.40% no MSRC (authoritative)
CVE-2026-70041 Windows no MSRC (authoritative)
CVE-2026-70048 Windows no MSRC (authoritative)
CVE-2026-70164 Windows no MSRC (authoritative)
CVE-2026-70167 Windows Domain Name Service no MSRC (authoritative)
CVE-2026-70170 Windows Kernel no MSRC (authoritative)
CVE-2026-70187 Remote Desktop Gateway Service no MSRC (authoritative)
CVE-2026-70210 Windows OLE DB no MSRC (authoritative)
CVE-2026-70213 Power Apps no MSRC (authoritative)
CVE-2026-70238 Windows Storage Spaces Controller no MSRC (authoritative)
CVE-2026-70244 Windows DNS Server Medium 6.5 0.94% no MSRC (authoritative)
CVE-2026-70262 WebDAV no MSRC (authoritative)
CVE-2026-70277 Windows Fast FAT File System Driver no MSRC (authoritative)
CVE-2026-70303 Windows no MSRC (authoritative)
CVE-2026-83674 Active Directory Federation Services no MSRC (authoritative)
CVE-2026-83710 Windows Device Association Service no MSRC (authoritative)
CVE-2026-83888 Windows no MSRC (authoritative)
CVE-2026-85329 Microsoft Account no MSRC (authoritative)
CVE-2026-85867 Windows Remote Access Connection Manager no MSRC (authoritative)
CVE-2026-85904 Windows Device Association Service no MSRC (authoritative)
CVE-2026-85914 Windows Embedded Mode Service no MSRC (authoritative)
CVE-2026-85926 Windows no MSRC (authoritative)
CVE-2026-85930 Windows Image Acquisition no MSRC (authoritative)
CVE-2026-85931 Windows Distributed File System no MSRC (authoritative)
CVE-2026-85933 Windows Print Spooler no MSRC (authoritative)
CVE-2026-85934 Windows AppX Deployment Service High 7.0 no MSRC (authoritative)
CVE-2026-85935 Windows no MSRC (authoritative)
CVE-2026-85938 Windows no MSRC (authoritative)
CVE-2026-85936 Windows no MSRC (authoritative)
CVE-2026-85939 Windows Kernel no MSRC (authoritative)
CVE-2026-85945 Windows Kernel no MSRC (authoritative)
CVE-2026-87691 Windows Management Services no MSRC (authoritative)
CVE-2026-87706 Windows Storage Spaces Controller no MSRC (authoritative)
CVE-2026-87707 Windows Fax and Scan Service High 7.8 no MSRC (authoritative)
CVE-2026-87710 Local Security Authority Server no MSRC (authoritative)
CVE-2026-87712 Windows no MSRC (authoritative)
CVE-2026-87713 Windows no MSRC (authoritative)
CVE-2026-87714 WebDAV no MSRC (authoritative)
CVE-2026-87716 Windows Storage Spaces Controller no MSRC (authoritative)
CVE-2026-88070 Windows no MSRC (authoritative)
CVE-2026-88071 Hyper-V no MSRC (authoritative)
CVE-2026-88073 Windows Graphics Kernel no MSRC (authoritative)
CVE-2026-88099 Windows Failover Cluster no MSRC (authoritative)
CVE-2026-88100 Windows High 7.8 no MSRC (authoritative)
CVE-2026-88106 Windows no MSRC (authoritative)
CVE-2026-88107 Windows Cloud Files Mini Filter Driver no MSRC (authoritative)
CVE-2026-88132 Azure Key Vault no MSRC (authoritative)
CVE-2026-88136 Windows no MSRC (authoritative)
CVE-2026-88137 Windows no MSRC (authoritative)
CVE-2026-88140 Windows Key Storage Provider no MSRC (authoritative)
CVE-2026-88143 Windows no MSRC (authoritative)
CVE-2026-88146 Background Intelligent Transfer Service High 7.0 no MSRC (authoritative)
CVE-2026-69923 Windows AI no MSRC (authoritative)
CVE-2026-69940 Windows Client for NFS Medium 6.5 0.94% no MSRC (authoritative)
CVE-2026-69949 Windows Client for NFS no MSRC (authoritative)
CVE-2026-69955 Windows Client for NFS no MSRC (authoritative)
CVE-2026-69977 Quality Windows Audio/Video Experience (QWAVE) service no MSRC (authoritative)
CVE-2026-69982 Active Directory Federation Services no MSRC (authoritative)
CVE-2026-70005 Active Directory Federation Services no MSRC (authoritative)
CVE-2026-70113 Windows Client for NFS no MSRC (authoritative)
CVE-2026-70008 Windows IP Over USB Service no MSRC (authoritative)
CVE-2026-70011 Windows IP Over USB Service Medium 5.5 0.41% no MSRC (authoritative)
CVE-2026-70038 Windows High 8.1 0.67% no MSRC (authoritative)
CVE-2026-70031 Windows no MSRC (authoritative)
CVE-2026-70013 Windows no MSRC (authoritative)
CVE-2026-70045 Windows Work Folders no MSRC (authoritative)
CVE-2026-70137 Windows Remote Access Connection Manager no MSRC (authoritative)
CVE-2026-70134 Windows no MSRC (authoritative)
CVE-2026-70102 Windows no MSRC (authoritative)
CVE-2026-70044 Windows Media Foundation no MSRC (authoritative)
CVE-2026-70131 Windows Media Foundation no MSRC (authoritative)
CVE-2026-70068 Windows no MSRC (authoritative)
CVE-2026-70110 PostScript Printer Driver High 7.8 no MSRC (authoritative)
CVE-2026-70092 PostScript Printer Driver no MSRC (authoritative)
CVE-2026-70109 PostScript Printer Driver no MSRC (authoritative)
CVE-2026-70116 Windows Resilient File System (ReFS) no MSRC (authoritative)
CVE-2026-70149 Windows no MSRC (authoritative)
CVE-2026-70186 ASP.NET Core no MSRC (authoritative)
CVE-2026-70159 ASP.NET Core no MSRC (authoritative)
CVE-2026-70175 ASP.NET Core no MSRC (authoritative)
CVE-2026-70196 ASP.NET Core no MSRC (authoritative)
CVE-2026-70181 ASP.NET Core no MSRC (authoritative)
CVE-2026-70183 ASP.NET Core no MSRC (authoritative)
CVE-2026-70268 Office Word no MSRC (authoritative)
CVE-2026-70220 Office Word High 7.8 no MSRC (authoritative)
CVE-2026-70256 Office Outlook High 8.8 no MSRC (authoritative)
CVE-2026-70267 SharePoint no MSRC (authoritative)
CVE-2026-70206 Office Word no MSRC (authoritative)
CVE-2026-70251 SharePoint no MSRC (authoritative)
CVE-2026-70269 Office Word no MSRC (authoritative)
CVE-2026-70257 Office Outlook no MSRC (authoritative)
CVE-2026-70263 Office Word no MSRC (authoritative)
CVE-2026-70259 SharePoint Medium 6.5 no MSRC (authoritative)
CVE-2026-70266 SharePoint no MSRC (authoritative)
CVE-2026-70287 Office Word no MSRC (authoritative)
CVE-2026-70276 Office Click-To-Run no MSRC (authoritative)
CVE-2026-70291 Office Outlook Critical 9.8 no MSRC (authoritative)
CVE-2026-70302 Office Word no MSRC (authoritative)
CVE-2026-70301 Office Word no MSRC (authoritative)
CVE-2026-83891 Office Word no MSRC (authoritative)
CVE-2026-70298 SharePoint Medium 6.5 no MSRC (authoritative)
CVE-2026-85900 SharePoint no MSRC (authoritative)
CVE-2026-88153 Excel no MSRC (authoritative)
CVE-2026-88150 Office no MSRC (authoritative)
CVE-2026-88145 Office High 8.8 0.74% no MSRC (authoritative)
CVE-2026-88151 Office Excel no MSRC (authoritative)
CVE-2026-88155 SharePoint no MSRC (authoritative)
CVE-2026-88175 Excel no MSRC (authoritative)
CVE-2026-88167 Office Word no MSRC (authoritative)
CVE-2026-88169 Office Word no MSRC (authoritative)
CVE-2026-88178 PowerPoint Critical 9.8 0.97% no MSRC (authoritative)
CVE-2026-88201 Office Excel no MSRC (authoritative)
CVE-2026-88197 Office no MSRC (authoritative)
CVE-2026-88196 Office no MSRC (authoritative)
CVE-2026-88198 SharePoint no MSRC (authoritative)
CVE-2026-88202 Office Word no MSRC (authoritative)
CVE-2026-88204 Office SharePoint no MSRC (authoritative)
CVE-2026-88209 SharePoint no MSRC (authoritative)
CVE-2026-88208 SharePoint no MSRC (authoritative)
CVE-2026-70049 Configuration Manager High 8.0 no MSRC (authoritative)
CVE-2026-96204 Azure Arc no MSRC (authoritative)
CVE-2026-96215 Windows Autopilot no MSRC (authoritative)
CVE-2026-96216 Windows Kernel no MSRC (authoritative)
CVE-2026-96217 Windows no MSRC (authoritative)
CVE-2026-96218 Windows Update Stack no MSRC (authoritative)
CVE-2026-96219 n/a no MSRC (authoritative)
CVE-2026-96220 Windows no MSRC (authoritative)
CVE-2026-96223 Windows Hyper-V no MSRC (authoritative)
CVE-2026-96244 Windows Internal System User Profile no MSRC (authoritative)
CVE-2026-96245 Routing and Remote Access Service no MSRC (authoritative)
CVE-2026-96246 Network Policy Server no MSRC (authoritative)
CVE-2026-96247 Windows Kernel-Mode Drivers Medium 5.5 no MSRC (authoritative)
CVE-2026-96248 Windows Host Guardian Service no MSRC (authoritative)
CVE-2026-96302 Windows Installer High 7.0 0.25% no MSRC (authoritative)
CVE-2026-96305 Windows Installer no MSRC (authoritative)
CVE-2026-96306 Windows Sysmain Service no MSRC (authoritative)
CVE-2026-96307 Windows Installer no MSRC (authoritative)
CVE-2026-96308 Windows Installer High 7.8 0.32% no MSRC (authoritative)
CVE-2026-96314 Windows Audio Service no MSRC (authoritative)
CVE-2026-96312 Windows no MSRC (authoritative)
CVE-2026-96313 Windows Push Notifications no MSRC (authoritative)
CVE-2026-96315 Windows Overlay Filter no MSRC (authoritative)
CVE-2026-96316 Routing and Remote Access Service no MSRC (authoritative)
CVE-2026-96317 Windows Kernel no MSRC (authoritative)
CVE-2026-96319 Windows USB Print Driver no MSRC (authoritative)
CVE-2026-96318 Windows Resume no MSRC (authoritative)
CVE-2026-96849 Windows Kernel-Mode Drivers no MSRC (authoritative)
CVE-2026-96848 Windows Win32 Kernel Subsystem Medium 5.5 no MSRC (authoritative)
CVE-2026-96866 Network Device Enrollment Service no MSRC (authoritative)
CVE-2026-96851 Windows Management Instrumentation no MSRC (authoritative)
CVE-2026-96862 Windows no MSRC (authoritative)
CVE-2026-96855 Windows Modern Device Management Medium 5.5 no MSRC (authoritative)
CVE-2026-96856 Windows Management Instrumentation High 7.8 0.32% no MSRC (authoritative)
CVE-2026-96857 Windows Projected File System no MSRC (authoritative)
CVE-2026-96863 Windows Storage Port Driver Medium 6.8 0.31% no MSRC (authoritative)
CVE-2026-96859 Windows Imaging Component no MSRC (authoritative)
CVE-2026-96860 Windows no MSRC (authoritative)
CVE-2026-96861 Network Device Enrollment Service no MSRC (authoritative)
CVE-2026-96864 Failover Cluster Virtual Driver no MSRC (authoritative)
CVE-2026-96865 Windows no MSRC (authoritative)
CVE-2026-96867 Windows NTFS no MSRC (authoritative)
CVE-2026-96868 Windows Kernel no MSRC (authoritative)
CVE-2026-96920 Windows Program Compatibility Assistant Service no MSRC (authoritative)
CVE-2026-96921 Windows Message Queuing no MSRC (authoritative)
CVE-2026-96928 Windows no MSRC (authoritative)
CVE-2026-96935 Windows no MSRC (authoritative)
CVE-2026-96943 Windows Raw Image Extension no MSRC (authoritative)
CVE-2026-69452 Windows Enterprise App Management no MSRC (authoritative)
CVE-2026-95904 Windows Event Logging Service no MSRC (authoritative)
CVE-2026-96108 Desktop Window Manager no MSRC (authoritative)
CVE-2026-96995 Office Word no MSRC (authoritative)
CVE-2026-96996 Office no MSRC (authoritative)
CVE-2026-97005 Office PowerPoint no MSRC (authoritative)
CVE-2026-97749 Office Outlook no MSRC (authoritative)
CVE-2026-97001 Office Word High 7.8 no MSRC (authoritative)
CVE-2026-97744 PowerPoint no MSRC (authoritative)
CVE-2026-96997 OneNote no MSRC (authoritative)
CVE-2026-97014 Office Excel Medium 5.5 0.51% no MSRC (authoritative)
CVE-2026-97009 Excel no MSRC (authoritative)
CVE-2026-97750 Office Excel no MSRC (authoritative)
CVE-2026-97753 Excel no MSRC (authoritative)
CVE-2026-97017 Excel no MSRC (authoritative)
CVE-2026-97740 Excel no MSRC (authoritative)
CVE-2026-97766 Excel no MSRC (authoritative)
CVE-2026-97003 Excel no MSRC (authoritative)
CVE-2026-97751 Excel no MSRC (authoritative)
CVE-2026-97776 Excel no MSRC (authoritative)
CVE-2026-97752 Excel no MSRC (authoritative)
CVE-2026-97758 Excel High 8.8 0.60% no MSRC (authoritative)
CVE-2026-97754 Office no MSRC (authoritative)
CVE-2026-97761 Excel High 8.8 no MSRC (authoritative)
CVE-2026-97747 Excel no MSRC (authoritative)
CVE-2026-97780 Excel no MSRC (authoritative)
CVE-2026-97767 Office Excel no MSRC (authoritative)
CVE-2026-97770 Excel no MSRC (authoritative)
CVE-2026-97771 Excel no MSRC (authoritative)
CVE-2026-97755 Excel High 8.8 0.80% no MSRC (authoritative)
CVE-2026-97765 Excel High 8.8 no MSRC (authoritative)
CVE-2026-97739 Excel no MSRC (authoritative)
CVE-2026-97778 Excel High 8.8 0.60% no MSRC (authoritative)
CVE-2026-97759 Excel no MSRC (authoritative)
CVE-2026-97774 Office Click-To-Run no MSRC (authoritative)
CVE-2026-97782 SharePoint no MSRC (authoritative)
CVE-2026-97783 SharePoint no MSRC (authoritative)
CVE-2026-96096 Windows Media Player Critical 9.8 no MSRC (authoritative)
CVE-2026-97789 Remote Desktop Client no MSRC (authoritative)
CVE-2026-97794 Windows Container Isolation FS Filter Driver no MSRC (authoritative)
CVE-2026-59116 Windows Remote Desktop no MSRC (authoritative)
CVE-2026-62879 Windows no MSRC (authoritative)
CVE-2026-62687 Windows Backup Engine no MSRC (authoritative)
CVE-2026-69931 Windows Storage High 7.0 no MSRC (authoritative)
CVE-2026-69856 Windows Storage no MSRC (authoritative)
CVE-2026-69880 Desktop Window Manager no MSRC (authoritative)
CVE-2026-69984 Remote Desktop Client no MSRC (authoritative)
CVE-2026-69985 Libarchive no MSRC (authoritative)
CVE-2026-69986 Remote Desktop Client no MSRC (authoritative)
CVE-2026-69988 Remote Desktop Client no MSRC (authoritative)
CVE-2026-69987 Remote Desktop Client no MSRC (authoritative)
CVE-2026-69995 Remote Desktop Client no MSRC (authoritative)
CVE-2026-69997 Remote Desktop Client no MSRC (authoritative)
CVE-2026-69996 Remote Desktop Client no MSRC (authoritative)
CVE-2026-69991 Remote Desktop Client High 7.5 no MSRC (authoritative)
CVE-2026-69994 Remote Desktop Client no MSRC (authoritative)
CVE-2026-69992 Remote Desktop Services no MSRC (authoritative)
CVE-2026-69998 Remote Desktop Client no MSRC (authoritative)
CVE-2026-69999 Windows Update Medium 5.5 no MSRC (authoritative)
CVE-2026-70012 Remote Desktop Client High 7.5 no MSRC (authoritative)
CVE-2026-70004 Remote Desktop Client no MSRC (authoritative)
CVE-2026-70006 Remote Desktop Client no MSRC (authoritative)
CVE-2026-70051 Windows SmartScreen no MSRC (authoritative)
CVE-2026-70055 Windows no MSRC (authoritative)
CVE-2026-70066 Windows DHCP Server High 7.0 no MSRC (authoritative)
CVE-2026-70067 Windows no MSRC (authoritative)
CVE-2026-70069 Windows DHCP Server no MSRC (authoritative)
CVE-2026-70071 DNS Server Medium 5.5 no MSRC (authoritative)
CVE-2026-70074 Windows DNS no MSRC (authoritative)
CVE-2026-70072 Windows no MSRC (authoritative)
CVE-2026-70075 Windows no MSRC (authoritative)
CVE-2026-70144 Windows no MSRC (authoritative)
CVE-2026-70207 Network Policy Server no MSRC (authoritative)
CVE-2026-70199 Windows Kernel no MSRC (authoritative)
CVE-2026-70211 Windows no MSRC (authoritative)
CVE-2026-70201 Windows DHCP Server no MSRC (authoritative)
CVE-2026-70230 Windows Audio Service no MSRC (authoritative)
CVE-2026-70208 Windows no MSRC (authoritative)
CVE-2026-70209 Windows no MSRC (authoritative)
CVE-2026-70232 Windows Kernel no MSRC (authoritative)
CVE-2026-70236 Windows no MSRC (authoritative)
CVE-2026-70237 Windows no MSRC (authoritative)
CVE-2026-70258 Windows Media Foundation no MSRC (authoritative)
CVE-2026-70288 Windows no MSRC (authoritative)
CVE-2026-70292 Windows no MSRC (authoritative)
CVE-2026-70293 Windows Medium 5.5 no MSRC (authoritative)
CVE-2026-70294 Windows no MSRC (authoritative)
CVE-2026-70295 Windows no MSRC (authoritative)
CVE-2026-69736 Windows Credential Manager no MSRC (authoritative)
CVE-2026-69765 Windows Storport Miniport Driver no MSRC (authoritative)
CVE-2026-77902 Excel no MSRC (authoritative)
CVE-2026-69640 Windows Medium 5.3 0.63% no MSRC (authoritative)
CVE-2026-69733 Windows Update no MSRC (authoritative)
CVE-2026-69783 Windows Update High 7.8 no MSRC (authoritative)
CVE-2026-69471 Windows Installer no MSRC (authoritative)
CVE-2026-69577 Azure Attestation no MSRC (authoritative)
CVE-2026-69596 Windows Program Compatibility Assistant Service no MSRC (authoritative)
CVE-2026-69635 Windows Installer no MSRC (authoritative)
CVE-2026-77496 Windows Imaging Component no MSRC (authoritative)
CVE-2026-69326 Graphic Fonts no MSRC (authoritative)
CVE-2026-69454 Azure Attestation no MSRC (authoritative)
CVE-2026-83505 Windows Setup Files Cleanup no MSRC (authoritative)
CVE-2026-83506 Windows Servicing Stack no MSRC (authoritative)
CVE-2026-83508 Windows no MSRC (authoritative)
CVE-2026-83507 Windows Update Orchestrator Service no MSRC (authoritative)
CVE-2026-83511 Active Directory Federation Services High 7.4 0.59% no MSRC (authoritative)
CVE-2026-83514 Windows Partition Management Driver no MSRC (authoritative)
CVE-2026-83513 Windows Universal Disk Format File System Driver no MSRC (authoritative)
CVE-2026-83522 Windows IKE Extension no MSRC (authoritative)
CVE-2026-83523 Windows Image Acquisition no MSRC (authoritative)
CVE-2026-83564 Windows Search Component no MSRC (authoritative)
CVE-2026-83565 Windows Encrypting File System no MSRC (authoritative)
CVE-2026-83566 Windows High 7.0 no MSRC (authoritative)
CVE-2026-83567 Windows no MSRC (authoritative)
CVE-2026-83568 Windows Kernel-Mode Drivers no MSRC (authoritative)
CVE-2026-83570 Windows Search Component no MSRC (authoritative)
CVE-2026-83573 Windows Kernel-Mode Driver no MSRC (authoritative)
CVE-2026-83574 Windows Search Service no MSRC (authoritative)
CVE-2026-83579 Windows Smart Card no MSRC (authoritative)
CVE-2026-83582 Windows no MSRC (authoritative)
CVE-2026-83585 Windows no MSRC (authoritative)
CVE-2026-83588 Windows USB Driver no MSRC (authoritative)
CVE-2026-83634 Windows BitLocker no MSRC (authoritative)
CVE-2026-83636 Hyper-V no MSRC (authoritative)
CVE-2026-83637 Windows Kernel-Mode Drivers no MSRC (authoritative)
CVE-2026-83638 Windows no MSRC (authoritative)
CVE-2026-83639 Windows Sensor Data Service High 7.8 0.32% no MSRC (authoritative)
CVE-2026-83640 Windows no MSRC (authoritative)
CVE-2026-83643 Windows Error Reporting no MSRC (authoritative)
CVE-2026-83645 Active Directory Federation Services no MSRC (authoritative)
CVE-2026-83651 Windows no MSRC (authoritative)
CVE-2026-83656 Windows Modern Device Management no MSRC (authoritative)
CVE-2026-83659 Windows User Profile Service no MSRC (authoritative)
CVE-2026-83664 Windows Portable Device File System Driver no MSRC (authoritative)
CVE-2026-83665 Windows DHCP Server no MSRC (authoritative)
CVE-2026-83668 Windows WLAN Service no MSRC (authoritative)
CVE-2026-83670 Windows no MSRC (authoritative)
CVE-2026-83672 Windows Installer Medium 4.7 0.38% no MSRC (authoritative)
CVE-2026-83676 Windows Installer no MSRC (authoritative)
CVE-2026-83677 Windows DHCP Client no MSRC (authoritative)
CVE-2026-83679 Windows Defender Firewall Service High 7.8 0.32% no MSRC (authoritative)
CVE-2026-83680 Windows Installer no MSRC (authoritative)
CVE-2026-83682 Windows High 7.0 0.25% no MSRC (authoritative)
CVE-2026-83683 Encrypting File System no MSRC (authoritative)
CVE-2026-83685 Windows no MSRC (authoritative)
CVE-2026-83686 Windows Search Component no MSRC (authoritative)
CVE-2026-83689 Windows Error Reporting no MSRC (authoritative)
CVE-2026-83696 Windows Cloud Files Mini Filter Driver no MSRC (authoritative)
CVE-2026-83695 Windows Event Logging Service Medium 5.5 0.41% no MSRC (authoritative)
CVE-2026-83697 Windows Modern Device Management no MSRC (authoritative)
CVE-2026-83698 Windows no MSRC (authoritative)
CVE-2026-83701 Windows Now Playing Session Manager no MSRC (authoritative)
CVE-2026-83702 Windows Installer High 7.0 no MSRC (authoritative)
CVE-2026-83703 Windows Wi-Fi Driver no MSRC (authoritative)
CVE-2026-83709 Windows no MSRC (authoritative)
CVE-2026-83714 Windows no MSRC (authoritative)
CVE-2026-83716 Hyper-V no MSRC (authoritative)
CVE-2026-83717 Windows Installer no MSRC (authoritative)
CVE-2026-83718 Windows Installer no MSRC (authoritative)
CVE-2026-83720 Windows no MSRC (authoritative)
CVE-2026-83721 Windows no MSRC (authoritative)
CVE-2026-83724 Windows Management Instrumentation no MSRC (authoritative)
CVE-2026-83725 Windows Search Component no MSRC (authoritative)
CVE-2026-83728 Hyper-V no MSRC (authoritative)
CVE-2026-83732 Windows High 7.8 no MSRC (authoritative)
CVE-2026-83739 Windows Bluetooth Service no MSRC (authoritative)
CVE-2026-83736 Windows Kernel Medium 5.5 0.41% no MSRC (authoritative)
CVE-2026-83735 Windows Kernel no MSRC (authoritative)
CVE-2026-83737 Windows no MSRC (authoritative)
CVE-2026-83747 Windows Error Reporting Medium 5.5 no MSRC (authoritative)
CVE-2026-83750 Windows Error Reporting no MSRC (authoritative)
CVE-2026-83751 Windows MIDI Service Module no MSRC (authoritative)
CVE-2026-83752 Windows Installer High 7.0 no MSRC (authoritative)
CVE-2026-83755 Windows no MSRC (authoritative)
CVE-2026-83756 Windows Win32 Kernel Subsystem no MSRC (authoritative)
CVE-2026-83757 Windows no MSRC (authoritative)
CVE-2026-83762 Windows no MSRC (authoritative)
CVE-2026-83765 Windows DWM Core Library no MSRC (authoritative)
CVE-2026-83763 Windows no MSRC (authoritative)
CVE-2026-83766 Hyper-V no MSRC (authoritative)
CVE-2026-83767 Windows Installer no MSRC (authoritative)
CVE-2026-83771 Windows Camera Frame Server Monitor no MSRC (authoritative)
CVE-2026-83773 Windows no MSRC (authoritative)
CVE-2026-83774 Windows no MSRC (authoritative)
CVE-2026-83778 Internet Messaging API High 8.8 no MSRC (authoritative)
CVE-2026-83777 Windows Bluetooth Service High 8.8 0.55% no MSRC (authoritative)
CVE-2026-83783 Windows Management Instrumentation no MSRC (authoritative)
CVE-2026-83785 Windows COM+ Event System Service no MSRC (authoritative)
CVE-2026-83781 Windows Program Compatibility Assistant Service High 7.8 0.32% no MSRC (authoritative)
CVE-2026-83786 Windows no MSRC (authoritative)
CVE-2026-83788 Windows no MSRC (authoritative)
CVE-2026-83789 Windows SMB Client no MSRC (authoritative)
CVE-2026-83790 Windows Hello no MSRC (authoritative)
CVE-2026-83792 Windows Device Install Service no MSRC (authoritative)
CVE-2026-83794 Windows Portable Device MTP Driver Medium 5.5 0.40% no MSRC (authoritative)
CVE-2026-83795 Windows Internet Key Exchange Extension no MSRC (authoritative)
CVE-2026-83797 Windows Partition Management Driver no MSRC (authoritative)
CVE-2026-83829 Windows Search Component no MSRC (authoritative)
CVE-2026-83830 Windows COM+ Event System Service no MSRC (authoritative)
CVE-2026-83835 Windows Common Log File System Driver no MSRC (authoritative)
CVE-2026-83837 Windows Kernel-Mode Drivers High 7.8 no MSRC (authoritative)
CVE-2026-83840 Windows Error Reporting no MSRC (authoritative)
CVE-2026-83845 Windows Internet High 8.4 0.29% no MSRC (authoritative)
CVE-2026-83850 Windows Search Component no MSRC (authoritative)
CVE-2026-83856 Windows Event Logging Service no MSRC (authoritative)
CVE-2026-83857 Windows Universal Disk Format File System Driver no MSRC (authoritative)
CVE-2026-83859 Windows no MSRC (authoritative)
CVE-2026-83860 Windows no MSRC (authoritative)
CVE-2026-83861 Windows Remote Desktop Protocol no MSRC (authoritative)
CVE-2026-83863 Servicing Stack Updates no MSRC (authoritative)
CVE-2026-83874 Windows no MSRC (authoritative)
CVE-2026-83883 Windows no MSRC (authoritative)
CVE-2026-83881 Windows exFAT File System High 7.8 no MSRC (authoritative)
CVE-2026-83887 HID Parser Library no MSRC (authoritative)
CVE-2026-83884 Windows no MSRC (authoritative)
CVE-2026-83898 HID Parser Library no MSRC (authoritative)
CVE-2026-83870 Windows Aggregated Data Platform Service no MSRC (authoritative)
CVE-2026-83895 Windows no MSRC (authoritative)
CVE-2026-83877 Windows no MSRC (authoritative)
CVE-2026-83873 Windows no MSRC (authoritative)
CVE-2026-83889 Windows DNS Server no MSRC (authoritative)
CVE-2026-83897 Windows no MSRC (authoritative)
CVE-2026-83899 Windows Installer no MSRC (authoritative)
CVE-2026-83900 Windows no MSRC (authoritative)
CVE-2026-83903 Windows Direct Composition no MSRC (authoritative)
CVE-2026-85872 Windows Storage VSP Driver no MSRC (authoritative)
CVE-2026-85901 Windows no MSRC (authoritative)
CVE-2026-85902 Windows no MSRC (authoritative)
CVE-2026-85903 Windows Domain Name Service no MSRC (authoritative)
CVE-2026-83904 HID Parser Library no MSRC (authoritative)
CVE-2026-83905 Windows Shell no MSRC (authoritative)
CVE-2026-85905 Windows UI Immersive Server no MSRC (authoritative)
CVE-2026-85906 Windows no MSRC (authoritative)
CVE-2026-83907 Windows Hello no MSRC (authoritative)
CVE-2026-83908 RPC Runtime no MSRC (authoritative)
CVE-2026-85908 Windows no MSRC (authoritative)
CVE-2026-85909 Windows Universal Disk Format File System Driver Medium 5.5 0.40% no MSRC (authoritative)
CVE-2026-85910 Windows Medium 5.5 0.40% no MSRC (authoritative)
CVE-2026-85911 Windows no MSRC (authoritative)
CVE-2026-83913 Windows no MSRC (authoritative)
CVE-2026-85912 Windows no MSRC (authoritative)
CVE-2026-83915 Windows Diagnostic Policy Service no MSRC (authoritative)
CVE-2026-83918 Windows Kernel no MSRC (authoritative)
CVE-2026-83923 OpenSSH for Windows no MSRC (authoritative)
CVE-2026-83924 Windows Kernel no MSRC (authoritative)
CVE-2026-83925 Windows Kernel no MSRC (authoritative)
CVE-2026-83931 Hyper-V no MSRC (authoritative)
CVE-2026-83930 Windows Update Orchestrator Service High 7.0 0.22% no MSRC (authoritative)
CVE-2026-83933 Windows Update Orchestrator Service no MSRC (authoritative)
CVE-2026-83934 Windows GDI+ no MSRC (authoritative)
CVE-2026-85874 Windows Message Queuing Queue Manager no MSRC (authoritative)
CVE-2026-69789 Windows Reliable Multicast Transport Driver no MSRC (authoritative)
CVE-2026-69798 Windows Wired AutoConfig Service no MSRC (authoritative)
CVE-2026-85884 Windows Health and Optimized Experiences Service no MSRC (authoritative)
CVE-2026-85941 Windows Installer no MSRC (authoritative)
CVE-2026-87699 Windows no MSRC (authoritative)
CVE-2026-88076 Windows Installer no MSRC (authoritative)
CVE-2026-87705 Hyper-V no MSRC (authoritative)
CVE-2026-87693 Windows Installer no MSRC (authoritative)
CVE-2026-87694 Windows Installer no MSRC (authoritative)
CVE-2026-87709 Windows Host Guardian Service no MSRC (authoritative)
CVE-2026-87698 Windows Remote Access Service no MSRC (authoritative)
CVE-2026-87704 Windows Installer no MSRC (authoritative)
CVE-2026-87700 Windows Installer no MSRC (authoritative)
CVE-2026-87715 Windows Installer no MSRC (authoritative)
CVE-2026-88072 Windows Host Guardian Service no MSRC (authoritative)
CVE-2026-87702 Windows Resource Management no MSRC (authoritative)
CVE-2026-88079 Windows MIDI Service Module no MSRC (authoritative)
CVE-2026-88103 Windows Broadcast DVR User Service no MSRC (authoritative)
CVE-2026-88105 Windows Broadcast DVR User Service no MSRC (authoritative)
CVE-2026-88127 Windows SMB Server no MSRC (authoritative)
CVE-2026-88134 Windows Kernel no MSRC (authoritative)
CVE-2026-88109 Office Click-To-Run no MSRC (authoritative)
CVE-2026-88126 Windows no MSRC (authoritative)
CVE-2026-88110 Windows Graphics Kernel no MSRC (authoritative)
CVE-2026-88113 Windows Broadcast DVR User Service no MSRC (authoritative)
CVE-2026-88115 Windows Server no MSRC (authoritative)
CVE-2026-88128 Windows no MSRC (authoritative)
CVE-2026-88118 Windows Background Intelligent Transfer Service no MSRC (authoritative)
CVE-2026-88147 Windows Secure Socket Tunneling Protocol no MSRC (authoritative)
CVE-2026-88121 Windows Background Intelligent Transfer Service (BITS) no MSRC (authoritative)
CVE-2026-88152 Windows Background Intelligent Transfer Service no MSRC (authoritative)
CVE-2026-88139 Windows Kernel no MSRC (authoritative)
CVE-2026-88141 Windows Kernel no MSRC (authoritative)
CVE-2026-88142 Windows Background Intelligent Transfer Service (BITS) no MSRC (authoritative)
CVE-2026-88149 Windows Ancillary Function Driver for WinSock no MSRC (authoritative)
CVE-2026-88171 Windows DHCP Server High 8.1 no MSRC (authoritative)
CVE-2026-88174 Windows Deployment Services no MSRC (authoritative)
CVE-2026-88177 Windows no MSRC (authoritative)
CVE-2026-88179 Windows no MSRC (authoritative)
CVE-2026-88180 Windows no MSRC (authoritative)
CVE-2026-88182 Windows Search Component no MSRC (authoritative)
CVE-2026-88181 Windows no MSRC (authoritative)
CVE-2026-88194 Windows DWM Core Library no MSRC (authoritative)
CVE-2026-88189 Windows DWM Core Library no MSRC (authoritative)
CVE-2026-88191 Windows Search Component no MSRC (authoritative)
CVE-2026-88188 Windows no MSRC (authoritative)
CVE-2026-88193 Scripting Engine no MSRC (authoritative)
CVE-2026-69884 Windows High 7.8 no MSRC (authoritative)
CVE-2026-69902 Windows no MSRC (authoritative)
CVE-2026-69915 Windows no MSRC (authoritative)
CVE-2026-70054 Windows no MSRC (authoritative)
CVE-2026-70084 Windows Projected File System no MSRC (authoritative)
CVE-2026-70112 Windows no MSRC (authoritative)
CVE-2026-70122 Windows Broadcast DVR User Service no MSRC (authoritative)
CVE-2026-70143 Windows Network File System High 7.8 no MSRC (authoritative)
CVE-2026-70148 Windows Broadcast DVR User Service no MSRC (authoritative)
CVE-2026-70158 Routing and Remote Access Service no MSRC (authoritative)
CVE-2026-70160 Windows Kernel no MSRC (authoritative)
CVE-2026-85922 Azure Key Vault no MSRC (authoritative)
CVE-2026-85925 Azure Key Vault no MSRC (authoritative)
CVE-2026-70111 Windows Kernel no MSRC (authoritative)
CVE-2026-70184 Windows Backup Engine no MSRC (authoritative)
CVE-2026-70227 Windows no MSRC (authoritative)
CVE-2026-70228 Desktop Window Manager no MSRC (authoritative)
CVE-2026-70250 Windows DHCP Client no MSRC (authoritative)
CVE-2026-70260 Trace Data Helper no MSRC (authoritative)
CVE-2026-70261 Trace Data Helper no MSRC (authoritative)
CVE-2026-70264 Defender no MSRC (authoritative)
CVE-2026-70297 Skype for Business no MSRC (authoritative)
CVE-2026-83746 Skype for Business no MSRC (authoritative)
CVE-2026-85873 Skype for Business no MSRC (authoritative)
CVE-2026-88075 Configuration Manager High 8.8 no MSRC (authoritative)
CVE-2026-88093 Desktop Window Manager no MSRC (authoritative)
CVE-2026-88112 Windows Domain Name Service no MSRC (authoritative)
CVE-2026-88114 Windows Domain Name Service no MSRC (authoritative)
CVE-2026-88116 Windows Domain Name Service no MSRC (authoritative)
CVE-2026-88117 Windows DHCP Server High 8.1 no MSRC (authoritative)
CVE-2026-88119 Windows DHCP Server no MSRC (authoritative)
CVE-2026-88120 Windows DHCP Server no MSRC (authoritative)
CVE-2026-88122 Windows Server no MSRC (authoritative)
CVE-2026-88123 DNS Server no MSRC (authoritative)
CVE-2026-88125 DNS Server no MSRC (authoritative)
CVE-2026-88129 DNS Server no MSRC (authoritative)
CVE-2026-88130 DNS Server Medium 6.5 no MSRC (authoritative)
CVE-2026-69802 Network Device Enrollment Service no MSRC (authoritative)
CVE-2026-69919 Windows Cryptographic Services no MSRC (authoritative)
CVE-2026-70202 SharePoint no MSRC (authoritative)
CVE-2026-70214 Office Excel no MSRC (authoritative)
CVE-2026-70254 Office Excel no MSRC (authoritative)
CVE-2026-70219 Microsoft Office Excel no MSRC (authoritative)
CVE-2026-70217 SharePoint no MSRC (authoritative)
CVE-2026-70215 PowerPoint no MSRC (authoritative)
CVE-2026-70246 SharePoint no MSRC (authoritative)
CVE-2026-70242 Office Outlook Critical 9.8 1.03% no MSRC (authoritative)
CVE-2026-88144 PowerPoint no MSRC (authoritative)
CVE-2026-85340 Office Click-To-Run no MSRC (authoritative)
CVE-2026-85932 SharePoint no MSRC (authoritative)
CVE-2026-88163 SharePoint no MSRC (authoritative)
CVE-2026-88154 Excel no MSRC (authoritative)
CVE-2026-88164 SharePoint no MSRC (authoritative)
CVE-2026-88172 Excel no MSRC (authoritative)
CVE-2026-88184 Excel no MSRC (authoritative)
CVE-2026-88166 SharePoint no MSRC (authoritative)
CVE-2026-88200 SharePoint no MSRC (authoritative)
CVE-2026-88185 Office Word no MSRC (authoritative)
CVE-2026-88186 Office Word no MSRC (authoritative)
CVE-2026-88183 Office PowerPoint no MSRC (authoritative)
CVE-2026-88192 Excel no MSRC (authoritative)
CVE-2026-88190 Office Excel no MSRC (authoritative)
CVE-2026-88195 Excel no MSRC (authoritative)
CVE-2026-88203 PowerPoint no MSRC (authoritative)
CVE-2026-88206 SharePoint no MSRC (authoritative)
CVE-2026-88210 Microsoft Office Word no MSRC (authoritative)
CVE-2026-88207 Office PowerPoint High 7.5 no MSRC (authoritative)
CVE-2026-70343 MPEG-2 Video Extension no MSRC (authoritative)
CVE-2026-96044 SharePoint no MSRC (authoritative)
CVE-2026-96186 Windows Media Foundation no MSRC (authoritative)
CVE-2026-96188 PowerToys no MSRC (authoritative)
CVE-2026-96233 ASP.NET Core no MSRC (authoritative)
CVE-2026-96243 Windows WalletService no MSRC (authoritative)
CVE-2026-96249 Windows no MSRC (authoritative)
CVE-2026-96250 Windows no MSRC (authoritative)
CVE-2026-96301 Windows USB Print Driver High 7.0 0.25% no MSRC (authoritative)
CVE-2026-96310 Windows USB Print Driver no MSRC (authoritative)
CVE-2026-96254 Windows no MSRC (authoritative)
CVE-2026-96253 Windows no MSRC (authoritative)
CVE-2026-96252 Active Directory Federation Services no MSRC (authoritative)
CVE-2026-96300 RPC Endpoint Mapper Service no MSRC (authoritative)
CVE-2026-96304 Windows no MSRC (authoritative)
CVE-2026-96320 Windows DHCP Server no MSRC (authoritative)
CVE-2026-96323 Windows Update no MSRC (authoritative)
CVE-2026-96322 Windows Remote Desktop Protocol no MSRC (authoritative)
CVE-2026-96321 Remote Desktop Display Driver no MSRC (authoritative)
CVE-2026-96324 Windows Search Component no MSRC (authoritative)
CVE-2026-96325 Windows SMB Server no MSRC (authoritative)
CVE-2026-96850 Windows Modern Device Management no MSRC (authoritative)
CVE-2026-96844 Bluetooth Driver no MSRC (authoritative)
CVE-2026-96846 Windows no MSRC (authoritative)
CVE-2026-96843 Windows no MSRC (authoritative)
CVE-2026-96854 Windows Device Association Service no MSRC (authoritative)
CVE-2026-96852 Windows TCP/IP no MSRC (authoritative)
CVE-2026-96853 Windows no MSRC (authoritative)
CVE-2026-96858 Windows Security Account Manager no MSRC (authoritative)
CVE-2026-96909 BitLocker no MSRC (authoritative)
CVE-2026-96916 Windows no MSRC (authoritative)
CVE-2026-96911 Windows Search Component no MSRC (authoritative)
CVE-2026-96910 Windows Search Component no MSRC (authoritative)
CVE-2026-96912 Windows no MSRC (authoritative)
CVE-2026-96913 Windows Kernel no MSRC (authoritative)
CVE-2026-96915 Windows Kernel-Mode Drivers no MSRC (authoritative)
CVE-2026-96917 Windows PCI Bus Driver no MSRC (authoritative)
CVE-2026-96919 Windows Broadcast DVR User Service no MSRC (authoritative)
CVE-2026-96923 Windows Workstation Service no MSRC (authoritative)
CVE-2026-96925 Windows no MSRC (authoritative)
CVE-2026-96924 Windows Critical 9.8 no MSRC (authoritative)
CVE-2026-96927 Windows no MSRC (authoritative)
CVE-2026-96930 Windows Universal Disk Format File System Driver no MSRC (authoritative)
CVE-2026-96934 Windows DHCP Server no MSRC (authoritative)
CVE-2026-96932 Windows Embedded Mode Service no MSRC (authoritative)
CVE-2026-96929 Windows Kernel no MSRC (authoritative)
CVE-2026-96926 DNS Server no MSRC (authoritative)
CVE-2026-69675 Windows Network File System no MSRC (authoritative)
CVE-2026-85866 Windows no MSRC (authoritative)
CVE-2026-96937 Windows Search Component no MSRC (authoritative)
CVE-2026-96938 Windows Distributed File System no MSRC (authoritative)
CVE-2026-96939 Servicing Stack Updates no MSRC (authoritative)
CVE-2026-88094 Azure Storage Library High 8.1 no MSRC (authoritative)
CVE-2026-96202 Windows Raw Image Extension no MSRC (authoritative)
CVE-2026-96944 Windows Storage no MSRC (authoritative)
CVE-2026-96945 Windows Failover Cluster no MSRC (authoritative)
CVE-2026-96946 Windows Universal Disk Format File System Driver no MSRC (authoritative)
CVE-2026-96947 Windows Universal Disk Format File System Driver High 7.8 0.32% no MSRC (authoritative)
CVE-2026-96948 Windows no MSRC (authoritative)
CVE-2026-96949 Windows Universal Disk Format File System Driver no MSRC (authoritative)
CVE-2026-96950 Windows Universal Disk Format File System Driver no MSRC (authoritative)
CVE-2026-96953 Windows Universal Disk Format File System Driver no MSRC (authoritative)
CVE-2026-96952 Windows Media Foundation no MSRC (authoritative)
CVE-2026-95943 Connected Devices Platform Service no MSRC (authoritative)
CVE-2026-97748 Office Excel no MSRC (authoritative)
CVE-2026-97007 Excel no MSRC (authoritative)
CVE-2026-97779 Excel no MSRC (authoritative)
CVE-2026-97756 Excel no MSRC (authoritative)
CVE-2026-97008 Excel High 8.8 no MSRC (authoritative)
CVE-2026-97769 Office Excel no MSRC (authoritative)
CVE-2026-97773 Excel High 8.8 no MSRC (authoritative)
CVE-2026-97010 Excel no MSRC (authoritative)
CVE-2026-97743 Excel no MSRC (authoritative)
CVE-2026-97777 Excel no MSRC (authoritative)
CVE-2026-97762 Excel no MSRC (authoritative)
CVE-2026-97011 Excel no MSRC (authoritative)
CVE-2026-97757 Excel no MSRC (authoritative)
CVE-2026-97738 Excel High 8.8 0.74% no MSRC (authoritative)
CVE-2026-97742 Excel no MSRC (authoritative)
CVE-2026-97760 Office Excel no MSRC (authoritative)
CVE-2026-97746 Excel no MSRC (authoritative)
CVE-2026-97004 Office Excel no MSRC (authoritative)
CVE-2026-97741 Office Excel no MSRC (authoritative)
CVE-2026-97763 Excel High 8.8 no MSRC (authoritative)
CVE-2026-97775 Excel no MSRC (authoritative)
CVE-2026-97772 Office Excel no MSRC (authoritative)
CVE-2026-97768 Excel no MSRC (authoritative)
CVE-2026-97745 Excel no MSRC (authoritative)
CVE-2026-96071 Windows Media no MSRC (authoritative)
CVE-2026-96118 Windows Graphics Kernel no MSRC (authoritative)
CVE-2026-97788 Active Directory Federation Services no MSRC (authoritative)
CVE-2026-97790 Windows Container Isolation FS Filter Driver no MSRC (authoritative)
CVE-2026-97792 Windows Container Isolation FS Filter Driver no MSRC (authoritative)
CVE-2026-100211 Excel no MSRC (authoritative)
CVE-2026-100209 Office Excel no MSRC (authoritative)
CVE-2026-100210 Excel no MSRC (authoritative)
CVE-2026-100212 Office Excel no MSRC (authoritative)
CVE-2026-102851 Visual Studio Code no MSRC (authoritative)
CVE-2026-102870 ASP.NET Core no MSRC (authoritative)
CVE-2026-105729 Sysinternals no MSRC (authoritative)
CVE-2026-100214 Dynamics 365 Business Central no MSRC (authoritative)
CVE-2026-100216 Windows Storage no MSRC (authoritative)
CVE-2026-100217 Windows Group Policy no MSRC (authoritative)
CVE-2026-100218 Remote Desktop Gateway Service no MSRC (authoritative)
CVE-2026-88219 Windows no MSRC (authoritative)
CVE-2026-69506 Windows Key Storage Provider no MSRC (authoritative)
CVE-2026-100225 Windows no MSRC (authoritative)
CVE-2026-70023 Hyper-V High 7.8 no MSRC (authoritative)
CVE-2026-70212 Windows Security Center no MSRC (authoritative)
CVE-2026-88226 Windows Storage Port Driver no MSRC (authoritative)
CVE-2026-96209 Windows Network File System no MSRC (authoritative)
CVE-2026-102187 Windows no MSRC (authoritative)
CVE-2026-102186 Network File System no MSRC (authoritative)
CVE-2026-102188 Windows Storage Port Driver Medium 6.8 no MSRC (authoritative)
CVE-2026-102189 Windows Storage no MSRC (authoritative)
CVE-2026-102191 Windows no MSRC (authoritative)
CVE-2026-102192 Windows Failover Cluster no MSRC (authoritative)
CVE-2026-102193 Windows Broadcast DVR User Service High 7.0 no MSRC (authoritative)
CVE-2026-102194 Windows High 7.0 no MSRC (authoritative)
CVE-2026-102195 Windows Broadcast DVR User Service no MSRC (authoritative)
CVE-2026-102196 Windows Broadcast DVR User Service no MSRC (authoritative)
CVE-2026-102197 Windows Broadcast DVR User Service no MSRC (authoritative)
CVE-2026-102198 Windows Remote Desktop Protocol no MSRC (authoritative)
CVE-2026-102199 Windows Codecs Library no MSRC (authoritative)
CVE-2026-102201 Windows Media Foundation no MSRC (authoritative)
CVE-2026-102203 Windows no MSRC (authoritative)
CVE-2026-102202 Windows Container Isolation FS Filter Driver no MSRC (authoritative)
CVE-2026-102206 Windows Portable Device MTP Driver no MSRC (authoritative)
CVE-2026-102205 Windows Universal Disk Format File System Driver no MSRC (authoritative)
CVE-2026-102207 Windows Kernel no MSRC (authoritative)
CVE-2026-102208 Windows no MSRC (authoritative)
CVE-2026-102209 Graphics Component no MSRC (authoritative)
CVE-2026-102211 Windows no MSRC (authoritative)
CVE-2026-102216 Windows StateRepository API no MSRC (authoritative)
CVE-2026-102218 Windows Universal Disk Format File System Driver no MSRC (authoritative)
CVE-2026-102215 Windows Universal Disk Format File System Driver no MSRC (authoritative)
CVE-2026-102221 Windows no MSRC (authoritative)
CVE-2026-102220 Windows no MSRC (authoritative)
CVE-2026-102214 Hyper-V no MSRC (authoritative)
CVE-2026-100215 Graphics Component no MSRC (authoritative)
CVE-2026-102225 Windows no MSRC (authoritative)
CVE-2026-102226 Dynamics Business Central no MSRC (authoritative)
CVE-2026-109453 Windows no MSRC (authoritative)
CVE-2026-69922 Office no MSRC (authoritative)
CVE-2026-103553 Windows Partition Management Driver no MSRC (authoritative)
CVE-2026-103554 Windows Broadcast DVR User Service no MSRC (authoritative)
CVE-2026-103555 Windows no MSRC (authoritative)
CVE-2026-103558 Windows Routing and Remote Access Service no MSRC (authoritative)
CVE-2026-103560 DNS Server no MSRC (authoritative)
CVE-2026-103565 Windows Broadcast DVR User Service no MSRC (authoritative)
CVE-2026-103567 Windows Broadcast DVR User Service no MSRC (authoritative)
CVE-2026-103568 Windows Credential Providers no MSRC (authoritative)
CVE-2026-103575 Remote Desktop Client no MSRC (authoritative)
CVE-2026-103576 Active Directory Federation Services no MSRC (authoritative)
CVE-2026-103578 Windows Kernel no MSRC (authoritative)
CVE-2026-105003 Windows no MSRC (authoritative)
CVE-2026-105004 Windows Overlay Filter no MSRC (authoritative)
CVE-2026-105005 Windows no MSRC (authoritative)
CVE-2026-105006 Windows no MSRC (authoritative)
CVE-2026-105007 Windows High 8.8 0.77% no MSRC (authoritative)
CVE-2026-105008 Windows Schannel no MSRC (authoritative)
CVE-2026-105009 Windows Server Update Service no MSRC (authoritative)
CVE-2026-97798 Windows Error Reporting no MSRC (authoritative)
CVE-2026-97799 Windows Audio Service no MSRC (authoritative)
CVE-2026-105013 SharePoint no MSRC (authoritative)
CVE-2026-97803 Windows Kernel no MSRC (authoritative)
CVE-2026-97804 Windows no MSRC (authoritative)
CVE-2026-97806 Windows Broadcast DVR User Service no MSRC (authoritative)
CVE-2026-97807 Windows Broadcast DVR User Service no MSRC (authoritative)
CVE-2026-97808 Windows Broadcast DVR User Service no MSRC (authoritative)
CVE-2026-97809 Windows no MSRC (authoritative)
CVE-2026-97810 Windows Container Isolation FS Filter Driver no MSRC (authoritative)
CVE-2026-97811 OpenSSH for Windows no MSRC (authoritative)
CVE-2026-97812 Windows Update Orchestrator Service no MSRC (authoritative)
CVE-2026-97813 Hyper-V Medium 6.5 0.95% no MSRC (authoritative)
CVE-2026-97817 DNS Server no MSRC (authoritative)
CVE-2026-97819 DNS Server no MSRC (authoritative)
CVE-2026-97820 DNS Server no MSRC (authoritative)
CVE-2026-97821 DNS Server no MSRC (authoritative)
CVE-2026-97822 DNS Server no MSRC (authoritative)
CVE-2026-97823 DNS Server no MSRC (authoritative)
CVE-2026-97824 DNS Server no MSRC (authoritative)
CVE-2026-97825 DNS Server no MSRC (authoritative)
CVE-2026-97826 Windows DNS Server Medium 6.5 no MSRC (authoritative)
CVE-2026-97827 DNS Server no MSRC (authoritative)
CVE-2026-97828 Windows DNS Server Medium 6.5 no MSRC (authoritative)
CVE-2026-97829 DNS Server no MSRC (authoritative)
CVE-2026-97831 DNS Server no MSRC (authoritative)
CVE-2026-97832 Windows DNS Server no MSRC (authoritative)
CVE-2026-97833 Windows DNS Server no MSRC (authoritative)
CVE-2026-97834 Windows DNS Server no MSRC (authoritative)
CVE-2026-97835 Windows Server no MSRC (authoritative)
CVE-2026-97836 DNS Server no MSRC (authoritative)
CVE-2026-97837 Windows Server no MSRC (authoritative)
CVE-2026-97838 Windows DNS Server no MSRC (authoritative)
CVE-2026-97839 Windows Server no MSRC (authoritative)
CVE-2026-97840 Windows DNS Server no MSRC (authoritative)
CVE-2026-97841 DNS Server no MSRC (authoritative)
CVE-2026-97842 DNS Server no MSRC (authoritative)
CVE-2026-97843 DNS Server no MSRC (authoritative)
CVE-2026-97844 DNS Server no MSRC (authoritative)
CVE-2026-108127 DNS Server no MSRC (authoritative)
CVE-2026-108128 DNS Server no MSRC (authoritative)
CVE-2026-108129 Windows Server DNS Server no MSRC (authoritative)
CVE-2026-108131 Active Directory Federation Services no MSRC (authoritative)
CVE-2026-97781 OneNote no MSRC (authoritative)
CVE-2026-108426 Office Word no NVD (authoritative)
CVE-2026-108427 Office Word no NVD (authoritative)
CVE-2026-108428 Office Word no NVD (authoritative)
CVE-2026-108429 Office Word no NVD (authoritative)
CVE-2026-108430 Office Word no NVD (authoritative)
CVE-2026-108431 Office Word no NVD (authoritative)
CVE-2026-108432 Office Word no NVD (authoritative)
CVE-2026-108433 Office Word no NVD (authoritative)
CVE-2026-108437 Office Word no NVD (authoritative)
CVE-2026-108439 Office Word no NVD (authoritative)
CVE-2026-108440 Office Word no NVD (authoritative)
CVE-2026-108441 Office Word no NVD (authoritative)
CVE-2026-108442 Office no NVD (authoritative)
CVE-2026-108443 Office Word no NVD (authoritative)
CVE-2026-108445 Office Word no NVD (authoritative)
CVE-2026-108446 Excel no NVD (authoritative)
CVE-2026-108447 Office Word no NVD (authoritative)
CVE-2026-108449 Office Word no NVD (authoritative)
CVE-2026-108450 Office Word no NVD (authoritative)
CVE-2026-108451 Office Word no NVD (authoritative)

CVE-2026-96940

Microsoft Exchange Server contains a vulnerability due to weak authorization that allows an authenticated attacker to elevate their privileges over the network.

Affected products:

  • Exchange Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96940

CVE-2026-69435

CVE-2026-69435 is a vulnerability in the Microsoft Azure SRE Agent caused by missing authorization checks. This flaw allows an authenticated attacker to perform unauthorized actions and escalate privileges over the network.

Affected products:

  • Azure SRE Agent

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-69435

CVE-2026-77900

A vulnerability in Microsoft Azure App Service allows an unauthorized remote attacker to execute arbitrary code due to missing authentication for a critical function. This flaw carries a high CVSS base score of 9.8 and facilitates RCE over a network without requiring prior authentication.

Affected products:

  • Azure App Service

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-77900

CVE-2026-88131

CVE-2026-88131 is a critical vulnerability in Microsoft Dataverse involving insecure deserialization of untrusted data, which allows an unauthenticated remote attacker to achieve remote code execution (RCE) over a network.

Affected products:

  • Dataverse

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-88131

CVE-2026-94510

Microsoft Bookings contains an authorization bypass vulnerability (CVE-2026-94510) caused by a user-controlled key, which allows an unauthenticated attacker to perform privilege escalation over a network. The vulnerability carries a high CVSS base score of 9.9, indicating critical severity.

Affected products:

  • Bookings

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-94510

CVE-2026-96207

CVE-2026-96207 describes a vulnerability in Microsoft Partner Center involving improper certificate validation. This flaw allows an unauthorized, network-adjacent attacker to perform privilege escalation within the platform.

Affected products:

  • Partner Center

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-96207

CVE-2026-83943

CVE-2026-83943 is an information exposure vulnerability in Microsoft Azure API Center that allows an unauthorized attacker to access sensitive information over a network. The vulnerability has a CVSS v3.1 base score of 8.7, indicating a high risk of unauthorized data disclosure.

Affected products:

  • Azure API Center

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-83943

CVE-2026-83947

CVE-2026-83947 describes a missing authorization vulnerability in Azure Event Grid. This flaw allows an authenticated attacker to perform spoofing attacks over a network, potentially leading to unauthorized data handling or service manipulation within the event-driven architecture.

Affected products:

  • Azure Event Grid

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-83947

CVE-2026-108744

The pbi-cli tool is vulnerable to OS command injection due to the improper handling of .pbip file paths within the desktop_sync.py module. When reopening projects, the application passes unquoted file paths to 'cmd /c start', allowing an attacker to execute arbitrary commands by crafting a malicious path containing shell metacharacters such as '&'. This vulnerability results in command execution with the privileges of the user running the application.

Affected products:

  • pbi-cli (3.10.1 through 3.12.0)

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-108744

CVE-2026-100202

A use-after-free vulnerability in the Windows Message Queuing (MSMQ) Queue Manager allows a remote, unauthorized attacker to achieve remote code execution over a network. This critical vulnerability poses a high risk as it can be exploited without authentication.

Affected products:

  • Windows Message Queuing Queue Manager

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-100202

Related in this roundup: CVE-2026-85874.

CVE-2026-100219

CVE-2026-100219 describes a use-after-free vulnerability in Microsoft QUIC. The flaw allows a remote, unauthorized attacker to trigger arbitrary code execution over a network with a CVSS v3.1 base score of 9.8, indicating critical severity.

Affected products:

  • Microsoft QUIC

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-100219

Related in this roundup: CVE-2026-105016, CVE-2026-103577, CVE-2026-85790.

CVE-2026-100222

CVE-2026-100222 is a heap-based buffer overflow vulnerability in the Microsoft Network Policy Server (NPS) component. The vulnerability allows an unauthorized remote attacker to achieve arbitrary code execution over a network, carrying a critical CVSS score of 9.8.

Affected products:

  • Network Policy Server

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-100222

Related in this roundup: CVE-2026-85806, CVE-2026-83655, CVE-2026-85371, CVE-2026-85799, CVE-2026-85811, CVE-2026-96246, CVE-2026-70207.

CVE-2026-102210

CVE-2026-102210 is a heap-based buffer overflow vulnerability in the Windows Text Shaping component, which enables an unauthorized remote attacker to achieve arbitrary code execution. The vulnerability is characterized by a high CVSS score of 9.8, indicating the potential for significant impact and ease of network exploitation.

Affected products:

  • Windows Text Shaping

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-102210

CVE-2026-105010

CVE-2026-105010 is a use-after-free vulnerability in the Microsoft Windows Search Component that can be exploited by a remote unauthorized attacker to achieve privilege escalation over a network.

Affected products:

  • Windows Search Component

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-105010

Related in this roundup: CVE-2026-108136, CVE-2026-70136, CVE-2026-70141, CVE-2026-70173, CVE-2026-70150, CVE-2026-70177, CVE-2026-70156, CVE-2026-83575, CVE-2026-83704, CVE-2026-70086, CVE-2026-83920, CVE-2026-85869, CVE-2026-88160, CVE-2026-83564, CVE-2026-83570, CVE-2026-83686, CVE-2026-83725, CVE-2026-83829, CVE-2026-83850, CVE-2026-88182, CVE-2026-88191, CVE-2026-96324, CVE-2026-96911, CVE-2026-96910, CVE-2026-96937.

CVE-2026-105016

CVE-2026-105016 describes a heap-based buffer overflow vulnerability in Microsoft QUIC that allows an unauthorized, remote attacker to achieve arbitrary code execution. The vulnerability is highly critical, as indicated by a CVSS v3.1 base score of 9.8, and can be exploited over a network.

Affected products:

  • Microsoft QUIC

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-105016

Related in this roundup: CVE-2026-100219, CVE-2026-103577, CVE-2026-85790.

CVE-2026-69634

CVE-2026-69634 describes a heap-based buffer overflow vulnerability in the Windows iSCSI implementation. An unauthenticated attacker can exploit this remotely over the network to achieve arbitrary code execution, presenting a critical security risk (CVSS 9.8).

Affected products:

  • Windows iSCSI

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-69634

CVE-2026-69705

CVE-2026-69705 is an out-of-bounds write vulnerability within the Windows iSCSI component, enabling unauthenticated remote attackers to achieve arbitrary code execution over a network. The vulnerability carries a CVSS v3.1 base score of 9.8, indicating a critical severity due to the lack of required privileges and the potential for remote exploitation.

Affected products:

  • Windows

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-69705

Related in this roundup: CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-69883

CVE-2026-69883 is a use-after-free vulnerability in the Windows iSCSI component that enables a remote, unauthorized attacker to achieve remote code execution. Given the high CVSS score, this represents a critical risk for Windows environments.

Affected products:

  • Windows

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-69883

Related in this roundup: CVE-2026-69705, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-69886

CVE-2026-69886 describes a heap-based buffer overflow vulnerability within the Windows Imaging Component. This flaw allows a remote, unauthorized attacker to achieve arbitrary code execution over a network by leveraging the memory corruption vulnerability.

Affected products:

  • Windows Imaging Component

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-69886

Related in this roundup: CVE-2026-96859, CVE-2026-77496.

CVE-2026-70096

CVE-2026-70096 describes a heap-based buffer overflow vulnerability within the Windows Rich Text Edit Control. This flaw allows a remote, unauthorized attacker to execute arbitrary code over the network, potentially leading to full system compromise.

Affected products:

  • Windows Rich Text Edit Control

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-70096

Related in this roundup: CVE-2026-70093.

CVE-2026-70147

A heap-based buffer overflow vulnerability in the Microsoft PostScript Printer Driver allows an unauthenticated, remote attacker to execute arbitrary code over the network. This high-severity vulnerability poses a significant risk for remote code execution.

Affected products:

  • PostScript Printer Driver

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-70147

Related in this roundup: CVE-2026-70153, CVE-2026-108467, CVE-2026-70110, CVE-2026-70092, CVE-2026-70109.

CVE-2026-70153

CVE-2026-70153 describes a heap-based buffer overflow vulnerability in the Microsoft PostScript Printer Driver. The vulnerability allows an unauthorized remote attacker to achieve arbitrary code execution over a network, presenting a critical risk to systems utilizing this driver.

Affected products:

  • PostScript Printer Driver

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-70153

Related in this roundup: CVE-2026-70147, CVE-2026-108467, CVE-2026-70110, CVE-2026-70092, CVE-2026-70109.

CVE-2026-70157

CVE-2026-70157 is a heap-based buffer overflow vulnerability in the Windows System Information Console. An unauthenticated attacker can exploit this flaw to achieve remote code execution over a network, presenting a critical risk to affected Windows environments.

Affected products:

  • Windows System Information Console

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-70157

CVE-2026-70188

CVE-2026-70188 describes an HTTP request/response smuggling vulnerability in Microsoft ASP.NET Core caused by inconsistent interpretation of HTTP requests. This vulnerability allows an unauthorized attacker to bypass security controls over a network, potentially leading to unauthorized access or security feature circumvention.

Affected products:

  • ASP.NET Core

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-70188

Related in this roundup: CVE-2026-88092, CVE-2026-70186, CVE-2026-70159, CVE-2026-70175, CVE-2026-70196, CVE-2026-70181, CVE-2026-70183, CVE-2026-96233, CVE-2026-102870.

CVE-2026-70300

CVE-2026-70300 is a critical vulnerability in Microsoft Office Word resulting from an untrusted pointer dereference. This flaw enables a remote, unauthorized attacker to execute arbitrary code over a network, potentially leading to full system compromise.

Affected products:

  • Office Word

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-70300

Related in this roundup: CVE-2026-105715, CVE-2026-70268, CVE-2026-70220, CVE-2026-70206, CVE-2026-70269, CVE-2026-70263, CVE-2026-70287, CVE-2026-70302, CVE-2026-70301, CVE-2026-83891, CVE-2026-88167, CVE-2026-88169, CVE-2026-88202, CVE-2026-96995, CVE-2026-97001, CVE-2026-88185, CVE-2026-88186, CVE-2026-108426, CVE-2026-108427, CVE-2026-108428, CVE-2026-108429, CVE-2026-108430, CVE-2026-108431, CVE-2026-108432, CVE-2026-108433, CVE-2026-108437, CVE-2026-108439, CVE-2026-108440, CVE-2026-108441, CVE-2026-108443, CVE-2026-108445, CVE-2026-108447, CVE-2026-108449, CVE-2026-108450, CVE-2026-108451.

CVE-2026-83517

CVE-2026-83517 is a heap-based buffer overflow vulnerability in Microsoft Windows Media Foundation that permits an unauthenticated attacker to achieve remote code execution over a network. The vulnerability carries a CVSS v3.1 base score of 9.8, indicating a critical severity level due to the potential for full system compromise without user interaction.

Affected products:

  • Windows Media Foundation

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-83517

Related in this roundup: CVE-2026-85814, CVE-2026-70278, CVE-2026-70044, CVE-2026-70131, CVE-2026-70258, CVE-2026-96186, CVE-2026-96952, CVE-2026-102201.

CVE-2026-83519

CVE-2026-83519 describes a critical heap-based buffer overflow vulnerability within Windows Error Reporting. The flaw allows an unauthenticated, unauthorized attacker to achieve remote code execution over a network with a high CVSS base score of 9.8.

Affected products:

  • Windows Error Reporting

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-83519

Related in this roundup: CVE-2026-83693, CVE-2026-83748, CVE-2026-97815, CVE-2026-69363, CVE-2026-70103, CVE-2026-69354, CVE-2026-69387, CVE-2026-83658, CVE-2026-83669, CVE-2026-83715, CVE-2026-83758, CVE-2026-83826, CVE-2026-83916, CVE-2026-85354, CVE-2026-85800, CVE-2026-83643, CVE-2026-83689, CVE-2026-83747, CVE-2026-83750, CVE-2026-83840, CVE-2026-97798.

CVE-2026-83693

CVE-2026-83693 is a heap-based buffer overflow vulnerability within the Windows Error Reporting component, which can be exploited by an unauthorized remote attacker to achieve arbitrary code execution.

Affected products:

  • Windows Error Reporting

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-83693

Related in this roundup: CVE-2026-83519, CVE-2026-83748, CVE-2026-97815, CVE-2026-69363, CVE-2026-70103, CVE-2026-69354, CVE-2026-69387, CVE-2026-83658, CVE-2026-83669, CVE-2026-83715, CVE-2026-83758, CVE-2026-83826, CVE-2026-83916, CVE-2026-85354, CVE-2026-85800, CVE-2026-83643, CVE-2026-83689, CVE-2026-83747, CVE-2026-83750, CVE-2026-83840, CVE-2026-97798.

CVE-2026-83748

CVE-2026-83748 is a critical heap-based buffer overflow vulnerability in Windows Error Reporting that can be exploited by an unauthorized remote attacker to achieve arbitrary code execution. The vulnerability is network-exploitable, posing a significant risk to affected Windows systems.

Affected products:

  • Windows Error Reporting

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-83748

Related in this roundup: CVE-2026-83519, CVE-2026-83693, CVE-2026-97815, CVE-2026-69363, CVE-2026-70103, CVE-2026-69354, CVE-2026-69387, CVE-2026-83658, CVE-2026-83669, CVE-2026-83715, CVE-2026-83758, CVE-2026-83826, CVE-2026-83916, CVE-2026-85354, CVE-2026-85800, CVE-2026-83643, CVE-2026-83689, CVE-2026-83747, CVE-2026-83750, CVE-2026-83840, CVE-2026-97798.

CVE-2026-83770

A heap-based buffer overflow vulnerability in the Windows Text Shaping component allows an unauthorized remote attacker to achieve code execution. The vulnerability is exploitable over a network, presenting a high risk (CVSS 9.8) for systems handling crafted text inputs.

Affected products:

  • Windows

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-83770

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-83780

The Windows CCFFilter Driver is susceptible to a use-after-free vulnerability that allows a remote, unauthorized attacker to achieve arbitrary code execution over a network. This critical vulnerability, carrying a CVSS base score of 9.8, represents a significant risk for unauthorized system compromise via network-accessible services.

Affected products:

  • CCFFilter Driver

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-83780

CVE-2026-83782

CVE-2026-83782 is a critical heap-based buffer overflow vulnerability within the Windows Shell component. An unauthorized remote attacker can leverage this vulnerability to achieve arbitrary code execution via network-based vectors.

Affected products:

  • Windows Shell

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-83782

Related in this roundup: CVE-2026-70222, CVE-2026-83906, CVE-2026-83905.

CVE-2026-83862

A use-after-free vulnerability in the Windows Network Load Balancing component allows a remote, unauthorized attacker to achieve remote code execution (RCE) via network-based exploitation. The vulnerability carries a CVSS base score of 9.8, indicating a critical severity level.

Affected products:

  • Windows Network Load Balancing

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-83862

CVE-2026-83935

CVE-2026-83935 describes a heap-based buffer overflow vulnerability in Microsoft XML, which allows a remote, unauthorized attacker to execute arbitrary code over a network with a CVSS base score of 9.8.

Affected products:

  • XML

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-83935

CVE-2026-85792

CVE-2026-85792 is a critical remote code execution vulnerability residing in the Windows Routing and Remote Access Service (RRAS). An unauthenticated attacker can exploit this flaw to gain unauthorized access and execute arbitrary code on a target machine, necessitating immediate patching of affected Windows systems.

Affected products:

  • Windows Routing and Remote Access Service

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-85792

Related in this roundup: CVE-2026-84017, CVE-2026-85339, CVE-2026-85794, CVE-2026-103558.

CVE-2026-85806

CVE-2026-85806 describes an integer underflow vulnerability in the Microsoft Network Policy Server (NPS) component. This flaw allows an unauthenticated, remote attacker to execute arbitrary code by sending specially crafted network packets that trigger the underflow condition. Due to the high CVSS score, this represents a critical risk requiring immediate patching of all Windows Server instances running the NPS role.

Affected products:

  • Network Policy Server

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-85806

Related in this roundup: CVE-2026-100222, CVE-2026-83655, CVE-2026-85371, CVE-2026-85799, CVE-2026-85811, CVE-2026-96246, CVE-2026-70207.

CVE-2026-85809

A remote code execution vulnerability exists in the Windows Routing and Remote Access Service (RRAS) that allows an unauthenticated attacker to gain unauthorized access to a victim's machine. The high CVSS score of 9.8 indicates that this vulnerability is critical and likely exploitable over the network.

Affected products:

  • Routing and Remote Access Service

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-85809

Related in this roundup: CVE-2026-70057, CVE-2026-84020, CVE-2026-85322, CVE-2026-85808, CVE-2026-96245, CVE-2026-96316, CVE-2026-70158.

CVE-2026-85814

CVE-2026-85814 is a critical heap-based buffer overflow vulnerability in Microsoft Windows Media Foundation. An unauthenticated attacker can exploit this flaw to achieve remote code execution over a network, presenting a significant risk to affected Windows systems.

Affected products:

  • Windows Media Foundation

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-85814

Related in this roundup: CVE-2026-83517, CVE-2026-70278, CVE-2026-70044, CVE-2026-70131, CVE-2026-70258, CVE-2026-96186, CVE-2026-96952, CVE-2026-102201.

CVE-2026-85818

CVE-2026-85818 describes a vulnerability in the Windows Schannel component involving improper verification of cryptographic signatures. This flaw enables an unauthorized remote attacker to perform spoofing attacks over a network, potentially compromising the integrity of secure communications.

Affected products:

  • Windows Schannel

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-85818

Related in this roundup: CVE-2026-105008.

CVE-2026-85928

CVE-2026-85928 is a critical heap-based buffer overflow vulnerability in the Windows Volume Manager Extension Driver. An unauthenticated attacker can exploit this flaw over a network to achieve remote code execution on the target system.

Affected products:

  • Windows Volume Manager Extension Driver

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-85928

Related in this roundup: CVE-2026-83694, CVE-2026-85356.

CVE-2026-88092

CVE-2026-88092 is a high-severity vulnerability in ASP.NET Core involving HTTP request/response smuggling. An unauthorized attacker can leverage this inconsistency in how HTTP requests are interpreted to perform unauthorized data tampering over a network.

Affected products:

  • ASP.NET Core

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-88092

Related in this roundup: CVE-2026-70188, CVE-2026-70186, CVE-2026-70159, CVE-2026-70175, CVE-2026-70196, CVE-2026-70181, CVE-2026-70183, CVE-2026-96233, CVE-2026-102870.

CVE-2026-88102

CVE-2026-88102 is a use-after-free vulnerability in the Windows Failover Cluster component. It allows an unauthenticated, remote attacker to trigger arbitrary code execution by sending specifically crafted network requests to the vulnerable service, presenting a high risk to availability and system integrity.

Affected products:

  • Windows Failover Cluster

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-88102

Related in this roundup: CVE-2026-88099, CVE-2026-96945, CVE-2026-102192.

CVE-2026-88156

CVE-2026-88156 describes a critical stack-based buffer overflow vulnerability in Microsoft Office Outlook. An unauthorized attacker can leverage this flaw to achieve remote code execution over a network, presenting a high risk for enterprise environments relying on Outlook for email communication.

Affected products:

  • Office Outlook

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-88156

Related in this roundup: CVE-2026-97016, CVE-2026-70256, CVE-2026-70257, CVE-2026-70291, CVE-2026-97749, CVE-2026-70242.

CVE-2026-96113

CVE-2026-96113 describes a heap-based buffer overflow vulnerability within a DNS server implementation that enables remote code execution by an unauthorized attacker over the network. The vulnerability carries a CVSS v3.1 base score of 9.8, indicating a critical severity level due to the potential for unauthenticated exploitation.

Affected products:

  • Windows Server

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-96113

Related in this roundup: CVE-2026-88115, CVE-2026-88122, CVE-2026-97835, CVE-2026-97837, CVE-2026-97839.

CVE-2026-97016

CVE-2026-97016 is a critical heap-based buffer overflow vulnerability in Microsoft Office Outlook that enables remote code execution by an unauthorized attacker over a network.

Affected products:

  • Office Outlook

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-97016

Related in this roundup: CVE-2026-88156, CVE-2026-70256, CVE-2026-70257, CVE-2026-70291, CVE-2026-97749, CVE-2026-70242.

CVE-2026-97805

CVE-2026-97805 describes an out-of-bounds read vulnerability within the Windows Partition Management Driver. An unauthorized remote attacker can leverage this flaw to achieve remote code execution on affected Windows systems.

Affected products:

  • Windows Partition Management Driver

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-97805

Related in this roundup: CVE-2026-83851, CVE-2026-83514, CVE-2026-83797, CVE-2026-103553.

CVE-2026-97814

CVE-2026-97814 is a critical heap-based buffer overflow vulnerability within the Windows Text Shaping component, which enables an unauthorized remote attacker to achieve arbitrary code execution. The vulnerability is highly exploitable via network-based vectors, warranting immediate attention for patch management.

Affected products:

  • Windows

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-97814

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-97815

CVE-2026-97815 describes a heap-based buffer overflow vulnerability in Windows Error Reporting that permits a remote, unauthorized attacker to achieve arbitrary code execution. The vulnerability is highly critical with a CVSS base score of 9.8, indicating the potential for network-based exploitation without authentication.

Affected products:

  • Windows Error Reporting

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-97815

Related in this roundup: CVE-2026-83519, CVE-2026-83693, CVE-2026-83748, CVE-2026-69363, CVE-2026-70103, CVE-2026-69354, CVE-2026-69387, CVE-2026-83658, CVE-2026-83669, CVE-2026-83715, CVE-2026-83758, CVE-2026-83826, CVE-2026-83916, CVE-2026-85354, CVE-2026-85800, CVE-2026-83643, CVE-2026-83689, CVE-2026-83747, CVE-2026-83750, CVE-2026-83840, CVE-2026-97798.

CVE-2026-97816

CVE-2026-97816 is a critical use-after-free vulnerability in OpenSSH for Windows that enables an unauthorized remote attacker to achieve remote code execution. The vulnerability is exploitable over the network without authentication, warranting immediate attention for patching and monitoring for exploitation attempts against SSH services.

Affected products:

  • OpenSSH for Windows

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-97816

Related in this roundup: CVE-2026-83754, CVE-2026-70163, CVE-2026-83769, CVE-2026-83871, CVE-2026-88157, CVE-2026-83923, CVE-2026-97811.

CVE-2026-102238

Visual Studio Code contains a path traversal vulnerability that can be exploited by an unauthorized remote attacker to achieve remote code execution. The vulnerability arises from improper limitation of a pathname to a restricted directory.

Affected products:

  • Visual Studio Code

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-102238

Related in this roundup: CVE-2026-102231, CVE-2026-102233, CVE-2026-102229, CVE-2026-102232, CVE-2026-102234, CVE-2026-102235, CVE-2026-70098, CVE-2026-69370, CVE-2026-102851.

CVE-2026-100200

CVE-2026-100200 is a use-after-free vulnerability in the Windows Update Service that enables a locally authenticated attacker to achieve privilege escalation. The vulnerability exists within the service's memory management logic, allowing an attacker to execute arbitrary code or gain higher-level permissions on the local system.

Affected products:

  • Windows Update Service

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-100200

Related in this roundup: CVE-2026-100203, CVE-2026-70056, CVE-2026-70139, CVE-2026-70142.

CVE-2026-100201

A heap-based buffer overflow vulnerability in the Windows Client License Service allows an authenticated, locally authorized attacker to escalate privileges to a higher level of authority on the host system.

Affected products:

  • Windows Client License Service

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-100201

CVE-2026-100203

CVE-2026-100203 describes a heap-based buffer overflow vulnerability in the Windows Update Service that enables a locally authenticated attacker to escalate privileges on the affected system.

Affected products:

  • Windows Update Service

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-100203

Related in this roundup: CVE-2026-100200, CVE-2026-70056, CVE-2026-70139, CVE-2026-70142.

CVE-2026-100205

An untrusted pointer dereference vulnerability in Microsoft Sysinternals allows a locally authenticated attacker to escalate privileges to a higher level of access by exploiting the flaw in the software.

Affected products:

  • Sysinternals

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-100205

Related in this roundup: CVE-2026-105729.

CVE-2026-100207

CVE-2026-100207 describes an OS command injection vulnerability in Microsoft Azure CycleCloud. The vulnerability allows an authorized attacker to execute arbitrary code locally due to improper neutralization of special elements used in OS commands, potentially leading to unauthorized system control.

Affected products:

  • Azure CycleCloud

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-100207

CVE-2026-100220

CVE-2026-100220 is a heap-based buffer overflow vulnerability residing in the Windows Media Video Decoder. This flaw allows a remote, unauthorized attacker to trigger arbitrary code execution by sending a specially crafted video stream to the affected component over a network.

Affected products:

  • Windows Media Video Decoder

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-100220

CVE-2026-102204

CVE-2026-102204 is a local privilege escalation vulnerability in Microsoft Defender for Endpoint caused by improper link resolution before file access (link following). An authorized attacker can exploit this flaw to elevate their privileges on the host system.

Affected products:

  • Defender for Endpoint

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-102204

CVE-2026-102227

CVE-2026-102227 describes a heap-based buffer overflow vulnerability in the Windows Resilient File System (ReFS). An authorized local attacker can exploit this flaw to execute arbitrary code with elevated privileges on the affected system.

Affected products:

  • Resilient File System (ReFS)

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-102227

CVE-2026-102231

CVE-2026-102231 is a security vulnerability in Visual Studio Code resulting from improper path equivalence resolution. This flaw allows a local, unauthorized attacker to bypass security features, potentially leading to unauthorized operations or privilege escalation depending on the environment context.

Affected products:

  • Visual Studio Code

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-102231

Related in this roundup: CVE-2026-102238, CVE-2026-102233, CVE-2026-102229, CVE-2026-102232, CVE-2026-102234, CVE-2026-102235, CVE-2026-70098, CVE-2026-69370, CVE-2026-102851.

CVE-2026-102233

CVE-2026-102233 identifies a missing authorization vulnerability in Microsoft Visual Studio Code. This flaw allows a local, unauthorized attacker to bypass security features, potentially leading to unauthorized access or privilege escalation on the affected system.

Affected products:

  • Visual Studio Code

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-102233

Related in this roundup: CVE-2026-102238, CVE-2026-102231, CVE-2026-102229, CVE-2026-102232, CVE-2026-102234, CVE-2026-102235, CVE-2026-70098, CVE-2026-69370, CVE-2026-102851.

CVE-2026-103569

CVE-2026-103569 describes an out-of-bounds read vulnerability in the Windows Internet Key Exchange (IKE) extension. This vulnerability can be exploited by an unauthorized remote attacker to disclose sensitive information over the network.

Affected products:

  • Windows

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-103569

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-103577

CVE-2026-103577 is a vulnerability in Microsoft QUIC resulting from insecure default variable initialization. This flaw allows a remote, unauthorized attacker to bypass security features during network communication, potentially compromising the integrity of protocol-level protections.

Affected products:

  • Microsoft QUIC

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-103577

Related in this roundup: CVE-2026-100219, CVE-2026-105016, CVE-2026-85790.

CVE-2026-105717

CVE-2026-105717 is a heap-based buffer overflow vulnerability in Microsoft Office Access. An unauthenticated attacker can exploit this flaw to achieve remote code execution over a network. Detection engineers should monitor for anomalous network traffic and process execution behavior originating from the Access application.

Affected products:

  • Office Access

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-105717

Related in this roundup: CVE-2026-102849, CVE-2026-105591, CVE-2026-105592, CVE-2026-105593, CVE-2026-105595, CVE-2026-105596, CVE-2026-105597, CVE-2026-105598, CVE-2026-94506, CVE-2026-105714, CVE-2026-105716.

CVE-2026-105718

CVE-2026-105718 describes an out-of-bounds read vulnerability in Microsoft Excel that can be leveraged by a remote unauthorized attacker to achieve remote code execution over a network. Detection should focus on monitoring anomalous network traffic originating from the Excel process and identifying unexpected child process creation or unauthorized file access patterns related to office applications.

Affected products:

  • Excel

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-105718

Related in this roundup: CVE-2026-88153, CVE-2026-88175, CVE-2026-97009, CVE-2026-97753, CVE-2026-97017, CVE-2026-97740, CVE-2026-97766, CVE-2026-97003, CVE-2026-97751, CVE-2026-97776, CVE-2026-97752, CVE-2026-97758, CVE-2026-97761, CVE-2026-97747, CVE-2026-97780, CVE-2026-97770, CVE-2026-97771, CVE-2026-97755, CVE-2026-97765, CVE-2026-97739, CVE-2026-97778, CVE-2026-97759, CVE-2026-77902, CVE-2026-88154, CVE-2026-88172, CVE-2026-88184, CVE-2026-88192, CVE-2026-88195, CVE-2026-97007, CVE-2026-97779, CVE-2026-97756, CVE-2026-97008, CVE-2026-97773, CVE-2026-97010, CVE-2026-97743, CVE-2026-97777, CVE-2026-97762, CVE-2026-97011, CVE-2026-97757, CVE-2026-97738, CVE-2026-97742, CVE-2026-97746, CVE-2026-97763, CVE-2026-97775, CVE-2026-97768, CVE-2026-97745, CVE-2026-100211, CVE-2026-100210, CVE-2026-108446.

CVE-2026-105728

CVE-2026-105728 describes an improper authentication vulnerability in Microsoft Dynamics Business Central. This flaw enables an unauthorized network-based attacker to disclose sensitive information, likely due to a failure in validating credentials or session tokens within the application's authentication flow.

Affected products:

  • Dynamics Business Central

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-105728

Related in this roundup: CVE-2026-102226.

CVE-2026-108130

CVE-2026-108130 is a heap-based buffer overflow vulnerability residing in the Windows Virtualization-Based Security (VBS) Enclave. The flaw allows a local, authorized attacker to exploit the memory corruption to achieve privilege escalation within the system.

Affected products:

  • Windows

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-108130

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-108132

CVE-2026-108132 is a double-free vulnerability in the Windows Kerberos component that allows an authorized local attacker to achieve privilege escalation by exploiting memory corruption.

Affected products:

  • Windows

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-108132

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-108133

A vulnerability in Windows Modern Device Management (MDM) involves the release of an invalid pointer or reference, which can be exploited by an authorized local attacker to achieve privilege escalation.

Affected products:

  • Windows Modern Device Management

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-108133

Related in this roundup: CVE-2026-108396, CVE-2026-83654, CVE-2026-83657, CVE-2026-85833, CVE-2026-96855, CVE-2026-83656, CVE-2026-83697, CVE-2026-96850.

CVE-2026-108134

A use-after-free vulnerability exists in the Windows Autopilot component of the Windows operating system. An authorized local attacker can exploit this flaw to execute code or perform actions with elevated privileges on the target system.

Affected products:

  • Windows Autopilot

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-108134

Related in this roundup: CVE-2026-96215.

CVE-2026-108135

CVE-2026-108135 is a local privilege escalation vulnerability in the Windows Backup Engine caused by improper link resolution before file access. An authorized local attacker can exploit this flaw to gain higher privileges by leveraging the 'link following' vulnerability during the backup process.

Affected products:

  • Windows Backup Engine

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-108135

Related in this roundup: CVE-2026-62687, CVE-2026-70184.

CVE-2026-108136

CVE-2026-108136 is a use-after-free vulnerability within the Microsoft Windows Search Component that can be exploited by an authenticated local attacker to achieve privilege escalation on the affected system.

Affected products:

  • Windows Search Component

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-108136

Related in this roundup: CVE-2026-105010, CVE-2026-70136, CVE-2026-70141, CVE-2026-70173, CVE-2026-70150, CVE-2026-70177, CVE-2026-70156, CVE-2026-83575, CVE-2026-83704, CVE-2026-70086, CVE-2026-83920, CVE-2026-85869, CVE-2026-88160, CVE-2026-83564, CVE-2026-83570, CVE-2026-83686, CVE-2026-83725, CVE-2026-83829, CVE-2026-83850, CVE-2026-88182, CVE-2026-88191, CVE-2026-96324, CVE-2026-96911, CVE-2026-96910, CVE-2026-96937.

CVE-2026-108396

A time-of-check time-of-use (TOCTOU) race condition vulnerability exists in Windows Modern Device Management (MDM). An authenticated attacker with local access can exploit this flaw to escalate privileges on the target system.

Affected products:

  • Windows Modern Device Management

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-108396

Related in this roundup: CVE-2026-108133, CVE-2026-83654, CVE-2026-83657, CVE-2026-85833, CVE-2026-96855, CVE-2026-83656, CVE-2026-83697, CVE-2026-96850.

CVE-2026-108399

CVE-2026-108399 is a heap-based buffer overflow vulnerability in Microsoft Hyper-V that allows an authorized local attacker to achieve privilege escalation on the host system.

Affected products:

  • Hyper-V

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-108399

Related in this roundup: CVE-2026-83671, CVE-2026-83839, CVE-2026-70248, CVE-2026-85343, CVE-2026-88071, CVE-2026-83636, CVE-2026-83716, CVE-2026-83728, CVE-2026-83766, CVE-2026-83931, CVE-2026-87705, CVE-2026-70023, CVE-2026-102214, CVE-2026-97813.

CVE-2026-108400

CVE-2026-108400 describes an integer overflow or wraparound vulnerability in the Microsoft Windows Codecs Library. This vulnerability allows a remote, unauthorized attacker to execute arbitrary code over a network, potentially leading to full system compromise.

Affected products:

  • Windows Codecs Library

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-108400

Related in this roundup: CVE-2026-102199.

CVE-2026-108457

CVE-2026-108457 is an out-of-bounds write vulnerability in the Microsoft Windows PDF component that allows an unauthorized, network-based attacker to achieve remote code execution on the target system.

Affected products:

  • Windows PDF

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-108457

CVE-2026-108458

CVE-2026-108458 is a use-after-free vulnerability in the Microsoft Remote Desktop Client that allows an unauthorized attacker to achieve remote code execution over a network. This flaw represents a critical security risk as it can be triggered by an attacker without prior authentication.

Affected products:

  • Remote Desktop Client

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-108458

Related in this roundup: CVE-2026-69976, CVE-2026-83688, CVE-2026-85337, CVE-2026-97789, CVE-2026-69984, CVE-2026-69986, CVE-2026-69988, CVE-2026-69987, CVE-2026-69995, CVE-2026-69997, CVE-2026-69996, CVE-2026-69991, CVE-2026-69994, CVE-2026-69998, CVE-2026-70012, CVE-2026-70004, CVE-2026-70006, CVE-2026-103575.

CVE-2026-108460

CVE-2026-108460 is a use-after-free vulnerability in the Windows Message Queuing (MSMQ) component. An unauthorized remote attacker can leverage this flaw to achieve arbitrary code execution over a network, presenting a significant risk to affected Windows systems.

Affected products:

  • Windows Message Queuing

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-108460

Related in this roundup: CVE-2026-85334, CVE-2026-85860, CVE-2026-85859, CVE-2026-96921.

CVE-2026-108461

CVE-2026-108461 is a use-after-free vulnerability within the Windows Broadcast DVR User Service. An authorized local attacker can exploit this flaw to escalate privileges on the affected system.

Affected products:

  • Windows Broadcast DVR User Service

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-108461

Related in this roundup: CVE-2026-105722, CVE-2026-88103, CVE-2026-88105, CVE-2026-88113, CVE-2026-70122, CVE-2026-70148, CVE-2026-96919, CVE-2026-102193, CVE-2026-102195, CVE-2026-102196, CVE-2026-102197, CVE-2026-103554, CVE-2026-103565, CVE-2026-103567, CVE-2026-97806, CVE-2026-97807, CVE-2026-97808.

CVE-2026-108463

CVE-2026-108463 is a vulnerability in Windows SmartScreen involving improper resolution of path equivalence, which allows an unauthorized remote attacker to bypass security checks over a network. Detection engineers should monitor for abnormal path resolutions or bypassed security warnings associated with file execution originating from network locations.

Affected products:

  • Windows SmartScreen

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-108463

Related in this roundup: CVE-2026-83504, CVE-2026-85851, CVE-2026-70051.

CVE-2026-108464

A use-after-free vulnerability in the Microsoft Software Protection Platform (SPP) allows a locally authenticated attacker to escalate privileges. The vulnerability occurs due to improper memory management, enabling the execution of arbitrary code or elevated system actions.

Affected products:

  • Software Protection Platform

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-108464

CVE-2026-108465

CVE-2026-108465 is a use-after-free vulnerability in the Windows Update Delivery Optimization component that allows an authorized local attacker to achieve privilege escalation.

Affected products:

  • Windows Update Delivery Optimization

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-108465

CVE-2026-96951

Microsoft Windows Shell contains a command injection vulnerability that permits an unauthorized attacker to bypass security features over a network. This flaw is actively being exploited, requiring immediate mitigation in accordance with CISA BOD 26-04.

Affected products:

  • Windows

Source: https://www.cve.org/CVERecord?id=CVE-2026-96951

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-102849

A heap-based buffer overflow vulnerability in Microsoft Office Access allows a remote, unauthorized attacker to achieve remote code execution over a network. This flaw represents a critical risk for systems processing untrusted Access database files.

Affected products:

  • Office Access

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102849

Related in this roundup: CVE-2026-105717, CVE-2026-105591, CVE-2026-105592, CVE-2026-105593, CVE-2026-105595, CVE-2026-105596, CVE-2026-105597, CVE-2026-105598, CVE-2026-94506, CVE-2026-105714, CVE-2026-105716.

CVE-2026-102850

CVE-2026-102850 is a heap-based buffer overflow vulnerability in Microsoft Access that allows a remote, unauthorized attacker to achieve remote code execution (RCE) via a network-based attack vector.

Affected products:

  • Access

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102850

CVE-2026-103572

A code injection vulnerability in Visual Studio Tools for Applications and SQL Server Management Studio allows an unauthorized attacker to achieve remote code execution over a network due to improper control of generated code.

Affected products:

  • Visual Studio Tools for Applications
  • SQL Server Management Studio

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-103572

CVE-2026-105725

CVE-2026-105725 is a privilege escalation vulnerability in the Windows Security App resulting from a use-after-free memory corruption issue. A local, authorized attacker can exploit this flaw to gain elevated privileges on the affected Windows system.

Affected products:

  • Windows Security App

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105725

CVE-2026-105727

Microsoft Dynamics 365 Business Central contains a path traversal vulnerability that permits an authenticated attacker to elevate their privileges over the network. The vulnerability arises from an improper limitation of a pathname to a restricted directory.

Affected products:

  • Dynamics 365 Business Central

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105727

Related in this roundup: CVE-2026-100214.

CVE-2026-108468

A use-after-free vulnerability exists in the Windows Installer component, allowing a locally authenticated attacker to escalate their privileges. This vulnerability requires an attacker to already have access to the system to exploit.

Affected products:

  • Windows Installer

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108468

Related in this roundup: CVE-2026-70272, CVE-2026-83708, CVE-2026-83775, CVE-2026-83779, CVE-2026-85358, CVE-2026-85361, CVE-2026-85364, CVE-2026-85366, CVE-2026-85374, CVE-2026-85796, CVE-2026-85830, CVE-2026-88080, CVE-2026-87708, CVE-2026-87711, CVE-2026-88124, CVE-2026-96302, CVE-2026-96305, CVE-2026-96307, CVE-2026-96308, CVE-2026-69471, CVE-2026-69635, CVE-2026-83672, CVE-2026-83676, CVE-2026-83680, CVE-2026-83702, CVE-2026-83717, CVE-2026-83718, CVE-2026-83752, CVE-2026-83767, CVE-2026-83899, CVE-2026-85941, CVE-2026-88076, CVE-2026-87693, CVE-2026-87694, CVE-2026-87704, CVE-2026-87700, CVE-2026-87715.

CVE-2026-102229

Visual Studio Code contains an improper limitation of a pathname to a restricted directory, which allows an authorized attacker to perform a path traversal attack to disclose sensitive information over a network.

Affected products:

  • Visual Studio Code

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102229

Related in this roundup: CVE-2026-102238, CVE-2026-102231, CVE-2026-102233, CVE-2026-102232, CVE-2026-102234, CVE-2026-102235, CVE-2026-70098, CVE-2026-69370, CVE-2026-102851.

CVE-2026-102232

CVE-2026-102232 identifies a security feature bypass vulnerability in Visual Studio Code resulting from incorrect authorization. A local attacker could exploit this flaw to bypass established security controls, potentially leading to unauthorized actions or elevated access within the development environment.

Affected products:

  • Visual Studio Code

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102232

Related in this roundup: CVE-2026-102238, CVE-2026-102231, CVE-2026-102233, CVE-2026-102229, CVE-2026-102234, CVE-2026-102235, CVE-2026-70098, CVE-2026-69370, CVE-2026-102851.

CVE-2026-102234

Visual Studio Code contains a security feature bypass vulnerability due to reliance on untrusted inputs when making security decisions. This flaw allows a remote, unauthorized attacker to circumvent intended security controls over the network.

Affected products:

  • Visual Studio Code

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102234

Related in this roundup: CVE-2026-102238, CVE-2026-102231, CVE-2026-102233, CVE-2026-102229, CVE-2026-102232, CVE-2026-102235, CVE-2026-70098, CVE-2026-69370, CVE-2026-102851.

CVE-2026-102235

A remote code execution vulnerability exists in Visual Studio Code due to improper encoding or escaping of output. An unauthorized attacker could exploit this flaw to execute arbitrary code over a network.

Affected products:

  • Visual Studio Code

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102235

Related in this roundup: CVE-2026-102238, CVE-2026-102231, CVE-2026-102233, CVE-2026-102229, CVE-2026-102232, CVE-2026-102234, CVE-2026-70098, CVE-2026-69370, CVE-2026-102851.

CVE-2026-70098

CVE-2026-70098 is a remote code execution vulnerability in Microsoft Visual Studio Code resulting from missing authorization checks. An unauthenticated attacker can exploit this flaw to execute arbitrary code on a target system over a network connection.

Affected products:

  • Visual Studio Code

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70098

Related in this roundup: CVE-2026-102238, CVE-2026-102231, CVE-2026-102233, CVE-2026-102229, CVE-2026-102232, CVE-2026-102234, CVE-2026-102235, CVE-2026-69370, CVE-2026-102851.

CVE-2026-102855

CVE-2026-102855 is a heap-based buffer overflow vulnerability in Microsoft Office Visio that enables an unauthorized, remote attacker to execute arbitrary code on a target system. The vulnerability is triggered over a network, presenting a significant risk for remote code execution.

Affected products:

  • Office Visio

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102855

Related in this roundup: CVE-2026-102856, CVE-2026-102857.

CVE-2026-102856

Microsoft Office Visio contains a heap-based buffer overflow vulnerability that enables an unauthenticated remote attacker to execute arbitrary code via a specially crafted file or network interaction.

Affected products:

  • Office Visio

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102856

Related in this roundup: CVE-2026-102855, CVE-2026-102857.

CVE-2026-102857

Microsoft Office Visio contains a heap-based buffer overflow vulnerability that enables an unauthorized remote attacker to execute arbitrary code. The vulnerability is triggered over a network, presenting a significant risk for remote code execution.

Affected products:

  • Office Visio

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102857

Related in this roundup: CVE-2026-102855, CVE-2026-102856.

CVE-2026-102858

CVE-2026-102858 is a heap-based buffer overflow vulnerability in Microsoft Office OneNote that enables an unauthenticated attacker to achieve remote code execution over a network.

Affected products:

  • Office OneNote

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102858

CVE-2026-102859

A spoofing vulnerability exists in Microsoft SharePoint due to improper neutralization of input during web page generation, leading to a cross-site scripting (XSS) condition. An authorized attacker can exploit this vulnerability over a network to conduct spoofing attacks against users of the affected SharePoint instance.

Affected products:

  • SharePoint

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102859

Related in this roundup: CVE-2026-102860, CVE-2026-102861, CVE-2026-102862, CVE-2026-102863, CVE-2026-102865, CVE-2026-102866, CVE-2026-105720, CVE-2026-69943, CVE-2026-70267, CVE-2026-70251, CVE-2026-70259, CVE-2026-70266, CVE-2026-70298, CVE-2026-85900, CVE-2026-88155, CVE-2026-88198, CVE-2026-88209, CVE-2026-88208, CVE-2026-97782, CVE-2026-97783, CVE-2026-70202, CVE-2026-70217, CVE-2026-70246, CVE-2026-85932, CVE-2026-88163, CVE-2026-88164, CVE-2026-88166, CVE-2026-88200, CVE-2026-88206, CVE-2026-96044, CVE-2026-105013.

CVE-2026-102860

CVE-2026-102860 is an elevation of privilege vulnerability in Microsoft Office SharePoint caused by improper access control. An authorized attacker on the network can exploit this flaw to escalate their privileges, potentially gaining unauthorized administrative access to the SharePoint environment.

Affected products:

  • SharePoint

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102860

Related in this roundup: CVE-2026-102859, CVE-2026-102861, CVE-2026-102862, CVE-2026-102863, CVE-2026-102865, CVE-2026-102866, CVE-2026-105720, CVE-2026-69943, CVE-2026-70267, CVE-2026-70251, CVE-2026-70259, CVE-2026-70266, CVE-2026-70298, CVE-2026-85900, CVE-2026-88155, CVE-2026-88198, CVE-2026-88209, CVE-2026-88208, CVE-2026-97782, CVE-2026-97783, CVE-2026-70202, CVE-2026-70217, CVE-2026-70246, CVE-2026-85932, CVE-2026-88163, CVE-2026-88164, CVE-2026-88166, CVE-2026-88200, CVE-2026-88206, CVE-2026-96044, CVE-2026-105013.

CVE-2026-102861

CVE-2026-102861 is an elevation of privilege vulnerability in Microsoft SharePoint caused by missing authorization checks. An authenticated attacker on the network can leverage this flaw to gain unauthorized access or elevated permissions within the SharePoint environment.

Affected products:

  • SharePoint

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102861

Related in this roundup: CVE-2026-102859, CVE-2026-102860, CVE-2026-102862, CVE-2026-102863, CVE-2026-102865, CVE-2026-102866, CVE-2026-105720, CVE-2026-69943, CVE-2026-70267, CVE-2026-70251, CVE-2026-70259, CVE-2026-70266, CVE-2026-70298, CVE-2026-85900, CVE-2026-88155, CVE-2026-88198, CVE-2026-88209, CVE-2026-88208, CVE-2026-97782, CVE-2026-97783, CVE-2026-70202, CVE-2026-70217, CVE-2026-70246, CVE-2026-85932, CVE-2026-88163, CVE-2026-88164, CVE-2026-88166, CVE-2026-88200, CVE-2026-88206, CVE-2026-96044, CVE-2026-105013.

CVE-2026-102862

CVE-2026-102862 is an elevation of privilege vulnerability in Microsoft Office SharePoint caused by incorrect authorization. An authenticated attacker can exploit this over a network to gain elevated permissions within the affected SharePoint environment.

Affected products:

  • SharePoint

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102862

Related in this roundup: CVE-2026-102859, CVE-2026-102860, CVE-2026-102861, CVE-2026-102863, CVE-2026-102865, CVE-2026-102866, CVE-2026-105720, CVE-2026-69943, CVE-2026-70267, CVE-2026-70251, CVE-2026-70259, CVE-2026-70266, CVE-2026-70298, CVE-2026-85900, CVE-2026-88155, CVE-2026-88198, CVE-2026-88209, CVE-2026-88208, CVE-2026-97782, CVE-2026-97783, CVE-2026-70202, CVE-2026-70217, CVE-2026-70246, CVE-2026-85932, CVE-2026-88163, CVE-2026-88164, CVE-2026-88166, CVE-2026-88200, CVE-2026-88206, CVE-2026-96044, CVE-2026-105013.

CVE-2026-102863

Microsoft Office SharePoint contains a vulnerability involving improper control of code generation, categorized as code injection, which allows an authenticated attacker to perform a privilege escalation attack over the network.

Affected products:

  • SharePoint

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102863

Related in this roundup: CVE-2026-102859, CVE-2026-102860, CVE-2026-102861, CVE-2026-102862, CVE-2026-102865, CVE-2026-102866, CVE-2026-105720, CVE-2026-69943, CVE-2026-70267, CVE-2026-70251, CVE-2026-70259, CVE-2026-70266, CVE-2026-70298, CVE-2026-85900, CVE-2026-88155, CVE-2026-88198, CVE-2026-88209, CVE-2026-88208, CVE-2026-97782, CVE-2026-97783, CVE-2026-70202, CVE-2026-70217, CVE-2026-70246, CVE-2026-85932, CVE-2026-88163, CVE-2026-88164, CVE-2026-88166, CVE-2026-88200, CVE-2026-88206, CVE-2026-96044, CVE-2026-105013.

CVE-2026-102864

CVE-2026-102864 describes a cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint caused by improper input neutralization during web page generation. An authenticated attacker can exploit this flaw to execute arbitrary script code in the context of the victim's session, potentially resulting in spoofing attacks over the network.

Affected products:

  • Office SharePoint

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102864

Related in this roundup: CVE-2026-105713, CVE-2026-88204.

CVE-2026-102865

CVE-2026-102865 is an information disclosure vulnerability in Microsoft SharePoint caused by incorrect authorization. An authenticated attacker can exploit this flaw to gain unauthorized access to sensitive information over the network.

Affected products:

  • SharePoint

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102865

Related in this roundup: CVE-2026-102859, CVE-2026-102860, CVE-2026-102861, CVE-2026-102862, CVE-2026-102863, CVE-2026-102866, CVE-2026-105720, CVE-2026-69943, CVE-2026-70267, CVE-2026-70251, CVE-2026-70259, CVE-2026-70266, CVE-2026-70298, CVE-2026-85900, CVE-2026-88155, CVE-2026-88198, CVE-2026-88209, CVE-2026-88208, CVE-2026-97782, CVE-2026-97783, CVE-2026-70202, CVE-2026-70217, CVE-2026-70246, CVE-2026-85932, CVE-2026-88163, CVE-2026-88164, CVE-2026-88166, CVE-2026-88200, CVE-2026-88206, CVE-2026-96044, CVE-2026-105013.

CVE-2026-102866

CVE-2026-102866 is an elevation of privilege vulnerability in Microsoft Office SharePoint caused by improper verification of cryptographic signatures. An unauthenticated attacker can exploit this over a network to escalate their privileges within the SharePoint environment.

Affected products:

  • SharePoint

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102866

Related in this roundup: CVE-2026-102859, CVE-2026-102860, CVE-2026-102861, CVE-2026-102862, CVE-2026-102863, CVE-2026-102865, CVE-2026-105720, CVE-2026-69943, CVE-2026-70267, CVE-2026-70251, CVE-2026-70259, CVE-2026-70266, CVE-2026-70298, CVE-2026-85900, CVE-2026-88155, CVE-2026-88198, CVE-2026-88209, CVE-2026-88208, CVE-2026-97782, CVE-2026-97783, CVE-2026-70202, CVE-2026-70217, CVE-2026-70246, CVE-2026-85932, CVE-2026-88163, CVE-2026-88164, CVE-2026-88166, CVE-2026-88200, CVE-2026-88206, CVE-2026-96044, CVE-2026-105013.

CVE-2026-102867

CVE-2026-102867 is an out-of-bounds read vulnerability in Microsoft Office Word that enables an unauthenticated attacker to perform unauthorized information disclosure over the network. Detection should focus on anomalous network traffic patterns or unexpected memory access errors associated with Word processing operations.

Affected products:

  • Office

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102867

Related in this roundup: CVE-2026-88150, CVE-2026-88145, CVE-2026-88197, CVE-2026-88196, CVE-2026-96996, CVE-2026-97754, CVE-2026-69922, CVE-2026-108442.

CVE-2026-96183

CVE-2026-96183 describes an information disclosure vulnerability in the Windows Health and Optimized Experiences Service. The vulnerability arises from missing authentication for a critical function, allowing an already authorized local attacker to access sensitive information.

Affected products:

  • Windows Health and Optimized Experiences Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96183

Related in this roundup: CVE-2026-85884.

CVE-2026-105591

CVE-2026-105591 describes a heap-based buffer overflow vulnerability in Microsoft Office Access. An unauthenticated attacker can exploit this flaw to achieve remote code execution over a network connection by sending specially crafted input to the application.

Affected products:

  • Office Access

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105591

Related in this roundup: CVE-2026-105717, CVE-2026-102849, CVE-2026-105592, CVE-2026-105593, CVE-2026-105595, CVE-2026-105596, CVE-2026-105597, CVE-2026-105598, CVE-2026-94506, CVE-2026-105714, CVE-2026-105716.

CVE-2026-105592

CVE-2026-105592 describes a heap-based buffer overflow vulnerability in Microsoft Office Access. An unauthorized remote attacker can leverage this flaw to achieve remote code execution by sending a specially crafted request over the network.

Affected products:

  • Office Access

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105592

Related in this roundup: CVE-2026-105717, CVE-2026-102849, CVE-2026-105591, CVE-2026-105593, CVE-2026-105595, CVE-2026-105596, CVE-2026-105597, CVE-2026-105598, CVE-2026-94506, CVE-2026-105714, CVE-2026-105716.

CVE-2026-105593

CVE-2026-105593 is a heap-based buffer overflow vulnerability in Microsoft Office Access that can be exploited by a remote, unauthorized attacker to achieve remote code execution over a network.

Affected products:

  • Office Access

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105593

Related in this roundup: CVE-2026-105717, CVE-2026-102849, CVE-2026-105591, CVE-2026-105592, CVE-2026-105595, CVE-2026-105596, CVE-2026-105597, CVE-2026-105598, CVE-2026-94506, CVE-2026-105714, CVE-2026-105716.

CVE-2026-105595

An out-of-bounds read vulnerability exists in Microsoft Office Access that can be exploited by an unauthorized remote attacker to achieve remote code execution. The vulnerability is triggered over a network, potentially allowing arbitrary code execution on the target system.

Affected products:

  • Office Access

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105595

Related in this roundup: CVE-2026-105717, CVE-2026-102849, CVE-2026-105591, CVE-2026-105592, CVE-2026-105593, CVE-2026-105596, CVE-2026-105597, CVE-2026-105598, CVE-2026-94506, CVE-2026-105714, CVE-2026-105716.

CVE-2026-105596

A heap-based buffer overflow vulnerability in Microsoft Office Access allows a remote, unauthorized attacker to execute arbitrary code. The vulnerability is triggered over a network, presenting a significant risk for remote code execution (RCE).

Affected products:

  • Office Access

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105596

Related in this roundup: CVE-2026-105717, CVE-2026-102849, CVE-2026-105591, CVE-2026-105592, CVE-2026-105593, CVE-2026-105595, CVE-2026-105597, CVE-2026-105598, CVE-2026-94506, CVE-2026-105714, CVE-2026-105716.

CVE-2026-105597

CVE-2026-105597 is a heap-based buffer overflow vulnerability in Microsoft Office Access that enables a remote, unauthorized attacker to execute arbitrary code. The vulnerability occurs during the processing of data and can be exploited via network-based vectors, likely involving specially crafted files or network traffic handled by the application.

Affected products:

  • Office Access

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105597

Related in this roundup: CVE-2026-105717, CVE-2026-102849, CVE-2026-105591, CVE-2026-105592, CVE-2026-105593, CVE-2026-105595, CVE-2026-105596, CVE-2026-105598, CVE-2026-94506, CVE-2026-105714, CVE-2026-105716.

CVE-2026-105598

A heap-based buffer overflow vulnerability in Microsoft Office Access allows an unauthenticated, remote attacker to execute arbitrary code. The vulnerability stems from improper memory handling within the application, which could lead to remote code execution (RCE) via a crafted network-based request.

Affected products:

  • Office Access

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105598

Related in this roundup: CVE-2026-105717, CVE-2026-102849, CVE-2026-105591, CVE-2026-105592, CVE-2026-105593, CVE-2026-105595, CVE-2026-105596, CVE-2026-105597, CVE-2026-94506, CVE-2026-105714, CVE-2026-105716.

CVE-2026-105599

CVE-2026-105599 is a heap-based buffer overflow vulnerability in Microsoft Office PowerPoint that allows a remote, unauthorized attacker to execute arbitrary code on a target system. The vulnerability is triggered over a network, presenting a significant risk for remote code execution via specially crafted PowerPoint files.

Affected products:

  • Office PowerPoint

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105599

Related in this roundup: CVE-2026-97005, CVE-2026-88183, CVE-2026-88207.

CVE-2026-94506

An out-of-bounds read vulnerability in Microsoft Office Access permits a remote, unauthorized attacker to perform information disclosure over a network, potentially exposing sensitive data stored within the application's memory.

Affected products:

  • Office Access

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-94506

Related in this roundup: CVE-2026-105717, CVE-2026-102849, CVE-2026-105591, CVE-2026-105592, CVE-2026-105593, CVE-2026-105595, CVE-2026-105596, CVE-2026-105597, CVE-2026-105598, CVE-2026-105714, CVE-2026-105716.

CVE-2026-105713

CVE-2026-105713 is a server-side request forgery (SSRF) vulnerability identified in Microsoft Office SharePoint that permits an authorized attacker to conduct spoofing attacks over an adjacent network connection.

Affected products:

  • Office SharePoint

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105713

Related in this roundup: CVE-2026-102864, CVE-2026-88204.

CVE-2026-105714

CVE-2026-105714 is a heap-based buffer overflow vulnerability in Microsoft Office Access that can be exploited by an unauthorized remote attacker to achieve remote code execution via network-based vectors.

Affected products:

  • Office Access

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105714

Related in this roundup: CVE-2026-105717, CVE-2026-102849, CVE-2026-105591, CVE-2026-105592, CVE-2026-105593, CVE-2026-105595, CVE-2026-105596, CVE-2026-105597, CVE-2026-105598, CVE-2026-94506, CVE-2026-105716.

CVE-2026-105715

CVE-2026-105715 is a remote code execution vulnerability in Microsoft Office Word resulting from an integer overflow or wraparound condition. A remote attacker can exploit this flaw to execute arbitrary code on a target system over the network.

Affected products:

  • Office Word

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105715

Related in this roundup: CVE-2026-70300, CVE-2026-70268, CVE-2026-70220, CVE-2026-70206, CVE-2026-70269, CVE-2026-70263, CVE-2026-70287, CVE-2026-70302, CVE-2026-70301, CVE-2026-83891, CVE-2026-88167, CVE-2026-88169, CVE-2026-88202, CVE-2026-96995, CVE-2026-97001, CVE-2026-88185, CVE-2026-88186, CVE-2026-108426, CVE-2026-108427, CVE-2026-108428, CVE-2026-108429, CVE-2026-108430, CVE-2026-108431, CVE-2026-108432, CVE-2026-108433, CVE-2026-108437, CVE-2026-108439, CVE-2026-108440, CVE-2026-108441, CVE-2026-108443, CVE-2026-108445, CVE-2026-108447, CVE-2026-108449, CVE-2026-108450, CVE-2026-108451.

CVE-2026-105716

A heap-based buffer overflow vulnerability in Microsoft Office Access allows a remote, unauthorized attacker to execute arbitrary code on an affected system via a specially crafted file or network interaction.

Affected products:

  • Office Access

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105716

Related in this roundup: CVE-2026-105717, CVE-2026-102849, CVE-2026-105591, CVE-2026-105592, CVE-2026-105593, CVE-2026-105595, CVE-2026-105596, CVE-2026-105597, CVE-2026-105598, CVE-2026-94506, CVE-2026-105714.

CVE-2026-105720

Microsoft SharePoint contains an incorrect authorization vulnerability that allows an authenticated attacker to perform a privilege escalation attack over the network.

Affected products:

  • SharePoint

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105720

Related in this roundup: CVE-2026-102859, CVE-2026-102860, CVE-2026-102861, CVE-2026-102862, CVE-2026-102863, CVE-2026-102865, CVE-2026-102866, CVE-2026-69943, CVE-2026-70267, CVE-2026-70251, CVE-2026-70259, CVE-2026-70266, CVE-2026-70298, CVE-2026-85900, CVE-2026-88155, CVE-2026-88198, CVE-2026-88209, CVE-2026-88208, CVE-2026-97782, CVE-2026-97783, CVE-2026-70202, CVE-2026-70217, CVE-2026-70246, CVE-2026-85932, CVE-2026-88163, CVE-2026-88164, CVE-2026-88166, CVE-2026-88200, CVE-2026-88206, CVE-2026-96044, CVE-2026-105013.

CVE-2026-69370

CVE-2026-69370 is a command injection vulnerability in Microsoft Visual Studio Code that allows an unauthorized remote attacker to execute arbitrary code. The flaw stems from improper neutralization of special elements used in commands processed by the application.

Affected products:

  • Visual Studio Code

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69370

Related in this roundup: CVE-2026-102238, CVE-2026-102231, CVE-2026-102233, CVE-2026-102229, CVE-2026-102232, CVE-2026-102234, CVE-2026-102235, CVE-2026-70098, CVE-2026-102851.

CVE-2026-108467

CVE-2026-108467 describes a heap-based buffer overflow vulnerability in the Microsoft PostScript Printer Driver. An authenticated attacker can exploit this flaw by sending a specially crafted request over the network, potentially resulting in remote code execution on the target system.

Affected products:

  • PostScript Printer Driver

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108467

Related in this roundup: CVE-2026-70147, CVE-2026-70153, CVE-2026-70110, CVE-2026-70092, CVE-2026-70109.

CVE-2026-105719

Microsoft SharePoint Server contains an information disclosure vulnerability caused by improper input validation. An authorized attacker can exploit this flaw to gain unauthorized access to sensitive information over the network.

Affected products:

  • SharePoint Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105719

CVE-2026-105722

CVE-2026-105722 is a local privilege escalation vulnerability in the Windows Broadcast DVR User Service caused by a use-after-free flaw. An authorized attacker can exploit this vulnerability to gain elevated privileges on the affected Windows system.

Affected products:

  • Windows Broadcast DVR User Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105722

Related in this roundup: CVE-2026-108461, CVE-2026-88103, CVE-2026-88105, CVE-2026-88113, CVE-2026-70122, CVE-2026-70148, CVE-2026-96919, CVE-2026-102193, CVE-2026-102195, CVE-2026-102196, CVE-2026-102197, CVE-2026-103554, CVE-2026-103565, CVE-2026-103567, CVE-2026-97806, CVE-2026-97807, CVE-2026-97808.

CVE-2026-105723

A privilege escalation vulnerability exists in the Windows Distributed File System (DFS) due to an untrusted pointer dereference. An unauthenticated remote attacker can exploit this flaw to elevate their privileges within the network environment.

Affected products:

  • Windows Distributed File System

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105723

Related in this roundup: CVE-2026-85798, CVE-2026-85931, CVE-2026-96938.

CVE-2026-105726

CVE-2026-105726 describes an out-of-bounds read vulnerability in Microsoft Defender that allows a locally authenticated attacker to disclose sensitive information. The flaw is rooted in an improper memory access pattern, categorized as an out-of-bounds read.

Affected products:

  • Microsoft Defender

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105726

CVE-2026-70235

CVE-2026-70235 is a vulnerability in Windows Event Tracing that allows a local, authorized attacker to spoof events. The issue stems from improper authentication handling within the tracing component, potentially allowing an attacker to manipulate logs or mask malicious activity.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70235

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-105731

CVE-2026-105731 describes an information disclosure vulnerability within the Microsoft Office Graphics Component caused by the use of an uninitialized resource. An authorized local attacker can exploit this flaw to read sensitive data from the system.

Affected products:

  • Microsoft Office

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105731

Related in this roundup: CVE-2026-85881.

CVE-2026-105732

CVE-2026-105732 is a local privilege escalation vulnerability within Microsoft SysInternals caused by a stack-based buffer overflow. An attacker with authorized access can exploit this flaw to execute code with elevated privileges on the host system.

Affected products:

  • SysInternals

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105732

CVE-2026-105733

CVE-2026-105733 is a vulnerability in Windows Hyper-V caused by improper access control. An authorized attacker can exploit this flaw to execute code locally on the host system.

Affected products:

  • Windows Hyper-V

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105733

Related in this roundup: CVE-2026-85369, CVE-2026-96223.

CVE-2026-108462

CVE-2026-108462 describes an information disclosure vulnerability in the Windows Kernel that allows an authorized attacker with local access to read sensitive system memory. Detection efforts should focus on anomalous kernel-mode memory access patterns or unauthorized attempts to leverage local system calls for information gathering.

Affected products:

  • Windows Kernel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108462

Related in this roundup: CVE-2026-108466, CVE-2026-70063, CVE-2026-70106, CVE-2026-70121, CVE-2026-70114, CVE-2026-83690, CVE-2026-83768, CVE-2026-83833, CVE-2026-85372, CVE-2026-85836, CVE-2026-85837, CVE-2026-70170, CVE-2026-85939, CVE-2026-85945, CVE-2026-96216, CVE-2026-96317, CVE-2026-96868, CVE-2026-70199, CVE-2026-70232, CVE-2026-83736, CVE-2026-83735, CVE-2026-83918, CVE-2026-83924, CVE-2026-83925, CVE-2026-88134, CVE-2026-88139, CVE-2026-88141, CVE-2026-70160, CVE-2026-70111, CVE-2026-96913, CVE-2026-96929, CVE-2026-102207, CVE-2026-103578, CVE-2026-97803.

CVE-2026-108466

CVE-2026-108466 is an out-of-bounds read vulnerability in the Windows Kernel that enables an unauthorized attacker to trigger a denial-of-service condition over a network.

Affected products:

  • Windows Kernel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108466

Related in this roundup: CVE-2026-108462, CVE-2026-70063, CVE-2026-70106, CVE-2026-70121, CVE-2026-70114, CVE-2026-83690, CVE-2026-83768, CVE-2026-83833, CVE-2026-85372, CVE-2026-85836, CVE-2026-85837, CVE-2026-70170, CVE-2026-85939, CVE-2026-85945, CVE-2026-96216, CVE-2026-96317, CVE-2026-96868, CVE-2026-70199, CVE-2026-70232, CVE-2026-83736, CVE-2026-83735, CVE-2026-83918, CVE-2026-83924, CVE-2026-83925, CVE-2026-88134, CVE-2026-88139, CVE-2026-88141, CVE-2026-70160, CVE-2026-70111, CVE-2026-96913, CVE-2026-96929, CVE-2026-102207, CVE-2026-103578, CVE-2026-97803.

CVE-2026-69898

CVE-2026-69898 is a heap-based buffer overflow vulnerability in the Windows Kernel that allows an already authorized local attacker to perform privilege escalation on the affected system.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69898

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-49785

CVE-2026-49785 is a security feature bypass vulnerability in Windows UEFI caused by improper resource shutdown or release. An authorized local attacker can exploit this flaw to bypass Secure Boot protections, potentially allowing the execution of unauthorized or malicious code during the boot process.

Affected products:

  • Windows UEFI

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49785

CVE-2026-72968

CVE-2026-72968 is a privilege escalation vulnerability in the Windows Program Compatibility Assistant Service caused by a use-after-free flaw. An authenticated attacker can exploit this vulnerability locally to execute code with elevated permissions.

Affected products:

  • Windows Program Compatibility Assistant Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72968

Related in this roundup: CVE-2026-72934, CVE-2026-69743, CVE-2026-96920, CVE-2026-69596, CVE-2026-83781.

CVE-2026-69363

CVE-2026-69363 is a heap-based buffer overflow vulnerability in the Windows Error Reporting component, which can be exploited by an authenticated attacker over a network to achieve privilege escalation.

Affected products:

  • Windows Error Reporting

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69363

Related in this roundup: CVE-2026-83519, CVE-2026-83693, CVE-2026-83748, CVE-2026-97815, CVE-2026-70103, CVE-2026-69354, CVE-2026-69387, CVE-2026-83658, CVE-2026-83669, CVE-2026-83715, CVE-2026-83758, CVE-2026-83826, CVE-2026-83916, CVE-2026-85354, CVE-2026-85800, CVE-2026-83643, CVE-2026-83689, CVE-2026-83747, CVE-2026-83750, CVE-2026-83840, CVE-2026-97798.

CVE-2026-70566

A null pointer dereference vulnerability exists in the Windows Schannel component, which can be exploited by an authorized local attacker to achieve privilege escalation.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70566

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-61931

The Windows Perception Simulation Service contains a use-after-free vulnerability that enables an authorized local attacker to elevate their privileges on the host system.

Affected products:

  • Windows Perception Simulation Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-61931

CVE-2026-69763

CVE-2026-69763 is a use-after-free vulnerability within the Windows Storage component that allows a local, authorized attacker to escalate their privileges. This vulnerability requires the attacker to have existing access to the system to exploit the flaw.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69763

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-69766

CVE-2026-69766 is a use-after-free vulnerability in the Windows Storage component that allows an attacker with authorized local access to execute code or operations with elevated privileges.

Affected products:

  • Windows Storage

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69766

Related in this roundup: CVE-2026-69935, CVE-2026-83911, CVE-2026-69931, CVE-2026-69856, CVE-2026-96944, CVE-2026-100216, CVE-2026-102189.

CVE-2026-69935

CVE-2026-69935 is a use-after-free vulnerability within the Windows Storage component that allows an authorized local attacker to escalate their privileges. Detection efforts should focus on anomalous processes interacting with low-level storage APIs or unexpected privilege transitions initiated by local users.

Affected products:

  • Windows Storage

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69935

Related in this roundup: CVE-2026-69766, CVE-2026-83911, CVE-2026-69931, CVE-2026-69856, CVE-2026-96944, CVE-2026-100216, CVE-2026-102189.

CVE-2026-69795

CVE-2026-69795 is a privilege escalation vulnerability in the Windows Clipboard Server caused by a null pointer dereference. An authorized local attacker can exploit this flaw to gain elevated privileges on the affected Windows system.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69795

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-69867

An out-of-bounds read vulnerability exists in SQLite that permits a locally authorized attacker to escalate their privileges. This vulnerability is associated with Microsoft products integrating SQLite components.

Affected products:

  • SQLite

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69867

CVE-2026-69914

CVE-2026-69914 is an out-of-bounds read vulnerability in the Windows AppX Deployment Service that allows an authorized local attacker to perform an information disclosure attack.

Affected products:

  • Windows AppX Deployment Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69914

Related in this roundup: CVE-2026-69905, CVE-2026-69969, CVE-2026-69979, CVE-2026-85849, CVE-2026-85934.

CVE-2026-69840

CVE-2026-69840 describes a use-after-free vulnerability within Windows Certificates that enables an authorized local attacker to achieve privilege escalation.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69840

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-69850

An untrusted pointer dereference vulnerability exists within Windows Certificates that can be exploited by an authorized local attacker to achieve privilege escalation.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69850

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-69926

A type confusion vulnerability exists in the Desktop Window Manager component of Microsoft Windows, allowing a local authenticated attacker to gain elevated privileges through resource manipulation.

Affected products:

  • Desktop Window Manager

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69926

Related in this roundup: CVE-2026-69974, CVE-2026-70234, CVE-2026-70255, CVE-2026-96108, CVE-2026-69880, CVE-2026-70228, CVE-2026-88093.

CVE-2026-69905

A vulnerability in the Windows AppX Deployment Service allows a locally authenticated attacker to perform tampering due to missing authorization checks, potentially leading to unauthorized modification of system resources or application deployment processes.

Affected products:

  • Windows AppX Deployment Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69905

Related in this roundup: CVE-2026-69914, CVE-2026-69969, CVE-2026-69979, CVE-2026-85849, CVE-2026-85934.

CVE-2026-69909

CVE-2026-69909 is a heap-based buffer overflow vulnerability in Microsoft COM for Windows that enables a locally authorized attacker to escalate privileges. Detection should focus on monitoring anomalous system service process behavior or memory corruption events associated with COM object instantiation.

Affected products:

  • COM

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69909

CVE-2026-69913

A use-after-free vulnerability exists in the Windows TCP/IP stack that can be exploited by an unauthorized remote attacker to execute arbitrary code. The vulnerability occurs within network-level processing, potentially allowing for remote exploitation without user interaction.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69913

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-69918

A heap-based buffer overflow vulnerability exists in Windows Core Messaging that allows a locally authenticated attacker to elevate their privileges to a higher level within the system.

Affected products:

  • Windows Core Messaging

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69918

CVE-2026-69942

CVE-2026-69942 describes a buffer over-read vulnerability within the Windows Overlay Filter component. An authenticated attacker could leverage this flaw to achieve local remote code execution.

Affected products:

  • Windows Overlay Filter

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69942

Related in this roundup: CVE-2026-69947, CVE-2026-69952, CVE-2026-69953, CVE-2026-69954, CVE-2026-69958, CVE-2026-69967, CVE-2026-83727, CVE-2026-83749, CVE-2026-83879, CVE-2026-96315, CVE-2026-105004.

CVE-2026-69950

The Windows Overlay Filter contains a buffer over-read vulnerability that allows an authorized local attacker to escalate their privileges on an affected Windows system.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69950

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-69947

CVE-2026-69947 is a heap-based buffer overflow vulnerability in the Windows Overlay Filter component. The flaw allows an unauthorized attacker with physical access to the target system to achieve remote code execution, leveraging the vulnerability through the affected driver component.

Affected products:

  • Windows Overlay Filter

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69947

Related in this roundup: CVE-2026-69942, CVE-2026-69952, CVE-2026-69953, CVE-2026-69954, CVE-2026-69958, CVE-2026-69967, CVE-2026-83727, CVE-2026-83749, CVE-2026-83879, CVE-2026-96315, CVE-2026-105004.

CVE-2026-69952

The Windows Overlay Filter contains an out-of-bounds read vulnerability that can be exploited by an authorized local attacker to achieve privilege escalation.

Affected products:

  • Windows Overlay Filter

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69952

Related in this roundup: CVE-2026-69942, CVE-2026-69947, CVE-2026-69953, CVE-2026-69954, CVE-2026-69958, CVE-2026-69967, CVE-2026-83727, CVE-2026-83749, CVE-2026-83879, CVE-2026-96315, CVE-2026-105004.

CVE-2026-69953

CVE-2026-69953 describes a buffer over-read vulnerability within the Windows Overlay Filter component, enabling an authorized local attacker to achieve privilege escalation on the targeted system.

Affected products:

  • Windows Overlay Filter

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69953

Related in this roundup: CVE-2026-69942, CVE-2026-69947, CVE-2026-69952, CVE-2026-69954, CVE-2026-69958, CVE-2026-69967, CVE-2026-83727, CVE-2026-83749, CVE-2026-83879, CVE-2026-96315, CVE-2026-105004.

CVE-2026-69954

CVE-2026-69954 is a buffer over-read vulnerability in the Windows Overlay Filter component that allows a locally authenticated attacker to gain unauthorized access to sensitive information via information disclosure.

Affected products:

  • Windows Overlay Filter

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69954

Related in this roundup: CVE-2026-69942, CVE-2026-69947, CVE-2026-69952, CVE-2026-69953, CVE-2026-69958, CVE-2026-69967, CVE-2026-83727, CVE-2026-83749, CVE-2026-83879, CVE-2026-96315, CVE-2026-105004.

CVE-2026-69958

CVE-2026-69958 is a heap-based buffer overflow vulnerability in the Windows Overlay Filter that enables an unauthorized attacker with physical access to the device to achieve remote code execution.

Affected products:

  • Windows Overlay Filter

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69958

Related in this roundup: CVE-2026-69942, CVE-2026-69947, CVE-2026-69952, CVE-2026-69953, CVE-2026-69954, CVE-2026-69967, CVE-2026-83727, CVE-2026-83749, CVE-2026-83879, CVE-2026-96315, CVE-2026-105004.

CVE-2026-69959

The Windows Overlay Filter contains an out-of-bounds read vulnerability that can be leveraged by an authorized local attacker to achieve remote code execution on the target system.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69959

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-69963

A heap-based buffer overflow vulnerability in the Microsoft Streaming Service driver allows a local, authorized attacker to escalate privileges. Detection should focus on monitoring for abnormal process behavior or unexpected kernel-mode activity originating from the streaming service driver.

Affected products:

  • Streaming Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69963

Related in this roundup: CVE-2026-69970.

CVE-2026-69967

CVE-2026-69967 is an information disclosure vulnerability residing in the Windows Overlay Filter component. The flaw is caused by an out-of-bounds read, which could allow an authorized local attacker to read sensitive information that should otherwise be restricted.

Affected products:

  • Windows Overlay Filter

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69967

Related in this roundup: CVE-2026-69942, CVE-2026-69947, CVE-2026-69952, CVE-2026-69953, CVE-2026-69954, CVE-2026-69958, CVE-2026-83727, CVE-2026-83749, CVE-2026-83879, CVE-2026-96315, CVE-2026-105004.

CVE-2026-69966

CVE-2026-69966 is a local privilege escalation vulnerability in the Microsoft Kernel Streaming Service caused by an integer overflow or wraparound condition, allowing an authenticated attacker to gain higher privileges on the target system.

Affected products:

  • Kernel Streaming Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69966

CVE-2026-69964

A use-after-free vulnerability exists in the Microsoft Kernel Streaming Service driver, which can be exploited by a local, authorized attacker to achieve privilege escalation.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69964

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-69968

CVE-2026-69968 is a relative path traversal vulnerability affecting the libarchive library on Windows systems. The flaw allows an unauthenticated, remote attacker to perform file tampering by manipulating file paths during archive extraction or processing.

Affected products:

  • libarchive

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69968

Related in this roundup: CVE-2026-70062.

CVE-2026-69970

CVE-2026-69970 is a local elevation of privilege vulnerability in the Microsoft Streaming Service caused by a heap-based buffer overflow. An authorized attacker can exploit this flaw to execute code with higher privileges on the target system.

Affected products:

  • Streaming Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69970

Related in this roundup: CVE-2026-69963.

CVE-2026-69969

CVE-2026-69969 is an information disclosure vulnerability in the Windows AppX Deployment Service caused by improper link resolution ('link following') prior to file access. An authorized attacker could exploit this flaw to gain unauthorized access to sensitive information on the local system.

Affected products:

  • Windows AppX Deployment Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69969

Related in this roundup: CVE-2026-69914, CVE-2026-69905, CVE-2026-69979, CVE-2026-85849, CVE-2026-85934.

CVE-2026-69971

CVE-2026-69971 is an information disclosure vulnerability in Windows Kernel-Mode Drivers caused by incorrect authorization. The flaw allows a locally authenticated attacker to access sensitive information on the host system.

Affected products:

  • Windows Kernel-Mode Drivers

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69971

Related in this roundup: CVE-2026-83834, CVE-2026-85857, CVE-2026-85871, CVE-2026-96247, CVE-2026-96849, CVE-2026-83568, CVE-2026-83637, CVE-2026-83837, CVE-2026-96915.

CVE-2026-69973

CVE-2026-69973 is a path traversal vulnerability in the Windows implementation of libarchive. An unauthorized attacker can leverage this flaw to perform unauthorized file tampering by supplying a specially crafted archive that bypasses directory restrictions.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69973

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-69974

CVE-2026-69974 is an out-of-bounds read vulnerability in the Desktop Window Manager (DWM) component on Windows, allowing an authorized local attacker to perform an information disclosure attack.

Affected products:

  • Desktop Window Manager

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69974

Related in this roundup: CVE-2026-69926, CVE-2026-70234, CVE-2026-70255, CVE-2026-96108, CVE-2026-69880, CVE-2026-70228, CVE-2026-88093.

CVE-2026-69976

A use-after-free vulnerability in the Microsoft Remote Desktop Client allows an unauthenticated remote attacker to achieve arbitrary code execution over the network. Detection engineers should monitor for abnormal activity or crashes originating from the Remote Desktop process.

Affected products:

  • Remote Desktop Client

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69976

Related in this roundup: CVE-2026-108458, CVE-2026-83688, CVE-2026-85337, CVE-2026-97789, CVE-2026-69984, CVE-2026-69986, CVE-2026-69988, CVE-2026-69987, CVE-2026-69995, CVE-2026-69997, CVE-2026-69996, CVE-2026-69991, CVE-2026-69994, CVE-2026-69998, CVE-2026-70012, CVE-2026-70004, CVE-2026-70006, CVE-2026-103575.

CVE-2026-69978

CVE-2026-69978 is a denial-of-service vulnerability in the Windows VMSwitch component triggered by a null pointer dereference. An attacker with local access can exploit this flaw to cause the system to stop responding.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69978

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-69979

CVE-2026-69979 is a security feature bypass vulnerability in the Windows AppX Deployment Service. An authorized local attacker can exploit improper protection of alternate paths to circumvent existing security controls within the service.

Affected products:

  • Windows AppX Deployment Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69979

Related in this roundup: CVE-2026-69914, CVE-2026-69905, CVE-2026-69969, CVE-2026-85849, CVE-2026-85934.

CVE-2026-70010

CVE-2026-70010 is a heap-based buffer overflow vulnerability in the Windows NTFS file system driver. An authenticated local attacker can leverage this flaw to elevate privileges to a higher integrity level on the host system.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70010

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-70014

A use-after-free vulnerability in Microsoft Windows Cryptographic Services allows an authorized attacker to achieve remote code execution over a network. This flaw represents a critical security risk to the integrity and availability of Windows systems, requiring immediate patching as identified by Microsoft Security Response Center.

Affected products:

  • Windows Cryptographic Services

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70014

Related in this roundup: CVE-2026-69919.

CVE-2026-70015

A use-after-free vulnerability in the Windows Local Security Authority Subsystem Service (LSASS) allows a locally authenticated attacker to elevate their privileges to a higher level of authority on the system.

Affected products:

  • Windows Local Security Authority Subsystem Service (LSASS)

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70015

Related in this roundup: CVE-2026-83928.

CVE-2026-70017

CVE-2026-70017 is a type confusion vulnerability in the Windows Secure Kernel Mode that allows a locally authenticated attacker to bypass security restrictions and disclose sensitive memory information.

Affected products:

  • Windows Secure Kernel Mode

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70017

CVE-2026-70021

A use-after-free vulnerability in the Windows Direct Composition component allows a locally authenticated attacker to gain elevated privileges on the system.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70021

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-70025

A use-after-free vulnerability in the Windows Netlogon service allows an authorized attacker to trigger a denial-of-service condition over the network.

Affected products:

  • Windows Netlogon

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70025

CVE-2026-70026

CVE-2026-70026 is a local privilege escalation vulnerability found in the Windows Secure Kernel Mode. The flaw is caused by a use-after-free condition that can be exploited by an authorized attacker to gain elevated system privileges.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70026

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-70033

CVE-2026-70033 is a denial of service vulnerability in the Windows Remote Desktop Gateway (RD Gateway) service. The issue stems from a failure to properly release memory after its effective lifetime, which can be triggered by an unauthorized attacker over a network to cause the service to crash or become unavailable.

Affected products:

  • Windows Remote Desktop Gateway

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70033

CVE-2026-70056

A use-after-free vulnerability in the Windows Update Service allows a local, authorized attacker to escalate privileges. The vulnerability resides within the Windows Update service component, enabling an attacker to gain higher levels of access on an already compromised system.

Affected products:

  • Windows Update Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70056

Related in this roundup: CVE-2026-100200, CVE-2026-100203, CVE-2026-70139, CVE-2026-70142.

CVE-2026-70057

A security feature bypass vulnerability exists in the Windows Routing and Remote Access Service (RRAS) due to incorrect authorization, allowing an authenticated local attacker to bypass security restrictions.

Affected products:

  • Routing and Remote Access Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70057

Related in this roundup: CVE-2026-85809, CVE-2026-84020, CVE-2026-85322, CVE-2026-85808, CVE-2026-96245, CVE-2026-96316, CVE-2026-70158.

CVE-2026-70058

CVE-2026-70058 is an out-of-bounds write vulnerability within the Windows DHCP Server component. An unauthenticated remote attacker can exploit this flaw to achieve remote code execution by sending specifically crafted network packets to the targeted DHCP service.

Affected products:

  • Windows DHCP Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70058

Related in this roundup: CVE-2026-69830, CVE-2026-83691, CVE-2026-83787, CVE-2026-85841, CVE-2026-85865, CVE-2026-70066, CVE-2026-70069, CVE-2026-70201, CVE-2026-83665, CVE-2026-88171, CVE-2026-88117, CVE-2026-88119, CVE-2026-88120, CVE-2026-96320, CVE-2026-96934.

CVE-2026-70059

A heap-based buffer overflow vulnerability in Windows OLE allows a locally authenticated attacker to gain elevated privileges on the target system.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70059

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-70060

A heap-based buffer overflow vulnerability exists in the Windows Win32 Kernel Subsystem (win32k.sys) that allows a locally authenticated attacker to elevate their privileges to a higher level within the system.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70060

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-70063

CVE-2026-70063 is an out-of-bounds read vulnerability in the Windows Kernel that allows an authenticated local attacker to perform an information disclosure attack.

Affected products:

  • Windows Kernel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70063

Related in this roundup: CVE-2026-108462, CVE-2026-108466, CVE-2026-70106, CVE-2026-70121, CVE-2026-70114, CVE-2026-83690, CVE-2026-83768, CVE-2026-83833, CVE-2026-85372, CVE-2026-85836, CVE-2026-85837, CVE-2026-70170, CVE-2026-85939, CVE-2026-85945, CVE-2026-96216, CVE-2026-96317, CVE-2026-96868, CVE-2026-70199, CVE-2026-70232, CVE-2026-83736, CVE-2026-83735, CVE-2026-83918, CVE-2026-83924, CVE-2026-83925, CVE-2026-88134, CVE-2026-88139, CVE-2026-88141, CVE-2026-70160, CVE-2026-70111, CVE-2026-96913, CVE-2026-96929, CVE-2026-102207, CVE-2026-103578, CVE-2026-97803.

CVE-2026-70062

A double-free vulnerability exists within the Windows implementation of libarchive, which can be leveraged by a remote unauthorized attacker to achieve remote code execution via specially crafted input processed over a network.

Affected products:

  • libarchive

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70062

Related in this roundup: CVE-2026-69968.

CVE-2026-70076

CVE-2026-70076 describes a use-after-free vulnerability within the Windows Win32k kernel subsystem. This flaw allows an attacker who has already gained initial authorization on a system to execute arbitrary code or perform operations with elevated privileges, effectively escalating their access rights on the local machine.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70076

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-70077

CVE-2026-70077 is a use-after-free vulnerability in the Windows Kernel that allows an authenticated local attacker to disclose sensitive information, potentially aiding in further exploitation or bypass of security controls.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70077

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-70079

A denial-of-service vulnerability in the Windows DNS service arises from an improper enforcement of behavioral workflow, which can be exploited by an unauthorized remote attacker to disrupt DNS operations.

Affected products:

  • Windows DNS

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70079

Related in this roundup: CVE-2026-70082, CVE-2026-70166, CVE-2026-70119, CVE-2026-70155, CVE-2026-70074.

CVE-2026-70082

CVE-2026-70082 is a denial of service vulnerability in the Windows DNS component caused by an uncaught exception, which can be triggered by an unauthorized remote attacker over the network.

Affected products:

  • Windows DNS

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70082

Related in this roundup: CVE-2026-70079, CVE-2026-70166, CVE-2026-70119, CVE-2026-70155, CVE-2026-70074.

CVE-2026-70085

CVE-2026-70085 is a vulnerability in the Microsoft DNS Server component caused by missing authorization checks. An authorized local attacker can exploit this flaw to perform unauthorized tampering with DNS records or configurations, potentially leading to unauthorized system modifications.

Affected products:

  • DNS Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70085

Related in this roundup: CVE-2026-70083, CVE-2026-70087, CVE-2026-83635, CVE-2026-70071, CVE-2026-88123, CVE-2026-88125, CVE-2026-88129, CVE-2026-88130, CVE-2026-96926, CVE-2026-103560, CVE-2026-97817, CVE-2026-97819, CVE-2026-97820, CVE-2026-97821, CVE-2026-97822, CVE-2026-97823, CVE-2026-97824, CVE-2026-97825, CVE-2026-97827, CVE-2026-97829, CVE-2026-97831, CVE-2026-97836, CVE-2026-97841, CVE-2026-97842, CVE-2026-97843, CVE-2026-97844, CVE-2026-108127, CVE-2026-108128.

CVE-2026-70083

CVE-2026-70083 is an incorrect authorization vulnerability in Microsoft DNS Server that allows an authenticated attacker to perform unauthorized tampering with DNS configurations locally.

Affected products:

  • DNS Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70083

Related in this roundup: CVE-2026-70085, CVE-2026-70087, CVE-2026-83635, CVE-2026-70071, CVE-2026-88123, CVE-2026-88125, CVE-2026-88129, CVE-2026-88130, CVE-2026-96926, CVE-2026-103560, CVE-2026-97817, CVE-2026-97819, CVE-2026-97820, CVE-2026-97821, CVE-2026-97822, CVE-2026-97823, CVE-2026-97824, CVE-2026-97825, CVE-2026-97827, CVE-2026-97829, CVE-2026-97831, CVE-2026-97836, CVE-2026-97841, CVE-2026-97842, CVE-2026-97843, CVE-2026-97844, CVE-2026-108127, CVE-2026-108128.

CVE-2026-70087

CVE-2026-70087 is a security feature bypass vulnerability in the Windows DNS Server component caused by incorrect authorization. An attacker with existing local access can exploit this flaw to circumvent security protections, potentially leading to unauthorized actions or escalated privileges within the context of the DNS service.

Affected products:

  • DNS Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70087

Related in this roundup: CVE-2026-70085, CVE-2026-70083, CVE-2026-83635, CVE-2026-70071, CVE-2026-88123, CVE-2026-88125, CVE-2026-88129, CVE-2026-88130, CVE-2026-96926, CVE-2026-103560, CVE-2026-97817, CVE-2026-97819, CVE-2026-97820, CVE-2026-97821, CVE-2026-97822, CVE-2026-97823, CVE-2026-97824, CVE-2026-97825, CVE-2026-97827, CVE-2026-97829, CVE-2026-97831, CVE-2026-97836, CVE-2026-97841, CVE-2026-97842, CVE-2026-97843, CVE-2026-97844, CVE-2026-108127, CVE-2026-108128.

CVE-2026-70090

CVE-2026-70090 is an information disclosure vulnerability in the Windows Netlogon service caused by the use of an uninitialized resource. An authorized attacker can exploit this locally to potentially access sensitive information.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70090

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-70097

A race condition vulnerability exists in the Windows Virtualization-Based Security (VBS) Enclave feature, which can be exploited by an authorized local attacker to perform spoofing. The vulnerability arises from improper synchronization during concurrent execution using shared resources.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70097

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-70095

CVE-2026-70095 describes a heap-based buffer overflow vulnerability within the Windows iSCSI component. An unauthenticated attacker can exploit this flaw to achieve remote code execution over a network, presenting a significant risk to systems utilizing iSCSI storage protocols.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70095

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-70103

CVE-2026-70103 is a heap-based buffer overflow vulnerability in the Windows Error Reporting component that enables a locally authenticated attacker to perform privilege escalation on the affected system.

Affected products:

  • Windows Error Reporting

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70103

Related in this roundup: CVE-2026-83519, CVE-2026-83693, CVE-2026-83748, CVE-2026-97815, CVE-2026-69363, CVE-2026-69354, CVE-2026-69387, CVE-2026-83658, CVE-2026-83669, CVE-2026-83715, CVE-2026-83758, CVE-2026-83826, CVE-2026-83916, CVE-2026-85354, CVE-2026-85800, CVE-2026-83643, CVE-2026-83689, CVE-2026-83747, CVE-2026-83750, CVE-2026-83840, CVE-2026-97798.

CVE-2026-70093

CVE-2026-70093 is a heap-based buffer overflow vulnerability in the Windows Rich Text Edit Control that allows an already authorized local attacker to perform privilege escalation on an affected Windows system.

Affected products:

  • Windows Rich Text Edit Control

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70093

Related in this roundup: CVE-2026-70096.

CVE-2026-70106

CVE-2026-70106 is a heap-based buffer overflow vulnerability in the Windows Kernel that allows an authorized local attacker to achieve privilege escalation.

Affected products:

  • Windows Kernel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70106

Related in this roundup: CVE-2026-108462, CVE-2026-108466, CVE-2026-70063, CVE-2026-70121, CVE-2026-70114, CVE-2026-83690, CVE-2026-83768, CVE-2026-83833, CVE-2026-85372, CVE-2026-85836, CVE-2026-85837, CVE-2026-70170, CVE-2026-85939, CVE-2026-85945, CVE-2026-96216, CVE-2026-96317, CVE-2026-96868, CVE-2026-70199, CVE-2026-70232, CVE-2026-83736, CVE-2026-83735, CVE-2026-83918, CVE-2026-83924, CVE-2026-83925, CVE-2026-88134, CVE-2026-88139, CVE-2026-88141, CVE-2026-70160, CVE-2026-70111, CVE-2026-96913, CVE-2026-96929, CVE-2026-102207, CVE-2026-103578, CVE-2026-97803.

CVE-2026-70121

CVE-2026-70121 is a heap-based buffer overflow vulnerability in the Windows Kernel that enables a locally authenticated attacker to achieve privilege escalation on the affected system.

Affected products:

  • Windows Kernel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70121

Related in this roundup: CVE-2026-108462, CVE-2026-108466, CVE-2026-70063, CVE-2026-70106, CVE-2026-70114, CVE-2026-83690, CVE-2026-83768, CVE-2026-83833, CVE-2026-85372, CVE-2026-85836, CVE-2026-85837, CVE-2026-70170, CVE-2026-85939, CVE-2026-85945, CVE-2026-96216, CVE-2026-96317, CVE-2026-96868, CVE-2026-70199, CVE-2026-70232, CVE-2026-83736, CVE-2026-83735, CVE-2026-83918, CVE-2026-83924, CVE-2026-83925, CVE-2026-88134, CVE-2026-88139, CVE-2026-88141, CVE-2026-70160, CVE-2026-70111, CVE-2026-96913, CVE-2026-96929, CVE-2026-102207, CVE-2026-103578, CVE-2026-97803.

CVE-2026-70139

A heap-based buffer overflow vulnerability exists within the Windows Update Service that allows an authenticated local attacker to escalate privileges to a higher integrity level.

Affected products:

  • Windows Update Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70139

Related in this roundup: CVE-2026-100200, CVE-2026-100203, CVE-2026-70056, CVE-2026-70142.

CVE-2026-70108

CVE-2026-70108 is a heap-based buffer overflow vulnerability in the Windows Win32 Kernel Subsystem (win32k.sys). A local, authenticated attacker can exploit this flaw to execute code with elevated privileges, typically resulting in SYSTEM-level access.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70108

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-70117

A heap-based buffer overflow vulnerability in the Windows Win32k kernel subsystem allows a local, authorized attacker to elevate their privileges to higher system levels. Exploitation of this vulnerability involves memory corruption in the kernel, potentially granting unauthorized access or control over the affected system.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70117

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-70114

CVE-2026-70114 is a heap-based buffer overflow vulnerability in the Windows Kernel that enables a locally authenticated attacker to escalate privileges. Detection engineering should focus on monitoring for abnormal kernel-mode memory access patterns or unexpected elevation of process tokens.

Affected products:

  • Windows Kernel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70114

Related in this roundup: CVE-2026-108462, CVE-2026-108466, CVE-2026-70063, CVE-2026-70106, CVE-2026-70121, CVE-2026-83690, CVE-2026-83768, CVE-2026-83833, CVE-2026-85372, CVE-2026-85836, CVE-2026-85837, CVE-2026-70170, CVE-2026-85939, CVE-2026-85945, CVE-2026-96216, CVE-2026-96317, CVE-2026-96868, CVE-2026-70199, CVE-2026-70232, CVE-2026-83736, CVE-2026-83735, CVE-2026-83918, CVE-2026-83924, CVE-2026-83925, CVE-2026-88134, CVE-2026-88139, CVE-2026-88141, CVE-2026-70160, CVE-2026-70111, CVE-2026-96913, CVE-2026-96929, CVE-2026-102207, CVE-2026-103578, CVE-2026-97803.

CVE-2026-70127

CVE-2026-70127 is a use-after-free vulnerability in the Microsoft Windows Domain Name Service (DNS) that allows an unauthenticated, remote attacker to execute arbitrary code. The vulnerability exists due to improper memory management, and exploitation can be achieved by sending a specially crafted request to a vulnerable DNS server.

Affected products:

  • Windows Domain Name Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70127

Related in this roundup: CVE-2026-70167, CVE-2026-85903, CVE-2026-88112, CVE-2026-88114, CVE-2026-88116.

CVE-2026-70123

CVE-2026-70123 is a local privilege escalation vulnerability in the Microsoft Graphics Component caused by a numeric truncation error. An authorized attacker could exploit this vulnerability to gain higher privileges on the host system.

Affected products:

  • Graphics Component

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70123

Related in this roundup: CVE-2026-85338, CVE-2026-102209, CVE-2026-100215.

CVE-2026-70140

CVE-2026-70140 describes a use-after-free vulnerability within the Windows Audio Service that allows a local, authorized attacker to elevate their privileges to that of the service, potentially gaining administrative control over the system.

Affected products:

  • Windows Audio Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70140

Related in this roundup: CVE-2026-70118, CVE-2026-83571, CVE-2026-83644, CVE-2026-96314, CVE-2026-70230, CVE-2026-97799.

CVE-2026-70115

CVE-2026-70115 is a local privilege escalation vulnerability in the Microsoft Windows Search Component. The vulnerability is caused by a use-after-free condition, which can be exploited by an authorized attacker to gain elevated privileges on the affected system.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70115

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-70132

A heap-based buffer overflow vulnerability exists in the Windows Portable Device File System Driver, which can be exploited by an authorized local attacker to achieve privilege escalation.

Affected products:

  • Windows Portable Device File System Driver

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70132

Related in this roundup: CVE-2026-83664.

CVE-2026-70118

CVE-2026-70118 is a local privilege escalation vulnerability in the Windows Audio Service caused by a use-after-free condition. An authorized local attacker can exploit this flaw to gain elevated privileges on the affected system.

Affected products:

  • Windows Audio Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70118

Related in this roundup: CVE-2026-70140, CVE-2026-83571, CVE-2026-83644, CVE-2026-96314, CVE-2026-70230, CVE-2026-97799.

CVE-2026-70126

CVE-2026-70126 describes an out-of-bounds read vulnerability in the Windows Bluetooth Port Driver that can be leveraged by an unauthorized attacker over an adjacent network to achieve remote code execution. Detection engineers should monitor for anomalous Bluetooth traffic patterns or unexpected memory access errors originating from the Bluetooth driver stack.

Affected products:

  • Windows Bluetooth Port Driver

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70126

Related in this roundup: CVE-2026-83827.

CVE-2026-70135

An out-of-bounds read vulnerability exists in the Windows Remote POS Driver, which can be exploited by an authorized local attacker to gain unauthorized access to sensitive information. Successful exploitation allows for the disclosure of memory contents.

Affected products:

  • Windows Remote POS Driver

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70135

CVE-2026-70166

CVE-2026-70166 is a denial of service vulnerability in Windows DNS stemming from an out-of-bounds read. An authorized attacker on the network can trigger this condition to disrupt DNS service availability.

Affected products:

  • Windows DNS

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70166

Related in this roundup: CVE-2026-70079, CVE-2026-70082, CVE-2026-70119, CVE-2026-70155, CVE-2026-70074.

CVE-2026-70136

A use-after-free vulnerability in the Microsoft Windows Search Component allows a locally authorized attacker to achieve privilege escalation.

Affected products:

  • Windows Search Component

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70136

Related in this roundup: CVE-2026-105010, CVE-2026-108136, CVE-2026-70141, CVE-2026-70173, CVE-2026-70150, CVE-2026-70177, CVE-2026-70156, CVE-2026-83575, CVE-2026-83704, CVE-2026-70086, CVE-2026-83920, CVE-2026-85869, CVE-2026-88160, CVE-2026-83564, CVE-2026-83570, CVE-2026-83686, CVE-2026-83725, CVE-2026-83829, CVE-2026-83850, CVE-2026-88182, CVE-2026-88191, CVE-2026-96324, CVE-2026-96911, CVE-2026-96910, CVE-2026-96937.

CVE-2026-70138

A heap-based buffer overflow vulnerability exists in Windows OLE that allows an authorized local attacker to elevate their privileges on the target system.

Affected products:

  • Windows OLE

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70138

CVE-2026-70119

A vulnerability exists in the Windows DNS component that allows an authorized attacker to achieve remote code execution via an out-of-bounds read over a network. This flaw could potentially be exploited by an attacker with network access to compromise the targeted system.

Affected products:

  • Windows DNS

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70119

Related in this roundup: CVE-2026-70079, CVE-2026-70082, CVE-2026-70166, CVE-2026-70155, CVE-2026-70074.

CVE-2026-70155

CVE-2026-70155 is a denial-of-service vulnerability in the Windows DNS component caused by a memory leak (missing release of memory after effective lifetime). An unauthorized remote attacker can trigger this condition over the network to crash the DNS service, resulting in service unavailability.

Affected products:

  • Windows DNS

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70155

Related in this roundup: CVE-2026-70079, CVE-2026-70082, CVE-2026-70166, CVE-2026-70119, CVE-2026-70074.

CVE-2026-70133

CVE-2026-70133 is a denial of service vulnerability in the Windows SMB Server caused by improper resource allocation, allowing an unauthenticated remote attacker to exhaust system resources over the network.

Affected products:

  • Windows SMB Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70133

Related in this roundup: CVE-2026-88127, CVE-2026-96325.

CVE-2026-70141

CVE-2026-70141 is an information disclosure vulnerability in the Microsoft Windows Search Component stemming from an out-of-bounds read. An authorized local attacker can exploit this flaw to access sensitive information on the host system.

Affected products:

  • Windows Search Component

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70141

Related in this roundup: CVE-2026-105010, CVE-2026-108136, CVE-2026-70136, CVE-2026-70173, CVE-2026-70150, CVE-2026-70177, CVE-2026-70156, CVE-2026-83575, CVE-2026-83704, CVE-2026-70086, CVE-2026-83920, CVE-2026-85869, CVE-2026-88160, CVE-2026-83564, CVE-2026-83570, CVE-2026-83686, CVE-2026-83725, CVE-2026-83829, CVE-2026-83850, CVE-2026-88182, CVE-2026-88191, CVE-2026-96324, CVE-2026-96911, CVE-2026-96910, CVE-2026-96937.

CVE-2026-70173

An out-of-bounds read vulnerability exists in the Microsoft Windows Search Component that could allow a locally authenticated attacker to disclose sensitive information by exploiting the memory handling flaw.

Affected products:

  • Windows Search Component

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70173

Related in this roundup: CVE-2026-105010, CVE-2026-108136, CVE-2026-70136, CVE-2026-70141, CVE-2026-70150, CVE-2026-70177, CVE-2026-70156, CVE-2026-83575, CVE-2026-83704, CVE-2026-70086, CVE-2026-83920, CVE-2026-85869, CVE-2026-88160, CVE-2026-83564, CVE-2026-83570, CVE-2026-83686, CVE-2026-83725, CVE-2026-83829, CVE-2026-83850, CVE-2026-88182, CVE-2026-88191, CVE-2026-96324, CVE-2026-96911, CVE-2026-96910, CVE-2026-96937.

CVE-2026-70142

The Windows Update Service contains an untrusted search path vulnerability that allows an authorized local attacker to achieve privilege escalation by manipulating the service's execution environment.

Affected products:

  • Windows Update Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70142

Related in this roundup: CVE-2026-100200, CVE-2026-100203, CVE-2026-70056, CVE-2026-70139.

CVE-2026-70150

A use-after-free vulnerability exists in the Microsoft Windows Search Component that allows an authorized local attacker to elevate their privileges on an affected system.

Affected products:

  • Windows Search Component

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70150

Related in this roundup: CVE-2026-105010, CVE-2026-108136, CVE-2026-70136, CVE-2026-70141, CVE-2026-70173, CVE-2026-70177, CVE-2026-70156, CVE-2026-83575, CVE-2026-83704, CVE-2026-70086, CVE-2026-83920, CVE-2026-85869, CVE-2026-88160, CVE-2026-83564, CVE-2026-83570, CVE-2026-83686, CVE-2026-83725, CVE-2026-83829, CVE-2026-83850, CVE-2026-88182, CVE-2026-88191, CVE-2026-96324, CVE-2026-96911, CVE-2026-96910, CVE-2026-96937.

CVE-2026-70176

A use-after-free vulnerability in the Windows Win32k kernel subsystem allows an authenticated local attacker to elevate their privileges to higher system levels.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70176

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-70177

A numeric truncation vulnerability exists in the Microsoft Windows Search Component that allows an authenticated local attacker to escalate their privileges to a higher level of access.

Affected products:

  • Windows Search Component

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70177

Related in this roundup: CVE-2026-105010, CVE-2026-108136, CVE-2026-70136, CVE-2026-70141, CVE-2026-70173, CVE-2026-70150, CVE-2026-70156, CVE-2026-83575, CVE-2026-83704, CVE-2026-70086, CVE-2026-83920, CVE-2026-85869, CVE-2026-88160, CVE-2026-83564, CVE-2026-83570, CVE-2026-83686, CVE-2026-83725, CVE-2026-83829, CVE-2026-83850, CVE-2026-88182, CVE-2026-88191, CVE-2026-96324, CVE-2026-96911, CVE-2026-96910, CVE-2026-96937.

CVE-2026-70156

A use-after-free vulnerability exists in the Microsoft Windows Search Component that allows an authorized local attacker to elevate their privileges to a higher integrity level.

Affected products:

  • Windows Search Component

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70156

Related in this roundup: CVE-2026-105010, CVE-2026-108136, CVE-2026-70136, CVE-2026-70141, CVE-2026-70173, CVE-2026-70150, CVE-2026-70177, CVE-2026-83575, CVE-2026-83704, CVE-2026-70086, CVE-2026-83920, CVE-2026-85869, CVE-2026-88160, CVE-2026-83564, CVE-2026-83570, CVE-2026-83686, CVE-2026-83725, CVE-2026-83829, CVE-2026-83850, CVE-2026-88182, CVE-2026-88191, CVE-2026-96324, CVE-2026-96911, CVE-2026-96910, CVE-2026-96937.

CVE-2026-70198

CVE-2026-70198 is a local privilege escalation vulnerability originating from a use-after-free defect within the Windows Push Notifications component. An authorized attacker can exploit this memory safety issue to execute code with elevated permissions on the target system.

Affected products:

  • Windows Push Notifications

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70198

Related in this roundup: CVE-2026-83867, CVE-2026-96313.

CVE-2026-70169

CVE-2026-70169 is a privilege escalation vulnerability in the Windows Connected Devices Platform Service caused by a race condition during concurrent execution with shared resources. This vulnerability allows an authorized local attacker to gain elevated privileges on the affected Windows system.

Affected products:

  • Windows Connected Devices Platform Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70169

CVE-2026-70168

CVE-2026-70168 is a use-after-free vulnerability in the Windows Ancillary Function Driver for WinSock that allows a locally authenticated attacker to escalate privileges to the level of the kernel or SYSTEM, depending on the context of the vulnerable driver.

Affected products:

  • Windows Ancillary Function Driver for WinSock

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70168

Related in this roundup: CVE-2026-70205, CVE-2026-70225, CVE-2026-88149.

CVE-2026-70195

CVE-2026-70195 is a local information disclosure vulnerability residing in the Windows Ancillary Function Driver for WinSock. The vulnerability is caused by a use-after-free condition that allows an authorized attacker to read sensitive memory contents.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70195

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-70205

A type confusion vulnerability exists in the Windows Ancillary Function Driver for WinSock (AFD.sys). An authenticated local attacker can exploit this vulnerability to achieve elevation of privilege by manipulating resource types during processing.

Affected products:

  • Windows Ancillary Function Driver for WinSock

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70205

Related in this roundup: CVE-2026-70168, CVE-2026-70225, CVE-2026-88149.

CVE-2026-70233

CVE-2026-70233 is a heap-based buffer overflow vulnerability in the Windows Common Log File System Driver, which can be exploited by an authorized local attacker to achieve privilege escalation on the affected system.

Affected products:

  • Windows Common Log File System Driver

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70233

Related in this roundup: CVE-2026-85355, CVE-2026-85868, CVE-2026-83835.

CVE-2026-70247

An out-of-bounds read vulnerability in the Windows HTTP.sys kernel-mode driver can be exploited by an authorized attacker to achieve local remote code execution.

Affected products:

  • HTTP.sys

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70247

CVE-2026-70223

A use-after-free vulnerability exists in the Windows Console Driver that allows an authenticated local attacker to escalate privileges to system level.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70223

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-70225

CVE-2026-70225 is a type confusion vulnerability in the Windows Ancillary Function Driver for WinSock (afdsys.sys) that allows a locally authenticated attacker to escalate privileges. The vulnerability stems from improper handling of resource types within the driver, enabling an attacker to achieve higher-level system access.

Affected products:

  • Windows Ancillary Function Driver for WinSock

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70225

Related in this roundup: CVE-2026-70168, CVE-2026-70205, CVE-2026-88149.

CVE-2026-70234

CVE-2026-70234 describes a buffer over-read vulnerability within the Windows Desktop Window Manager that enables an authorized local attacker to perform unauthorized information disclosure.

Affected products:

  • Desktop Window Manager

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70234

Related in this roundup: CVE-2026-69926, CVE-2026-69974, CVE-2026-70255, CVE-2026-96108, CVE-2026-69880, CVE-2026-70228, CVE-2026-88093.

CVE-2026-70249

A use-after-free vulnerability in the Windows Win32 Kernel Subsystem (win32k.sys) allows a local, authenticated attacker to gain elevated privileges by triggering the flaw during kernel-mode processing.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70249

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-70253

CVE-2026-70253 is a use-after-free vulnerability in the Windows Win32k kernel subsystem that allows a locally authenticated attacker to elevate their privileges to a higher integrity level.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70253

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-70255

CVE-2026-70255 is a heap-based buffer overflow vulnerability in the Windows Desktop Window Manager that enables a locally authenticated attacker to escalate their privileges. Detection should focus on monitoring for unauthorized attempts to access or manipulate DWM processes or system-level handles by unprivileged users.

Affected products:

  • Desktop Window Manager

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70255

Related in this roundup: CVE-2026-69926, CVE-2026-69974, CVE-2026-70234, CVE-2026-96108, CVE-2026-69880, CVE-2026-70228, CVE-2026-88093.

CVE-2026-70252

The Virtual Hard Disk (VHD) Miniport Driver in Microsoft Windows contains a use-after-free vulnerability that allows an authenticated local attacker to escalate privileges on the affected system.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70252

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-70271

A use-after-free vulnerability exists in the Windows Win32k kernel subsystem that allows a locally authenticated attacker to elevate their privileges to a higher integrity level.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70271

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-70272

CVE-2026-70272 is a local privilege escalation vulnerability in the Windows Installer component, stemming from a use-after-free flaw. An authorized local attacker can exploit this vulnerability to gain elevated privileges on the system.

Affected products:

  • Windows Installer

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70272

Related in this roundup: CVE-2026-108468, CVE-2026-83708, CVE-2026-83775, CVE-2026-83779, CVE-2026-85358, CVE-2026-85361, CVE-2026-85364, CVE-2026-85366, CVE-2026-85374, CVE-2026-85796, CVE-2026-85830, CVE-2026-88080, CVE-2026-87708, CVE-2026-87711, CVE-2026-88124, CVE-2026-96302, CVE-2026-96305, CVE-2026-96307, CVE-2026-96308, CVE-2026-69471, CVE-2026-69635, CVE-2026-83672, CVE-2026-83676, CVE-2026-83680, CVE-2026-83702, CVE-2026-83717, CVE-2026-83718, CVE-2026-83752, CVE-2026-83767, CVE-2026-83899, CVE-2026-85941, CVE-2026-88076, CVE-2026-87693, CVE-2026-87694, CVE-2026-87704, CVE-2026-87700, CVE-2026-87715.

CVE-2026-70273

CVE-2026-70273 is a use-after-free vulnerability in the Windows Win32k kernel subsystem that allows a locally authenticated attacker to escalate privileges. Successful exploitation results in the attacker gaining elevated system-level permissions.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70273

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-70274

A use-after-free vulnerability exists in the Windows Bind Filter Driver that allows a locally authenticated attacker to escalate privileges to the level of the kernel, potentially leading to full system compromise.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70274

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-70278

A heap-based buffer overflow vulnerability exists in Microsoft Windows Media Foundation, which can be exploited by an authorized local attacker to achieve privilege escalation.

Affected products:

  • Windows Media Foundation

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70278

Related in this roundup: CVE-2026-83517, CVE-2026-85814, CVE-2026-70044, CVE-2026-70131, CVE-2026-70258, CVE-2026-96186, CVE-2026-96952, CVE-2026-102201.

CVE-2026-70280

A security feature bypass vulnerability exists in Windows Hello due to incorrect authorization handling. An attacker with local access can exploit this flaw to bypass authentication mechanisms.

Affected products:

  • Windows Hello

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70280

Related in this roundup: CVE-2026-83740, CVE-2026-83849, CVE-2026-83853, CVE-2026-83926, CVE-2026-83790, CVE-2026-83907.

CVE-2026-70284

CVE-2026-70284 is an information disclosure vulnerability in the Windows Win32 Kernel Subsystem. It arises from the use of an uninitialized resource, which enables a locally authorized attacker to read sensitive memory contents.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70284

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-70285

CVE-2026-70285 is a heap-based buffer overflow vulnerability in the Windows Win32 Kernel Subsystem that enables a local, authorized attacker to achieve privilege escalation.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70285

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-68836

CVE-2026-68836 describes a heap-based buffer overflow vulnerability within the Windows kernel32.dll library, which can be exploited by an authorized local attacker to achieve privilege escalation on the affected system.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68836

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-69521

CVE-2026-69521 is a critical vulnerability in the Windows iSCSI component caused by an integer overflow or wraparound, which allows a remote, unauthenticated attacker to achieve remote code execution on affected Windows systems.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69521

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-69644

CVE-2026-69644 is an information disclosure vulnerability in the Windows iSCSI component. It allows a locally authenticated attacker to gain unauthorized access to sensitive system information, facilitating potential credential or data harvesting.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69644

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-69721

An out-of-bounds read vulnerability exists in the Windows iSCSI component, which can be exploited by an authorized local attacker to disclose sensitive information.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69721

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-72955

CVE-2026-72955 is a local privilege escalation vulnerability found in the Windows Application Compatibility Cache due to a use-after-free condition, enabling an authorized local attacker to gain higher privileges on the target system.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72955

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-70580

CVE-2026-70580 is a security vulnerability in Windows Credential Guard caused by missing authentication for a critical function. This flaw allows a locally authorized attacker to successfully perform spoofing, potentially compromising the integrity of credential protection mechanisms.

Affected products:

  • Windows Credential Guard

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70580

CVE-2026-69354

CVE-2026-69354 is a heap-based buffer overflow vulnerability in the Windows Error Reporting component that allows a locally authenticated attacker to escalate privileges on the affected system.

Affected products:

  • Windows Error Reporting

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69354

Related in this roundup: CVE-2026-83519, CVE-2026-83693, CVE-2026-83748, CVE-2026-97815, CVE-2026-69363, CVE-2026-70103, CVE-2026-69387, CVE-2026-83658, CVE-2026-83669, CVE-2026-83715, CVE-2026-83758, CVE-2026-83826, CVE-2026-83916, CVE-2026-85354, CVE-2026-85800, CVE-2026-83643, CVE-2026-83689, CVE-2026-83747, CVE-2026-83750, CVE-2026-83840, CVE-2026-97798.

CVE-2026-72934

CVE-2026-72934 describes a use-after-free vulnerability in the Windows Program Compatibility Assistant Service that allows an authenticated local attacker to escalate their privileges. Detection efforts should focus on monitoring for abnormal process execution or service interaction related to the Program Compatibility Assistant service (pcalua.exe or related components) that might indicate exploitation attempts.

Affected products:

  • Windows Program Compatibility Assistant Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72934

Related in this roundup: CVE-2026-72968, CVE-2026-69743, CVE-2026-96920, CVE-2026-69596, CVE-2026-83781.

CVE-2026-69387

A use-after-free vulnerability exists in the Windows Error Reporting component that enables a local, authenticated attacker to escalate their privileges to a higher level of access on the system.

Affected products:

  • Windows Error Reporting

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69387

Related in this roundup: CVE-2026-83519, CVE-2026-83693, CVE-2026-83748, CVE-2026-97815, CVE-2026-69363, CVE-2026-70103, CVE-2026-69354, CVE-2026-83658, CVE-2026-83669, CVE-2026-83715, CVE-2026-83758, CVE-2026-83826, CVE-2026-83916, CVE-2026-85354, CVE-2026-85800, CVE-2026-83643, CVE-2026-83689, CVE-2026-83747, CVE-2026-83750, CVE-2026-83840, CVE-2026-97798.

CVE-2026-69830

A race condition vulnerability in the Windows DHCP Server component allows an unauthenticated remote attacker to achieve remote code execution (RCE) by exploiting improper synchronization of shared resources during concurrent execution.

Affected products:

  • Windows DHCP Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69830

Related in this roundup: CVE-2026-70058, CVE-2026-83691, CVE-2026-83787, CVE-2026-85841, CVE-2026-85865, CVE-2026-70066, CVE-2026-70069, CVE-2026-70201, CVE-2026-83665, CVE-2026-88171, CVE-2026-88117, CVE-2026-88119, CVE-2026-88120, CVE-2026-96320, CVE-2026-96934.

CVE-2026-72969

The Windows Program Compatibility Assistant Service is susceptible to a use-after-free vulnerability that enables a local, authorized attacker to achieve privilege escalation by exploiting improper memory management.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72969

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-69743

CVE-2026-69743 describes a use-after-free vulnerability in the Windows Program Compatibility Assistant Service that allows a locally authenticated attacker to elevate their privileges on the affected system.

Affected products:

  • Windows Program Compatibility Assistant Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69743

Related in this roundup: CVE-2026-72968, CVE-2026-72934, CVE-2026-96920, CVE-2026-69596, CVE-2026-83781.

CVE-2026-69633

CVE-2026-69633 describes a heap-based buffer overflow vulnerability in the Windows Update service, which can be exploited by an authorized local attacker to achieve privilege escalation on the affected system.

Affected products:

  • Windows Update

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69633

Related in this roundup: CVE-2026-69673, CVE-2026-69718, CVE-2026-69882, CVE-2026-69999, CVE-2026-69733, CVE-2026-69783, CVE-2026-96323.

CVE-2026-69673

CVE-2026-69673 is a local privilege escalation vulnerability in Windows Update caused by improper link resolution before file access (link following). An authenticated attacker can exploit this flaw to gain elevated privileges on the affected Windows system.

Affected products:

  • Windows Update

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69673

Related in this roundup: CVE-2026-69633, CVE-2026-69718, CVE-2026-69882, CVE-2026-69999, CVE-2026-69733, CVE-2026-69783, CVE-2026-96323.

CVE-2026-69718

CVE-2026-69718 describes a command injection vulnerability within the Windows Update component that enables an authorized local attacker to elevate their privileges on the host system.

Affected products:

  • Windows Update

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69718

Related in this roundup: CVE-2026-69633, CVE-2026-69673, CVE-2026-69882, CVE-2026-69999, CVE-2026-69733, CVE-2026-69783, CVE-2026-96323.

CVE-2026-69882

CVE-2026-69882 is a local privilege escalation vulnerability in Windows Update caused by an untrusted search path flaw. An authorized attacker can exploit this vulnerability to elevate privileges on a local system by manipulating the file search path.

Affected products:

  • Windows Update

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69882

Related in this roundup: CVE-2026-69633, CVE-2026-69673, CVE-2026-69718, CVE-2026-69999, CVE-2026-69733, CVE-2026-69783, CVE-2026-96323.

CVE-2026-81964

CVE-2026-81964 identifies a vulnerability in the Windows Update Orchestrator Service where the use of hard-coded credentials allows an authenticated attacker to perform a security feature bypass locally on the system.

Affected products:

  • Windows Update Orchestrator Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81964

Related in this roundup: CVE-2026-83793, CVE-2026-83886, CVE-2026-83507, CVE-2026-83930, CVE-2026-83933, CVE-2026-97812.

CVE-2026-81969

CVE-2026-81969 is a privilege escalation vulnerability in the Windows Server Update Service caused by insufficient access control granularity, which can be exploited by an authorized local attacker to elevate their privileges.

Affected products:

  • Windows Server Update Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81969

Related in this roundup: CVE-2026-83499, CVE-2026-105009.

CVE-2026-83504

A time-of-check time-of-use (TOCTOU) race condition vulnerability in Windows SmartScreen enables a local, authorized attacker to perform information disclosure.

Affected products:

  • Windows SmartScreen

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83504

Related in this roundup: CVE-2026-108463, CVE-2026-85851, CVE-2026-70051.

CVE-2026-83500

CVE-2026-83500 is a security feature bypass vulnerability in Windows BitLocker caused by an open redirect issue. An unauthorized attacker with physical access to the target device can leverage this vulnerability to bypass BitLocker protections.

Affected products:

  • BitLocker

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83500

Related in this roundup: CVE-2026-85920, CVE-2026-96909.

CVE-2026-83499

CVE-2026-83499 is a privilege escalation vulnerability in Windows Server Update Service caused by insufficient granularity of access control. An authorized attacker can exploit this flaw locally to gain elevated privileges on the affected host.

Affected products:

  • Windows Server Update Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83499

Related in this roundup: CVE-2026-81969, CVE-2026-105009.

CVE-2026-83516

CVE-2026-83516 is a denial of service vulnerability in the Windows Local Security Authority Subsystem Service (LSASS) caused by an out-of-bounds read. An unauthenticated remote attacker can trigger this vulnerability to crash the LSASS process, leading to a system-wide denial of service.

Affected products:

  • Local Security Authority Subsystem Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83516

CVE-2026-83515

A vulnerability exists within the RPC Runtime due to the use of uninitialized resources, which enables an unauthorized remote attacker to perform an information disclosure attack over the network.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83515

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-83518

CVE-2026-83518 is a heap-based buffer overflow vulnerability within the RPC Runtime that enables an authorized local attacker to achieve privilege escalation.

Affected products:

  • RPC Runtime

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83518

Related in this roundup: CVE-2026-83908.

CVE-2026-83521

An out-of-bounds read vulnerability exists in the Windows IKE Extension that enables an authorized attacker to perform unauthorized information disclosure over a network connection.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83521

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-83571

CVE-2026-83571 is an information disclosure vulnerability in the Windows Audio Service caused by a null pointer dereference. An authorized local attacker can exploit this vulnerability to read sensitive data from the system memory.

Affected products:

  • Windows Audio Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83571

Related in this roundup: CVE-2026-70140, CVE-2026-70118, CVE-2026-83644, CVE-2026-96314, CVE-2026-70230, CVE-2026-97799.

CVE-2026-83575

A use-after-free vulnerability exists in the Microsoft Windows Search Component that allows an authenticated local attacker to escalate their privileges. Successful exploitation requires the attacker to be authorized on the target system.

Affected products:

  • Windows Search Component

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83575

Related in this roundup: CVE-2026-105010, CVE-2026-108136, CVE-2026-70136, CVE-2026-70141, CVE-2026-70173, CVE-2026-70150, CVE-2026-70177, CVE-2026-70156, CVE-2026-83704, CVE-2026-70086, CVE-2026-83920, CVE-2026-85869, CVE-2026-88160, CVE-2026-83564, CVE-2026-83570, CVE-2026-83686, CVE-2026-83725, CVE-2026-83829, CVE-2026-83850, CVE-2026-88182, CVE-2026-88191, CVE-2026-96324, CVE-2026-96911, CVE-2026-96910, CVE-2026-96937.

CVE-2026-83580

A heap-based buffer overflow vulnerability exists in the Windows Client-Side Caching (CSC) Service, which allows a locally authenticated attacker to elevate their privileges to a higher level of authority on the target system.

Affected products:

  • Windows Client-Side Caching (CSC) Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83580

Related in this roundup: CVE-2026-83699.

CVE-2026-83584

CVE-2026-83584 describes a use-after-free vulnerability in the Windows Smart Card component that allows a locally authenticated attacker to elevate their privileges on the system.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83584

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-83635

An out-of-bounds read vulnerability exists in the Microsoft DNS Server component, which can be leveraged by a remote unauthorized attacker to cause a denial-of-service condition over a network.

Affected products:

  • DNS Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83635

Related in this roundup: CVE-2026-70085, CVE-2026-70083, CVE-2026-70087, CVE-2026-70071, CVE-2026-88123, CVE-2026-88125, CVE-2026-88129, CVE-2026-88130, CVE-2026-96926, CVE-2026-103560, CVE-2026-97817, CVE-2026-97819, CVE-2026-97820, CVE-2026-97821, CVE-2026-97822, CVE-2026-97823, CVE-2026-97824, CVE-2026-97825, CVE-2026-97827, CVE-2026-97829, CVE-2026-97831, CVE-2026-97836, CVE-2026-97841, CVE-2026-97842, CVE-2026-97843, CVE-2026-97844, CVE-2026-108127, CVE-2026-108128.

CVE-2026-83641

CVE-2026-83641 is a heap-based buffer overflow vulnerability within Windows Media that enables a locally authenticated attacker to achieve privilege escalation on the affected system.

Affected products:

  • Windows Media

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83641

Related in this roundup: CVE-2026-83650, CVE-2026-96071.

CVE-2026-83642

CVE-2026-83642 is a type confusion vulnerability in the Windows Domain Name Service (DNS) that allows an unauthenticated, remote attacker to execute arbitrary code. The flaw stems from an improper handling of resources of incompatible types within the DNS server process.

Affected products:

  • Domain Name Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83642

CVE-2026-83644

A use-after-free vulnerability in the Windows Audio Service allows a local, authorized attacker to escalate privileges on the affected system.

Affected products:

  • Windows Audio Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83644

Related in this roundup: CVE-2026-70140, CVE-2026-70118, CVE-2026-83571, CVE-2026-96314, CVE-2026-70230, CVE-2026-97799.

CVE-2026-83646

CVE-2026-83646 is an open redirect vulnerability in Microsoft Active Directory Federation Services (AD FS) that allows an authenticated attacker to conduct spoofing attacks by redirecting users to an untrusted site over the network.

Affected products:

  • Active Directory Federation Services

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83646

Related in this roundup: CVE-2026-85319, CVE-2026-85321, CVE-2026-85324, CVE-2026-83674, CVE-2026-69982, CVE-2026-70005, CVE-2026-83511, CVE-2026-83645, CVE-2026-96252, CVE-2026-97788, CVE-2026-103576, CVE-2026-108131.

CVE-2026-83649

CVE-2026-83649 is an out-of-bounds read vulnerability in the Windows Local Security Authority Subsystem Service (LSASS) that allows an authenticated attacker to cause a denial-of-service condition via a network-based attack.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83649

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-83650

CVE-2026-83650 is a heap-based buffer overflow vulnerability in Windows Media that enables a locally authenticated attacker to escalate their privileges. Detection efforts should focus on monitoring for unauthorized process execution or abnormal heap memory activity associated with Windows Media components.

Affected products:

  • Windows Media

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83650

Related in this roundup: CVE-2026-83641, CVE-2026-96071.

CVE-2026-83652

CVE-2026-83652 is a heap-based buffer overflow vulnerability in the Windows NTFS file system driver. An authenticated local attacker can exploit this flaw to execute code with elevated privileges on the affected system.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83652

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-83654

CVE-2026-83654 is an elevation of privilege vulnerability in Windows Modern Device Management (MDM) caused by missing authentication for a critical function. An attacker with local access can exploit this flaw to gain elevated system privileges.

Affected products:

  • Windows Modern Device Management

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83654

Related in this roundup: CVE-2026-108133, CVE-2026-108396, CVE-2026-83657, CVE-2026-85833, CVE-2026-96855, CVE-2026-83656, CVE-2026-83697, CVE-2026-96850.

CVE-2026-83655

An out-of-bounds read vulnerability exists in the Microsoft Network Policy Server (NPS) component, which can be exploited by an unauthorized remote attacker to trigger a denial of service (DoS) condition on the affected host.

Affected products:

  • Network Policy Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83655

Related in this roundup: CVE-2026-100222, CVE-2026-85806, CVE-2026-85371, CVE-2026-85799, CVE-2026-85811, CVE-2026-96246, CVE-2026-70207.

CVE-2026-83657

CVE-2026-83657 describes a vulnerability in Windows Modern Device Management (MDM) stemming from weak authentication mechanisms. An attacker with local access can exploit this flaw to perform unauthorized tampering with the MDM configuration, potentially allowing for persistence or further privilege escalation on the affected system.

Affected products:

  • Windows Modern Device Management

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83657

Related in this roundup: CVE-2026-108133, CVE-2026-108396, CVE-2026-83654, CVE-2026-85833, CVE-2026-96855, CVE-2026-83656, CVE-2026-83697, CVE-2026-96850.

CVE-2026-83658

CVE-2026-83658 is an information disclosure vulnerability residing in Windows Error Reporting. The flaw stems from improper access control mechanisms, which can be leveraged by a locally authenticated attacker to gain unauthorized access to sensitive information.

Affected products:

  • Windows Error Reporting

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83658

Related in this roundup: CVE-2026-83519, CVE-2026-83693, CVE-2026-83748, CVE-2026-97815, CVE-2026-69363, CVE-2026-70103, CVE-2026-69354, CVE-2026-69387, CVE-2026-83669, CVE-2026-83715, CVE-2026-83758, CVE-2026-83826, CVE-2026-83916, CVE-2026-85354, CVE-2026-85800, CVE-2026-83643, CVE-2026-83689, CVE-2026-83747, CVE-2026-83750, CVE-2026-83840, CVE-2026-97798.

CVE-2026-83671

CVE-2026-83671 is an information disclosure vulnerability in Windows Hyper-V caused by an out-of-bounds read. An authenticated attacker can exploit this locally to access sensitive information residing in memory.

Affected products:

  • Hyper-V

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83671

Related in this roundup: CVE-2026-108399, CVE-2026-83839, CVE-2026-70248, CVE-2026-85343, CVE-2026-88071, CVE-2026-83636, CVE-2026-83716, CVE-2026-83728, CVE-2026-83766, CVE-2026-83931, CVE-2026-87705, CVE-2026-70023, CVE-2026-102214, CVE-2026-97813.

CVE-2026-83669

CVE-2026-83669 is a privilege escalation vulnerability in Windows Error Reporting caused by the use of an uninitialized resource. An authorized local attacker can exploit this flaw to gain elevated privileges on the target system.

Affected products:

  • Windows Error Reporting

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83669

Related in this roundup: CVE-2026-83519, CVE-2026-83693, CVE-2026-83748, CVE-2026-97815, CVE-2026-69363, CVE-2026-70103, CVE-2026-69354, CVE-2026-69387, CVE-2026-83658, CVE-2026-83715, CVE-2026-83758, CVE-2026-83826, CVE-2026-83916, CVE-2026-85354, CVE-2026-85800, CVE-2026-83643, CVE-2026-83689, CVE-2026-83747, CVE-2026-83750, CVE-2026-83840, CVE-2026-97798.

CVE-2026-83675

CVE-2026-83675 is a use-after-free vulnerability within the Windows Kernel that enables a locally authenticated attacker to escalate their privileges. Detection should focus on monitoring for unauthorized attempts to access sensitive kernel memory regions or unusual process transitions that may indicate an elevation attempt.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83675

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-83678

A heap-based buffer overflow vulnerability exists in the Windows TCP/IP stack, which can be exploited by an authorized local attacker to achieve privilege escalation.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83678

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-83681

CVE-2026-83681 describes a local tampering vulnerability in Microsoft PowerToys caused by weak authentication mechanisms. An authorized local attacker can exploit this flaw to perform unauthorized modifications to the application's configuration or state.

Affected products:

  • PowerToys

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83681

Related in this roundup: CVE-2026-96188.

CVE-2026-83687

A use-after-free vulnerability in the Windows Connected User Experiences and Telemetry component allows a locally authenticated attacker to elevate their privileges on the host system.

Affected products:

  • Windows Connected User Experiences and Telemetry

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83687

CVE-2026-83688

CVE-2026-83688 is a heap-based buffer overflow vulnerability in the Microsoft Remote Desktop Client. An unauthenticated attacker on the network can leverage this vulnerability to achieve remote code execution on the target system.

Affected products:

  • Remote Desktop Client

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83688

Related in this roundup: CVE-2026-108458, CVE-2026-69976, CVE-2026-85337, CVE-2026-97789, CVE-2026-69984, CVE-2026-69986, CVE-2026-69988, CVE-2026-69987, CVE-2026-69995, CVE-2026-69997, CVE-2026-69996, CVE-2026-69991, CVE-2026-69994, CVE-2026-69998, CVE-2026-70012, CVE-2026-70004, CVE-2026-70006, CVE-2026-103575.

CVE-2026-83690

CVE-2026-83690 describes a use-after-free vulnerability in the Windows Kernel that allows an authenticated, local attacker to escalate their privileges. Detection should focus on monitoring for unauthorized attempts to interact with kernel-mode drivers or processes that exhibit unexpected privilege changes.

Affected products:

  • Windows Kernel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83690

Related in this roundup: CVE-2026-108462, CVE-2026-108466, CVE-2026-70063, CVE-2026-70106, CVE-2026-70121, CVE-2026-70114, CVE-2026-83768, CVE-2026-83833, CVE-2026-85372, CVE-2026-85836, CVE-2026-85837, CVE-2026-70170, CVE-2026-85939, CVE-2026-85945, CVE-2026-96216, CVE-2026-96317, CVE-2026-96868, CVE-2026-70199, CVE-2026-70232, CVE-2026-83736, CVE-2026-83735, CVE-2026-83918, CVE-2026-83924, CVE-2026-83925, CVE-2026-88134, CVE-2026-88139, CVE-2026-88141, CVE-2026-70160, CVE-2026-70111, CVE-2026-96913, CVE-2026-96929, CVE-2026-102207, CVE-2026-103578, CVE-2026-97803.

CVE-2026-83691

A heap-based buffer overflow vulnerability in the Windows DHCP Server component allows a locally authorized attacker to escalate privileges. This vulnerability requires the attacker to already have a level of access to the target system to trigger the flaw, resulting in a privilege escalation attack vector.

Affected products:

  • Windows DHCP Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83691

Related in this roundup: CVE-2026-70058, CVE-2026-69830, CVE-2026-83787, CVE-2026-85841, CVE-2026-85865, CVE-2026-70066, CVE-2026-70069, CVE-2026-70201, CVE-2026-83665, CVE-2026-88171, CVE-2026-88117, CVE-2026-88119, CVE-2026-88120, CVE-2026-96320, CVE-2026-96934.

CVE-2026-83692

CVE-2026-83692 describes a heap-based buffer overflow vulnerability within the Windows Bind Filter Driver. This flaw allows an authenticated local attacker to execute arbitrary code with elevated privileges on the target system.

Affected products:

  • Windows Bind Filter Driver

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83692

Related in this roundup: CVE-2026-85812, CVE-2026-88168.

CVE-2026-83694

A vulnerability exists in the Windows Volume Manager Extension Driver that allows an authorized attacker to perform an out-of-bounds read, leading to local privilege escalation on affected Windows systems.

Affected products:

  • Windows Volume Manager Extension Driver

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83694

Related in this roundup: CVE-2026-85928, CVE-2026-85356.

CVE-2026-83699

The Windows Client-Side Caching (CSC) Service contains a stack-based buffer overflow vulnerability that allows a locally authenticated attacker to escalate privileges. Successful exploitation requires the attacker to have authorized access to the system.

Affected products:

  • Windows Client-Side Caching (CSC) Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83699

Related in this roundup: CVE-2026-83580.

CVE-2026-83700

CVE-2026-83700 is a use-after-free vulnerability in the Windows Now Playing Session Manager that enables an authenticated attacker to perform local privilege escalation on affected Windows systems.

Affected products:

  • Windows Now Playing Session Manager

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83700

Related in this roundup: CVE-2026-83701.

CVE-2026-83704

The Microsoft Windows Search Component contains a vulnerability involving improper link resolution before file access, which can be exploited by an authorized attacker to achieve local privilege escalation on affected Windows systems.

Affected products:

  • Windows Search Component

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83704

Related in this roundup: CVE-2026-105010, CVE-2026-108136, CVE-2026-70136, CVE-2026-70141, CVE-2026-70173, CVE-2026-70150, CVE-2026-70177, CVE-2026-70156, CVE-2026-83575, CVE-2026-70086, CVE-2026-83920, CVE-2026-85869, CVE-2026-88160, CVE-2026-83564, CVE-2026-83570, CVE-2026-83686, CVE-2026-83725, CVE-2026-83829, CVE-2026-83850, CVE-2026-88182, CVE-2026-88191, CVE-2026-96324, CVE-2026-96911, CVE-2026-96910, CVE-2026-96937.

CVE-2026-83705

CVE-2026-83705 describes an information disclosure vulnerability in the Windows HTTP.sys driver. The vulnerability allows a locally authenticated attacker to gain unauthorized access to sensitive system information by exploiting how the driver handles requests, potentially facilitating further exploitation of the system.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83705

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-83706

CVE-2026-83706 is a local privilege escalation vulnerability in the Windows NTFS file system caused by a use-after-free defect. An authorized local attacker can exploit this flaw to execute code with higher privileges.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83706

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-83707

CVE-2026-83707 is a local privilege escalation vulnerability in Windows Event Tracing caused by a use-after-free flaw. An authorized attacker can exploit this condition to execute arbitrary code with elevated privileges on the target system.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83707

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-83708

CVE-2026-83708 is a stack-based buffer overflow vulnerability in the Windows Installer service that allows an authenticated local attacker to escalate privileges. Detection should focus on monitoring for unusual process creation or service behavior originating from the Windows Installer service process.

Affected products:

  • Windows Installer

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83708

Related in this roundup: CVE-2026-108468, CVE-2026-70272, CVE-2026-83775, CVE-2026-83779, CVE-2026-85358, CVE-2026-85361, CVE-2026-85364, CVE-2026-85366, CVE-2026-85374, CVE-2026-85796, CVE-2026-85830, CVE-2026-88080, CVE-2026-87708, CVE-2026-87711, CVE-2026-88124, CVE-2026-96302, CVE-2026-96305, CVE-2026-96307, CVE-2026-96308, CVE-2026-69471, CVE-2026-69635, CVE-2026-83672, CVE-2026-83676, CVE-2026-83680, CVE-2026-83702, CVE-2026-83717, CVE-2026-83718, CVE-2026-83752, CVE-2026-83767, CVE-2026-83899, CVE-2026-85941, CVE-2026-88076, CVE-2026-87693, CVE-2026-87694, CVE-2026-87704, CVE-2026-87700, CVE-2026-87715.

CVE-2026-83712

A vulnerability in the Windows NTFS driver allows an authorized attacker to achieve remote code execution via an out-of-bounds write primitive. The flaw enables local exploitation leading to code execution.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83712

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-83713

CVE-2026-83713 describes an out-of-bounds read vulnerability in the Windows Universal Disk Format File System Driver (UDFS). An authorized local attacker can exploit this flaw to disclose sensitive information from the system, potentially aiding in further exploitation phases.

Affected products:

  • Windows Universal Disk Format File System Driver

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83713

Related in this roundup: CVE-2026-85820, CVE-2026-85821, CVE-2026-85825, CVE-2026-83513, CVE-2026-83857, CVE-2026-85909, CVE-2026-96930, CVE-2026-96946, CVE-2026-96947, CVE-2026-96949, CVE-2026-96950, CVE-2026-96953, CVE-2026-102205, CVE-2026-102218, CVE-2026-102215.

CVE-2026-83715

A vulnerability in Windows Error Reporting lacks proper authentication checks for a critical function, allowing an authorized local attacker to tamper with the system. This can be exploited to facilitate privilege escalation.

Affected products:

  • Windows Error Reporting

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83715

Related in this roundup: CVE-2026-83519, CVE-2026-83693, CVE-2026-83748, CVE-2026-97815, CVE-2026-69363, CVE-2026-70103, CVE-2026-69354, CVE-2026-69387, CVE-2026-83658, CVE-2026-83669, CVE-2026-83758, CVE-2026-83826, CVE-2026-83916, CVE-2026-85354, CVE-2026-85800, CVE-2026-83643, CVE-2026-83689, CVE-2026-83747, CVE-2026-83750, CVE-2026-83840, CVE-2026-97798.

CVE-2026-83719

CVE-2026-83719 describes a buffer over-read vulnerability within Microsoft Servicing Stack Updates. An authorized attacker with local access can exploit this flaw to perform unauthorized information disclosure, potentially leading to the leakage of sensitive data from memory.

Affected products:

  • Servicing Stack Updates

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83719

Related in this roundup: CVE-2026-85318, CVE-2026-85365, CVE-2026-85835, CVE-2026-83863, CVE-2026-96939.

CVE-2026-83722

A use-after-free vulnerability exists in the Microsoft Local Security Authority Server (lsasrv) which can be exploited by an authenticated local attacker to achieve privilege escalation on affected Windows systems.

Affected products:

  • Local Security Authority Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83722

Related in this roundup: CVE-2026-87710.

CVE-2026-83723

CVE-2026-83723 describes an information disclosure vulnerability in the Windows Event Logging Service caused by the use of an uninitialized resource. An authorized local attacker can exploit this flaw to read sensitive data from the system.

Affected products:

  • Windows Event Logging Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83723

Related in this roundup: CVE-2026-95904, CVE-2026-83695, CVE-2026-83856.

CVE-2026-83726

A use-after-free vulnerability in the Windows DWM Core Library allows a locally authenticated attacker to escalate privileges. The vulnerability exists due to improper memory management, which can be leveraged to achieve higher-level access on the system.

Affected products:

  • Windows DWM Core Library

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83726

Related in this roundup: CVE-2026-85855, CVE-2026-83765, CVE-2026-88194, CVE-2026-88189.

CVE-2026-83727

A buffer over-read vulnerability in the Windows Overlay Filter component allows an authorized local attacker to achieve privilege escalation. This vulnerability indicates a flaw in how the filter driver handles memory during specific operations, potentially allowing attackers to gain higher-level permissions than those they currently possess.

Affected products:

  • Windows Overlay Filter

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83727

Related in this roundup: CVE-2026-69942, CVE-2026-69947, CVE-2026-69952, CVE-2026-69953, CVE-2026-69954, CVE-2026-69958, CVE-2026-69967, CVE-2026-83749, CVE-2026-83879, CVE-2026-96315, CVE-2026-105004.

CVE-2026-83733

An out-of-bounds read vulnerability in the Windows Print Spooler components allows a locally authorized attacker to perform unauthorized information disclosure by exploiting the flaw to read sensitive memory content.

Affected products:

  • Windows Print Spooler

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83733

Related in this roundup: CVE-2026-84018, CVE-2026-85320, CVE-2026-85327, CVE-2026-85376, CVE-2026-85847, CVE-2026-85933.

CVE-2026-83738

A use-after-free vulnerability exists in the Windows Ancillary Function Driver for WinSock (afdsys.sys) which can be exploited by an authenticated attacker to perform local privilege escalation on the host system.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83738

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-83740

CVE-2026-83740 is a local privilege escalation vulnerability in Windows Hello caused by a use-after-free flaw. An authorized attacker can exploit this vulnerability to gain elevated privileges on the affected Windows system.

Affected products:

  • Windows Hello

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83740

Related in this roundup: CVE-2026-70280, CVE-2026-83849, CVE-2026-83853, CVE-2026-83926, CVE-2026-83790, CVE-2026-83907.

CVE-2026-83749

CVE-2026-83749 is a local privilege escalation vulnerability in the Windows Overlay Filter caused by a use-after-free flaw. An authenticated attacker can exploit this vulnerability to execute arbitrary code with elevated privileges on an affected Windows system.

Affected products:

  • Windows Overlay Filter

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83749

Related in this roundup: CVE-2026-69942, CVE-2026-69947, CVE-2026-69952, CVE-2026-69953, CVE-2026-69954, CVE-2026-69958, CVE-2026-69967, CVE-2026-83727, CVE-2026-83879, CVE-2026-96315, CVE-2026-105004.

CVE-2026-83753

A heap-based buffer overflow vulnerability in the Windows Camera Frame Server Monitor allows a locally authenticated attacker to achieve privilege escalation by exploiting the memory corruption flaw.

Affected products:

  • Windows Camera Frame Server Monitor

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83753

Related in this roundup: CVE-2026-83771.

CVE-2026-83754

CVE-2026-83754 is a heap-based buffer overflow vulnerability in Microsoft OpenSSH for Windows that allows a remote, unauthenticated attacker to achieve remote code execution on the target system.

Affected products:

  • OpenSSH for Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83754

Related in this roundup: CVE-2026-97816, CVE-2026-70163, CVE-2026-83769, CVE-2026-83871, CVE-2026-88157, CVE-2026-83923, CVE-2026-97811.

CVE-2026-83761

A use-after-free vulnerability exists in the Windows Win32 Kernel Subsystem that allows a local, authorized attacker to gain elevated privileges on the system.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83761

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-83760

The Microsoft Bluetooth Driver contains an out-of-bounds read vulnerability that allows a locally authorized attacker to disclose sensitive information. The vulnerability occurs due to improper bounds checking, which could be leveraged to gain unauthorized access to memory contents.

Affected products:

  • Bluetooth Driver

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83760

Related in this roundup: CVE-2026-83868, CVE-2026-96844.

CVE-2026-83758

CVE-2026-83758 is a heap-based buffer overflow vulnerability in the Windows Error Reporting component that allows an authenticated local attacker to achieve remote code execution on the target system.

Affected products:

  • Windows Error Reporting

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83758

Related in this roundup: CVE-2026-83519, CVE-2026-83693, CVE-2026-83748, CVE-2026-97815, CVE-2026-69363, CVE-2026-70103, CVE-2026-69354, CVE-2026-69387, CVE-2026-83658, CVE-2026-83669, CVE-2026-83715, CVE-2026-83826, CVE-2026-83916, CVE-2026-85354, CVE-2026-85800, CVE-2026-83643, CVE-2026-83689, CVE-2026-83747, CVE-2026-83750, CVE-2026-83840, CVE-2026-97798.

CVE-2026-83759

A remote code execution vulnerability exists in the Windows Encrypting File System (EFS) due to improper control of generation of code. An authorized attacker can leverage this flaw to execute arbitrary code over a network, potentially leading to system compromise.

Affected products:

  • Windows Encrypting File System

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83759

Related in this roundup: CVE-2026-83784, CVE-2026-85791, CVE-2026-88162, CVE-2026-83565.

CVE-2026-83768

CVE-2026-83768 is a heap-based buffer overflow vulnerability in the Windows Kernel that allows an authenticated local attacker to escalate their privileges to a higher level within the system.

Affected products:

  • Windows Kernel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83768

Related in this roundup: CVE-2026-108462, CVE-2026-108466, CVE-2026-70063, CVE-2026-70106, CVE-2026-70121, CVE-2026-70114, CVE-2026-83690, CVE-2026-83833, CVE-2026-85372, CVE-2026-85836, CVE-2026-85837, CVE-2026-70170, CVE-2026-85939, CVE-2026-85945, CVE-2026-96216, CVE-2026-96317, CVE-2026-96868, CVE-2026-70199, CVE-2026-70232, CVE-2026-83736, CVE-2026-83735, CVE-2026-83918, CVE-2026-83924, CVE-2026-83925, CVE-2026-88134, CVE-2026-88139, CVE-2026-88141, CVE-2026-70160, CVE-2026-70111, CVE-2026-96913, CVE-2026-96929, CVE-2026-102207, CVE-2026-103578, CVE-2026-97803.

CVE-2026-83775

CVE-2026-83775 is a privilege escalation vulnerability in the Windows Installer caused by a race condition (CWE-362) resulting from improper synchronization when using shared resources. An attacker with local access can exploit this flaw to execute code with elevated privileges.

Affected products:

  • Windows Installer

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83775

Related in this roundup: CVE-2026-108468, CVE-2026-70272, CVE-2026-83708, CVE-2026-83779, CVE-2026-85358, CVE-2026-85361, CVE-2026-85364, CVE-2026-85366, CVE-2026-85374, CVE-2026-85796, CVE-2026-85830, CVE-2026-88080, CVE-2026-87708, CVE-2026-87711, CVE-2026-88124, CVE-2026-96302, CVE-2026-96305, CVE-2026-96307, CVE-2026-96308, CVE-2026-69471, CVE-2026-69635, CVE-2026-83672, CVE-2026-83676, CVE-2026-83680, CVE-2026-83702, CVE-2026-83717, CVE-2026-83718, CVE-2026-83752, CVE-2026-83767, CVE-2026-83899, CVE-2026-85941, CVE-2026-88076, CVE-2026-87693, CVE-2026-87694, CVE-2026-87704, CVE-2026-87700, CVE-2026-87715.

CVE-2026-83776

CVE-2026-83776 is an out-of-bounds read vulnerability in the Microsoft Bluetooth Driver that enables an unauthorized attacker with physical access to the device to perform privilege escalation. The vulnerability stems from improper memory handling within the driver stack.

Affected products:

  • Windows Bluetooth Driver

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83776

CVE-2026-83779

CVE-2026-83779 is a heap-based buffer overflow vulnerability in the Windows Installer component. A locally authenticated attacker can exploit this vulnerability to achieve privilege escalation on affected Windows systems.

Affected products:

  • Windows Installer

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83779

Related in this roundup: CVE-2026-108468, CVE-2026-70272, CVE-2026-83708, CVE-2026-83775, CVE-2026-85358, CVE-2026-85361, CVE-2026-85364, CVE-2026-85366, CVE-2026-85374, CVE-2026-85796, CVE-2026-85830, CVE-2026-88080, CVE-2026-87708, CVE-2026-87711, CVE-2026-88124, CVE-2026-96302, CVE-2026-96305, CVE-2026-96307, CVE-2026-96308, CVE-2026-69471, CVE-2026-69635, CVE-2026-83672, CVE-2026-83676, CVE-2026-83680, CVE-2026-83702, CVE-2026-83717, CVE-2026-83718, CVE-2026-83752, CVE-2026-83767, CVE-2026-83899, CVE-2026-85941, CVE-2026-88076, CVE-2026-87693, CVE-2026-87694, CVE-2026-87704, CVE-2026-87700, CVE-2026-87715.

CVE-2026-83784

CVE-2026-83784 is a privilege escalation vulnerability in the Windows Encrypting File System (EFS) caused by an absolute path traversal flaw. This allows an authorized attacker to gain elevated privileges over a network by manipulating file paths.

Affected products:

  • Windows Encrypting File System

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83784

Related in this roundup: CVE-2026-83759, CVE-2026-85791, CVE-2026-88162, CVE-2026-83565.

CVE-2026-83787

CVE-2026-83787 identifies a security feature bypass vulnerability in the Windows DHCP Server component. The vulnerability arises from insufficient verification of data authenticity, which allows a locally authenticated attacker to circumvent security controls implemented within the DHCP service.

Affected products:

  • Windows DHCP Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83787

Related in this roundup: CVE-2026-70058, CVE-2026-69830, CVE-2026-83691, CVE-2026-85841, CVE-2026-85865, CVE-2026-70066, CVE-2026-70069, CVE-2026-70201, CVE-2026-83665, CVE-2026-88171, CVE-2026-88117, CVE-2026-88119, CVE-2026-88120, CVE-2026-96320, CVE-2026-96934.

CVE-2026-83793

CVE-2026-83793 describes a privilege escalation vulnerability in the Windows Update Orchestrator Service caused by improper link resolution before file access. An attacker who has already gained local access can exploit this flaw to elevate their privileges on the host system.

Affected products:

  • Windows Update Orchestrator Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83793

Related in this roundup: CVE-2026-81964, CVE-2026-83886, CVE-2026-83507, CVE-2026-83930, CVE-2026-83933, CVE-2026-97812.

CVE-2026-83798

CVE-2026-83798 describes an improper cryptographic signature verification vulnerability within the Windows Update Stack. An authenticated local attacker can leverage this flaw to perform spoofing operations, potentially bypassing security controls related to update integrity.

Affected products:

  • Windows Update Stack

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83798

Related in this roundup: CVE-2026-96218.

CVE-2026-83796

CVE-2026-83796 is a use-after-free vulnerability in the Windows Kernel that enables a locally authenticated attacker to escalate their privileges to a higher integrity level.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83796

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-83826

CVE-2026-83826 is an elevation of privilege vulnerability in Windows Error Reporting caused by an untrusted pointer dereference. An authorized local attacker can exploit this flaw to gain higher privileges on the target Windows system.

Affected products:

  • Windows Error Reporting

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83826

Related in this roundup: CVE-2026-83519, CVE-2026-83693, CVE-2026-83748, CVE-2026-97815, CVE-2026-69363, CVE-2026-70103, CVE-2026-69354, CVE-2026-69387, CVE-2026-83658, CVE-2026-83669, CVE-2026-83715, CVE-2026-83758, CVE-2026-83916, CVE-2026-85354, CVE-2026-85800, CVE-2026-83643, CVE-2026-83689, CVE-2026-83747, CVE-2026-83750, CVE-2026-83840, CVE-2026-97798.

CVE-2026-83827

CVE-2026-83827 describes a heap-based buffer overflow vulnerability in the Windows Bluetooth Port Driver. An attacker with local authorization can exploit this vulnerability to execute arbitrary code with elevated system privileges.

Affected products:

  • Windows Bluetooth Port Driver

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83827

Related in this roundup: CVE-2026-70126.

CVE-2026-83828

The Windows MIDI Service Module is vulnerable to a heap-based buffer overflow that can be exploited by an authenticated local attacker to gain elevated privileges on the system.

Affected products:

  • Windows MIDI Service Module

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83828

Related in this roundup: CVE-2026-83751, CVE-2026-88079.

CVE-2026-83832

An out-of-bounds read vulnerability exists in the Windows Spaceport.sys driver, which allows a locally authenticated attacker to escalate privileges on the affected system.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83832

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-83833

CVE-2026-83833 is a heap-based buffer overflow vulnerability in the Windows Kernel that enables a locally authenticated attacker to escalate their privileges. Detection should focus on monitoring for unauthorized attempts to interact with kernel-mode processes or suspicious memory corruption patterns originating from user-mode sessions.

Affected products:

  • Windows Kernel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83833

Related in this roundup: CVE-2026-108462, CVE-2026-108466, CVE-2026-70063, CVE-2026-70106, CVE-2026-70121, CVE-2026-70114, CVE-2026-83690, CVE-2026-83768, CVE-2026-85372, CVE-2026-85836, CVE-2026-85837, CVE-2026-70170, CVE-2026-85939, CVE-2026-85945, CVE-2026-96216, CVE-2026-96317, CVE-2026-96868, CVE-2026-70199, CVE-2026-70232, CVE-2026-83736, CVE-2026-83735, CVE-2026-83918, CVE-2026-83924, CVE-2026-83925, CVE-2026-88134, CVE-2026-88139, CVE-2026-88141, CVE-2026-70160, CVE-2026-70111, CVE-2026-96913, CVE-2026-96929, CVE-2026-102207, CVE-2026-103578, CVE-2026-97803.

CVE-2026-83836

CVE-2026-83836 is a heap-based buffer overflow vulnerability in Windows Event Tracing that allows an unauthorized local attacker to achieve remote code execution.

Affected products:

  • Windows Event Tracing

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83836

CVE-2026-83834

CVE-2026-83834 is a use-after-free vulnerability within Windows Kernel-Mode Drivers that permits a locally authenticated attacker to achieve privilege escalation by exploiting the flawed memory management in kernel space.

Affected products:

  • Windows Kernel-Mode Drivers

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83834

Related in this roundup: CVE-2026-69971, CVE-2026-85857, CVE-2026-85871, CVE-2026-96247, CVE-2026-96849, CVE-2026-83568, CVE-2026-83637, CVE-2026-83837, CVE-2026-96915.

CVE-2026-83839

A time-of-check time-of-use (TOCTOU) race condition vulnerability exists in Windows Hyper-V, enabling an authorized local attacker to elevate their privileges on the host system.

Affected products:

  • Hyper-V

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83839

Related in this roundup: CVE-2026-108399, CVE-2026-83671, CVE-2026-70248, CVE-2026-85343, CVE-2026-88071, CVE-2026-83636, CVE-2026-83716, CVE-2026-83728, CVE-2026-83766, CVE-2026-83931, CVE-2026-87705, CVE-2026-70023, CVE-2026-102214, CVE-2026-97813.

CVE-2026-83838

CVE-2026-83838 is an elevation of privilege vulnerability in the Windows Bluetooth A2DP driver caused by an integer underflow condition. An attacker with authorized access can exploit this flaw over an adjacent network to gain higher privileges on the system.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83838

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-83842

CVE-2026-83842 is a local privilege escalation vulnerability in the Windows TCP/IP stack caused by a double free condition. An attacker with local authorization can exploit this flaw to execute code with elevated privileges on the affected system.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83842

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-83843

CVE-2026-83843 is an out-of-bounds read vulnerability in the Windows Internet Key Exchange (IKE) extension, enabling an unauthenticated, remote attacker to trigger a denial of service condition on affected Windows systems by sending specially crafted network packets.

Affected products:

  • Windows Internet Key Exchange (IKE) Extension

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83843

CVE-2026-83844

CVE-2026-83844 is an out-of-bounds read vulnerability in the Windows Paint application that can be exploited by a remote attacker to achieve code execution. Detection efforts should focus on anomalous network traffic or unusual process spawning behavior initiated by the Paint application.

Affected products:

  • Paint

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83844

CVE-2026-83849

CVE-2026-83849 is an out-of-bounds read vulnerability in Windows Hello that allows an authorized local attacker to perform information disclosure. Detection engineers should monitor for unauthorized access attempts to biometric data processing or sensitive system memory areas associated with the Windows Hello authentication subsystem.

Affected products:

  • Windows Hello

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83849

Related in this roundup: CVE-2026-70280, CVE-2026-83740, CVE-2026-83853, CVE-2026-83926, CVE-2026-83790, CVE-2026-83907.

CVE-2026-83847

CVE-2026-83847 is a heap-based buffer overflow vulnerability in Microsoft Account that enables an authenticated attacker to perform local privilege escalation on the affected system.

Affected products:

  • Microsoft Account

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83847

Related in this roundup: CVE-2026-85329.

CVE-2026-83846

A use-after-free vulnerability exists in the Connected Devices Platform Service (Cdpsvc) on Windows, which can be exploited by an authorized local attacker to elevate privileges.

Affected products:

  • Connected Devices Platform Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83846

Related in this roundup: CVE-2026-95943.

CVE-2026-83848

CVE-2026-83848 describes a vulnerability in the Windows COM+ Event System Service stemming from an untrusted pointer dereference. An authorized local attacker can exploit this flaw to achieve privilege escalation.

Affected products:

  • Windows COM+ Event System Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83848

Related in this roundup: CVE-2026-83785, CVE-2026-83830.

CVE-2026-83851

CVE-2026-83851 describes a heap-based buffer overflow vulnerability in the Windows Partition Management Driver, which can be exploited by an unauthorized attacker to achieve privilege escalation over a network.

Affected products:

  • Windows Partition Management Driver

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83851

Related in this roundup: CVE-2026-97805, CVE-2026-83514, CVE-2026-83797, CVE-2026-103553.

CVE-2026-83852

A use-after-free vulnerability exists in the Windows Bind Filter Driver that can be exploited by an authorized local attacker to achieve privilege escalation.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83852

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-83853

CVE-2026-83853 is a use-after-free vulnerability within the Windows Hello component that allows an attacker with authorized local access to escalate their privileges on the host system.

Affected products:

  • Windows Hello

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83853

Related in this roundup: CVE-2026-70280, CVE-2026-83740, CVE-2026-83849, CVE-2026-83926, CVE-2026-83790, CVE-2026-83907.

CVE-2026-83854

CVE-2026-83854 describes an information disclosure vulnerability in the Windows Notification component caused by improper access control. An authorized local attacker can exploit this flaw to gain unauthorized access to sensitive information.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83854

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-83855

CVE-2026-83855 is a denial-of-service vulnerability in the Windows WLAN Service caused by an integer underflow flaw. This vulnerability allows an unauthorized remote attacker to disrupt WLAN functionality by triggering a wraparound condition in the service, leading to a crash or service unavailability.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83855

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-83864

A vulnerability in the Windows NTFS implementation, identified as CVE-2026-83864, results from improper access control. An attacker with local authorization can exploit this flaw to disclose sensitive information from the file system.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83864

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-83865

CVE-2026-83865 identifies a relative path traversal vulnerability in the Windows Internet (wininet.dll) component. This flaw allows an authorized local attacker to perform file tampering, potentially leading to unauthorized modification of system files or security bypasses.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83865

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-83875

CVE-2026-83875 is an out-of-bounds read vulnerability in the Windows HID Parser Library. An authorized local attacker can exploit this flaw to read sensitive information from the memory space, leading to unauthorized information disclosure.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83875

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-83876

CVE-2026-83876 describes a use-after-free vulnerability in the Windows Shell that permits an authorized local attacker to perform an elevation of privilege attack.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83876

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-83866

A use-after-free vulnerability exists in the Windows Win32k subsystem that can be exploited by a local, authorized attacker to achieve privilege escalation.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83866

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-83882

A heap-based buffer overflow vulnerability in the Windows Kernel allows an authenticated, local attacker to execute arbitrary code with elevated privileges, leading to privilege escalation.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83882

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-83901

A use-after-free vulnerability in the Windows Win32 Kernel Subsystem allows a local, authenticated attacker to execute code or manipulate system structures to achieve privilege escalation.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83901

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-83868

The Microsoft Bluetooth Driver contains a race condition vulnerability during concurrent execution with shared resources, allowing a local, authorized attacker to achieve privilege escalation on the affected Windows system.

Affected products:

  • Bluetooth Driver

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83868

Related in this roundup: CVE-2026-83760, CVE-2026-96844.

CVE-2026-83867

CVE-2026-83867 is a local privilege escalation vulnerability in the Windows Push Notifications service caused by a heap-based buffer overflow. An attacker with local authorization can exploit this flaw to execute code with higher privileges.

Affected products:

  • Windows Push Notifications

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83867

Related in this roundup: CVE-2026-70198, CVE-2026-96313.

CVE-2026-83879

CVE-2026-83879 is a local privilege escalation vulnerability in the Windows Overlay Filter caused by a race condition during concurrent execution with improper resource synchronization. An authorized attacker can exploit this flaw to gain elevated privileges on the affected Windows system.

Affected products:

  • Windows Overlay Filter

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83879

Related in this roundup: CVE-2026-69942, CVE-2026-69947, CVE-2026-69952, CVE-2026-69953, CVE-2026-69954, CVE-2026-69958, CVE-2026-69967, CVE-2026-83727, CVE-2026-83749, CVE-2026-96315, CVE-2026-105004.

CVE-2026-83902

A heap-based buffer overflow vulnerability in the Windows Direct Composition component allows a locally authenticated attacker to escalate privileges to a higher integrity level.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83902

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-83885

CVE-2026-83885 is a security vulnerability in Windows Virtualization-Based Security (VBS) Enclave due to inadequate encryption strength, allowing a local authenticated attacker to conduct spoofing attacks.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83885

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-83892

CVE-2026-83892 describes an out-of-bounds read vulnerability in the Windows HID Parser Library. An authorized attacker with local access could exploit this flaw to disclose sensitive information from the system memory.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83892

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-83893

CVE-2026-83893 is an information disclosure vulnerability in the Windows Clipboard User Service. An authorized attacker with local access can exploit this flaw to read sensitive system information, potentially leading to the exposure of data to unauthorized control spheres.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83893

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-83896

CVE-2026-83896 describes a heap-based buffer overflow vulnerability within the Windows Direct Composition component. A local attacker with low-level privileges can exploit this flaw to execute arbitrary code or gain elevated privileges on the affected system.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83896

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-70086

The Microsoft Windows Search Component is vulnerable to a use-after-free vulnerability, identified as CVE-2026-70086, which allows an authorized local attacker to elevate their privileges on the system.

Affected products:

  • Windows Search Component

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70086

Related in this roundup: CVE-2026-105010, CVE-2026-108136, CVE-2026-70136, CVE-2026-70141, CVE-2026-70173, CVE-2026-70150, CVE-2026-70177, CVE-2026-70156, CVE-2026-83575, CVE-2026-83704, CVE-2026-83920, CVE-2026-85869, CVE-2026-88160, CVE-2026-83564, CVE-2026-83570, CVE-2026-83686, CVE-2026-83725, CVE-2026-83829, CVE-2026-83850, CVE-2026-88182, CVE-2026-88191, CVE-2026-96324, CVE-2026-96911, CVE-2026-96910, CVE-2026-96937.

CVE-2026-70089

CVE-2026-70089 is a heap-based buffer overflow vulnerability within the Windows GDI (Graphics Device Interface) component. This flaw allows a remote, unauthorized attacker to achieve arbitrary code execution over a network by sending specially crafted input to the affected system.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70089

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-70128

The HID Parser Library is vulnerable to an out-of-bounds read flaw, which allows a locally authenticated attacker to disclose sensitive information by exploiting improper bounds checking during the parsing of HID reports.

Affected products:

  • HID Parser Library

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70128

Related in this roundup: CVE-2026-83569, CVE-2026-83887, CVE-2026-83898, CVE-2026-83904.

CVE-2026-70151

A use-after-free vulnerability exists in the Windows Direct Composition component, allowing a locally authenticated attacker to exploit the flaw to achieve privilege escalation on the affected system.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70151

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-70163

CVE-2026-70163 describes a denial-of-service vulnerability in Microsoft's implementation of OpenSSH for Windows. The flaw stems from improper resource allocation management, specifically a lack of limits or throttling, which allows an unauthorized remote attacker to consume system resources and disrupt service availability.

Affected products:

  • OpenSSH for Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70163

Related in this roundup: CVE-2026-97816, CVE-2026-83754, CVE-2026-83769, CVE-2026-83871, CVE-2026-88157, CVE-2026-83923, CVE-2026-97811.

CVE-2026-70222

CVE-2026-70222 is a local privilege escalation vulnerability in the Windows Shell caused by a relative path traversal flaw. An authenticated attacker can exploit this vulnerability to gain higher privileges on the target system.

Affected products:

  • Windows Shell

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70222

Related in this roundup: CVE-2026-83782, CVE-2026-83906, CVE-2026-83905.

CVE-2026-83909

CVE-2026-83909 is an information disclosure vulnerability within the Windows Win32 Kernel Subsystem. An authorized attacker can exploit this flaw to gain unauthorized access to sensitive system information by executing code locally on the target system.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83909

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-70241

A use-after-free vulnerability exists in the Windows Kerberos component that can be exploited by an authorized local attacker to achieve privilege escalation.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70241

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-70243

A use-after-free vulnerability exists in the Windows Kernel that allows a local, authorized attacker to elevate their privileges on an affected system.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70243

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-70248

CVE-2026-70248 is a denial of service vulnerability in Windows Hyper-V caused by a null pointer dereference. An attacker with local authorization can exploit this flaw to disrupt system availability.

Affected products:

  • Hyper-V

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70248

Related in this roundup: CVE-2026-108399, CVE-2026-83671, CVE-2026-83839, CVE-2026-85343, CVE-2026-88071, CVE-2026-83636, CVE-2026-83716, CVE-2026-83728, CVE-2026-83766, CVE-2026-83931, CVE-2026-87705, CVE-2026-70023, CVE-2026-102214, CVE-2026-97813.

CVE-2026-70275

A vulnerability exists in the Windows CD-ROM File System Driver due to an untrusted pointer dereference, which can be exploited by an unauthorized remote attacker to achieve remote code execution.

Affected products:

  • Windows CD-ROM File System Driver

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70275

CVE-2026-70286

CVE-2026-70286 is a heap-based buffer overflow vulnerability in the Windows Win32K graphics component. An authorized local attacker can exploit this flaw to execute code with elevated privileges.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70286

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-83569

The HID Parser Library contains a heap-based buffer overflow vulnerability that allows a locally authorized attacker to escalate privileges. The vulnerability resides within the library's memory management logic.

Affected products:

  • HID Parser Library

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83569

Related in this roundup: CVE-2026-70128, CVE-2026-83887, CVE-2026-83898, CVE-2026-83904.

CVE-2026-83741

A use-after-free vulnerability in Internet Explorer allows a locally authenticated attacker to elevate their privileges on the host system.

Affected products:

  • Internet Explorer

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83741

CVE-2026-83769

CVE-2026-83769 describes a use-after-free vulnerability in the Microsoft implementation of OpenSSH for Windows that allows an authenticated, local attacker to escalate their privileges. Detection should focus on monitoring for abnormal process execution patterns associated with the sshd service or related administrative utilities.

Affected products:

  • OpenSSH for Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83769

Related in this roundup: CVE-2026-97816, CVE-2026-83754, CVE-2026-70163, CVE-2026-83871, CVE-2026-88157, CVE-2026-83923, CVE-2026-97811.

CVE-2026-83911

CVE-2026-83911 is a heap-based buffer overflow vulnerability in Windows Storage that allows an already authorized local attacker to elevate their privileges on the affected system.

Affected products:

  • Windows Storage

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83911

Related in this roundup: CVE-2026-69766, CVE-2026-69935, CVE-2026-69931, CVE-2026-69856, CVE-2026-96944, CVE-2026-100216, CVE-2026-102189.

CVE-2026-83871

A heap-based buffer overflow vulnerability in Microsoft OpenSSH for Windows allows an authorized local attacker to achieve privilege escalation on the affected system.

Affected products:

  • OpenSSH for Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83871

Related in this roundup: CVE-2026-97816, CVE-2026-83754, CVE-2026-70163, CVE-2026-83769, CVE-2026-88157, CVE-2026-83923, CVE-2026-97811.

CVE-2026-83886

CVE-2026-83886 is a use-after-free vulnerability within the Windows Update Orchestrator Service that enables a local, authenticated attacker to achieve privilege escalation on the affected system.

Affected products:

  • Windows Update Orchestrator Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83886

Related in this roundup: CVE-2026-81964, CVE-2026-83793, CVE-2026-83507, CVE-2026-83930, CVE-2026-83933, CVE-2026-97812.

CVE-2026-83912

CVE-2026-83912 is a local privilege escalation vulnerability in the Windows Direct Composition component caused by a use-after-free defect. An authorized attacker can exploit this flaw to execute code with elevated privileges on the target Windows system.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83912

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-83906

CVE-2026-83906 describes a spoofing vulnerability in the Windows Shell caused by an incorrect implementation of an authentication algorithm. This flaw allows a remote, unauthorized attacker to perform spoofing attacks over a network, potentially leading to unauthorized interaction or misleading users by masquerading as legitimate system components.

Affected products:

  • Windows Shell

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83906

Related in this roundup: CVE-2026-83782, CVE-2026-70222, CVE-2026-83905.

CVE-2026-85841

CVE-2026-85841 describes a use-after-free vulnerability in the Windows DHCP Server component that enables an authorized attacker to achieve remote code execution over the network.

Affected products:

  • Windows DHCP Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85841

Related in this roundup: CVE-2026-70058, CVE-2026-69830, CVE-2026-83691, CVE-2026-83787, CVE-2026-85865, CVE-2026-70066, CVE-2026-70069, CVE-2026-70201, CVE-2026-83665, CVE-2026-88171, CVE-2026-88117, CVE-2026-88119, CVE-2026-88120, CVE-2026-96320, CVE-2026-96934.

CVE-2026-83914

CVE-2026-83914 is a use-after-free vulnerability in Microsoft XML that enables a remote, unauthorized attacker to achieve remote code execution (RCE) on the target system by sending malicious network packets.

Affected products:

  • Microsoft XML

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83914

CVE-2026-83916

A double-free vulnerability exists in the Windows Error Reporting component that allows an authorized attacker to achieve remote code execution locally on the affected system.

Affected products:

  • Windows Error Reporting

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83916

Related in this roundup: CVE-2026-83519, CVE-2026-83693, CVE-2026-83748, CVE-2026-97815, CVE-2026-69363, CVE-2026-70103, CVE-2026-69354, CVE-2026-69387, CVE-2026-83658, CVE-2026-83669, CVE-2026-83715, CVE-2026-83758, CVE-2026-83826, CVE-2026-85354, CVE-2026-85800, CVE-2026-83643, CVE-2026-83689, CVE-2026-83747, CVE-2026-83750, CVE-2026-83840, CVE-2026-97798.

CVE-2026-83917

A use-after-free vulnerability exists in the Windows Advanced Local Procedure Call (ALPC) mechanism that allows an authenticated local attacker to elevate their privileges on the target system.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83917

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-83921

A heap-based buffer overflow vulnerability in the Microsoft Windows Search component allows a locally authenticated attacker to escalate privileges on the affected system.

Affected products:

  • Windows Search

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83921

CVE-2026-83919

CVE-2026-83919 describes a heap-based buffer overflow vulnerability within the Microsoft Internet Messaging API. This flaw allows an authenticated local attacker to achieve remote code execution on the target system.

Affected products:

  • Internet Messaging API

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83919

Related in this roundup: CVE-2026-83778.

CVE-2026-83920

A heap-based buffer overflow vulnerability exists in the Microsoft Windows Search Component that allows an authenticated local attacker to elevate their privileges to a higher level of access on the system.

Affected products:

  • Windows Search Component

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83920

Related in this roundup: CVE-2026-105010, CVE-2026-108136, CVE-2026-70136, CVE-2026-70141, CVE-2026-70173, CVE-2026-70150, CVE-2026-70177, CVE-2026-70156, CVE-2026-83575, CVE-2026-83704, CVE-2026-70086, CVE-2026-85869, CVE-2026-88160, CVE-2026-83564, CVE-2026-83570, CVE-2026-83686, CVE-2026-83725, CVE-2026-83829, CVE-2026-83850, CVE-2026-88182, CVE-2026-88191, CVE-2026-96324, CVE-2026-96911, CVE-2026-96910, CVE-2026-96937.

CVE-2026-83922

CVE-2026-83922 is a local privilege escalation vulnerability in the Windows Direct Composition component caused by a use-after-free flaw. An authenticated attacker can exploit this vulnerability to gain elevated privileges on the target system.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83922

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-83926

A security feature bypass vulnerability exists in Windows Hello due to improper certificate validation. An attacker with local access can exploit this flaw to bypass authentication security controls.

Affected products:

  • Windows Hello

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83926

Related in this roundup: CVE-2026-70280, CVE-2026-83740, CVE-2026-83849, CVE-2026-83853, CVE-2026-83790, CVE-2026-83907.

CVE-2026-83928

CVE-2026-83928 is an out-of-bounds write vulnerability in the Windows Local Security Authority Subsystem Service (LSASS) that enables an unauthorized attacker to achieve remote code execution over a network.

Affected products:

  • Windows Local Security Authority Subsystem Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83928

Related in this roundup: CVE-2026-70015.

CVE-2026-83932

CVE-2026-83932 is a heap-based buffer overflow vulnerability within the Windows Group Policy component. The vulnerability allows an authenticated local attacker to escalate their privileges on the affected system.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83932

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-83929

CVE-2026-83929 is an out-of-bounds write vulnerability in the Windows Graphics Device Interface (GDI) component. A remote attacker can exploit this flaw to achieve remote code execution by sending specially crafted input over a network to a vulnerable Windows system.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83929

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-84009

A time-of-check time-of-use (TOCTOU) race condition vulnerability exists in the Windows Projected File System, which could allow a locally authenticated attacker to perform file tampering. Successful exploitation requires an attacker to win a race condition during file access operations.

Affected products:

  • Windows Projected File System

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84009

Related in this roundup: CVE-2026-85328, CVE-2026-96857, CVE-2026-70084.

CVE-2026-84007

A vulnerability in the Remote Desktop Gateway Service allows an authenticated attacker to perform an out-of-bounds read, potentially leading to unauthorized information disclosure over the network.

Affected products:

  • Remote Desktop Gateway Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84007

Related in this roundup: CVE-2026-84012, CVE-2026-70187, CVE-2026-100218.

CVE-2026-84012

CVE-2026-84012 is a remote code execution vulnerability in the Windows Remote Desktop Gateway Service caused by a double-free memory management error. An unauthenticated attacker can exploit this flaw by sending specifically crafted network requests to the target service, potentially leading to full system compromise.

Affected products:

  • Remote Desktop Gateway Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84012

Related in this roundup: CVE-2026-84007, CVE-2026-70187, CVE-2026-100218.

CVE-2026-84011

CVE-2026-84011 describes a security feature bypass vulnerability in the Windows SMB Client caused by incorrect authorization. The vulnerability can be exploited locally by an authorized attacker to circumvent security controls.

Affected products:

  • Windows SMB Client

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84011

Related in this roundup: CVE-2026-83789.

CVE-2026-84013

CVE-2026-84013 is a local privilege escalation vulnerability in the Windows Telephony Server component caused by a use-after-free defect. An authorized attacker can exploit this flaw to execute code with elevated privileges on the target system.

Affected products:

  • Windows Telephony Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84013

Related in this roundup: CVE-2026-85810.

CVE-2026-84014

CVE-2026-84014 is a heap-based buffer overflow vulnerability in the Windows Device Association Service that enables an authorized local attacker to elevate their privileges to a higher integrity level.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84014

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-84016

CVE-2026-84016 is an out-of-bounds write vulnerability in the Windows EAPHost service that enables a locally authenticated attacker to escalate their privileges to those of the service.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84016

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-84017

A null pointer dereference vulnerability exists within the Windows Routing and Remote Access Service (RRAS), which can be exploited by an unauthorized remote attacker to cause a denial-of-service condition.

Affected products:

  • Windows Routing and Remote Access Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84017

Related in this roundup: CVE-2026-85792, CVE-2026-85339, CVE-2026-85794, CVE-2026-103558.

CVE-2026-84018

CVE-2026-84018 is a use-after-free vulnerability within the Windows Print Spooler components that allows a locally authenticated attacker to escalate their privileges. Detection efforts should focus on monitoring for unauthorized process execution or unexpected service behavior involving the Print Spooler process.

Affected products:

  • Windows Print Spooler

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84018

Related in this roundup: CVE-2026-83733, CVE-2026-85320, CVE-2026-85327, CVE-2026-85376, CVE-2026-85847, CVE-2026-85933.

CVE-2026-84019

A use-after-free vulnerability exists in the Windows Advanced Rasterization Platform that enables a locally authenticated attacker to perform privilege escalation on the affected Windows system.

Affected products:

  • Windows Advanced Rasterization Platform

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84019

CVE-2026-84020

A use-after-free vulnerability in the Windows Routing and Remote Access Service (RRAS) allows an authenticated local attacker to execute arbitrary code with elevated privileges, resulting in privilege escalation on the affected system.

Affected products:

  • Routing and Remote Access Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84020

Related in this roundup: CVE-2026-85809, CVE-2026-70057, CVE-2026-85322, CVE-2026-85808, CVE-2026-96245, CVE-2026-96316, CVE-2026-70158.

CVE-2026-85318

A heap-based buffer overflow vulnerability in the Windows Servicing Stack Updates enables an authenticated, local attacker to execute code with elevated privileges.

Affected products:

  • Servicing Stack Updates

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85318

Related in this roundup: CVE-2026-83719, CVE-2026-85365, CVE-2026-85835, CVE-2026-83863, CVE-2026-96939.

CVE-2026-85320

CVE-2026-85320 is an information disclosure vulnerability in the Windows Print Spooler components caused by the use of an uninitialized resource. An authenticated attacker can exploit this locally to access sensitive information.

Affected products:

  • Windows Print Spooler

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85320

Related in this roundup: CVE-2026-83733, CVE-2026-84018, CVE-2026-85327, CVE-2026-85376, CVE-2026-85847, CVE-2026-85933.

CVE-2026-85319

CVE-2026-85319 describes a denial of service vulnerability in Microsoft Active Directory Federation Services (AD FS) caused by improper allocation of resources without limits or throttling. An unauthorized remote attacker can exploit this flaw to disrupt service availability by exhausting system resources.

Affected products:

  • Active Directory Federation Services

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85319

Related in this roundup: CVE-2026-83646, CVE-2026-85321, CVE-2026-85324, CVE-2026-83674, CVE-2026-69982, CVE-2026-70005, CVE-2026-83511, CVE-2026-83645, CVE-2026-96252, CVE-2026-97788, CVE-2026-103576, CVE-2026-108131.

CVE-2026-85321

CVE-2026-85321 describes a denial of service vulnerability in Microsoft Active Directory Federation Services (AD FS) caused by improper resource allocation, allowing an unauthorized network attacker to exhaust resources without throttling.

Affected products:

  • Active Directory Federation Services

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85321

Related in this roundup: CVE-2026-83646, CVE-2026-85319, CVE-2026-85324, CVE-2026-83674, CVE-2026-69982, CVE-2026-70005, CVE-2026-83511, CVE-2026-83645, CVE-2026-96252, CVE-2026-97788, CVE-2026-103576, CVE-2026-108131.

CVE-2026-85322

The Windows Routing and Remote Access Service (RRAS) contains an information disclosure vulnerability stemming from the use of an uninitialized resource. An unauthenticated attacker can exploit this flaw over the network to gain unauthorized access to sensitive information.

Affected products:

  • Routing and Remote Access Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85322

Related in this roundup: CVE-2026-85809, CVE-2026-70057, CVE-2026-84020, CVE-2026-85808, CVE-2026-96245, CVE-2026-96316, CVE-2026-70158.

CVE-2026-85323

A spoofing vulnerability exists in the Network Device Enrollment Service (NDES) due to weak authentication mechanisms. An authorized attacker on the network can exploit this vulnerability to perform spoofing attacks, potentially compromising the integrity of certificate enrollment processes.

Affected products:

  • Network Device Enrollment Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85323

Related in this roundup: CVE-2026-96866, CVE-2026-96861, CVE-2026-69802.

CVE-2026-85324

A denial of service vulnerability exists in Active Directory Federation Services (AD FS) due to improper handling of memory allocation for excessive size values, allowing an unauthorized network-based attacker to crash the service.

Affected products:

  • Active Directory Federation Services

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85324

Related in this roundup: CVE-2026-83646, CVE-2026-85319, CVE-2026-85321, CVE-2026-83674, CVE-2026-69982, CVE-2026-70005, CVE-2026-83511, CVE-2026-83645, CVE-2026-96252, CVE-2026-97788, CVE-2026-103576, CVE-2026-108131.

CVE-2026-85327

CVE-2026-85327 describes a heap-based buffer overflow vulnerability in the Windows Print Spooler component that enables an authorized local attacker to achieve privilege escalation on the affected system.

Affected products:

  • Windows Print Spooler

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85327

Related in this roundup: CVE-2026-83733, CVE-2026-84018, CVE-2026-85320, CVE-2026-85376, CVE-2026-85847, CVE-2026-85933.

CVE-2026-85331

CVE-2026-85331 is an out-of-bounds read vulnerability in the Windows Device Association Service that allows an authorized attacker to perform information disclosure over a network.

Affected products:

  • Windows Device Association Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85331

Related in this roundup: CVE-2026-85336, CVE-2026-85342, CVE-2026-85352, CVE-2026-83710, CVE-2026-85904, CVE-2026-96854.

CVE-2026-85328

CVE-2026-85328 describes an elevation of privilege vulnerability in the Windows Projected File System resulting from weak authentication mechanisms. An attacker with existing local access can exploit this flaw to execute code or perform operations with higher privileges than currently assigned.

Affected products:

  • Windows Projected File System

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85328

Related in this roundup: CVE-2026-84009, CVE-2026-96857, CVE-2026-70084.

CVE-2026-85336

CVE-2026-85336 is an out-of-bounds read vulnerability in the Windows Device Association Service that allows an authorized attacker to disclose sensitive information locally.

Affected products:

  • Windows Device Association Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85336

Related in this roundup: CVE-2026-85331, CVE-2026-85342, CVE-2026-85352, CVE-2026-83710, CVE-2026-85904, CVE-2026-96854.

CVE-2026-85332

A use-after-free vulnerability exists in the Windows Device Association Service that can be exploited by an authorized local attacker to gain elevated privileges on the system.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85332

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-85333

CVE-2026-85333 is a privilege escalation vulnerability in Windows Performance Monitor caused by a race condition during concurrent execution using shared resources, which allows an authorized local attacker to gain elevated privileges.

Affected products:

  • Windows Performance Monitor

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85333

Related in this roundup: CVE-2026-85359.

CVE-2026-85334

CVE-2026-85334 is an out-of-bounds read vulnerability in the Windows Message Queuing Queue Manager that allows unauthenticated, remote attackers to perform unauthorized information disclosure over the network.

Affected products:

  • Windows Message Queuing

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85334

Related in this roundup: CVE-2026-108460, CVE-2026-85860, CVE-2026-85859, CVE-2026-96921.

CVE-2026-85342

A use-after-free vulnerability in the Windows Device Association Service can be exploited by an authorized local attacker to gain elevated privileges on the system.

Affected products:

  • Windows Device Association Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85342

Related in this roundup: CVE-2026-85331, CVE-2026-85336, CVE-2026-85352, CVE-2026-83710, CVE-2026-85904, CVE-2026-96854.

CVE-2026-85353

CVE-2026-85353 is an out-of-bounds read vulnerability in the Windows Print Spooler Components that permits an unauthorized, unauthenticated attacker to remotely access sensitive information. Detection efforts should focus on monitoring anomalous network traffic directed toward the Print Spooler service (spoolsv.exe) and auditing print service logs for unexpected access patterns.

Affected products:

  • Windows Print Spooler Components

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85353

CVE-2026-85338

An out-of-bounds read vulnerability in the Microsoft Graphics Component allows an authenticated local attacker to elevate their privileges on a Windows system. The flaw resides within the graphics subsystem and requires the attacker to have legitimate access to the system to exploit.

Affected products:

  • Graphics Component

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85338

Related in this roundup: CVE-2026-70123, CVE-2026-102209, CVE-2026-100215.

CVE-2026-85337

CVE-2026-85337 is an out-of-bounds read vulnerability in the Microsoft Remote Desktop Client. An unauthenticated attacker can exploit this flaw over a network to perform unauthorized information disclosure, potentially leading to the leakage of sensitive data residing in the application's memory space.

Affected products:

  • Remote Desktop Client

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85337

Related in this roundup: CVE-2026-108458, CVE-2026-69976, CVE-2026-83688, CVE-2026-97789, CVE-2026-69984, CVE-2026-69986, CVE-2026-69988, CVE-2026-69987, CVE-2026-69995, CVE-2026-69997, CVE-2026-69996, CVE-2026-69991, CVE-2026-69994, CVE-2026-69998, CVE-2026-70012, CVE-2026-70004, CVE-2026-70006, CVE-2026-103575.

CVE-2026-85343

CVE-2026-85343 is an elevation of privilege vulnerability in Windows Hyper-V caused by improper link resolution before file access. An authorized local attacker can exploit this vulnerability to escalate their privileges on the affected host.

Affected products:

  • Hyper-V

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85343

Related in this roundup: CVE-2026-108399, CVE-2026-83671, CVE-2026-83839, CVE-2026-70248, CVE-2026-88071, CVE-2026-83636, CVE-2026-83716, CVE-2026-83728, CVE-2026-83766, CVE-2026-83931, CVE-2026-87705, CVE-2026-70023, CVE-2026-102214, CVE-2026-97813.

CVE-2026-85339

A remote code execution vulnerability exists in the Windows Routing and Remote Access Service (RRAS) that allows an unauthenticated attacker to gain unauthorized access to a victim's machine by sending specially crafted packets to the RRAS service.

Affected products:

  • Windows Routing and Remote Access Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85339

Related in this roundup: CVE-2026-85792, CVE-2026-84017, CVE-2026-85794, CVE-2026-103558.

CVE-2026-85341

A heap-based buffer overflow vulnerability exists in the Windows USB Video Driver, which can be exploited by an authenticated attacker to perform local privilege escalation on affected Windows systems.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85341

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-85352

CVE-2026-85352 is a use-after-free vulnerability within the Windows Device Association Service that can be exploited by an authenticated attacker to perform local privilege escalation.

Affected products:

  • Windows Device Association Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85352

Related in this roundup: CVE-2026-85331, CVE-2026-85336, CVE-2026-85342, CVE-2026-83710, CVE-2026-85904, CVE-2026-96854.

CVE-2026-85354

A use-after-free vulnerability in the Windows Error Reporting component allows a local, authorized attacker to escalate privileges on the affected system.

Affected products:

  • Windows Error Reporting

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85354

Related in this roundup: CVE-2026-83519, CVE-2026-83693, CVE-2026-83748, CVE-2026-97815, CVE-2026-69363, CVE-2026-70103, CVE-2026-69354, CVE-2026-69387, CVE-2026-83658, CVE-2026-83669, CVE-2026-83715, CVE-2026-83758, CVE-2026-83826, CVE-2026-83916, CVE-2026-85800, CVE-2026-83643, CVE-2026-83689, CVE-2026-83747, CVE-2026-83750, CVE-2026-83840, CVE-2026-97798.

CVE-2026-85355

A vulnerability exists in the Windows Common Log File System (CLFS) driver due to the inclusion of functionality from an untrusted control sphere. An authorized local attacker can exploit this to achieve privilege escalation.

Affected products:

  • Windows Common Log File System Driver

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85355

Related in this roundup: CVE-2026-70233, CVE-2026-85868, CVE-2026-83835.

CVE-2026-85356

CVE-2026-85356 is an out-of-bounds read vulnerability in the Windows Volume Manager Extension Driver that allows a locally authenticated attacker to elevate their privileges to a higher integrity level.

Affected products:

  • Windows Volume Manager Extension Driver

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85356

Related in this roundup: CVE-2026-85928, CVE-2026-83694.

CVE-2026-85357

CVE-2026-85357 is a local privilege escalation vulnerability in the Windows Phone Service caused by a race condition during concurrent execution with shared resources. An authorized attacker can exploit this synchronization flaw to gain elevated privileges on the affected system.

Affected products:

  • Windows Phone Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85357

CVE-2026-85358

CVE-2026-85358 is a heap-based buffer overflow vulnerability in the Windows Installer component. A locally authenticated attacker can exploit this flaw to achieve privilege escalation on the affected host.

Affected products:

  • Windows Installer

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85358

Related in this roundup: CVE-2026-108468, CVE-2026-70272, CVE-2026-83708, CVE-2026-83775, CVE-2026-83779, CVE-2026-85361, CVE-2026-85364, CVE-2026-85366, CVE-2026-85374, CVE-2026-85796, CVE-2026-85830, CVE-2026-88080, CVE-2026-87708, CVE-2026-87711, CVE-2026-88124, CVE-2026-96302, CVE-2026-96305, CVE-2026-96307, CVE-2026-96308, CVE-2026-69471, CVE-2026-69635, CVE-2026-83672, CVE-2026-83676, CVE-2026-83680, CVE-2026-83702, CVE-2026-83717, CVE-2026-83718, CVE-2026-83752, CVE-2026-83767, CVE-2026-83899, CVE-2026-85941, CVE-2026-88076, CVE-2026-87693, CVE-2026-87694, CVE-2026-87704, CVE-2026-87700, CVE-2026-87715.

CVE-2026-85359

CVE-2026-85359 is a privilege escalation vulnerability in Windows Performance Monitor, caused by improper control of code generation (code injection). An authorized local attacker can exploit this flaw to execute code with elevated privileges.

Affected products:

  • Windows Performance Monitor

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85359

Related in this roundup: CVE-2026-85333.

CVE-2026-85361

CVE-2026-85361 is a privilege escalation vulnerability in the Windows Installer component, triggered by a use-after-free flaw. An authenticated local attacker can leverage this vulnerability to execute code with elevated privileges on an affected Windows system.

Affected products:

  • Windows Installer

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85361

Related in this roundup: CVE-2026-108468, CVE-2026-70272, CVE-2026-83708, CVE-2026-83775, CVE-2026-83779, CVE-2026-85358, CVE-2026-85364, CVE-2026-85366, CVE-2026-85374, CVE-2026-85796, CVE-2026-85830, CVE-2026-88080, CVE-2026-87708, CVE-2026-87711, CVE-2026-88124, CVE-2026-96302, CVE-2026-96305, CVE-2026-96307, CVE-2026-96308, CVE-2026-69471, CVE-2026-69635, CVE-2026-83672, CVE-2026-83676, CVE-2026-83680, CVE-2026-83702, CVE-2026-83717, CVE-2026-83718, CVE-2026-83752, CVE-2026-83767, CVE-2026-83899, CVE-2026-85941, CVE-2026-88076, CVE-2026-87693, CVE-2026-87694, CVE-2026-87704, CVE-2026-87700, CVE-2026-87715.

CVE-2026-85362

CVE-2026-85362 is a local privilege escalation vulnerability in Windows Management Instrumentation caused by the release of an invalid pointer or reference. An authorized attacker could exploit this flaw to gain elevated privileges on the target Windows system.

Affected products:

  • Windows Management Instrumentation

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85362

Related in this roundup: CVE-2026-85852, CVE-2026-88091, CVE-2026-96851, CVE-2026-96856, CVE-2026-83724, CVE-2026-83783.

CVE-2026-85364

CVE-2026-85364 is a use-after-free vulnerability within the Windows Installer service that enables an authenticated local attacker to escalate their privileges. Detection should focus on monitoring for unusual process creation or service behavior originating from the Windows Installer process during update or installation tasks.

Affected products:

  • Windows Installer

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85364

Related in this roundup: CVE-2026-108468, CVE-2026-70272, CVE-2026-83708, CVE-2026-83775, CVE-2026-83779, CVE-2026-85358, CVE-2026-85361, CVE-2026-85366, CVE-2026-85374, CVE-2026-85796, CVE-2026-85830, CVE-2026-88080, CVE-2026-87708, CVE-2026-87711, CVE-2026-88124, CVE-2026-96302, CVE-2026-96305, CVE-2026-96307, CVE-2026-96308, CVE-2026-69471, CVE-2026-69635, CVE-2026-83672, CVE-2026-83676, CVE-2026-83680, CVE-2026-83702, CVE-2026-83717, CVE-2026-83718, CVE-2026-83752, CVE-2026-83767, CVE-2026-83899, CVE-2026-85941, CVE-2026-88076, CVE-2026-87693, CVE-2026-87694, CVE-2026-87704, CVE-2026-87700, CVE-2026-87715.

CVE-2026-85365

CVE-2026-85365 is a heap-based buffer overflow vulnerability within the Windows Servicing Stack Updates that allows an authenticated local attacker to execute arbitrary code with elevated system privileges.

Affected products:

  • Servicing Stack Updates

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85365

Related in this roundup: CVE-2026-83719, CVE-2026-85318, CVE-2026-85835, CVE-2026-83863, CVE-2026-96939.

CVE-2026-85366

CVE-2026-85366 is a heap-based buffer overflow vulnerability in the Windows Installer service that allows an authenticated local attacker to escalate their privileges. This vulnerability exists within the Windows Installer component, and exploitation requires the attacker to have existing low-privileged access to the system.

Affected products:

  • Windows Installer

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85366

Related in this roundup: CVE-2026-108468, CVE-2026-70272, CVE-2026-83708, CVE-2026-83775, CVE-2026-83779, CVE-2026-85358, CVE-2026-85361, CVE-2026-85364, CVE-2026-85374, CVE-2026-85796, CVE-2026-85830, CVE-2026-88080, CVE-2026-87708, CVE-2026-87711, CVE-2026-88124, CVE-2026-96302, CVE-2026-96305, CVE-2026-96307, CVE-2026-96308, CVE-2026-69471, CVE-2026-69635, CVE-2026-83672, CVE-2026-83676, CVE-2026-83680, CVE-2026-83702, CVE-2026-83717, CVE-2026-83718, CVE-2026-83752, CVE-2026-83767, CVE-2026-83899, CVE-2026-85941, CVE-2026-88076, CVE-2026-87693, CVE-2026-87694, CVE-2026-87704, CVE-2026-87700, CVE-2026-87715.

CVE-2026-85368

CVE-2026-85368 describes a heap-based buffer overflow vulnerability in the Windows TCP/IP stack. An authenticated attacker can exploit this flaw to execute code or perform actions with elevated privileges on the local system.

Affected products:

  • Windows TCP/IP

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85368

Related in this roundup: CVE-2026-85834, CVE-2026-96852.

CVE-2026-85367

A use-after-free vulnerability exists in the Windows Cash Drawer Protocol Provider component, which can be exploited by a local, authorized attacker to achieve privilege escalation.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85367

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-85370

CVE-2026-85370 is a use-after-free vulnerability in the WebDAV component of the Windows operating system that allows an already authorized local attacker to elevate their privileges on the target system.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85370

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-85369

CVE-2026-85369 is an elevation of privilege vulnerability in Windows Hyper-V resulting from an out-of-bounds read. An authorized local attacker can exploit this flaw to gain elevated privileges on the affected host system.

Affected products:

  • Windows Hyper-V

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85369

Related in this roundup: CVE-2026-105733, CVE-2026-96223.

CVE-2026-85372

CVE-2026-85372 is a use-after-free vulnerability within the Windows Kernel that enables a locally authenticated attacker to escalate their privileges on an affected system.

Affected products:

  • Windows Kernel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85372

Related in this roundup: CVE-2026-108462, CVE-2026-108466, CVE-2026-70063, CVE-2026-70106, CVE-2026-70121, CVE-2026-70114, CVE-2026-83690, CVE-2026-83768, CVE-2026-83833, CVE-2026-85836, CVE-2026-85837, CVE-2026-70170, CVE-2026-85939, CVE-2026-85945, CVE-2026-96216, CVE-2026-96317, CVE-2026-96868, CVE-2026-70199, CVE-2026-70232, CVE-2026-83736, CVE-2026-83735, CVE-2026-83918, CVE-2026-83924, CVE-2026-83925, CVE-2026-88134, CVE-2026-88139, CVE-2026-88141, CVE-2026-70160, CVE-2026-70111, CVE-2026-96913, CVE-2026-96929, CVE-2026-102207, CVE-2026-103578, CVE-2026-97803.

CVE-2026-85371

CVE-2026-85371 is a remote code execution vulnerability in the Microsoft Network Policy Server (NPS) caused by a use-after-free defect. An unauthenticated attacker can exploit this flaw to execute arbitrary code over the network, making it a critical risk for internal infrastructure security.

Affected products:

  • Network Policy Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85371

Related in this roundup: CVE-2026-100222, CVE-2026-85806, CVE-2026-83655, CVE-2026-85799, CVE-2026-85811, CVE-2026-96246, CVE-2026-70207.

CVE-2026-85373

A heap-based buffer overflow vulnerability exists in the Windows Universal Plug and Play (UPnP) Device Host service, which can be exploited by an authorized local attacker to achieve privilege escalation.

Affected products:

  • Windows Universal Plug and Play (UPnP) Device Host

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85373

Related in this roundup: CVE-2026-85375, CVE-2026-85918.

CVE-2026-85374

CVE-2026-85374 describes an out-of-bounds read vulnerability in the Windows Installer component. A locally authenticated attacker can exploit this flaw to perform unauthorized information disclosure on the affected system.

Affected products:

  • Windows Installer

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85374

Related in this roundup: CVE-2026-108468, CVE-2026-70272, CVE-2026-83708, CVE-2026-83775, CVE-2026-83779, CVE-2026-85358, CVE-2026-85361, CVE-2026-85364, CVE-2026-85366, CVE-2026-85796, CVE-2026-85830, CVE-2026-88080, CVE-2026-87708, CVE-2026-87711, CVE-2026-88124, CVE-2026-96302, CVE-2026-96305, CVE-2026-96307, CVE-2026-96308, CVE-2026-69471, CVE-2026-69635, CVE-2026-83672, CVE-2026-83676, CVE-2026-83680, CVE-2026-83702, CVE-2026-83717, CVE-2026-83718, CVE-2026-83752, CVE-2026-83767, CVE-2026-83899, CVE-2026-85941, CVE-2026-88076, CVE-2026-87693, CVE-2026-87694, CVE-2026-87704, CVE-2026-87700, CVE-2026-87715.

CVE-2026-85375

A use-after-free vulnerability in the Windows Universal Plug and Play (UPnP) Device Host component allows an authenticated local attacker to escalate privileges. Successful exploitation requires the attacker to have already established access to the system, enabling them to execute arbitrary code with higher permissions.

Affected products:

  • Windows Universal Plug and Play (UPnP) Device Host

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85375

Related in this roundup: CVE-2026-85373, CVE-2026-85918.

CVE-2026-85376

CVE-2026-85376 is a local privilege escalation vulnerability in the Windows Print Spooler service caused by weak authentication mechanisms. An attacker with existing local access can exploit this flaw to elevate their privileges on the host system.

Affected products:

  • Windows Print Spooler

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85376

Related in this roundup: CVE-2026-83733, CVE-2026-84018, CVE-2026-85320, CVE-2026-85327, CVE-2026-85847, CVE-2026-85933.

CVE-2026-85790

CVE-2026-85790 describes a use-after-free vulnerability in Microsoft QUIC that permits an unauthenticated attacker to perform unauthorized information disclosure over a network connection.

Affected products:

  • Microsoft QUIC

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85790

Related in this roundup: CVE-2026-100219, CVE-2026-105016, CVE-2026-103577.

CVE-2026-85791

A heap-based buffer overflow vulnerability in the Windows Encrypting File System (EFS) allows an authorized local attacker to achieve privilege escalation by exploiting improper memory handling.

Affected products:

  • Windows Encrypting File System

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85791

Related in this roundup: CVE-2026-83759, CVE-2026-83784, CVE-2026-88162, CVE-2026-83565.

CVE-2026-85793

CVE-2026-85793 is an information disclosure vulnerability in the Windows Sysmain service. An authorized local attacker can exploit this flaw to gain unauthorized access to sensitive system information, potentially facilitating further exploitation or reconnaissance on the target system.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85793

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-85794

CVE-2026-85794 is an out-of-bounds read vulnerability in the Windows Routing and Remote Access Service (RRAS) that allows an authorized local attacker to perform unauthorized information disclosure.

Affected products:

  • Windows Routing and Remote Access Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85794

Related in this roundup: CVE-2026-85792, CVE-2026-84017, CVE-2026-85339, CVE-2026-103558.

CVE-2026-85795

A use-after-free vulnerability in the Windows Text Services Framework allows an authorized local attacker to achieve privilege escalation by exploiting memory corruption within the component.

Affected products:

  • Windows Text Services Framework

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85795

CVE-2026-85796

CVE-2026-85796 is a privilege escalation vulnerability in the Windows Installer component caused by a numeric truncation error, which permits a locally authenticated attacker to gain elevated privileges on the system.

Affected products:

  • Windows Installer

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85796

Related in this roundup: CVE-2026-108468, CVE-2026-70272, CVE-2026-83708, CVE-2026-83775, CVE-2026-83779, CVE-2026-85358, CVE-2026-85361, CVE-2026-85364, CVE-2026-85366, CVE-2026-85374, CVE-2026-85830, CVE-2026-88080, CVE-2026-87708, CVE-2026-87711, CVE-2026-88124, CVE-2026-96302, CVE-2026-96305, CVE-2026-96307, CVE-2026-96308, CVE-2026-69471, CVE-2026-69635, CVE-2026-83672, CVE-2026-83676, CVE-2026-83680, CVE-2026-83702, CVE-2026-83717, CVE-2026-83718, CVE-2026-83752, CVE-2026-83767, CVE-2026-83899, CVE-2026-85941, CVE-2026-88076, CVE-2026-87693, CVE-2026-87694, CVE-2026-87704, CVE-2026-87700, CVE-2026-87715.

CVE-2026-85797

CVE-2026-85797 is an out-of-bounds read vulnerability in the Windows Graphics Device Interface (GDI) component. Successful exploitation allows an unauthorized remote attacker to disclose sensitive information from the system.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85797

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-85798

CVE-2026-85798 is a heap-based buffer overflow vulnerability in the Windows Distributed File System (DFS) that allows an authorized attacker to achieve remote code execution over a network. Detection engineers should monitor for anomalous DFS traffic or service crashes indicative of memory corruption attempts.

Affected products:

  • Windows Distributed File System

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85798

Related in this roundup: CVE-2026-105723, CVE-2026-85931, CVE-2026-96938.

CVE-2026-85799

CVE-2026-85799 is a use-after-free vulnerability in Microsoft's Network Policy Server (NPS) that enables an unauthenticated remote attacker to achieve remote code execution (RCE) by sending malicious network packets to the vulnerable service.

Affected products:

  • Network Policy Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85799

Related in this roundup: CVE-2026-100222, CVE-2026-85806, CVE-2026-83655, CVE-2026-85371, CVE-2026-85811, CVE-2026-96246, CVE-2026-70207.

CVE-2026-85800

A heap-based buffer overflow vulnerability exists in the Windows Error Reporting component, which allows a local, authorized attacker to escalate their privileges to a higher level of access.

Affected products:

  • Windows Error Reporting

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85800

Related in this roundup: CVE-2026-83519, CVE-2026-83693, CVE-2026-83748, CVE-2026-97815, CVE-2026-69363, CVE-2026-70103, CVE-2026-69354, CVE-2026-69387, CVE-2026-83658, CVE-2026-83669, CVE-2026-83715, CVE-2026-83758, CVE-2026-83826, CVE-2026-83916, CVE-2026-85354, CVE-2026-83643, CVE-2026-83689, CVE-2026-83747, CVE-2026-83750, CVE-2026-83840, CVE-2026-97798.

CVE-2026-85802

A use-after-free vulnerability exists in the Windows Win32 Kernel Subsystem that allows a local, authorized attacker to achieve privilege escalation by exploiting the kernel's memory management.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85802

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-85803

CVE-2026-85803 describes a use-after-free vulnerability within the Windows Camera Frame Server Monitor, which enables a locally authorized attacker to escalate their privileges. Detection efforts should focus on monitoring for unauthorized process interactions or suspicious activities initiated by the Camera Frame Server service.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85803

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-85804

A use-after-free vulnerability exists in the Windows Win32 Kernel Subsystem that allows a locally authenticated attacker to elevate their privileges to a higher integrity level.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85804

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-85807

The Windows USB Video Driver contains an integer overflow or wraparound vulnerability that can be exploited by an authorized local attacker to gain elevated privileges on the system.

Affected products:

  • Windows USB Video Driver

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85807

CVE-2026-85808

CVE-2026-85808 is a denial-of-service vulnerability in the Windows Routing and Remote Access Service (RRAS) caused by an out-of-bounds read. An unauthorized remote attacker can trigger this vulnerability to crash the service, impacting network availability.

Affected products:

  • Routing and Remote Access Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85808

Related in this roundup: CVE-2026-85809, CVE-2026-70057, CVE-2026-84020, CVE-2026-85322, CVE-2026-96245, CVE-2026-96316, CVE-2026-70158.

CVE-2026-85810

A use-after-free vulnerability in the Windows Telephony Server component allows a locally authenticated attacker to escalate their privileges to a higher level of authority on the system.

Affected products:

  • Windows Telephony Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85810

Related in this roundup: CVE-2026-84013.

CVE-2026-85811

CVE-2026-85811 is a use-after-free vulnerability in Microsoft's Network Policy Server (NPS) that enables an unauthenticated attacker on an adjacent network to achieve remote code execution. Detection engineers should monitor NPS service traffic and process behavior for anomalous activity originating from local network segments.

Affected products:

  • Network Policy Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85811

Related in this roundup: CVE-2026-100222, CVE-2026-85806, CVE-2026-83655, CVE-2026-85371, CVE-2026-85799, CVE-2026-96246, CVE-2026-70207.

CVE-2026-85812

The Windows Bind Filter Driver contains an information disclosure vulnerability that allows an authorized attacker with local access to read sensitive files or directories that should otherwise be restricted. This vulnerability stems from improper access control within the filter driver.

Affected products:

  • Windows Bind Filter Driver

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85812

Related in this roundup: CVE-2026-83692, CVE-2026-88168.

CVE-2026-85815

CVE-2026-85815 is an out-of-bounds read vulnerability in the Windows Device Association Service that allows an authorized local attacker to perform information disclosure.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85815

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-85816

CVE-2026-85816 describes an out-of-bounds read vulnerability in the Windows Wi-Fi Driver that allows an authorized attacker on an adjacent network to read sensitive memory information. Detection engineers should monitor for abnormal activity or errors related to Wi-Fi driver communication and stack memory operations.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85816

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-85820

A use-after-free vulnerability in the Windows Universal Disk Format File System Driver (UDFS) allows a locally authenticated attacker to achieve privilege escalation by exploiting the driver's memory management errors.

Affected products:

  • Windows Universal Disk Format File System Driver

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85820

Related in this roundup: CVE-2026-83713, CVE-2026-85821, CVE-2026-85825, CVE-2026-83513, CVE-2026-83857, CVE-2026-85909, CVE-2026-96930, CVE-2026-96946, CVE-2026-96947, CVE-2026-96949, CVE-2026-96950, CVE-2026-96953, CVE-2026-102205, CVE-2026-102218, CVE-2026-102215.

CVE-2026-85821

The Windows Universal Disk Format File System Driver (UDFS) contains an out-of-bounds read vulnerability that allows an authenticated, local attacker to perform unauthorized information disclosure. This vulnerability originates from improper bounds checking within the file system driver, which could be leveraged to gain access to sensitive kernel-level memory information.

Affected products:

  • Windows Universal Disk Format File System Driver

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85821

Related in this roundup: CVE-2026-83713, CVE-2026-85820, CVE-2026-85825, CVE-2026-83513, CVE-2026-83857, CVE-2026-85909, CVE-2026-96930, CVE-2026-96946, CVE-2026-96947, CVE-2026-96949, CVE-2026-96950, CVE-2026-96953, CVE-2026-102205, CVE-2026-102218, CVE-2026-102215.

CVE-2026-85822

CVE-2026-85822 is a heap-based buffer overflow vulnerability in the Windows exFAT File System that enables a local, authorized attacker to achieve privilege escalation.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85822

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-85825

The Windows Universal Disk Format File System Driver (UDFS) is vulnerable to a use-after-free condition that can be exploited by a locally authenticated attacker to achieve privilege escalation.

Affected products:

  • Windows Universal Disk Format File System Driver

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85825

Related in this roundup: CVE-2026-83713, CVE-2026-85820, CVE-2026-85821, CVE-2026-83513, CVE-2026-83857, CVE-2026-85909, CVE-2026-96930, CVE-2026-96946, CVE-2026-96947, CVE-2026-96949, CVE-2026-96950, CVE-2026-96953, CVE-2026-102205, CVE-2026-102218, CVE-2026-102215.

CVE-2026-85823

CVE-2026-85823 is a use-after-free vulnerability in the Windows Composite Image File System that can be leveraged by a local, authorized attacker to achieve privilege escalation.

Affected products:

  • Windows Composite Image File System

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85823

Related in this roundup: CVE-2026-85824.

CVE-2026-85824

A use-after-free vulnerability in the Windows Composite Image File System allows a locally authenticated attacker to elevate their privileges to a higher integrity level. Detection engineers should monitor for unauthorized exploitation of filesystem drivers or unusual process behavior originating from low-integrity contexts interacting with system drivers.

Affected products:

  • Windows Composite Image File System

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85824

Related in this roundup: CVE-2026-85823.

CVE-2026-85826

The Windows Fast FAT Driver contains an out-of-bounds write vulnerability that allows a locally authenticated attacker to escalate their privileges to a higher level of access.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85826

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-85827

CVE-2026-85827 is a heap-based buffer overflow vulnerability in the WebDAV component of Windows, which allows an authorized local attacker to achieve privilege escalation.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85827

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-85828

CVE-2026-85828 is a heap-based buffer overflow vulnerability in the WebDAV component that allows a locally authorized attacker to escalate their privileges.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85828

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-85829

A double free vulnerability in the Windows Wired AutoConfig Service allows an authenticated local attacker to escalate their privileges. Successful exploitation requires the attacker to execute code locally on the target system.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85829

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-85830

An out-of-bounds read vulnerability exists in the Windows Installer service that allows an authorized local attacker to perform unauthorized information disclosure by exploiting memory access errors during installation processes.

Affected products:

  • Windows Installer

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85830

Related in this roundup: CVE-2026-108468, CVE-2026-70272, CVE-2026-83708, CVE-2026-83775, CVE-2026-83779, CVE-2026-85358, CVE-2026-85361, CVE-2026-85364, CVE-2026-85366, CVE-2026-85374, CVE-2026-85796, CVE-2026-88080, CVE-2026-87708, CVE-2026-87711, CVE-2026-88124, CVE-2026-96302, CVE-2026-96305, CVE-2026-96307, CVE-2026-96308, CVE-2026-69471, CVE-2026-69635, CVE-2026-83672, CVE-2026-83676, CVE-2026-83680, CVE-2026-83702, CVE-2026-83717, CVE-2026-83718, CVE-2026-83752, CVE-2026-83767, CVE-2026-83899, CVE-2026-85941, CVE-2026-88076, CVE-2026-87693, CVE-2026-87694, CVE-2026-87704, CVE-2026-87700, CVE-2026-87715.

CVE-2026-85831

CVE-2026-85831 is a heap-based buffer overflow vulnerability in the Windows Biometric Service. An authorized attacker can exploit this flaw locally to disclose sensitive information from the system.

Affected products:

  • Windows Biometric Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85831

CVE-2026-85832

CVE-2026-85832 is a heap-based buffer overflow vulnerability in the Windows Background Intelligent Transfer Service (BITS) that enables an authorized local attacker to elevate their privileges. Detection efforts should focus on monitoring for unusual process execution or unauthorized modification of system-level tasks initiated by the BITS service.

Affected products:

  • Windows Background Intelligent Transfer Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85832

Related in this roundup: CVE-2026-85843, CVE-2026-85848, CVE-2026-88118, CVE-2026-88121, CVE-2026-88152, CVE-2026-88142.

CVE-2026-85833

CVE-2026-85833 is a privilege escalation vulnerability in Windows Modern Device Management (MDM) caused by a use-after-free flaw. An attacker with local access and authorization can exploit this vulnerability to gain elevated privileges on the system.

Affected products:

  • Windows Modern Device Management

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85833

Related in this roundup: CVE-2026-108133, CVE-2026-108396, CVE-2026-83654, CVE-2026-83657, CVE-2026-96855, CVE-2026-83656, CVE-2026-83697, CVE-2026-96850.

CVE-2026-85834

A heap-based buffer overflow vulnerability exists in the Windows TCP/IP stack that allows an authorized local attacker to elevate their privileges on the affected system.

Affected products:

  • Windows TCP/IP

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85834

Related in this roundup: CVE-2026-85368, CVE-2026-96852.

CVE-2026-85835

CVE-2026-85835 is an information disclosure vulnerability caused by a buffer over-read in Microsoft Servicing Stack Updates. An authorized local attacker can exploit this flaw to read sensitive memory contents.

Affected products:

  • Servicing Stack Updates

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85835

Related in this roundup: CVE-2026-83719, CVE-2026-85318, CVE-2026-85365, CVE-2026-83863, CVE-2026-96939.

CVE-2026-85836

CVE-2026-85836 describes a use-after-free vulnerability within the Windows Kernel that can be exploited by an authorized local attacker to achieve privilege escalation.

Affected products:

  • Windows Kernel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85836

Related in this roundup: CVE-2026-108462, CVE-2026-108466, CVE-2026-70063, CVE-2026-70106, CVE-2026-70121, CVE-2026-70114, CVE-2026-83690, CVE-2026-83768, CVE-2026-83833, CVE-2026-85372, CVE-2026-85837, CVE-2026-70170, CVE-2026-85939, CVE-2026-85945, CVE-2026-96216, CVE-2026-96317, CVE-2026-96868, CVE-2026-70199, CVE-2026-70232, CVE-2026-83736, CVE-2026-83735, CVE-2026-83918, CVE-2026-83924, CVE-2026-83925, CVE-2026-88134, CVE-2026-88139, CVE-2026-88141, CVE-2026-70160, CVE-2026-70111, CVE-2026-96913, CVE-2026-96929, CVE-2026-102207, CVE-2026-103578, CVE-2026-97803.

CVE-2026-85837

CVE-2026-85837 describes an out-of-bounds read vulnerability in the Windows Kernel that can be exploited by a locally authenticated attacker to achieve privilege escalation.

Affected products:

  • Windows Kernel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85837

Related in this roundup: CVE-2026-108462, CVE-2026-108466, CVE-2026-70063, CVE-2026-70106, CVE-2026-70121, CVE-2026-70114, CVE-2026-83690, CVE-2026-83768, CVE-2026-83833, CVE-2026-85372, CVE-2026-85836, CVE-2026-70170, CVE-2026-85939, CVE-2026-85945, CVE-2026-96216, CVE-2026-96317, CVE-2026-96868, CVE-2026-70199, CVE-2026-70232, CVE-2026-83736, CVE-2026-83735, CVE-2026-83918, CVE-2026-83924, CVE-2026-83925, CVE-2026-88134, CVE-2026-88139, CVE-2026-88141, CVE-2026-70160, CVE-2026-70111, CVE-2026-96913, CVE-2026-96929, CVE-2026-102207, CVE-2026-103578, CVE-2026-97803.

CVE-2026-85840

CVE-2026-85840 is an information disclosure vulnerability in the Windows Event Viewer that allows an authorized attacker with network access to read files or directories that should be restricted, potentially leading to unauthorized data exposure.

Affected products:

  • Windows Event Viewer

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85840

CVE-2026-85842

A privilege escalation vulnerability exists in the Windows Image Acquisition service due to the use of an externally-controlled format string. An authorized local attacker can exploit this flaw to execute code or perform operations with higher privileges than currently held.

Affected products:

  • Windows Image Acquisition

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85842

Related in this roundup: CVE-2026-85930, CVE-2026-83523.

CVE-2026-85843

CVE-2026-85843 is a local privilege escalation vulnerability in the Windows Background Intelligent Transfer Service (BITS) caused by the use of an uninitialized resource. An authorized attacker can exploit this flaw to gain elevated permissions on the target system.

Affected products:

  • Windows Background Intelligent Transfer Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85843

Related in this roundup: CVE-2026-85832, CVE-2026-85848, CVE-2026-88118, CVE-2026-88121, CVE-2026-88152, CVE-2026-88142.

CVE-2026-85846

CVE-2026-85846 describes a use-after-free vulnerability within the Windows Web Account Manager component. The vulnerability allows an authenticated attacker to perform a local privilege escalation on affected Windows systems.

Affected products:

  • Windows Web Account Manager

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85846

CVE-2026-85847

CVE-2026-85847 describes an out-of-bounds read vulnerability within the Windows Print Spooler components. This flaw allows an unauthorized, unauthenticated attacker to remotely disclose sensitive information from the host system by exploiting the Print Spooler service over a network.

Affected products:

  • Windows Print Spooler

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85847

Related in this roundup: CVE-2026-83733, CVE-2026-84018, CVE-2026-85320, CVE-2026-85327, CVE-2026-85376, CVE-2026-85933.

CVE-2026-85848

A heap-based buffer overflow vulnerability in the Windows Background Intelligent Transfer Service (BITS) enables a locally authenticated attacker to perform privilege escalation on the affected system.

Affected products:

  • Windows Background Intelligent Transfer Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85848

Related in this roundup: CVE-2026-85832, CVE-2026-85843, CVE-2026-88118, CVE-2026-88121, CVE-2026-88152, CVE-2026-88142.

CVE-2026-85849

CVE-2026-85849 is a privilege escalation vulnerability in the Windows AppX Deployment Service caused by improper link resolution before file access. An authorized local attacker can exploit this vulnerability to elevate their privileges on the system.

Affected products:

  • Windows AppX Deployment Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85849

Related in this roundup: CVE-2026-69914, CVE-2026-69905, CVE-2026-69969, CVE-2026-69979, CVE-2026-85934.

CVE-2026-85850

CVE-2026-85850 is a privilege escalation vulnerability in the Windows Kernel caused by the release of an invalid pointer or reference. An authorized local attacker can exploit this flaw to gain elevated privileges on the affected system.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85850

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-85851

A use-after-free vulnerability in the Windows SmartScreen component allows a local, authorized attacker to elevate privileges on the affected system.

Affected products:

  • Windows SmartScreen

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85851

Related in this roundup: CVE-2026-108463, CVE-2026-83504, CVE-2026-70051.

CVE-2026-85852

CVE-2026-85852 describes an out-of-bounds read vulnerability in Windows Management Instrumentation (WMI) that enables an authorized local attacker to perform information disclosure. Detection engineers should monitor for unauthorized or unusual WMI queries or access patterns originating from low-privileged local accounts that may attempt to read restricted memory space.

Affected products:

  • Windows Management Instrumentation

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85852

Related in this roundup: CVE-2026-85362, CVE-2026-88091, CVE-2026-96851, CVE-2026-96856, CVE-2026-83724, CVE-2026-83783.

CVE-2026-85853

CVE-2026-85853 is an out-of-bounds read vulnerability within the Windows DWM (Desktop Window Manager) Core Library that allows a locally authenticated attacker to elevate privileges on the affected system.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85853

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-85854

A use-after-free vulnerability in the Windows Desktop Window Manager (DWM) Core Library can be exploited by an authorized local attacker to achieve privilege escalation.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85854

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-85855

CVE-2026-85855 is a use-after-free vulnerability within the Windows DWM (Desktop Window Manager) Core Library. The vulnerability enables a locally authenticated attacker to achieve privilege escalation by exploiting memory corruption during window management operations.

Affected products:

  • Windows DWM Core Library

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85855

Related in this roundup: CVE-2026-83726, CVE-2026-83765, CVE-2026-88194, CVE-2026-88189.

CVE-2026-85856

CVE-2026-85856 is a heap-based buffer overflow vulnerability in the Windows Internet Connection Sharing (ICS) service that can be exploited by an authorized attacker on an adjacent network to achieve remote code execution.

Affected products:

  • Internet Connection Sharing

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85856

CVE-2026-85857

CVE-2026-85857 is an information disclosure vulnerability in Windows Kernel-Mode Drivers, where sensitive information is incorrectly inserted into log files. This flaw allows a local, authorized attacker to gain unauthorized access to protected data.

Affected products:

  • Windows Kernel-Mode Drivers

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85857

Related in this roundup: CVE-2026-69971, CVE-2026-83834, CVE-2026-85871, CVE-2026-96247, CVE-2026-96849, CVE-2026-83568, CVE-2026-83637, CVE-2026-83837, CVE-2026-96915.

CVE-2026-85860

CVE-2026-85860 is a use-after-free vulnerability within the Windows Message Queuing Queue Manager component that enables a locally authenticated attacker to escalate their privileges. Detection engineers should monitor for anomalous behavior or unexpected process termination associated with the Message Queuing service.

Affected products:

  • Windows Message Queuing

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85860

Related in this roundup: CVE-2026-108460, CVE-2026-85334, CVE-2026-85859, CVE-2026-96921.

CVE-2026-85858

CVE-2026-85858 describes an out-of-bounds read vulnerability in the Windows Win32 Kernel Subsystem. This flaw allows a locally authenticated attacker to elevate their privileges to a higher level of access on the system.

Affected products:

  • Windows Win32 Kernel Subsystem

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85858

Related in this roundup: CVE-2026-96848, CVE-2026-83756.

CVE-2026-85859

A null pointer dereference vulnerability exists in the Windows Message Queuing Queue Manager component. An authorized attacker can exploit this flaw over a network to trigger a denial of service condition by sending specifically crafted requests that lead to a system crash.

Affected products:

  • Windows Message Queuing

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85859

Related in this roundup: CVE-2026-108460, CVE-2026-85334, CVE-2026-85860, CVE-2026-96921.

CVE-2026-85861

A use-after-free vulnerability in the Windows Clipboard User Service allows an authorized local attacker to elevate privileges on the affected system.

Affected products:

  • Windows Clipboard User Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85861

CVE-2026-85863

CVE-2026-85863 is a use-after-free vulnerability within the Windows Clipboard User Service that enables an authorized local attacker to elevate their privileges on an affected system.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85863

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-85865

CVE-2026-85865 is a security feature bypass vulnerability in the Windows DHCP Server service caused by improper authentication. The vulnerability allows an authorized attacker to bypass security controls when operating locally on the affected host.

Affected products:

  • Windows DHCP Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85865

Related in this roundup: CVE-2026-70058, CVE-2026-69830, CVE-2026-83691, CVE-2026-83787, CVE-2026-85841, CVE-2026-70066, CVE-2026-70069, CVE-2026-70201, CVE-2026-83665, CVE-2026-88171, CVE-2026-88117, CVE-2026-88119, CVE-2026-88120, CVE-2026-96320, CVE-2026-96934.

CVE-2026-85868

CVE-2026-85868 is a local privilege escalation vulnerability in the Windows Common Log File System (CLFS) driver caused by a use-after-free condition, allowing an authenticated attacker to gain higher-level permissions on the target system.

Affected products:

  • Windows Common Log File System Driver

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85868

Related in this roundup: CVE-2026-70233, CVE-2026-85355, CVE-2026-83835.

CVE-2026-85870

The Windows Common Log File System (CLFS) driver is vulnerable to a heap-based buffer overflow that can be exploited by an authorized local attacker to achieve privilege escalation. Detection efforts should focus on anomalous activity involving the clfs.sys driver and attempts to manipulate log file structures from low-privilege processes.

Affected products:

  • Common Log File System Driver

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85870

CVE-2026-85869

CVE-2026-85869 is a heap-based buffer overflow vulnerability in the Microsoft Windows Search Component that enables a local authenticated attacker to achieve privilege escalation.

Affected products:

  • Windows Search Component

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85869

Related in this roundup: CVE-2026-105010, CVE-2026-108136, CVE-2026-70136, CVE-2026-70141, CVE-2026-70173, CVE-2026-70150, CVE-2026-70177, CVE-2026-70156, CVE-2026-83575, CVE-2026-83704, CVE-2026-70086, CVE-2026-83920, CVE-2026-88160, CVE-2026-83564, CVE-2026-83570, CVE-2026-83686, CVE-2026-83725, CVE-2026-83829, CVE-2026-83850, CVE-2026-88182, CVE-2026-88191, CVE-2026-96324, CVE-2026-96911, CVE-2026-96910, CVE-2026-96937.

CVE-2026-85871

A heap-based buffer overflow vulnerability in Windows Kernel-Mode Drivers allows an authenticated local attacker to gain elevated privileges on the system.

Affected products:

  • Windows Kernel-Mode Drivers

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85871

Related in this roundup: CVE-2026-69971, CVE-2026-83834, CVE-2026-85857, CVE-2026-96247, CVE-2026-96849, CVE-2026-83568, CVE-2026-83637, CVE-2026-83837, CVE-2026-96915.

CVE-2026-71347

CVE-2026-71347 is a race condition vulnerability within the Windows Security Center service that allows a locally authenticated attacker to escalate privileges. Detection should focus on monitoring for abnormal process behavior or unexpected service interactions originating from lower-privileged accounts that attempt to access or modify Windows Security Center resources.

Affected products:

  • Windows Security Center

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71347

Related in this roundup: CVE-2026-70212.

CVE-2026-85881

CVE-2026-85881 is a stack-based buffer overflow vulnerability in the Microsoft Graphics Component. An authorized attacker can exploit this flaw over a network to achieve privilege escalation on affected Windows systems running Microsoft Office.

Affected products:

  • Microsoft Office

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85881

Related in this roundup: CVE-2026-105731.

CVE-2026-85891

CVE-2026-85891 is an information disclosure vulnerability in Azure HDInsight that allows an unauthorized attacker to access sensitive information over a network. Detection engineers should monitor for unauthorized or abnormal network access patterns targeting HDInsight cluster endpoints.

Affected products:

  • Azure HDInsight

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85891

CVE-2026-85915

A heap-based buffer overflow vulnerability exists in the Windows PCI Bus Driver that allows a locally authenticated attacker to elevate their privileges to a higher level of access.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85915

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-85918

A use-after-free vulnerability in the Windows Universal Plug and Play (UPnP) Device Host allows a locally authenticated attacker to gain elevated privileges on the system.

Affected products:

  • Windows Universal Plug and Play (UPnP) Device Host

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85918

Related in this roundup: CVE-2026-85373, CVE-2026-85375.

CVE-2026-85920

CVE-2026-85920 is a time-of-check time-of-use (TOCTOU) race condition vulnerability in the Windows BitLocker component. Successful exploitation allows an authorized local attacker to elevate their current privileges to a higher level of access.

Affected products:

  • BitLocker

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85920

Related in this roundup: CVE-2026-83500, CVE-2026-96909.

CVE-2026-85927

CVE-2026-85927 is a heap-based buffer overflow vulnerability in the Windows Universal Plug and Play (UPnP) Device Host service. An authorized local attacker can exploit this flaw to execute code with elevated privileges on affected Windows systems.

Affected products:

  • Windows Universal Plug and Play Device Host

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85927

CVE-2026-88080

CVE-2026-88080 is a local privilege escalation vulnerability in the Windows Installer service caused by a use-after-free defect. An authorized attacker can exploit this flaw to gain elevated privileges on a targeted Windows system.

Affected products:

  • Windows Installer

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88080

Related in this roundup: CVE-2026-108468, CVE-2026-70272, CVE-2026-83708, CVE-2026-83775, CVE-2026-83779, CVE-2026-85358, CVE-2026-85361, CVE-2026-85364, CVE-2026-85366, CVE-2026-85374, CVE-2026-85796, CVE-2026-85830, CVE-2026-87708, CVE-2026-87711, CVE-2026-88124, CVE-2026-96302, CVE-2026-96305, CVE-2026-96307, CVE-2026-96308, CVE-2026-69471, CVE-2026-69635, CVE-2026-83672, CVE-2026-83676, CVE-2026-83680, CVE-2026-83702, CVE-2026-83717, CVE-2026-83718, CVE-2026-83752, CVE-2026-83767, CVE-2026-83899, CVE-2026-85941, CVE-2026-88076, CVE-2026-87693, CVE-2026-87694, CVE-2026-87704, CVE-2026-87700, CVE-2026-87715.

CVE-2026-87708

A use-after-free vulnerability in the Windows Installer service allows an authorized local attacker to achieve privilege escalation by exploiting improper memory management within the service.

Affected products:

  • Windows Installer

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87708

Related in this roundup: CVE-2026-108468, CVE-2026-70272, CVE-2026-83708, CVE-2026-83775, CVE-2026-83779, CVE-2026-85358, CVE-2026-85361, CVE-2026-85364, CVE-2026-85366, CVE-2026-85374, CVE-2026-85796, CVE-2026-85830, CVE-2026-88080, CVE-2026-87711, CVE-2026-88124, CVE-2026-96302, CVE-2026-96305, CVE-2026-96307, CVE-2026-96308, CVE-2026-69471, CVE-2026-69635, CVE-2026-83672, CVE-2026-83676, CVE-2026-83680, CVE-2026-83702, CVE-2026-83717, CVE-2026-83718, CVE-2026-83752, CVE-2026-83767, CVE-2026-83899, CVE-2026-85941, CVE-2026-88076, CVE-2026-87693, CVE-2026-87694, CVE-2026-87704, CVE-2026-87700, CVE-2026-87715.

CVE-2026-87711

CVE-2026-87711 is a stack-based buffer overflow vulnerability in the Windows Installer component that allows a local, authorized attacker to achieve privilege escalation on affected Windows systems.

Affected products:

  • Windows Installer

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87711

Related in this roundup: CVE-2026-108468, CVE-2026-70272, CVE-2026-83708, CVE-2026-83775, CVE-2026-83779, CVE-2026-85358, CVE-2026-85361, CVE-2026-85364, CVE-2026-85366, CVE-2026-85374, CVE-2026-85796, CVE-2026-85830, CVE-2026-88080, CVE-2026-87708, CVE-2026-88124, CVE-2026-96302, CVE-2026-96305, CVE-2026-96307, CVE-2026-96308, CVE-2026-69471, CVE-2026-69635, CVE-2026-83672, CVE-2026-83676, CVE-2026-83680, CVE-2026-83702, CVE-2026-83717, CVE-2026-83718, CVE-2026-83752, CVE-2026-83767, CVE-2026-83899, CVE-2026-85941, CVE-2026-88076, CVE-2026-87693, CVE-2026-87694, CVE-2026-87704, CVE-2026-87700, CVE-2026-87715.

CVE-2026-88091

A vulnerability exists in Windows Management Instrumentation (WMI) due to insecure deserialization of untrusted data, which can be exploited by an authorized local attacker to achieve privilege escalation.

Affected products:

  • Windows Management Instrumentation

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88091

Related in this roundup: CVE-2026-85362, CVE-2026-85852, CVE-2026-96851, CVE-2026-96856, CVE-2026-83724, CVE-2026-83783.

CVE-2026-88096

A race condition vulnerability exists in the Windows DCOM Server that allows an authorized attacker to achieve local privilege escalation by exploiting improper synchronization of shared resources.

Affected products:

  • Windows DCOM Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88096

CVE-2026-88101

Microsoft Input Method Editor (IME) contains a vulnerability due to weak authentication that allows a locally authenticated attacker to escalate their privileges to a higher level of access on the system.

Affected products:

  • Input Method Editor

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88101

CVE-2026-88124

CVE-2026-88124 is a local privilege escalation vulnerability in the Windows Installer component due to a use-after-free defect. An attacker who has already gained low-privileged access to a system can exploit this flaw to execute code with elevated privileges.

Affected products:

  • Windows Installer

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88124

Related in this roundup: CVE-2026-108468, CVE-2026-70272, CVE-2026-83708, CVE-2026-83775, CVE-2026-83779, CVE-2026-85358, CVE-2026-85361, CVE-2026-85364, CVE-2026-85366, CVE-2026-85374, CVE-2026-85796, CVE-2026-85830, CVE-2026-88080, CVE-2026-87708, CVE-2026-87711, CVE-2026-96302, CVE-2026-96305, CVE-2026-96307, CVE-2026-96308, CVE-2026-69471, CVE-2026-69635, CVE-2026-83672, CVE-2026-83676, CVE-2026-83680, CVE-2026-83702, CVE-2026-83717, CVE-2026-83718, CVE-2026-83752, CVE-2026-83767, CVE-2026-83899, CVE-2026-85941, CVE-2026-88076, CVE-2026-87693, CVE-2026-87694, CVE-2026-87704, CVE-2026-87700, CVE-2026-87715.

CVE-2026-88157

CVE-2026-88157 describes a heap-based buffer overflow vulnerability in Microsoft's implementation of OpenSSH for Windows. This vulnerability allows an unauthenticated, remote attacker to achieve remote code execution (RCE) by sending specially crafted packets to the affected service.

Affected products:

  • OpenSSH for Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88157

Related in this roundup: CVE-2026-97816, CVE-2026-83754, CVE-2026-70163, CVE-2026-83769, CVE-2026-83871, CVE-2026-83923, CVE-2026-97811.

CVE-2026-88158

CVE-2026-88158 is an out-of-bounds read vulnerability within the Microsoft Digest Authentication component. The vulnerability allows an authorized, locally authenticated attacker to read sensitive memory contents, potentially leading to information disclosure.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88158

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-88161

A use-after-free vulnerability exists in the Windows Local Security Authority (LSA) subsystem that allows an authenticated local attacker to execute arbitrary code with elevated privileges.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88161

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-88160

A race condition vulnerability in the Microsoft Windows Search Component allows a locally authenticated attacker to elevate their privileges to a higher integrity level. The vulnerability exists due to improper synchronization when accessing shared resources, which could be exploited by an attacker with limited access to perform unauthorized actions.

Affected products:

  • Windows Search Component

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88160

Related in this roundup: CVE-2026-105010, CVE-2026-108136, CVE-2026-70136, CVE-2026-70141, CVE-2026-70173, CVE-2026-70150, CVE-2026-70177, CVE-2026-70156, CVE-2026-83575, CVE-2026-83704, CVE-2026-70086, CVE-2026-83920, CVE-2026-85869, CVE-2026-83564, CVE-2026-83570, CVE-2026-83686, CVE-2026-83725, CVE-2026-83829, CVE-2026-83850, CVE-2026-88182, CVE-2026-88191, CVE-2026-96324, CVE-2026-96911, CVE-2026-96910, CVE-2026-96937.

CVE-2026-88159

A use-after-free vulnerability exists in the Windows Background Intelligent Transfer Service (BITS) that allows an unauthenticated remote attacker to achieve remote code execution by sending a specially crafted request to the service.

Affected products:

  • Background Intelligent Transfer Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88159

Related in this roundup: CVE-2026-88173, CVE-2026-88146.

CVE-2026-88168

A heap-based buffer overflow vulnerability in the Windows Bind Filter Driver allows a locally authenticated attacker to elevate privileges on affected Windows systems. This is an exploitation of a memory corruption flaw within the kernel-mode driver.

Affected products:

  • Windows Bind Filter Driver

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88168

Related in this roundup: CVE-2026-83692, CVE-2026-85812.

CVE-2026-88162

A local privilege escalation vulnerability exists in the Windows Encrypting File System (EFS) due to improper authorization, allowing an authenticated attacker to perform unauthorized file system tampering.

Affected products:

  • Windows Encrypting File System

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88162

Related in this roundup: CVE-2026-83759, CVE-2026-83784, CVE-2026-85791, CVE-2026-83565.

CVE-2026-88173

CVE-2026-88173 is a remote code execution vulnerability in the Windows Background Intelligent Transfer Service (BITS) caused by a use-after-free flaw. An unauthenticated attacker can exploit this via the network to execute arbitrary code with elevated privileges.

Affected products:

  • Background Intelligent Transfer Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88173

Related in this roundup: CVE-2026-88159, CVE-2026-88146.

CVE-2026-69943

CVE-2026-69943 describes a path traversal vulnerability in Microsoft SharePoint that permits an authenticated attacker to achieve remote code execution over a network. The vulnerability arises from an improper limitation of pathnames to restricted directories, allowing for unauthorized code execution.

Affected products:

  • SharePoint

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69943

Related in this roundup: CVE-2026-102859, CVE-2026-102860, CVE-2026-102861, CVE-2026-102862, CVE-2026-102863, CVE-2026-102865, CVE-2026-102866, CVE-2026-105720, CVE-2026-70267, CVE-2026-70251, CVE-2026-70259, CVE-2026-70266, CVE-2026-70298, CVE-2026-85900, CVE-2026-88155, CVE-2026-88198, CVE-2026-88209, CVE-2026-88208, CVE-2026-97782, CVE-2026-97783, CVE-2026-70202, CVE-2026-70217, CVE-2026-70246, CVE-2026-85932, CVE-2026-88163, CVE-2026-88164, CVE-2026-88166, CVE-2026-88200, CVE-2026-88206, CVE-2026-96044, CVE-2026-105013.

CVE-2026-69877

CVE-2026-69877 is an information disclosure vulnerability in Azure DevOps caused by an origin validation error. This flaw allows an unauthorized remote attacker to access sensitive information over a network by bypassing security controls related to origin validation.

Affected products:

  • Azure DevOps

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69877

CVE-2026-70041

A buffer over-read vulnerability exists in the Windows CD-ROM driver that can allow an authenticated attacker to disclose sensitive information from the system memory.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70041

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-70048

CVE-2026-70048 is a heap-based buffer overflow vulnerability in the Windows Resilient File System (ReFS) that enables a local, authorized attacker to achieve privilege escalation on the affected system.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70048

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-70164

CVE-2026-70164 describes a use-after-free vulnerability within the Windows TCP/IP stack. An authorized local attacker can exploit this flaw to execute code with elevated privileges on the target system.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70164

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-70167

A type confusion vulnerability in the Windows Domain Name Service (DNS) allows an authenticated attacker to achieve remote code execution over the network by sending malicious requests to the DNS service.

Affected products:

  • Windows Domain Name Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70167

Related in this roundup: CVE-2026-70127, CVE-2026-85903, CVE-2026-88112, CVE-2026-88114, CVE-2026-88116.

CVE-2026-70170

A denial-of-service vulnerability exists in the Windows Kernel due to an untrusted pointer dereference. An authorized attacker can exploit this flaw to disrupt service availability over a network.

Affected products:

  • Windows Kernel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70170

Related in this roundup: CVE-2026-108462, CVE-2026-108466, CVE-2026-70063, CVE-2026-70106, CVE-2026-70121, CVE-2026-70114, CVE-2026-83690, CVE-2026-83768, CVE-2026-83833, CVE-2026-85372, CVE-2026-85836, CVE-2026-85837, CVE-2026-85939, CVE-2026-85945, CVE-2026-96216, CVE-2026-96317, CVE-2026-96868, CVE-2026-70199, CVE-2026-70232, CVE-2026-83736, CVE-2026-83735, CVE-2026-83918, CVE-2026-83924, CVE-2026-83925, CVE-2026-88134, CVE-2026-88139, CVE-2026-88141, CVE-2026-70160, CVE-2026-70111, CVE-2026-96913, CVE-2026-96929, CVE-2026-102207, CVE-2026-103578, CVE-2026-97803.

CVE-2026-70187

A use-after-free vulnerability in the Microsoft Remote Desktop Gateway Service allows an unauthorized remote attacker to achieve code execution via network-based exploitation.

Affected products:

  • Remote Desktop Gateway Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70187

Related in this roundup: CVE-2026-84007, CVE-2026-84012, CVE-2026-100218.

CVE-2026-70210

CVE-2026-70210 is a heap-based buffer overflow vulnerability in Windows OLE DB that enables a remote, unauthorized attacker to execute code with elevated privileges on the target system.

Affected products:

  • Windows OLE DB

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70210

CVE-2026-70213

CVE-2026-70213 is a remote code execution vulnerability in Microsoft Power Apps caused by an origin validation error. An authorized attacker can exploit this flaw to execute code over a network, necessitating updates to the Power Apps environment to patch the validation logic.

Affected products:

  • Power Apps

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70213

CVE-2026-70238

CVE-2026-70238 is a heap-based buffer overflow vulnerability in the Windows Storage Spaces Controller that permits an authorized local attacker to achieve privilege escalation.

Affected products:

  • Windows Storage Spaces Controller

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70238

Related in this roundup: CVE-2026-87706, CVE-2026-87716.

CVE-2026-70244

CVE-2026-70244 is an out-of-bounds read vulnerability in the Windows DNS Server component that allows an unauthorized attacker to perform information disclosure over a network, potentially leaking sensitive memory data.

Affected products:

  • Windows DNS Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70244

Related in this roundup: CVE-2026-83889, CVE-2026-97826, CVE-2026-97828, CVE-2026-97832, CVE-2026-97833, CVE-2026-97834, CVE-2026-97838, CVE-2026-97840.

CVE-2026-70262

CVE-2026-70262 is a heap-based buffer overflow vulnerability in the WebDAV component that enables an unauthorized remote attacker to perform privilege escalation on affected Windows systems.

Affected products:

  • WebDAV

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70262

Related in this roundup: CVE-2026-87714.

CVE-2026-70277

An out-of-bounds read vulnerability exists in the Windows Fast FAT File System Driver, which could allow a local, unauthorized attacker to disclose sensitive information from the system memory.

Affected products:

  • Windows Fast FAT File System Driver

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70277

CVE-2026-70303

CVE-2026-70303 is an out-of-bounds write vulnerability in the Windows Kernel that enables a local, authenticated attacker to escalate privileges to the level of the kernel.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70303

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-83674

CVE-2026-83674 describes a spoofing vulnerability in Microsoft Active Directory Federation Services (AD FS) caused by weak authentication mechanisms. The vulnerability allows an unauthorized remote attacker to perform spoofing attacks over the network, potentially leading to unauthorized access or impersonation within an organization's identity infrastructure.

Affected products:

  • Active Directory Federation Services

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83674

Related in this roundup: CVE-2026-83646, CVE-2026-85319, CVE-2026-85321, CVE-2026-85324, CVE-2026-69982, CVE-2026-70005, CVE-2026-83511, CVE-2026-83645, CVE-2026-96252, CVE-2026-97788, CVE-2026-103576, CVE-2026-108131.

CVE-2026-83710

A use-after-free vulnerability in the Windows Device Association Service allows an authenticated local attacker to achieve privilege escalation on affected Windows systems.

Affected products:

  • Windows Device Association Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83710

Related in this roundup: CVE-2026-85331, CVE-2026-85336, CVE-2026-85342, CVE-2026-85352, CVE-2026-85904, CVE-2026-96854.

CVE-2026-83888

A buffer over-read vulnerability in the Windows CD-ROM driver enables a network-based attacker to perform privilege escalation on affected Windows systems.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83888

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-85329

CVE-2026-85329 is a race condition vulnerability in Microsoft Account that allows a locally authenticated attacker to elevate their privileges. Detection should focus on monitoring for suspicious process execution patterns or unauthorized attempts to perform administrative actions originating from the Microsoft Account service context.

Affected products:

  • Microsoft Account

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85329

Related in this roundup: CVE-2026-83847.

CVE-2026-85867

CVE-2026-85867 describes a heap-based buffer overflow vulnerability in the Windows Remote Access Connection Manager component. An attacker with local access can exploit this flaw to execute code with elevated privileges, resulting in local privilege escalation.

Affected products:

  • Windows Remote Access Connection Manager

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85867

Related in this roundup: CVE-2026-70137.

CVE-2026-85904

CVE-2026-85904 describes a race condition vulnerability within the Windows Device Association Service. An authorized local attacker can exploit this improper synchronization of shared resources to achieve privilege escalation on the affected system.

Affected products:

  • Windows Device Association Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85904

Related in this roundup: CVE-2026-85331, CVE-2026-85336, CVE-2026-85342, CVE-2026-85352, CVE-2026-83710, CVE-2026-96854.

CVE-2026-85914

A use-after-free vulnerability in the Windows Embedded Mode Service allows an authenticated, local attacker to escalate privileges on a compromised system.

Affected products:

  • Windows Embedded Mode Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85914

Related in this roundup: CVE-2026-96932.

CVE-2026-85926

CVE-2026-85926 is a use-after-free vulnerability in the Windows Secure Socket Tunneling Protocol (SSTP) that permits an unauthenticated remote attacker to execute arbitrary code. The vulnerability exists within the network stack's handling of SSTP connections, potentially allowing full system compromise without user interaction.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85926

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-85930

CVE-2026-85930 is a use-after-free vulnerability in the Windows Image Acquisition component that allows a locally authenticated attacker to escalate their privileges to a higher integrity level on affected Windows systems.

Affected products:

  • Windows Image Acquisition

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85930

Related in this roundup: CVE-2026-85842, CVE-2026-83523.

CVE-2026-85931

CVE-2026-85931 describes a heap-based buffer overflow vulnerability in the Windows Distributed File System (DFS) service. An authorized attacker can leverage this flaw to achieve remote code execution over a network, potentially compromising affected Windows systems.

Affected products:

  • Windows Distributed File System

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85931

Related in this roundup: CVE-2026-105723, CVE-2026-85798, CVE-2026-96938.

CVE-2026-85933

CVE-2026-85933 is a privilege escalation vulnerability in the Windows Print Spooler components caused by a use-after-free flaw. An authenticated attacker can exploit this locally to gain elevated privileges on the affected system.

Affected products:

  • Windows Print Spooler

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85933

Related in this roundup: CVE-2026-83733, CVE-2026-84018, CVE-2026-85320, CVE-2026-85327, CVE-2026-85376, CVE-2026-85847.

CVE-2026-85934

A use-after-free vulnerability in the Windows AppX Deployment Service allows an attacker with local authorization to elevate their privileges on the host system.

Affected products:

  • Windows AppX Deployment Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85934

Related in this roundup: CVE-2026-69914, CVE-2026-69905, CVE-2026-69969, CVE-2026-69979, CVE-2026-85849.

CVE-2026-85935

The Windows USB Driver is susceptible to a buffer over-read vulnerability that allows an authenticated local attacker to perform unauthorized information disclosure by reading memory contents.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85935

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-85938

CVE-2026-85938 describes an information disclosure vulnerability in the Windows Broadcast DVR User Service caused by improper access control. An authorized local attacker can exploit this flaw to gain unauthorized access to sensitive information.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85938

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-85936

CVE-2026-85936 describes a double free vulnerability within the Windows Shell component that enables a remote, unauthorized attacker to achieve remote code execution (RCE) over a network connection.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85936

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-85939

CVE-2026-85939 describes a security feature bypass vulnerability in the Windows Kernel caused by weak authentication, which can be exploited by an authorized attacker over a network.

Affected products:

  • Windows Kernel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85939

Related in this roundup: CVE-2026-108462, CVE-2026-108466, CVE-2026-70063, CVE-2026-70106, CVE-2026-70121, CVE-2026-70114, CVE-2026-83690, CVE-2026-83768, CVE-2026-83833, CVE-2026-85372, CVE-2026-85836, CVE-2026-85837, CVE-2026-70170, CVE-2026-85945, CVE-2026-96216, CVE-2026-96317, CVE-2026-96868, CVE-2026-70199, CVE-2026-70232, CVE-2026-83736, CVE-2026-83735, CVE-2026-83918, CVE-2026-83924, CVE-2026-83925, CVE-2026-88134, CVE-2026-88139, CVE-2026-88141, CVE-2026-70160, CVE-2026-70111, CVE-2026-96913, CVE-2026-96929, CVE-2026-102207, CVE-2026-103578, CVE-2026-97803.

CVE-2026-85945

CVE-2026-85945 is a use-after-free vulnerability within the Windows Kernel that enables a local, authenticated attacker to escalate their privileges. Detection efforts should focus on monitoring for unauthorized attempts to interact with kernel memory or unexpected process elevation patterns consistent with kernel-level exploitation.

Affected products:

  • Windows Kernel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85945

Related in this roundup: CVE-2026-108462, CVE-2026-108466, CVE-2026-70063, CVE-2026-70106, CVE-2026-70121, CVE-2026-70114, CVE-2026-83690, CVE-2026-83768, CVE-2026-83833, CVE-2026-85372, CVE-2026-85836, CVE-2026-85837, CVE-2026-70170, CVE-2026-85939, CVE-2026-96216, CVE-2026-96317, CVE-2026-96868, CVE-2026-70199, CVE-2026-70232, CVE-2026-83736, CVE-2026-83735, CVE-2026-83918, CVE-2026-83924, CVE-2026-83925, CVE-2026-88134, CVE-2026-88139, CVE-2026-88141, CVE-2026-70160, CVE-2026-70111, CVE-2026-96913, CVE-2026-96929, CVE-2026-102207, CVE-2026-103578, CVE-2026-97803.

CVE-2026-87691

A use-after-free vulnerability in Windows Management Services allows a locally authenticated attacker to perform an elevation of privilege attack, potentially gaining higher system permissions.

Affected products:

  • Windows Management Services

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87691

CVE-2026-87706

CVE-2026-87706 is a heap-based buffer overflow vulnerability within the Windows Storage Spaces Controller that enables an authorized local attacker to elevate their privileges. Detection engineers should monitor for suspicious execution patterns involving the Storage Spaces subsystem or unusual attempts to exploit heap memory within kernel-mode drivers.

Affected products:

  • Windows Storage Spaces Controller

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87706

Related in this roundup: CVE-2026-70238, CVE-2026-87716.

CVE-2026-87707

A heap-based buffer overflow vulnerability exists in the Windows Fax and Scan Service, allowing an authorized local attacker to achieve privilege escalation by exploiting the vulnerable service.

Affected products:

  • Windows Fax and Scan Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87707

CVE-2026-87710

A privilege escalation vulnerability exists in the Microsoft Local Security Authority Server (lsasrv) due to improper access control. An attacker who has already gained local access to the system can exploit this vulnerability to elevate their privileges, potentially gaining full control over the affected Windows environment.

Affected products:

  • Local Security Authority Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87710

Related in this roundup: CVE-2026-83722.

CVE-2026-87712

A use-after-free vulnerability exists in the Microsoft Windows Quality of Service (QoS) Packet Scheduler, which can be exploited by an authenticated local attacker to execute code with elevated privileges.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87712

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-87713

CVE-2026-87713 is a use-after-free vulnerability in the Windows Bluetooth Port Driver that allows an unauthenticated, adjacent attacker to achieve privilege escalation on affected Windows systems.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87713

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-87714

A security feature bypass vulnerability exists in WebDAV due to missing authorization checks. An authorized attacker on the network can leverage this vulnerability to bypass intended security controls.

Affected products:

  • WebDAV

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87714

Related in this roundup: CVE-2026-70262.

CVE-2026-87716

CVE-2026-87716 is a heap-based buffer overflow vulnerability within the Windows Storage Spaces Controller that allows an unauthorized, network-adjacent attacker to trigger a denial of service condition on affected Windows systems.

Affected products:

  • Windows Storage Spaces Controller

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87716

Related in this roundup: CVE-2026-70238, CVE-2026-87706.

CVE-2026-88070

CVE-2026-88070 is an out-of-bounds read vulnerability in the Windows BitLocker component that allows a locally authenticated attacker to elevate their privileges on the target system.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88070

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-88071

A double free vulnerability exists in Windows Hyper-V that allows a locally authenticated attacker to escalate their privileges. This vulnerability requires the attacker to have existing access to the system to exploit the flaw.

Affected products:

  • Hyper-V

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88071

Related in this roundup: CVE-2026-108399, CVE-2026-83671, CVE-2026-83839, CVE-2026-70248, CVE-2026-85343, CVE-2026-83636, CVE-2026-83716, CVE-2026-83728, CVE-2026-83766, CVE-2026-83931, CVE-2026-87705, CVE-2026-70023, CVE-2026-102214, CVE-2026-97813.

CVE-2026-88073

CVE-2026-88073 is a use-after-free vulnerability within the Windows Graphics Kernel that allows a locally authenticated attacker to gain elevated privileges. Successful exploitation requires the attacker to execute code on the target system to trigger the memory corruption state.

Affected products:

  • Windows Graphics Kernel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88073

Related in this roundup: CVE-2026-88110, CVE-2026-96118.

CVE-2026-88099

CVE-2026-88099 describes an unhandled exception vulnerability within the Windows Failover Cluster component. An unauthorized remote attacker can trigger this exception to cause a denial-of-service condition on the affected Windows system.

Affected products:

  • Windows Failover Cluster

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88099

Related in this roundup: CVE-2026-88102, CVE-2026-96945, CVE-2026-102192.

CVE-2026-88100

A use-after-free vulnerability exists in the Windows Storage Spaces Controller, which can be exploited by an authorized local attacker to elevate privileges on an affected Windows system.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88100

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-88106

CVE-2026-88106 is a local privilege escalation vulnerability in the Windows Cloud Files Mini Filter Driver caused by a use-after-free flaw. An authorized attacker can exploit this vulnerability to gain elevated privileges on the target Windows system.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88106

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-88107

A use-after-free vulnerability in the Windows Cloud Files Mini Filter Driver allows a locally authenticated attacker to gain elevated privileges on the system.

Affected products:

  • Windows Cloud Files Mini Filter Driver

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88107

Related in this roundup: CVE-2026-83696.

CVE-2026-88132

CVE-2026-88132 is an information disclosure vulnerability in Microsoft Azure Key Vault caused by an origin validation error. The flaw enables an unauthorized remote attacker to access sensitive information by exploiting the lack of proper validation on network requests.

Affected products:

  • Azure Key Vault

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88132

Related in this roundup: CVE-2026-85922, CVE-2026-85925.

CVE-2026-88136

CVE-2026-88136 describes a remote code execution vulnerability in the Web Distributed Authoring and Versioning (WebDAV) component of Windows. The vulnerability stems from improper path equivalence resolution, allowing an authenticated attacker to execute arbitrary code over the network.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88136

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-88137

CVE-2026-88137 describes an information disclosure vulnerability in the WebDAV component of Windows, allowing an authenticated attacker to access files or directories that should be restricted to external parties over a network.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88137

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-88140

CVE-2026-88140 is an out-of-bounds read vulnerability in the Windows Key Storage Provider component. An authorized attacker on the local system can exploit this flaw to perform an information disclosure attack.

Affected products:

  • Windows Key Storage Provider

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88140

Related in this roundup: CVE-2026-69506.

CVE-2026-88143

CVE-2026-88143 describes a heap-based buffer overflow vulnerability in the Windows Storage Spaces Controller that permits an authenticated local attacker to achieve privilege escalation.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88143

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-88146

A race condition vulnerability exists in the Windows Background Intelligent Transfer Service (BITS) due to improper synchronization during concurrent execution, which can be exploited by an authenticated attacker to perform local privilege escalation.

Affected products:

  • Background Intelligent Transfer Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88146

Related in this roundup: CVE-2026-88159, CVE-2026-88173.

CVE-2026-69923

A vulnerability in Windows AI due to an uncontrolled search path element allows a locally authenticated attacker to escalate privileges. Successful exploitation requires an attacker to execute a malicious file to manipulate the search path and achieve elevated access.

Affected products:

  • Windows AI

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69923

CVE-2026-69940

CVE-2026-69940 is an out-of-bounds read vulnerability in the Windows Client for NFS component that permits an unauthenticated remote attacker to perform unauthorized information disclosure over the network.

Affected products:

  • Windows Client for NFS

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69940

Related in this roundup: CVE-2026-69949, CVE-2026-69955, CVE-2026-70113.

CVE-2026-69949

CVE-2026-69949 describes a heap-based buffer overflow vulnerability in the Windows Client for NFS component. An authorized, locally authenticated attacker can exploit this flaw to execute code with elevated privileges on the affected host.

Affected products:

  • Windows Client for NFS

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69949

Related in this roundup: CVE-2026-69940, CVE-2026-69955, CVE-2026-70113.

CVE-2026-69955

CVE-2026-69955 is an out-of-bounds read vulnerability in the Windows Client for NFS service. An unauthorized remote attacker can exploit this flaw to perform unauthorized information disclosure over the network, potentially exposing sensitive data processed by the NFS client.

Affected products:

  • Windows Client for NFS

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69955

Related in this roundup: CVE-2026-69940, CVE-2026-69949, CVE-2026-70113.

CVE-2026-69977

The Quality Windows Audio/Video Experience (QWAVE) service in Windows contains a use-after-free vulnerability that can be exploited by an authorized local attacker to elevate their privileges to a higher level, potentially gaining system or administrative control.

Affected products:

  • Quality Windows Audio/Video Experience (QWAVE) service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69977

CVE-2026-69982

CVE-2026-69982 describes a security feature bypass vulnerability in Microsoft Active Directory Federation Services (AD FS) caused by weak authentication mechanisms. An unauthenticated attacker can exploit this flaw over a network to circumvent established security controls.

Affected products:

  • Active Directory Federation Services

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69982

Related in this roundup: CVE-2026-83646, CVE-2026-85319, CVE-2026-85321, CVE-2026-85324, CVE-2026-83674, CVE-2026-70005, CVE-2026-83511, CVE-2026-83645, CVE-2026-96252, CVE-2026-97788, CVE-2026-103576, CVE-2026-108131.

CVE-2026-70005

A security feature bypass vulnerability exists in Microsoft Active Directory Federation Services (AD FS) due to weak authentication implementation. An unauthenticated attacker can exploit this flaw over a network to bypass security controls associated with the AD FS service.

Affected products:

  • Active Directory Federation Services

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70005

Related in this roundup: CVE-2026-83646, CVE-2026-85319, CVE-2026-85321, CVE-2026-85324, CVE-2026-83674, CVE-2026-69982, CVE-2026-83511, CVE-2026-83645, CVE-2026-96252, CVE-2026-97788, CVE-2026-103576, CVE-2026-108131.

CVE-2026-70113

An integer overflow or wraparound vulnerability in the Windows Client for NFS allows a locally authenticated attacker to escalate their privileges to a higher level of authority on the target system.

Affected products:

  • Windows Client for NFS

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70113

Related in this roundup: CVE-2026-69940, CVE-2026-69949, CVE-2026-69955.

CVE-2026-70008

The Windows IP Over USB Service contains an integer overflow or wraparound vulnerability that can be exploited by a locally authorized attacker to gain elevated privileges on the system.

Affected products:

  • Windows IP Over USB Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70008

Related in this roundup: CVE-2026-70011.

CVE-2026-70011

The Windows IP Over USB Service contains an out-of-bounds read vulnerability that can be exploited by an authorized attacker to achieve local information disclosure. This vulnerability allows an attacker to access sensitive information by reading memory outside of the intended buffer boundaries.

Affected products:

  • Windows IP Over USB Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70011

Related in this roundup: CVE-2026-70008.

CVE-2026-70038

A use-after-free vulnerability exists in the Windows iSCSI component, enabling an unauthenticated remote attacker to execute arbitrary code over the network. Detection should focus on anomalous network traffic originating from or directed to iSCSI services and monitoring for unexpected child processes spawned by iSCSI-related system services.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70038

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-70031

CVE-2026-70031 is a heap-based buffer overflow vulnerability within the Windows iSCSI component that allows an unauthenticated remote attacker to trigger a denial-of-service condition via a specially crafted network request.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70031

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-70013

A use-after-free vulnerability in the Windows iSCSI implementation allows an unauthorized remote attacker to execute arbitrary code. The flaw resides within the network stack's handling of iSCSI connections, potentially enabling remote code execution without authentication.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70013

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-70045

A use-after-free vulnerability exists in Windows Work Folders that allows a locally authenticated attacker to escalate their privileges to a higher level. An attacker would need to have existing access to the system to exploit this flaw.

Affected products:

  • Windows Work Folders

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70045

CVE-2026-70137

CVE-2026-70137 describes an improper access control vulnerability in the Windows Remote Access Connection Manager component. An attacker with local authorization can exploit this flaw to disclose sensitive information, potentially facilitating further malicious activities within the environment.

Affected products:

  • Windows Remote Access Connection Manager

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70137

Related in this roundup: CVE-2026-85867.

CVE-2026-70134

CVE-2026-70134 is a use-after-free vulnerability in Windows Event Tracing that allows an authorized local attacker to elevate their privileges on the affected system.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70134

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-70102

A use-after-free vulnerability in the Windows kernel-mode driver Spaceport.sys allows a local, authenticated attacker to escalate privileges to the level of the kernel, potentially gaining full control over the affected system.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70102

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-70044

CVE-2026-70044 is an out-of-bounds read vulnerability within Microsoft Windows Media Foundation. An unauthorized local attacker can exploit this flaw to disclose sensitive information from the system.

Affected products:

  • Windows Media Foundation

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70044

Related in this roundup: CVE-2026-83517, CVE-2026-85814, CVE-2026-70278, CVE-2026-70131, CVE-2026-70258, CVE-2026-96186, CVE-2026-96952, CVE-2026-102201.

CVE-2026-70131

A heap-based buffer overflow vulnerability in Microsoft Windows Media Foundation allows a local, unauthorized attacker to execute code with elevated privileges on an affected system. This vulnerability stems from improper memory management, and exploitation can lead to a complete compromise of the target system's security.

Affected products:

  • Windows Media Foundation

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70131

Related in this roundup: CVE-2026-83517, CVE-2026-85814, CVE-2026-70278, CVE-2026-70044, CVE-2026-70258, CVE-2026-96186, CVE-2026-96952, CVE-2026-102201.

CVE-2026-70068

CVE-2026-70068 is a heap-based buffer overflow vulnerability within the Windows Client-Side Caching (CSC) Service that enables an unauthorized remote attacker to perform privilege escalation on affected Windows systems.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70068

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-70110

CVE-2026-70110 is a local privilege escalation vulnerability in the Microsoft PostScript Printer Driver caused by a stack-based buffer overflow. An unauthorized attacker can exploit this flaw to execute code with elevated privileges on an affected Windows system.

Affected products:

  • PostScript Printer Driver

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70110

Related in this roundup: CVE-2026-70147, CVE-2026-70153, CVE-2026-108467, CVE-2026-70092, CVE-2026-70109.

CVE-2026-70092

CVE-2026-70092 describes a heap-based buffer overflow vulnerability in the Microsoft PostScript Printer Driver that allows a local, unauthorized attacker to escalate their privileges on a Windows system.

Affected products:

  • PostScript Printer Driver

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70092

Related in this roundup: CVE-2026-70147, CVE-2026-70153, CVE-2026-108467, CVE-2026-70110, CVE-2026-70109.

CVE-2026-70109

The Microsoft PostScript Printer Driver is vulnerable to a heap-based buffer overflow that can be exploited by an unauthorized local attacker to execute code with elevated privileges.

Affected products:

  • PostScript Printer Driver

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70109

Related in this roundup: CVE-2026-70147, CVE-2026-70153, CVE-2026-108467, CVE-2026-70110, CVE-2026-70092.

CVE-2026-70116

CVE-2026-70116 describes a stack-based buffer overflow vulnerability in the Windows Resilient File System (ReFS). An unauthorized attacker with physical access to the target system can exploit this flaw to bypass security features, potentially compromising system integrity.

Affected products:

  • Windows Resilient File System (ReFS)

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70116

CVE-2026-70149

The Windows Client Side Caching driver (csc.sys) contains an information disclosure vulnerability that allows an authorized local attacker to access sensitive information. The vulnerability originates from improper handling of data within the driver, potentially enabling unauthorized disclosure of system information.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70149

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-70186

CVE-2026-70186 describes a vulnerability in ASP.NET Core involving a deadlock condition that can be exploited by an unauthorized remote attacker to cause a denial of service (DoS) state on the affected application.

Affected products:

  • ASP.NET Core

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70186

Related in this roundup: CVE-2026-70188, CVE-2026-88092, CVE-2026-70159, CVE-2026-70175, CVE-2026-70196, CVE-2026-70181, CVE-2026-70183, CVE-2026-96233, CVE-2026-102870.

CVE-2026-70159

A resource exhaustion vulnerability in ASP.NET Core allows an unauthenticated remote attacker to trigger a denial of service (DoS) condition by sending specially crafted requests that cause uncontrolled resource allocation without proper throttling or limits.

Affected products:

  • ASP.NET Core

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70159

Related in this roundup: CVE-2026-70188, CVE-2026-88092, CVE-2026-70186, CVE-2026-70175, CVE-2026-70196, CVE-2026-70181, CVE-2026-70183, CVE-2026-96233, CVE-2026-102870.

CVE-2026-70175

CVE-2026-70175 is an elevation of privilege vulnerability in ASP.NET Core caused by improper authentication. An unauthorized attacker can exploit this flaw over a network to escalate their privileges, potentially gaining unauthorized access or control beyond their intended authorization level.

Affected products:

  • ASP.NET Core

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70175

Related in this roundup: CVE-2026-70188, CVE-2026-88092, CVE-2026-70186, CVE-2026-70159, CVE-2026-70196, CVE-2026-70181, CVE-2026-70183, CVE-2026-96233, CVE-2026-102870.

CVE-2026-70196

CVE-2026-70196 describes a denial of service vulnerability in ASP.NET Core due to inefficient algorithmic complexity, which can be exploited by an unauthorized remote attacker to consume system resources and disrupt service availability.

Affected products:

  • ASP.NET Core

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70196

Related in this roundup: CVE-2026-70188, CVE-2026-88092, CVE-2026-70186, CVE-2026-70159, CVE-2026-70175, CVE-2026-70181, CVE-2026-70183, CVE-2026-96233, CVE-2026-102870.

CVE-2026-70181

CVE-2026-70181 is a denial of service vulnerability in ASP.NET Core caused by the improper allocation of resources without appropriate limits or throttling mechanisms. This vulnerability allows an unauthenticated remote attacker to exhaust system resources over a network, leading to service disruption.

Affected products:

  • ASP.NET Core

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70181

Related in this roundup: CVE-2026-70188, CVE-2026-88092, CVE-2026-70186, CVE-2026-70159, CVE-2026-70175, CVE-2026-70196, CVE-2026-70183, CVE-2026-96233, CVE-2026-102870.

CVE-2026-70183

CVE-2026-70183 describes a race condition vulnerability within ASP.NET Core resulting from improper synchronization during concurrent execution. An authorized attacker can exploit this flaw to elevate their privileges over the network.

Affected products:

  • ASP.NET Core

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70183

Related in this roundup: CVE-2026-70188, CVE-2026-88092, CVE-2026-70186, CVE-2026-70159, CVE-2026-70175, CVE-2026-70196, CVE-2026-70181, CVE-2026-96233, CVE-2026-102870.

CVE-2026-70268

CVE-2026-70268 is a heap-based buffer overflow vulnerability in Microsoft Office Word that allows an unauthorized, remote attacker to achieve remote code execution (RCE) via network-based vectors.

Affected products:

  • Office Word

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70268

Related in this roundup: CVE-2026-70300, CVE-2026-105715, CVE-2026-70220, CVE-2026-70206, CVE-2026-70269, CVE-2026-70263, CVE-2026-70287, CVE-2026-70302, CVE-2026-70301, CVE-2026-83891, CVE-2026-88167, CVE-2026-88169, CVE-2026-88202, CVE-2026-96995, CVE-2026-97001, CVE-2026-88185, CVE-2026-88186, CVE-2026-108426, CVE-2026-108427, CVE-2026-108428, CVE-2026-108429, CVE-2026-108430, CVE-2026-108431, CVE-2026-108432, CVE-2026-108433, CVE-2026-108437, CVE-2026-108439, CVE-2026-108440, CVE-2026-108441, CVE-2026-108443, CVE-2026-108445, CVE-2026-108447, CVE-2026-108449, CVE-2026-108450, CVE-2026-108451.

CVE-2026-70220

CVE-2026-70220 is a heap-based buffer overflow vulnerability in Microsoft Office Word that enables an unauthorized attacker to achieve remote code execution. The vulnerability is triggered when a user opens a specially crafted file, leading to memory corruption and potential arbitrary code execution under the context of the current user.

Affected products:

  • Office Word

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70220

Related in this roundup: CVE-2026-70300, CVE-2026-105715, CVE-2026-70268, CVE-2026-70206, CVE-2026-70269, CVE-2026-70263, CVE-2026-70287, CVE-2026-70302, CVE-2026-70301, CVE-2026-83891, CVE-2026-88167, CVE-2026-88169, CVE-2026-88202, CVE-2026-96995, CVE-2026-97001, CVE-2026-88185, CVE-2026-88186, CVE-2026-108426, CVE-2026-108427, CVE-2026-108428, CVE-2026-108429, CVE-2026-108430, CVE-2026-108431, CVE-2026-108432, CVE-2026-108433, CVE-2026-108437, CVE-2026-108439, CVE-2026-108440, CVE-2026-108441, CVE-2026-108443, CVE-2026-108445, CVE-2026-108447, CVE-2026-108449, CVE-2026-108450, CVE-2026-108451.

CVE-2026-70256

Microsoft Office Outlook contains a heap-based buffer overflow vulnerability that allows a remote, unauthorized attacker to execute arbitrary code on the target system.

Affected products:

  • Office Outlook

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70256

Related in this roundup: CVE-2026-88156, CVE-2026-97016, CVE-2026-70257, CVE-2026-70291, CVE-2026-97749, CVE-2026-70242.

CVE-2026-70267

CVE-2026-70267 is a remote code execution vulnerability in Microsoft SharePoint caused by the inclusion of functionality from an untrusted control sphere. An authorized attacker can exploit this vulnerability to execute arbitrary code over a network.

Affected products:

  • SharePoint

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70267

Related in this roundup: CVE-2026-102859, CVE-2026-102860, CVE-2026-102861, CVE-2026-102862, CVE-2026-102863, CVE-2026-102865, CVE-2026-102866, CVE-2026-105720, CVE-2026-69943, CVE-2026-70251, CVE-2026-70259, CVE-2026-70266, CVE-2026-70298, CVE-2026-85900, CVE-2026-88155, CVE-2026-88198, CVE-2026-88209, CVE-2026-88208, CVE-2026-97782, CVE-2026-97783, CVE-2026-70202, CVE-2026-70217, CVE-2026-70246, CVE-2026-85932, CVE-2026-88163, CVE-2026-88164, CVE-2026-88166, CVE-2026-88200, CVE-2026-88206, CVE-2026-96044, CVE-2026-105013.

CVE-2026-70206

CVE-2026-70206 is an out-of-bounds read vulnerability in Microsoft Office Word that enables an unauthenticated attacker to perform unauthorized information disclosure over a network.

Affected products:

  • Office Word

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70206

Related in this roundup: CVE-2026-70300, CVE-2026-105715, CVE-2026-70268, CVE-2026-70220, CVE-2026-70269, CVE-2026-70263, CVE-2026-70287, CVE-2026-70302, CVE-2026-70301, CVE-2026-83891, CVE-2026-88167, CVE-2026-88169, CVE-2026-88202, CVE-2026-96995, CVE-2026-97001, CVE-2026-88185, CVE-2026-88186, CVE-2026-108426, CVE-2026-108427, CVE-2026-108428, CVE-2026-108429, CVE-2026-108430, CVE-2026-108431, CVE-2026-108432, CVE-2026-108433, CVE-2026-108437, CVE-2026-108439, CVE-2026-108440, CVE-2026-108441, CVE-2026-108443, CVE-2026-108445, CVE-2026-108447, CVE-2026-108449, CVE-2026-108450, CVE-2026-108451.

CVE-2026-70251

CVE-2026-70251 is a server-side request forgery vulnerability in Microsoft Office SharePoint that allows an authenticated attacker to perform a privilege escalation attack over the network.

Affected products:

  • SharePoint

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70251

Related in this roundup: CVE-2026-102859, CVE-2026-102860, CVE-2026-102861, CVE-2026-102862, CVE-2026-102863, CVE-2026-102865, CVE-2026-102866, CVE-2026-105720, CVE-2026-69943, CVE-2026-70267, CVE-2026-70259, CVE-2026-70266, CVE-2026-70298, CVE-2026-85900, CVE-2026-88155, CVE-2026-88198, CVE-2026-88209, CVE-2026-88208, CVE-2026-97782, CVE-2026-97783, CVE-2026-70202, CVE-2026-70217, CVE-2026-70246, CVE-2026-85932, CVE-2026-88163, CVE-2026-88164, CVE-2026-88166, CVE-2026-88200, CVE-2026-88206, CVE-2026-96044, CVE-2026-105013.

CVE-2026-70269

CVE-2026-70269 is a heap-based buffer overflow vulnerability in Microsoft Office Word that allows an unauthenticated remote attacker to execute arbitrary code. Detection engineers should monitor for anomalous file parsing behaviors or unexpected child processes spawned by the Word application when handling untrusted documents.

Affected products:

  • Office Word

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70269

Related in this roundup: CVE-2026-70300, CVE-2026-105715, CVE-2026-70268, CVE-2026-70220, CVE-2026-70206, CVE-2026-70263, CVE-2026-70287, CVE-2026-70302, CVE-2026-70301, CVE-2026-83891, CVE-2026-88167, CVE-2026-88169, CVE-2026-88202, CVE-2026-96995, CVE-2026-97001, CVE-2026-88185, CVE-2026-88186, CVE-2026-108426, CVE-2026-108427, CVE-2026-108428, CVE-2026-108429, CVE-2026-108430, CVE-2026-108431, CVE-2026-108432, CVE-2026-108433, CVE-2026-108437, CVE-2026-108439, CVE-2026-108440, CVE-2026-108441, CVE-2026-108443, CVE-2026-108445, CVE-2026-108447, CVE-2026-108449, CVE-2026-108450, CVE-2026-108451.

CVE-2026-70257

CVE-2026-70257 is a heap-based buffer overflow vulnerability in Microsoft Office Outlook that enables an unauthorized remote attacker to execute arbitrary code via network-based exploitation.

Affected products:

  • Office Outlook

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70257

Related in this roundup: CVE-2026-88156, CVE-2026-97016, CVE-2026-70256, CVE-2026-70291, CVE-2026-97749, CVE-2026-70242.

CVE-2026-70263

CVE-2026-70263 describes an out-of-bounds read vulnerability in Microsoft Office Word that enables an unauthenticated attacker to perform remote information disclosure over a network.

Affected products:

  • Office Word

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70263

Related in this roundup: CVE-2026-70300, CVE-2026-105715, CVE-2026-70268, CVE-2026-70220, CVE-2026-70206, CVE-2026-70269, CVE-2026-70287, CVE-2026-70302, CVE-2026-70301, CVE-2026-83891, CVE-2026-88167, CVE-2026-88169, CVE-2026-88202, CVE-2026-96995, CVE-2026-97001, CVE-2026-88185, CVE-2026-88186, CVE-2026-108426, CVE-2026-108427, CVE-2026-108428, CVE-2026-108429, CVE-2026-108430, CVE-2026-108431, CVE-2026-108432, CVE-2026-108433, CVE-2026-108437, CVE-2026-108439, CVE-2026-108440, CVE-2026-108441, CVE-2026-108443, CVE-2026-108445, CVE-2026-108447, CVE-2026-108449, CVE-2026-108450, CVE-2026-108451.

CVE-2026-70259

CVE-2026-70259 is an information disclosure vulnerability in Microsoft SharePoint caused by a server-side request forgery (SSRF) flaw, which allows an authorized attacker to gain unauthorized access to information across a network.

Affected products:

  • SharePoint

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70259

Related in this roundup: CVE-2026-102859, CVE-2026-102860, CVE-2026-102861, CVE-2026-102862, CVE-2026-102863, CVE-2026-102865, CVE-2026-102866, CVE-2026-105720, CVE-2026-69943, CVE-2026-70267, CVE-2026-70251, CVE-2026-70266, CVE-2026-70298, CVE-2026-85900, CVE-2026-88155, CVE-2026-88198, CVE-2026-88209, CVE-2026-88208, CVE-2026-97782, CVE-2026-97783, CVE-2026-70202, CVE-2026-70217, CVE-2026-70246, CVE-2026-85932, CVE-2026-88163, CVE-2026-88164, CVE-2026-88166, CVE-2026-88200, CVE-2026-88206, CVE-2026-96044, CVE-2026-105013.

CVE-2026-70266

CVE-2026-70266 is a privilege escalation vulnerability in Microsoft SharePoint caused by improper neutralization of special elements in SQL commands. An authorized attacker on the network can leverage this SQL injection flaw to elevate their privileges within the SharePoint environment.

Affected products:

  • SharePoint

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70266

Related in this roundup: CVE-2026-102859, CVE-2026-102860, CVE-2026-102861, CVE-2026-102862, CVE-2026-102863, CVE-2026-102865, CVE-2026-102866, CVE-2026-105720, CVE-2026-69943, CVE-2026-70267, CVE-2026-70251, CVE-2026-70259, CVE-2026-70298, CVE-2026-85900, CVE-2026-88155, CVE-2026-88198, CVE-2026-88209, CVE-2026-88208, CVE-2026-97782, CVE-2026-97783, CVE-2026-70202, CVE-2026-70217, CVE-2026-70246, CVE-2026-85932, CVE-2026-88163, CVE-2026-88164, CVE-2026-88166, CVE-2026-88200, CVE-2026-88206, CVE-2026-96044, CVE-2026-105013.

CVE-2026-70287

CVE-2026-70287 is a heap-based buffer overflow vulnerability in Microsoft Office Word that enables an unauthenticated remote attacker to achieve remote code execution by sending a specially crafted file to a target.

Affected products:

  • Office Word

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70287

Related in this roundup: CVE-2026-70300, CVE-2026-105715, CVE-2026-70268, CVE-2026-70220, CVE-2026-70206, CVE-2026-70269, CVE-2026-70263, CVE-2026-70302, CVE-2026-70301, CVE-2026-83891, CVE-2026-88167, CVE-2026-88169, CVE-2026-88202, CVE-2026-96995, CVE-2026-97001, CVE-2026-88185, CVE-2026-88186, CVE-2026-108426, CVE-2026-108427, CVE-2026-108428, CVE-2026-108429, CVE-2026-108430, CVE-2026-108431, CVE-2026-108432, CVE-2026-108433, CVE-2026-108437, CVE-2026-108439, CVE-2026-108440, CVE-2026-108441, CVE-2026-108443, CVE-2026-108445, CVE-2026-108447, CVE-2026-108449, CVE-2026-108450, CVE-2026-108451.

CVE-2026-70276

CVE-2026-70276 describes a use-after-free vulnerability in Microsoft Office Click-To-Run that enables an attacker with local, authorized access to perform a privilege escalation attack on the affected Windows system.

Affected products:

  • Office Click-To-Run

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70276

Related in this roundup: CVE-2026-97774, CVE-2026-88109, CVE-2026-85340.

CVE-2026-70291

Microsoft Office Outlook is vulnerable to a heap-based buffer overflow that can be exploited by an unauthorized remote attacker to execute arbitrary code over a network, potentially leading to a full system compromise.

Affected products:

  • Office Outlook

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70291

Related in this roundup: CVE-2026-88156, CVE-2026-97016, CVE-2026-70256, CVE-2026-70257, CVE-2026-97749, CVE-2026-70242.

CVE-2026-70302

CVE-2026-70302 is a heap-based buffer overflow vulnerability in Microsoft Office Word that enables a remote, unauthorized attacker to achieve remote code execution (RCE) via a crafted file or network interaction. This vulnerability permits arbitrary code execution, potentially leading to full system compromise depending on the user's privilege level.

Affected products:

  • Office Word

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70302

Related in this roundup: CVE-2026-70300, CVE-2026-105715, CVE-2026-70268, CVE-2026-70220, CVE-2026-70206, CVE-2026-70269, CVE-2026-70263, CVE-2026-70287, CVE-2026-70301, CVE-2026-83891, CVE-2026-88167, CVE-2026-88169, CVE-2026-88202, CVE-2026-96995, CVE-2026-97001, CVE-2026-88185, CVE-2026-88186, CVE-2026-108426, CVE-2026-108427, CVE-2026-108428, CVE-2026-108429, CVE-2026-108430, CVE-2026-108431, CVE-2026-108432, CVE-2026-108433, CVE-2026-108437, CVE-2026-108439, CVE-2026-108440, CVE-2026-108441, CVE-2026-108443, CVE-2026-108445, CVE-2026-108447, CVE-2026-108449, CVE-2026-108450, CVE-2026-108451.

CVE-2026-70301

A heap-based buffer overflow vulnerability exists in Microsoft Office Word that allows an unauthorized attacker to achieve remote code execution over a network. This flaw represents a significant risk for arbitrary code execution during the processing of malicious document files.

Affected products:

  • Office Word

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70301

Related in this roundup: CVE-2026-70300, CVE-2026-105715, CVE-2026-70268, CVE-2026-70220, CVE-2026-70206, CVE-2026-70269, CVE-2026-70263, CVE-2026-70287, CVE-2026-70302, CVE-2026-83891, CVE-2026-88167, CVE-2026-88169, CVE-2026-88202, CVE-2026-96995, CVE-2026-97001, CVE-2026-88185, CVE-2026-88186, CVE-2026-108426, CVE-2026-108427, CVE-2026-108428, CVE-2026-108429, CVE-2026-108430, CVE-2026-108431, CVE-2026-108432, CVE-2026-108433, CVE-2026-108437, CVE-2026-108439, CVE-2026-108440, CVE-2026-108441, CVE-2026-108443, CVE-2026-108445, CVE-2026-108447, CVE-2026-108449, CVE-2026-108450, CVE-2026-108451.

CVE-2026-83891

CVE-2026-83891 is a stack-based buffer overflow vulnerability in Microsoft Office Word that enables a remote attacker to achieve remote code execution. The vulnerability is triggered over a network, potentially by processing a maliciously crafted document.

Affected products:

  • Office Word

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83891

Related in this roundup: CVE-2026-70300, CVE-2026-105715, CVE-2026-70268, CVE-2026-70220, CVE-2026-70206, CVE-2026-70269, CVE-2026-70263, CVE-2026-70287, CVE-2026-70302, CVE-2026-70301, CVE-2026-88167, CVE-2026-88169, CVE-2026-88202, CVE-2026-96995, CVE-2026-97001, CVE-2026-88185, CVE-2026-88186, CVE-2026-108426, CVE-2026-108427, CVE-2026-108428, CVE-2026-108429, CVE-2026-108430, CVE-2026-108431, CVE-2026-108432, CVE-2026-108433, CVE-2026-108437, CVE-2026-108439, CVE-2026-108440, CVE-2026-108441, CVE-2026-108443, CVE-2026-108445, CVE-2026-108447, CVE-2026-108449, CVE-2026-108450, CVE-2026-108451.

CVE-2026-70298

CVE-2026-70298 is a path traversal vulnerability in Microsoft SharePoint that permits an authenticated attacker to perform unauthorized file system access, leading to the disclosure of sensitive information over the network.

Affected products:

  • SharePoint

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70298

Related in this roundup: CVE-2026-102859, CVE-2026-102860, CVE-2026-102861, CVE-2026-102862, CVE-2026-102863, CVE-2026-102865, CVE-2026-102866, CVE-2026-105720, CVE-2026-69943, CVE-2026-70267, CVE-2026-70251, CVE-2026-70259, CVE-2026-70266, CVE-2026-85900, CVE-2026-88155, CVE-2026-88198, CVE-2026-88209, CVE-2026-88208, CVE-2026-97782, CVE-2026-97783, CVE-2026-70202, CVE-2026-70217, CVE-2026-70246, CVE-2026-85932, CVE-2026-88163, CVE-2026-88164, CVE-2026-88166, CVE-2026-88200, CVE-2026-88206, CVE-2026-96044, CVE-2026-105013.

CVE-2026-85900

Microsoft SharePoint contains a vulnerability involving the deserialization of untrusted data, which allows an authenticated attacker to execute arbitrary code over the network. Detection should focus on monitoring for abnormal deserialization patterns within SharePoint application processes.

Affected products:

  • SharePoint

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85900

Related in this roundup: CVE-2026-102859, CVE-2026-102860, CVE-2026-102861, CVE-2026-102862, CVE-2026-102863, CVE-2026-102865, CVE-2026-102866, CVE-2026-105720, CVE-2026-69943, CVE-2026-70267, CVE-2026-70251, CVE-2026-70259, CVE-2026-70266, CVE-2026-70298, CVE-2026-88155, CVE-2026-88198, CVE-2026-88209, CVE-2026-88208, CVE-2026-97782, CVE-2026-97783, CVE-2026-70202, CVE-2026-70217, CVE-2026-70246, CVE-2026-85932, CVE-2026-88163, CVE-2026-88164, CVE-2026-88166, CVE-2026-88200, CVE-2026-88206, CVE-2026-96044, CVE-2026-105013.

CVE-2026-88153

CVE-2026-88153 is an out-of-bounds read vulnerability in Microsoft Excel that allows an unauthenticated, remote attacker to perform unauthorized information disclosure over a network by leveraging the flaw in how the application handles data.

Affected products:

  • Excel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88153

Related in this roundup: CVE-2026-105718, CVE-2026-88175, CVE-2026-97009, CVE-2026-97753, CVE-2026-97017, CVE-2026-97740, CVE-2026-97766, CVE-2026-97003, CVE-2026-97751, CVE-2026-97776, CVE-2026-97752, CVE-2026-97758, CVE-2026-97761, CVE-2026-97747, CVE-2026-97780, CVE-2026-97770, CVE-2026-97771, CVE-2026-97755, CVE-2026-97765, CVE-2026-97739, CVE-2026-97778, CVE-2026-97759, CVE-2026-77902, CVE-2026-88154, CVE-2026-88172, CVE-2026-88184, CVE-2026-88192, CVE-2026-88195, CVE-2026-97007, CVE-2026-97779, CVE-2026-97756, CVE-2026-97008, CVE-2026-97773, CVE-2026-97010, CVE-2026-97743, CVE-2026-97777, CVE-2026-97762, CVE-2026-97011, CVE-2026-97757, CVE-2026-97738, CVE-2026-97742, CVE-2026-97746, CVE-2026-97763, CVE-2026-97775, CVE-2026-97768, CVE-2026-97745, CVE-2026-100211, CVE-2026-100210, CVE-2026-108446.

CVE-2026-88150

CVE-2026-88150 is a remote code execution vulnerability in Microsoft Office Word caused by the use of an uninitialized resource. An unauthorized attacker can exploit this vulnerability over a network to execute arbitrary code on the target system.

Affected products:

  • Office

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88150

Related in this roundup: CVE-2026-102867, CVE-2026-88145, CVE-2026-88197, CVE-2026-88196, CVE-2026-96996, CVE-2026-97754, CVE-2026-69922, CVE-2026-108442.

CVE-2026-88145

CVE-2026-88145 is a heap-based buffer overflow vulnerability in Microsoft Office Excel that enables a remote, unauthorized attacker to achieve remote code execution. Detection should focus on monitoring anomalous file-handling behavior by Excel processes and identifying memory corruption patterns associated with complex document parsing.

Affected products:

  • Office
  • Excel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88145

Related in this roundup: CVE-2026-102867, CVE-2026-88150, CVE-2026-88197, CVE-2026-88196, CVE-2026-96996, CVE-2026-97754, CVE-2026-69922, CVE-2026-108442.

CVE-2026-88151

CVE-2026-88151 is an out-of-bounds read vulnerability in Microsoft Office Excel that enables an unauthorized remote attacker to disclose sensitive information over a network.

Affected products:

  • Office Excel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88151

Related in this roundup: CVE-2026-88201, CVE-2026-97014, CVE-2026-97750, CVE-2026-97767, CVE-2026-70214, CVE-2026-70254, CVE-2026-88190, CVE-2026-97748, CVE-2026-97769, CVE-2026-97760, CVE-2026-97004, CVE-2026-97741, CVE-2026-97772, CVE-2026-100209, CVE-2026-100212.

CVE-2026-88155

CVE-2026-88155 is a heap-based buffer overflow vulnerability in Microsoft SharePoint that allows an authorized attacker to achieve remote code execution over a network. Detection should focus on monitoring for anomalous heap memory operations and suspicious process execution originating from the SharePoint server service.

Affected products:

  • SharePoint

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88155

Related in this roundup: CVE-2026-102859, CVE-2026-102860, CVE-2026-102861, CVE-2026-102862, CVE-2026-102863, CVE-2026-102865, CVE-2026-102866, CVE-2026-105720, CVE-2026-69943, CVE-2026-70267, CVE-2026-70251, CVE-2026-70259, CVE-2026-70266, CVE-2026-70298, CVE-2026-85900, CVE-2026-88198, CVE-2026-88209, CVE-2026-88208, CVE-2026-97782, CVE-2026-97783, CVE-2026-70202, CVE-2026-70217, CVE-2026-70246, CVE-2026-85932, CVE-2026-88163, CVE-2026-88164, CVE-2026-88166, CVE-2026-88200, CVE-2026-88206, CVE-2026-96044, CVE-2026-105013.

CVE-2026-88175

CVE-2026-88175 describes an out-of-bounds read vulnerability in Microsoft Excel that allows an unauthenticated, remote attacker to perform unauthorized information disclosure over a network. Detection should focus on monitoring for anomalous network activity initiated by the Excel process, particularly when handling malformed spreadsheet files.

Affected products:

  • Excel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88175

Related in this roundup: CVE-2026-105718, CVE-2026-88153, CVE-2026-97009, CVE-2026-97753, CVE-2026-97017, CVE-2026-97740, CVE-2026-97766, CVE-2026-97003, CVE-2026-97751, CVE-2026-97776, CVE-2026-97752, CVE-2026-97758, CVE-2026-97761, CVE-2026-97747, CVE-2026-97780, CVE-2026-97770, CVE-2026-97771, CVE-2026-97755, CVE-2026-97765, CVE-2026-97739, CVE-2026-97778, CVE-2026-97759, CVE-2026-77902, CVE-2026-88154, CVE-2026-88172, CVE-2026-88184, CVE-2026-88192, CVE-2026-88195, CVE-2026-97007, CVE-2026-97779, CVE-2026-97756, CVE-2026-97008, CVE-2026-97773, CVE-2026-97010, CVE-2026-97743, CVE-2026-97777, CVE-2026-97762, CVE-2026-97011, CVE-2026-97757, CVE-2026-97738, CVE-2026-97742, CVE-2026-97746, CVE-2026-97763, CVE-2026-97775, CVE-2026-97768, CVE-2026-97745, CVE-2026-100211, CVE-2026-100210, CVE-2026-108446.

CVE-2026-88167

CVE-2026-88167 is an information disclosure vulnerability in Microsoft Office Word caused by a buffer over-read flaw. An attacker can exploit this vulnerability over a network to gain unauthorized access to sensitive information.

Affected products:

  • Office Word

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88167

Related in this roundup: CVE-2026-70300, CVE-2026-105715, CVE-2026-70268, CVE-2026-70220, CVE-2026-70206, CVE-2026-70269, CVE-2026-70263, CVE-2026-70287, CVE-2026-70302, CVE-2026-70301, CVE-2026-83891, CVE-2026-88169, CVE-2026-88202, CVE-2026-96995, CVE-2026-97001, CVE-2026-88185, CVE-2026-88186, CVE-2026-108426, CVE-2026-108427, CVE-2026-108428, CVE-2026-108429, CVE-2026-108430, CVE-2026-108431, CVE-2026-108432, CVE-2026-108433, CVE-2026-108437, CVE-2026-108439, CVE-2026-108440, CVE-2026-108441, CVE-2026-108443, CVE-2026-108445, CVE-2026-108447, CVE-2026-108449, CVE-2026-108450, CVE-2026-108451.

CVE-2026-88169

CVE-2026-88169 is an out-of-bounds read vulnerability in Microsoft Office Word that enables an unauthorized remote attacker to disclose sensitive information over a network.

Affected products:

  • Office Word

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88169

Related in this roundup: CVE-2026-70300, CVE-2026-105715, CVE-2026-70268, CVE-2026-70220, CVE-2026-70206, CVE-2026-70269, CVE-2026-70263, CVE-2026-70287, CVE-2026-70302, CVE-2026-70301, CVE-2026-83891, CVE-2026-88167, CVE-2026-88202, CVE-2026-96995, CVE-2026-97001, CVE-2026-88185, CVE-2026-88186, CVE-2026-108426, CVE-2026-108427, CVE-2026-108428, CVE-2026-108429, CVE-2026-108430, CVE-2026-108431, CVE-2026-108432, CVE-2026-108433, CVE-2026-108437, CVE-2026-108439, CVE-2026-108440, CVE-2026-108441, CVE-2026-108443, CVE-2026-108445, CVE-2026-108447, CVE-2026-108449, CVE-2026-108450, CVE-2026-108451.

CVE-2026-88178

A use-after-free vulnerability in Microsoft Office PowerPoint allows a remote, unauthorized attacker to execute arbitrary code. The vulnerability can be triggered over a network, potentially leading to full system compromise if exploited successfully.

Affected products:

  • PowerPoint

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88178

Related in this roundup: CVE-2026-97744, CVE-2026-70215, CVE-2026-88144, CVE-2026-88203.

CVE-2026-88201

CVE-2026-88201 is a buffer over-read vulnerability in Microsoft Office Excel that enables an unauthorized attacker to perform information disclosure via network vectors.

Affected products:

  • Office Excel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88201

Related in this roundup: CVE-2026-88151, CVE-2026-97014, CVE-2026-97750, CVE-2026-97767, CVE-2026-70214, CVE-2026-70254, CVE-2026-88190, CVE-2026-97748, CVE-2026-97769, CVE-2026-97760, CVE-2026-97004, CVE-2026-97741, CVE-2026-97772, CVE-2026-100209, CVE-2026-100212.

CVE-2026-88197

CVE-2026-88197 is a heap-based buffer overflow vulnerability in Microsoft Office that enables remote code execution. An attacker can exploit this flaw by sending a specially crafted request or document to a targeted system, leading to unauthorized code execution over the network.

Affected products:

  • Office

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88197

Related in this roundup: CVE-2026-102867, CVE-2026-88150, CVE-2026-88145, CVE-2026-88196, CVE-2026-96996, CVE-2026-97754, CVE-2026-69922, CVE-2026-108442.

CVE-2026-88196

CVE-2026-88196 is a heap-based buffer overflow vulnerability in Microsoft Office that enables an unauthorized remote attacker to achieve code execution via network-based exploitation.

Affected products:

  • Office

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88196

Related in this roundup: CVE-2026-102867, CVE-2026-88150, CVE-2026-88145, CVE-2026-88197, CVE-2026-96996, CVE-2026-97754, CVE-2026-69922, CVE-2026-108442.

CVE-2026-88198

CVE-2026-88198 is an elevation of privilege vulnerability in Microsoft SharePoint caused by missing authorization checks. An authenticated attacker on the network can leverage this flaw to gain unauthorized privileges within the application environment.

Affected products:

  • SharePoint

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88198

Related in this roundup: CVE-2026-102859, CVE-2026-102860, CVE-2026-102861, CVE-2026-102862, CVE-2026-102863, CVE-2026-102865, CVE-2026-102866, CVE-2026-105720, CVE-2026-69943, CVE-2026-70267, CVE-2026-70251, CVE-2026-70259, CVE-2026-70266, CVE-2026-70298, CVE-2026-85900, CVE-2026-88155, CVE-2026-88209, CVE-2026-88208, CVE-2026-97782, CVE-2026-97783, CVE-2026-70202, CVE-2026-70217, CVE-2026-70246, CVE-2026-85932, CVE-2026-88163, CVE-2026-88164, CVE-2026-88166, CVE-2026-88200, CVE-2026-88206, CVE-2026-96044, CVE-2026-105013.

CVE-2026-88202

CVE-2026-88202 is a heap-based buffer overflow vulnerability in Microsoft Office Word that allows an unauthenticated remote attacker to achieve remote code execution (RCE) by sending a specially crafted file or network stream to a target user.

Affected products:

  • Office Word

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88202

Related in this roundup: CVE-2026-70300, CVE-2026-105715, CVE-2026-70268, CVE-2026-70220, CVE-2026-70206, CVE-2026-70269, CVE-2026-70263, CVE-2026-70287, CVE-2026-70302, CVE-2026-70301, CVE-2026-83891, CVE-2026-88167, CVE-2026-88169, CVE-2026-96995, CVE-2026-97001, CVE-2026-88185, CVE-2026-88186, CVE-2026-108426, CVE-2026-108427, CVE-2026-108428, CVE-2026-108429, CVE-2026-108430, CVE-2026-108431, CVE-2026-108432, CVE-2026-108433, CVE-2026-108437, CVE-2026-108439, CVE-2026-108440, CVE-2026-108441, CVE-2026-108443, CVE-2026-108445, CVE-2026-108447, CVE-2026-108449, CVE-2026-108450, CVE-2026-108451.

CVE-2026-88204

CVE-2026-88204 is a cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint that allows an authenticated attacker to perform spoofing attacks over a network by injecting malicious input into web page generation.

Affected products:

  • Office SharePoint

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88204

Related in this roundup: CVE-2026-102864, CVE-2026-105713.

CVE-2026-88209

CVE-2026-88209 describes a cross-site scripting (XSS) vulnerability in Microsoft SharePoint where improper input neutralization allows an authorized attacker to conduct spoofing attacks over the network.

Affected products:

  • SharePoint

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88209

Related in this roundup: CVE-2026-102859, CVE-2026-102860, CVE-2026-102861, CVE-2026-102862, CVE-2026-102863, CVE-2026-102865, CVE-2026-102866, CVE-2026-105720, CVE-2026-69943, CVE-2026-70267, CVE-2026-70251, CVE-2026-70259, CVE-2026-70266, CVE-2026-70298, CVE-2026-85900, CVE-2026-88155, CVE-2026-88198, CVE-2026-88208, CVE-2026-97782, CVE-2026-97783, CVE-2026-70202, CVE-2026-70217, CVE-2026-70246, CVE-2026-85932, CVE-2026-88163, CVE-2026-88164, CVE-2026-88166, CVE-2026-88200, CVE-2026-88206, CVE-2026-96044, CVE-2026-105013.

CVE-2026-88208

CVE-2026-88208 is a spoofing vulnerability in Microsoft SharePoint caused by improper neutralization of input during web page generation, susceptible to cross-site scripting attacks by authorized attackers.

Affected products:

  • SharePoint

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88208

Related in this roundup: CVE-2026-102859, CVE-2026-102860, CVE-2026-102861, CVE-2026-102862, CVE-2026-102863, CVE-2026-102865, CVE-2026-102866, CVE-2026-105720, CVE-2026-69943, CVE-2026-70267, CVE-2026-70251, CVE-2026-70259, CVE-2026-70266, CVE-2026-70298, CVE-2026-85900, CVE-2026-88155, CVE-2026-88198, CVE-2026-88209, CVE-2026-97782, CVE-2026-97783, CVE-2026-70202, CVE-2026-70217, CVE-2026-70246, CVE-2026-85932, CVE-2026-88163, CVE-2026-88164, CVE-2026-88166, CVE-2026-88200, CVE-2026-88206, CVE-2026-96044, CVE-2026-105013.

CVE-2026-70049

Microsoft Configuration Manager contains an elevation of privilege vulnerability (CVE-2026-70049) that allows a local, authenticated attacker to escalate their privileges on the system.

Affected products:

  • Configuration Manager

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70049

Related in this roundup: CVE-2026-88075.

CVE-2026-96204

CVE-2026-96204 is a server-side request forgery (SSRF) vulnerability in Azure Arc that enables an authorized attacker to escalate their privileges within the network environment.

Affected products:

  • Azure Arc

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96204

CVE-2026-96215

CVE-2026-96215 is a local privilege escalation vulnerability in Windows Autopilot caused by a race condition resulting from improper synchronization during concurrent execution. An authorized attacker can exploit this flaw to gain elevated privileges on the local system.

Affected products:

  • Windows Autopilot

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96215

Related in this roundup: CVE-2026-108134.

CVE-2026-96216

CVE-2026-96216 is a use-after-free vulnerability within the Windows Kernel that allows a locally authenticated attacker to escalate their privileges. Detection should focus on monitoring for suspicious kernel-mode activity and unusual process privilege transitions originating from low-integrity contexts.

Affected products:

  • Windows Kernel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96216

Related in this roundup: CVE-2026-108462, CVE-2026-108466, CVE-2026-70063, CVE-2026-70106, CVE-2026-70121, CVE-2026-70114, CVE-2026-83690, CVE-2026-83768, CVE-2026-83833, CVE-2026-85372, CVE-2026-85836, CVE-2026-85837, CVE-2026-70170, CVE-2026-85939, CVE-2026-85945, CVE-2026-96317, CVE-2026-96868, CVE-2026-70199, CVE-2026-70232, CVE-2026-83736, CVE-2026-83735, CVE-2026-83918, CVE-2026-83924, CVE-2026-83925, CVE-2026-88134, CVE-2026-88139, CVE-2026-88141, CVE-2026-70160, CVE-2026-70111, CVE-2026-96913, CVE-2026-96929, CVE-2026-102207, CVE-2026-103578, CVE-2026-97803.

CVE-2026-96217

CVE-2026-96217 is a heap-based buffer overflow vulnerability in the Windows NTFS driver that allows a local, authorized attacker to escalate their privileges to a higher level within the operating system.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96217

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-96218

CVE-2026-96218 is an improper access control vulnerability within the Windows Update Stack, allowing an locally authenticated attacker to modify or tamper with update components, potentially leading to privilege escalation.

Affected products:

  • Windows Update Stack

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96218

Related in this roundup: CVE-2026-83798.

CVE-2026-96219

A remote code execution vulnerability exists in the Windows Local Security Authority Subsystem Service (LSASS) due to an out-of-bounds write flaw. An unauthorized attacker can exploit this vulnerability over a network to execute arbitrary code on the affected system.

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96219

CVE-2026-96220

CVE-2026-96220 describes an elevation of privilege vulnerability in Windows Assigned Access due to improper control of code generation. An authorized local attacker can exploit this vulnerability to escalate their privileges on the affected system.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96220

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-96223

A use-after-free vulnerability in Windows Hyper-V allows an authenticated attacker to execute code or gain elevated privileges on the host system.

Affected products:

  • Windows Hyper-V

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96223

Related in this roundup: CVE-2026-105733, CVE-2026-85369.

CVE-2026-96244

A use-after-free vulnerability in the Windows Internal System User Profile component enables an authorized local attacker to achieve privilege escalation by exploiting memory management flaws within the system process.

Affected products:

  • Windows Internal System User Profile

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96244

CVE-2026-96245

CVE-2026-96245 describes an out-of-bounds read vulnerability in the Windows Routing and Remote Access Service (RRAS). An unauthenticated attacker can exploit this flaw to perform unauthorized information disclosure over the network, potentially leading to the leakage of sensitive data.

Affected products:

  • Routing and Remote Access Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96245

Related in this roundup: CVE-2026-85809, CVE-2026-70057, CVE-2026-84020, CVE-2026-85322, CVE-2026-85808, CVE-2026-96316, CVE-2026-70158.

CVE-2026-96246

CVE-2026-96246 describes an out-of-bounds read vulnerability in the Microsoft Network Policy Server (NPS) role. An unauthorized, remote attacker can exploit this flaw to disclose sensitive information over the network without requiring authentication.

Affected products:

  • Network Policy Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96246

Related in this roundup: CVE-2026-100222, CVE-2026-85806, CVE-2026-83655, CVE-2026-85371, CVE-2026-85799, CVE-2026-85811, CVE-2026-70207.

CVE-2026-96247

CVE-2026-96247 is an information disclosure vulnerability in Windows Kernel-Mode Drivers caused by the use of an uninitialized resource. An authorized local attacker can exploit this flaw to read sensitive data from kernel memory.

Affected products:

  • Windows Kernel-Mode Drivers

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96247

Related in this roundup: CVE-2026-69971, CVE-2026-83834, CVE-2026-85857, CVE-2026-85871, CVE-2026-96849, CVE-2026-83568, CVE-2026-83637, CVE-2026-83837, CVE-2026-96915.

CVE-2026-96248

CVE-2026-96248 is a stack-based buffer overflow vulnerability in the Windows Host Guardian Service that can be exploited by an unauthorized remote attacker to cause a denial-of-service condition on the target system.

Affected products:

  • Windows Host Guardian Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96248

Related in this roundup: CVE-2026-87709, CVE-2026-88072.

CVE-2026-96302

CVE-2026-96302 describes a use-after-free vulnerability within the Windows Installer service that enables an authenticated local attacker to escalate their privileges. Detection and mitigation should focus on ensuring all Windows systems are patched against this elevation of privilege flaw.

Affected products:

  • Windows Installer

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96302

Related in this roundup: CVE-2026-108468, CVE-2026-70272, CVE-2026-83708, CVE-2026-83775, CVE-2026-83779, CVE-2026-85358, CVE-2026-85361, CVE-2026-85364, CVE-2026-85366, CVE-2026-85374, CVE-2026-85796, CVE-2026-85830, CVE-2026-88080, CVE-2026-87708, CVE-2026-87711, CVE-2026-88124, CVE-2026-96305, CVE-2026-96307, CVE-2026-96308, CVE-2026-69471, CVE-2026-69635, CVE-2026-83672, CVE-2026-83676, CVE-2026-83680, CVE-2026-83702, CVE-2026-83717, CVE-2026-83718, CVE-2026-83752, CVE-2026-83767, CVE-2026-83899, CVE-2026-85941, CVE-2026-88076, CVE-2026-87693, CVE-2026-87694, CVE-2026-87704, CVE-2026-87700, CVE-2026-87715.

CVE-2026-96305

A use-after-free vulnerability in the Windows Installer service allows an authorized local attacker to achieve privilege escalation by exploiting the way the service handles memory during installation processes.

Affected products:

  • Windows Installer

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96305

Related in this roundup: CVE-2026-108468, CVE-2026-70272, CVE-2026-83708, CVE-2026-83775, CVE-2026-83779, CVE-2026-85358, CVE-2026-85361, CVE-2026-85364, CVE-2026-85366, CVE-2026-85374, CVE-2026-85796, CVE-2026-85830, CVE-2026-88080, CVE-2026-87708, CVE-2026-87711, CVE-2026-88124, CVE-2026-96302, CVE-2026-96307, CVE-2026-96308, CVE-2026-69471, CVE-2026-69635, CVE-2026-83672, CVE-2026-83676, CVE-2026-83680, CVE-2026-83702, CVE-2026-83717, CVE-2026-83718, CVE-2026-83752, CVE-2026-83767, CVE-2026-83899, CVE-2026-85941, CVE-2026-88076, CVE-2026-87693, CVE-2026-87694, CVE-2026-87704, CVE-2026-87700, CVE-2026-87715.

CVE-2026-96306

The Windows Sysmain Service contains an out-of-bounds read vulnerability that can be exploited by a locally authenticated attacker to achieve privilege escalation.

Affected products:

  • Windows Sysmain Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96306

CVE-2026-96307

CVE-2026-96307 is a local privilege escalation vulnerability in the Windows Installer service caused by a use-after-free flaw. An authenticated attacker can exploit this vulnerability to gain elevated privileges on the target system.

Affected products:

  • Windows Installer

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96307

Related in this roundup: CVE-2026-108468, CVE-2026-70272, CVE-2026-83708, CVE-2026-83775, CVE-2026-83779, CVE-2026-85358, CVE-2026-85361, CVE-2026-85364, CVE-2026-85366, CVE-2026-85374, CVE-2026-85796, CVE-2026-85830, CVE-2026-88080, CVE-2026-87708, CVE-2026-87711, CVE-2026-88124, CVE-2026-96302, CVE-2026-96305, CVE-2026-96308, CVE-2026-69471, CVE-2026-69635, CVE-2026-83672, CVE-2026-83676, CVE-2026-83680, CVE-2026-83702, CVE-2026-83717, CVE-2026-83718, CVE-2026-83752, CVE-2026-83767, CVE-2026-83899, CVE-2026-85941, CVE-2026-88076, CVE-2026-87693, CVE-2026-87694, CVE-2026-87704, CVE-2026-87700, CVE-2026-87715.

CVE-2026-96308

A use-after-free vulnerability in the Windows Installer service allows an authorized local attacker to elevate their privileges to a higher integrity level. Detection engineering should monitor for abnormal usage of Windows Installer processes or processes spawned by msiexec.exe that deviate from standard software deployment patterns.

Affected products:

  • Windows Installer

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96308

Related in this roundup: CVE-2026-108468, CVE-2026-70272, CVE-2026-83708, CVE-2026-83775, CVE-2026-83779, CVE-2026-85358, CVE-2026-85361, CVE-2026-85364, CVE-2026-85366, CVE-2026-85374, CVE-2026-85796, CVE-2026-85830, CVE-2026-88080, CVE-2026-87708, CVE-2026-87711, CVE-2026-88124, CVE-2026-96302, CVE-2026-96305, CVE-2026-96307, CVE-2026-69471, CVE-2026-69635, CVE-2026-83672, CVE-2026-83676, CVE-2026-83680, CVE-2026-83702, CVE-2026-83717, CVE-2026-83718, CVE-2026-83752, CVE-2026-83767, CVE-2026-83899, CVE-2026-85941, CVE-2026-88076, CVE-2026-87693, CVE-2026-87694, CVE-2026-87704, CVE-2026-87700, CVE-2026-87715.

CVE-2026-96314

CVE-2026-96314 is an out-of-bounds read vulnerability in the Windows Audio Service that permits a local, authorized attacker to read sensitive information due to improper memory handling within the service process.

Affected products:

  • Windows Audio Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96314

Related in this roundup: CVE-2026-70140, CVE-2026-70118, CVE-2026-83571, CVE-2026-83644, CVE-2026-70230, CVE-2026-97799.

CVE-2026-96312

A heap-based buffer overflow vulnerability in the Windows Kernel allows a locally authenticated attacker to execute arbitrary code or gain elevated privileges on the target system.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96312

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-96313

CVE-2026-96313 describes a vulnerability in the Windows Push Notifications component where a missing authentication check for a critical function allows a locally authenticated attacker to escalate their privileges. Detection efforts should focus on monitoring for unauthorized attempts to access or interact with push notification services or system-level processes associated with local notification delivery mechanisms.

Affected products:

  • Windows Push Notifications

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96313

Related in this roundup: CVE-2026-70198, CVE-2026-83867.

CVE-2026-96315

A vulnerability in the Windows Overlay Filter allows an authenticated, local attacker to perform unauthorized tampering with system files or processes due to insufficient authorization checks within the component.

Affected products:

  • Windows Overlay Filter

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96315

Related in this roundup: CVE-2026-69942, CVE-2026-69947, CVE-2026-69952, CVE-2026-69953, CVE-2026-69954, CVE-2026-69958, CVE-2026-69967, CVE-2026-83727, CVE-2026-83749, CVE-2026-83879, CVE-2026-105004.

CVE-2026-96316

CVE-2026-96316 describes an improper access control vulnerability in the Windows Routing and Remote Access Service (RRAS). An authorized local attacker can exploit this flaw to perform unauthorized tampering with the service, potentially leading to unauthorized configuration changes or privilege escalation on the affected system.

Affected products:

  • Routing and Remote Access Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96316

Related in this roundup: CVE-2026-85809, CVE-2026-70057, CVE-2026-84020, CVE-2026-85322, CVE-2026-85808, CVE-2026-96245, CVE-2026-70158.

CVE-2026-96317

CVE-2026-96317 is a privilege escalation vulnerability in the Windows Kernel caused by a use-after-free defect. An authorized local attacker can exploit this flaw to execute code with elevated privileges on the affected system.

Affected products:

  • Windows Kernel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96317

Related in this roundup: CVE-2026-108462, CVE-2026-108466, CVE-2026-70063, CVE-2026-70106, CVE-2026-70121, CVE-2026-70114, CVE-2026-83690, CVE-2026-83768, CVE-2026-83833, CVE-2026-85372, CVE-2026-85836, CVE-2026-85837, CVE-2026-70170, CVE-2026-85939, CVE-2026-85945, CVE-2026-96216, CVE-2026-96868, CVE-2026-70199, CVE-2026-70232, CVE-2026-83736, CVE-2026-83735, CVE-2026-83918, CVE-2026-83924, CVE-2026-83925, CVE-2026-88134, CVE-2026-88139, CVE-2026-88141, CVE-2026-70160, CVE-2026-70111, CVE-2026-96913, CVE-2026-96929, CVE-2026-102207, CVE-2026-103578, CVE-2026-97803.

CVE-2026-96319

A use-after-free vulnerability in the Windows USB Print Driver allows a locally authenticated attacker to escalate privileges. The vulnerability resides within the driver's memory management, where improper handling of memory objects leads to a potential privilege escalation condition.

Affected products:

  • Windows USB Print Driver

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96319

Related in this roundup: CVE-2026-96301, CVE-2026-96310.

CVE-2026-96318

A heap-based buffer overflow vulnerability in Windows Resume allows a locally authenticated attacker to gain elevated privileges on the system.

Affected products:

  • Windows Resume

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96318

CVE-2026-96849

CVE-2026-96849 describes an information disclosure vulnerability in Windows Kernel-Mode Drivers caused by the use of an uninitialized resource. An authenticated attacker could exploit this vulnerability locally to access sensitive information.

Affected products:

  • Windows Kernel-Mode Drivers

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96849

Related in this roundup: CVE-2026-69971, CVE-2026-83834, CVE-2026-85857, CVE-2026-85871, CVE-2026-96247, CVE-2026-83568, CVE-2026-83637, CVE-2026-83837, CVE-2026-96915.

CVE-2026-96848

CVE-2026-96848 describes a buffer over-read vulnerability within the Windows Win32 Kernel Subsystem. This flaw allows an attacker who already possesses authorized access to the system to perform unauthorized local information disclosure, potentially exposing sensitive memory contents.

Affected products:

  • Windows Win32 Kernel Subsystem

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96848

Related in this roundup: CVE-2026-85858, CVE-2026-83756.

CVE-2026-96866

CVE-2026-96866 is a denial of service vulnerability in the Microsoft Network Device Enrollment Service (NDES) caused by an out-of-bounds read. An unauthorized remote attacker can exploit this flaw to crash the service, resulting in a loss of availability for enrollment requests.

Affected products:

  • Network Device Enrollment Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96866

Related in this roundup: CVE-2026-85323, CVE-2026-96861, CVE-2026-69802.

CVE-2026-96851

CVE-2026-96851 is a buffer over-read vulnerability in the Windows Management Instrumentation (WMI) service that enables a locally authenticated attacker to perform unauthorized information disclosure. Detection should focus on monitoring WMI activity for anomalous query patterns or unexpected process behavior associated with WMI service interactions.

Affected products:

  • Windows Management Instrumentation

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96851

Related in this roundup: CVE-2026-85362, CVE-2026-85852, CVE-2026-88091, CVE-2026-96856, CVE-2026-83724, CVE-2026-83783.

CVE-2026-96862

A vulnerability exists in the Windows Spaceport.sys driver involving an out-of-bounds read that allows a locally authorized attacker to escalate their privileges to a higher level of authority on the system.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96862

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-96855

An improper access control vulnerability in Windows Modern Device Management (MDM) allows a locally authenticated attacker to perform unauthorized tampering with MDM configurations, potentially leading to security setting bypass or privilege escalation.

Affected products:

  • Windows Modern Device Management

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96855

Related in this roundup: CVE-2026-108133, CVE-2026-108396, CVE-2026-83654, CVE-2026-83657, CVE-2026-85833, CVE-2026-83656, CVE-2026-83697, CVE-2026-96850.

CVE-2026-96856

A heap-based buffer overflow vulnerability in Windows Management Instrumentation (WMI) allows an authenticated local attacker to escalate their privileges. Successful exploitation requires an attacker to already have local access to the system to trigger the vulnerable service process.

Affected products:

  • Windows Management Instrumentation

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96856

Related in this roundup: CVE-2026-85362, CVE-2026-85852, CVE-2026-88091, CVE-2026-96851, CVE-2026-83724, CVE-2026-83783.

CVE-2026-96857

A vulnerability exists in the Windows Projected File System (ProjFS) that allows an authorized attacker to gain unauthorized access to local information by exploiting the way files or directories are exposed to external parties.

Affected products:

  • Windows Projected File System

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96857

Related in this roundup: CVE-2026-84009, CVE-2026-85328, CVE-2026-70084.

CVE-2026-96863

CVE-2026-96863 is a heap-based buffer overflow vulnerability in the Windows Storage Port Driver that enables a local attacker with physical access to the target system to perform an elevation of privilege attack.

Affected products:

  • Windows Storage Port Driver

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96863

Related in this roundup: CVE-2026-88226, CVE-2026-102188.

CVE-2026-96859

CVE-2026-96859 is an information disclosure vulnerability in the Windows Imaging Component caused by an out-of-bounds read flaw. A locally authenticated attacker can exploit this vulnerability to access sensitive information on the host system.

Affected products:

  • Windows Imaging Component

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96859

Related in this roundup: CVE-2026-69886, CVE-2026-77496.

CVE-2026-96860

CVE-2026-96860 is an out-of-bounds read vulnerability in the Windows USB Print Driver that enables a locally authenticated attacker to perform information disclosure by reading memory outside of the designated buffer bounds.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96860

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-96861

The Network Device Enrollment Service (NDES) in Microsoft Windows is affected by an out-of-bounds read vulnerability, which can be exploited by an unauthorized remote attacker to cause a denial of service condition.

Affected products:

  • Network Device Enrollment Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96861

Related in this roundup: CVE-2026-85323, CVE-2026-96866, CVE-2026-69802.

CVE-2026-96864

CVE-2026-96864 is a vulnerability in the Microsoft Failover Cluster Virtual Driver involving a double-free condition. This flaw enables an unauthenticated attacker to achieve remote code execution (RCE) over a network by triggering the memory corruption within the driver.

Affected products:

  • Failover Cluster Virtual Driver

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96864

CVE-2026-96865

CVE-2026-96865 is an information disclosure vulnerability in the Windows Secure Kernel Mode. An authorized local attacker can exploit this flaw to gain unauthorized access to sensitive system information, potentially facilitating further exploitation steps by bypassing kernel-level protections.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96865

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-96867

An out-of-bounds read vulnerability exists in the Windows NTFS driver that can be exploited by an authorized attacker to achieve remote code execution, typically resulting in privilege escalation on the affected system.

Affected products:

  • Windows NTFS

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96867

CVE-2026-96868

A heap-based buffer overflow vulnerability exists in the Windows Kernel that allows a locally authenticated attacker to escalate their privileges to a higher level of access.

Affected products:

  • Windows Kernel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96868

Related in this roundup: CVE-2026-108462, CVE-2026-108466, CVE-2026-70063, CVE-2026-70106, CVE-2026-70121, CVE-2026-70114, CVE-2026-83690, CVE-2026-83768, CVE-2026-83833, CVE-2026-85372, CVE-2026-85836, CVE-2026-85837, CVE-2026-70170, CVE-2026-85939, CVE-2026-85945, CVE-2026-96216, CVE-2026-96317, CVE-2026-70199, CVE-2026-70232, CVE-2026-83736, CVE-2026-83735, CVE-2026-83918, CVE-2026-83924, CVE-2026-83925, CVE-2026-88134, CVE-2026-88139, CVE-2026-88141, CVE-2026-70160, CVE-2026-70111, CVE-2026-96913, CVE-2026-96929, CVE-2026-102207, CVE-2026-103578, CVE-2026-97803.

CVE-2026-96920

A heap-based buffer overflow vulnerability in the Windows Program Compatibility Assistant Service allows a locally authenticated attacker to escalate their privileges to a higher integrity level. Detection should focus on monitoring for abnormal process behavior or crashes associated with the compatibility assistant service.

Affected products:

  • Windows Program Compatibility Assistant Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96920

Related in this roundup: CVE-2026-72968, CVE-2026-72934, CVE-2026-69743, CVE-2026-69596, CVE-2026-83781.

CVE-2026-96921

CVE-2026-96921 is an information disclosure vulnerability in the Windows Message Queuing Queue Manager component. The vulnerability is caused by a type confusion issue, which allows an authorized local attacker to access and disclose sensitive information from the system.

Affected products:

  • Windows Message Queuing

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96921

Related in this roundup: CVE-2026-108460, CVE-2026-85334, CVE-2026-85860, CVE-2026-85859.

CVE-2026-96928

CVE-2026-96928 is an out-of-bounds read vulnerability in the Windows NTFS driver that permits a locally authenticated attacker to escalate their privileges. This vulnerability exists within the kernel-mode driver, and successful exploitation allows the attacker to gain higher-level permissions on the compromised system.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96928

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-96935

CVE-2026-96935 describes an information disclosure vulnerability in the Windows NTFS file system. An authorized local attacker can exploit this flaw to gain unauthorized access to sensitive system information.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96935

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-96943

CVE-2026-96943 is a remote code execution vulnerability in the Windows Raw Image Extension caused by an integer overflow or wraparound condition. A remote, unauthorized attacker can exploit this flaw to execute arbitrary code on an affected system via a specially crafted file or network-based interaction.

Affected products:

  • Windows Raw Image Extension

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96943

Related in this roundup: CVE-2026-96202.

CVE-2026-69452

A use-after-free vulnerability exists in the Windows Enterprise App Management component, which may allow an authenticated attacker to perform a privilege escalation over a network.

Affected products:

  • Windows Enterprise App Management

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69452

CVE-2026-95904

CVE-2026-95904 identifies a buffer over-read vulnerability within the Windows Event Logging Service. An authenticated attacker can exploit this flaw to perform local information disclosure, potentially exposing sensitive data stored or processed by the service.

Affected products:

  • Windows Event Logging Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95904

Related in this roundup: CVE-2026-83723, CVE-2026-83695, CVE-2026-83856.

CVE-2026-96108

CVE-2026-96108 describes a use-after-free vulnerability within the Desktop Window Manager (DWM) component of Windows. An authorized, locally authenticated attacker can exploit this flaw to execute code or manipulate system processes to achieve privilege escalation.

Affected products:

  • Desktop Window Manager

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96108

Related in this roundup: CVE-2026-69926, CVE-2026-69974, CVE-2026-70234, CVE-2026-70255, CVE-2026-69880, CVE-2026-70228, CVE-2026-88093.

CVE-2026-96995

CVE-2026-96995 is a stack-based buffer overflow vulnerability in Microsoft Office Word that enables an authorized local attacker to elevate their privileges on the host system.

Affected products:

  • Office Word

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96995

Related in this roundup: CVE-2026-70300, CVE-2026-105715, CVE-2026-70268, CVE-2026-70220, CVE-2026-70206, CVE-2026-70269, CVE-2026-70263, CVE-2026-70287, CVE-2026-70302, CVE-2026-70301, CVE-2026-83891, CVE-2026-88167, CVE-2026-88169, CVE-2026-88202, CVE-2026-97001, CVE-2026-88185, CVE-2026-88186, CVE-2026-108426, CVE-2026-108427, CVE-2026-108428, CVE-2026-108429, CVE-2026-108430, CVE-2026-108431, CVE-2026-108432, CVE-2026-108433, CVE-2026-108437, CVE-2026-108439, CVE-2026-108440, CVE-2026-108441, CVE-2026-108443, CVE-2026-108445, CVE-2026-108447, CVE-2026-108449, CVE-2026-108450, CVE-2026-108451.

CVE-2026-96996

CVE-2026-96996 is a heap-based buffer overflow vulnerability in Microsoft Office Word that enables an unauthorized attacker to execute arbitrary code locally. Detection should focus on monitoring for abnormal process execution chains or crashes originating from Winword.exe or associated components when handling malformed documents.

Affected products:

  • Office

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96996

Related in this roundup: CVE-2026-102867, CVE-2026-88150, CVE-2026-88145, CVE-2026-88197, CVE-2026-88196, CVE-2026-97754, CVE-2026-69922, CVE-2026-108442.

CVE-2026-97005

CVE-2026-97005 describes an out-of-bounds read vulnerability in Microsoft Office PowerPoint that can be exploited by an unauthorized attacker to perform local information disclosure.

Affected products:

  • Office PowerPoint

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97005

Related in this roundup: CVE-2026-105599, CVE-2026-88183, CVE-2026-88207.

CVE-2026-97749

CVE-2026-97749 describes a double-free vulnerability in Microsoft Office Outlook that enables an unauthorized remote attacker to achieve remote code execution over a network.

Affected products:

  • Office Outlook

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97749

Related in this roundup: CVE-2026-88156, CVE-2026-97016, CVE-2026-70256, CVE-2026-70257, CVE-2026-70291, CVE-2026-70242.

CVE-2026-97001

CVE-2026-97001 is a heap-based buffer overflow vulnerability in Microsoft Office Word that enables an unauthorized attacker to achieve remote code execution on the target system by exploiting the way the application handles memory.

Affected products:

  • Office Word

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97001

Related in this roundup: CVE-2026-70300, CVE-2026-105715, CVE-2026-70268, CVE-2026-70220, CVE-2026-70206, CVE-2026-70269, CVE-2026-70263, CVE-2026-70287, CVE-2026-70302, CVE-2026-70301, CVE-2026-83891, CVE-2026-88167, CVE-2026-88169, CVE-2026-88202, CVE-2026-96995, CVE-2026-88185, CVE-2026-88186, CVE-2026-108426, CVE-2026-108427, CVE-2026-108428, CVE-2026-108429, CVE-2026-108430, CVE-2026-108431, CVE-2026-108432, CVE-2026-108433, CVE-2026-108437, CVE-2026-108439, CVE-2026-108440, CVE-2026-108441, CVE-2026-108443, CVE-2026-108445, CVE-2026-108447, CVE-2026-108449, CVE-2026-108450, CVE-2026-108451.

CVE-2026-97744

CVE-2026-97744 describes an out-of-bounds read vulnerability in Microsoft Office PowerPoint that enables an attacker to perform local information disclosure. This vulnerability can be leveraged to access sensitive data residing in memory that should not be accessible to the application process.

Affected products:

  • PowerPoint

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97744

Related in this roundup: CVE-2026-88178, CVE-2026-70215, CVE-2026-88144, CVE-2026-88203.

CVE-2026-96997

CVE-2026-96997 is a local privilege escalation vulnerability in Microsoft OneNote triggered by a use-after-free condition. An authorized attacker can exploit this flaw to elevate their privileges on an affected system.

Affected products:

  • OneNote

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96997

Related in this roundup: CVE-2026-97781.

CVE-2026-97014

CVE-2026-97014 is an out-of-bounds read vulnerability in Microsoft Office Excel that allows a local, unauthorized attacker to disclose sensitive information by exploiting improper memory handling.

Affected products:

  • Office Excel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97014

Related in this roundup: CVE-2026-88151, CVE-2026-88201, CVE-2026-97750, CVE-2026-97767, CVE-2026-70214, CVE-2026-70254, CVE-2026-88190, CVE-2026-97748, CVE-2026-97769, CVE-2026-97760, CVE-2026-97004, CVE-2026-97741, CVE-2026-97772, CVE-2026-100209, CVE-2026-100212.

CVE-2026-97009

CVE-2026-97009 is a heap-based buffer overflow vulnerability in Microsoft Excel that can be exploited by an unauthorized attacker to achieve remote code execution. Detection efforts should focus on anomalous child processes spawned by Excel and monitoring for memory corruption patterns consistent with heap exploitation.

Affected products:

  • Excel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97009

Related in this roundup: CVE-2026-105718, CVE-2026-88153, CVE-2026-88175, CVE-2026-97753, CVE-2026-97017, CVE-2026-97740, CVE-2026-97766, CVE-2026-97003, CVE-2026-97751, CVE-2026-97776, CVE-2026-97752, CVE-2026-97758, CVE-2026-97761, CVE-2026-97747, CVE-2026-97780, CVE-2026-97770, CVE-2026-97771, CVE-2026-97755, CVE-2026-97765, CVE-2026-97739, CVE-2026-97778, CVE-2026-97759, CVE-2026-77902, CVE-2026-88154, CVE-2026-88172, CVE-2026-88184, CVE-2026-88192, CVE-2026-88195, CVE-2026-97007, CVE-2026-97779, CVE-2026-97756, CVE-2026-97008, CVE-2026-97773, CVE-2026-97010, CVE-2026-97743, CVE-2026-97777, CVE-2026-97762, CVE-2026-97011, CVE-2026-97757, CVE-2026-97738, CVE-2026-97742, CVE-2026-97746, CVE-2026-97763, CVE-2026-97775, CVE-2026-97768, CVE-2026-97745, CVE-2026-100211, CVE-2026-100210, CVE-2026-108446.

CVE-2026-97750

CVE-2026-97750 is a stack-based buffer overflow vulnerability in Microsoft Office Excel that enables an unauthorized remote attacker to execute arbitrary code. Detection should focus on monitoring anomalous file-parsing activities or unexpected child process spawning from excel.exe when handling untrusted spreadsheet files.

Affected products:

  • Office Excel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97750

Related in this roundup: CVE-2026-88151, CVE-2026-88201, CVE-2026-97014, CVE-2026-97767, CVE-2026-70214, CVE-2026-70254, CVE-2026-88190, CVE-2026-97748, CVE-2026-97769, CVE-2026-97760, CVE-2026-97004, CVE-2026-97741, CVE-2026-97772, CVE-2026-100209, CVE-2026-100212.

CVE-2026-97753

A heap-based buffer overflow vulnerability in Microsoft Excel allows a remote, unauthorized attacker to execute arbitrary code. The vulnerability occurs due to improper memory handling when processing malicious Excel files, potentially allowing an attacker to achieve code execution on the victim's system.

Affected products:

  • Excel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97753

Related in this roundup: CVE-2026-105718, CVE-2026-88153, CVE-2026-88175, CVE-2026-97009, CVE-2026-97017, CVE-2026-97740, CVE-2026-97766, CVE-2026-97003, CVE-2026-97751, CVE-2026-97776, CVE-2026-97752, CVE-2026-97758, CVE-2026-97761, CVE-2026-97747, CVE-2026-97780, CVE-2026-97770, CVE-2026-97771, CVE-2026-97755, CVE-2026-97765, CVE-2026-97739, CVE-2026-97778, CVE-2026-97759, CVE-2026-77902, CVE-2026-88154, CVE-2026-88172, CVE-2026-88184, CVE-2026-88192, CVE-2026-88195, CVE-2026-97007, CVE-2026-97779, CVE-2026-97756, CVE-2026-97008, CVE-2026-97773, CVE-2026-97010, CVE-2026-97743, CVE-2026-97777, CVE-2026-97762, CVE-2026-97011, CVE-2026-97757, CVE-2026-97738, CVE-2026-97742, CVE-2026-97746, CVE-2026-97763, CVE-2026-97775, CVE-2026-97768, CVE-2026-97745, CVE-2026-100211, CVE-2026-100210, CVE-2026-108446.

CVE-2026-97017

CVE-2026-97017 describes a use-after-free vulnerability in Microsoft Office Excel that can be exploited by a remote attacker to achieve arbitrary code execution. The vulnerability is triggered during the processing of malicious files, allowing an unauthorized user to execute code over the network.

Affected products:

  • Excel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97017

Related in this roundup: CVE-2026-105718, CVE-2026-88153, CVE-2026-88175, CVE-2026-97009, CVE-2026-97753, CVE-2026-97740, CVE-2026-97766, CVE-2026-97003, CVE-2026-97751, CVE-2026-97776, CVE-2026-97752, CVE-2026-97758, CVE-2026-97761, CVE-2026-97747, CVE-2026-97780, CVE-2026-97770, CVE-2026-97771, CVE-2026-97755, CVE-2026-97765, CVE-2026-97739, CVE-2026-97778, CVE-2026-97759, CVE-2026-77902, CVE-2026-88154, CVE-2026-88172, CVE-2026-88184, CVE-2026-88192, CVE-2026-88195, CVE-2026-97007, CVE-2026-97779, CVE-2026-97756, CVE-2026-97008, CVE-2026-97773, CVE-2026-97010, CVE-2026-97743, CVE-2026-97777, CVE-2026-97762, CVE-2026-97011, CVE-2026-97757, CVE-2026-97738, CVE-2026-97742, CVE-2026-97746, CVE-2026-97763, CVE-2026-97775, CVE-2026-97768, CVE-2026-97745, CVE-2026-100211, CVE-2026-100210, CVE-2026-108446.

CVE-2026-97740

CVE-2026-97740 describes an information disclosure vulnerability in Microsoft Excel. The vulnerability allows an unauthorized attacker to expose sensitive system information over a network by leveraging the lack of proper protection against unauthorized access to the control sphere.

Affected products:

  • Excel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97740

Related in this roundup: CVE-2026-105718, CVE-2026-88153, CVE-2026-88175, CVE-2026-97009, CVE-2026-97753, CVE-2026-97017, CVE-2026-97766, CVE-2026-97003, CVE-2026-97751, CVE-2026-97776, CVE-2026-97752, CVE-2026-97758, CVE-2026-97761, CVE-2026-97747, CVE-2026-97780, CVE-2026-97770, CVE-2026-97771, CVE-2026-97755, CVE-2026-97765, CVE-2026-97739, CVE-2026-97778, CVE-2026-97759, CVE-2026-77902, CVE-2026-88154, CVE-2026-88172, CVE-2026-88184, CVE-2026-88192, CVE-2026-88195, CVE-2026-97007, CVE-2026-97779, CVE-2026-97756, CVE-2026-97008, CVE-2026-97773, CVE-2026-97010, CVE-2026-97743, CVE-2026-97777, CVE-2026-97762, CVE-2026-97011, CVE-2026-97757, CVE-2026-97738, CVE-2026-97742, CVE-2026-97746, CVE-2026-97763, CVE-2026-97775, CVE-2026-97768, CVE-2026-97745, CVE-2026-100211, CVE-2026-100210, CVE-2026-108446.

CVE-2026-97766

CVE-2026-97766 is a heap-based buffer overflow vulnerability in Microsoft Office Excel that enables a remote, unauthorized attacker to execute arbitrary code. The vulnerability exists within the application's processing of malicious Excel files, allowing for code execution via network-delivered vectors.

Affected products:

  • Excel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97766

Related in this roundup: CVE-2026-105718, CVE-2026-88153, CVE-2026-88175, CVE-2026-97009, CVE-2026-97753, CVE-2026-97017, CVE-2026-97740, CVE-2026-97003, CVE-2026-97751, CVE-2026-97776, CVE-2026-97752, CVE-2026-97758, CVE-2026-97761, CVE-2026-97747, CVE-2026-97780, CVE-2026-97770, CVE-2026-97771, CVE-2026-97755, CVE-2026-97765, CVE-2026-97739, CVE-2026-97778, CVE-2026-97759, CVE-2026-77902, CVE-2026-88154, CVE-2026-88172, CVE-2026-88184, CVE-2026-88192, CVE-2026-88195, CVE-2026-97007, CVE-2026-97779, CVE-2026-97756, CVE-2026-97008, CVE-2026-97773, CVE-2026-97010, CVE-2026-97743, CVE-2026-97777, CVE-2026-97762, CVE-2026-97011, CVE-2026-97757, CVE-2026-97738, CVE-2026-97742, CVE-2026-97746, CVE-2026-97763, CVE-2026-97775, CVE-2026-97768, CVE-2026-97745, CVE-2026-100211, CVE-2026-100210, CVE-2026-108446.

CVE-2026-97003

CVE-2026-97003 is a heap-based buffer overflow vulnerability in Microsoft Excel that allows an unauthenticated, remote attacker to achieve arbitrary code execution. Detection engineering teams should focus on identifying malformed Excel files or anomalous process behavior originating from the Excel application.

Affected products:

  • Excel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97003

Related in this roundup: CVE-2026-105718, CVE-2026-88153, CVE-2026-88175, CVE-2026-97009, CVE-2026-97753, CVE-2026-97017, CVE-2026-97740, CVE-2026-97766, CVE-2026-97751, CVE-2026-97776, CVE-2026-97752, CVE-2026-97758, CVE-2026-97761, CVE-2026-97747, CVE-2026-97780, CVE-2026-97770, CVE-2026-97771, CVE-2026-97755, CVE-2026-97765, CVE-2026-97739, CVE-2026-97778, CVE-2026-97759, CVE-2026-77902, CVE-2026-88154, CVE-2026-88172, CVE-2026-88184, CVE-2026-88192, CVE-2026-88195, CVE-2026-97007, CVE-2026-97779, CVE-2026-97756, CVE-2026-97008, CVE-2026-97773, CVE-2026-97010, CVE-2026-97743, CVE-2026-97777, CVE-2026-97762, CVE-2026-97011, CVE-2026-97757, CVE-2026-97738, CVE-2026-97742, CVE-2026-97746, CVE-2026-97763, CVE-2026-97775, CVE-2026-97768, CVE-2026-97745, CVE-2026-100211, CVE-2026-100210, CVE-2026-108446.

CVE-2026-97751

CVE-2026-97751 is a heap-based buffer overflow vulnerability in Microsoft Excel that enables a remote, unauthorized attacker to execute arbitrary code. The vulnerability allows for remote code execution, typically triggered by an attacker crafting a malicious file or exploiting a network interaction to trigger the memory corruption during the parsing of Excel files.

Affected products:

  • Excel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97751

Related in this roundup: CVE-2026-105718, CVE-2026-88153, CVE-2026-88175, CVE-2026-97009, CVE-2026-97753, CVE-2026-97017, CVE-2026-97740, CVE-2026-97766, CVE-2026-97003, CVE-2026-97776, CVE-2026-97752, CVE-2026-97758, CVE-2026-97761, CVE-2026-97747, CVE-2026-97780, CVE-2026-97770, CVE-2026-97771, CVE-2026-97755, CVE-2026-97765, CVE-2026-97739, CVE-2026-97778, CVE-2026-97759, CVE-2026-77902, CVE-2026-88154, CVE-2026-88172, CVE-2026-88184, CVE-2026-88192, CVE-2026-88195, CVE-2026-97007, CVE-2026-97779, CVE-2026-97756, CVE-2026-97008, CVE-2026-97773, CVE-2026-97010, CVE-2026-97743, CVE-2026-97777, CVE-2026-97762, CVE-2026-97011, CVE-2026-97757, CVE-2026-97738, CVE-2026-97742, CVE-2026-97746, CVE-2026-97763, CVE-2026-97775, CVE-2026-97768, CVE-2026-97745, CVE-2026-100211, CVE-2026-100210, CVE-2026-108446.

CVE-2026-97776

CVE-2026-97776 is a heap-based buffer overflow vulnerability in Microsoft Excel that enables remote code execution. An attacker can exploit this flaw by sending a specially crafted file to a user over a network, leading to unauthorized code execution within the context of the application.

Affected products:

  • Excel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97776

Related in this roundup: CVE-2026-105718, CVE-2026-88153, CVE-2026-88175, CVE-2026-97009, CVE-2026-97753, CVE-2026-97017, CVE-2026-97740, CVE-2026-97766, CVE-2026-97003, CVE-2026-97751, CVE-2026-97752, CVE-2026-97758, CVE-2026-97761, CVE-2026-97747, CVE-2026-97780, CVE-2026-97770, CVE-2026-97771, CVE-2026-97755, CVE-2026-97765, CVE-2026-97739, CVE-2026-97778, CVE-2026-97759, CVE-2026-77902, CVE-2026-88154, CVE-2026-88172, CVE-2026-88184, CVE-2026-88192, CVE-2026-88195, CVE-2026-97007, CVE-2026-97779, CVE-2026-97756, CVE-2026-97008, CVE-2026-97773, CVE-2026-97010, CVE-2026-97743, CVE-2026-97777, CVE-2026-97762, CVE-2026-97011, CVE-2026-97757, CVE-2026-97738, CVE-2026-97742, CVE-2026-97746, CVE-2026-97763, CVE-2026-97775, CVE-2026-97768, CVE-2026-97745, CVE-2026-100211, CVE-2026-100210, CVE-2026-108446.

CVE-2026-97752

Microsoft Office Excel contains a use-after-free vulnerability that allows a remote, unauthorized attacker to achieve remote code execution. The vulnerability is triggered when processing specially crafted Excel files over a network.

Affected products:

  • Excel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97752

Related in this roundup: CVE-2026-105718, CVE-2026-88153, CVE-2026-88175, CVE-2026-97009, CVE-2026-97753, CVE-2026-97017, CVE-2026-97740, CVE-2026-97766, CVE-2026-97003, CVE-2026-97751, CVE-2026-97776, CVE-2026-97758, CVE-2026-97761, CVE-2026-97747, CVE-2026-97780, CVE-2026-97770, CVE-2026-97771, CVE-2026-97755, CVE-2026-97765, CVE-2026-97739, CVE-2026-97778, CVE-2026-97759, CVE-2026-77902, CVE-2026-88154, CVE-2026-88172, CVE-2026-88184, CVE-2026-88192, CVE-2026-88195, CVE-2026-97007, CVE-2026-97779, CVE-2026-97756, CVE-2026-97008, CVE-2026-97773, CVE-2026-97010, CVE-2026-97743, CVE-2026-97777, CVE-2026-97762, CVE-2026-97011, CVE-2026-97757, CVE-2026-97738, CVE-2026-97742, CVE-2026-97746, CVE-2026-97763, CVE-2026-97775, CVE-2026-97768, CVE-2026-97745, CVE-2026-100211, CVE-2026-100210, CVE-2026-108446.

CVE-2026-97758

CVE-2026-97758 is a heap-based buffer overflow vulnerability in Microsoft Office Excel that enables an unauthorized remote attacker to achieve remote code execution (RCE) via network-based vectors.

Affected products:

  • Excel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97758

Related in this roundup: CVE-2026-105718, CVE-2026-88153, CVE-2026-88175, CVE-2026-97009, CVE-2026-97753, CVE-2026-97017, CVE-2026-97740, CVE-2026-97766, CVE-2026-97003, CVE-2026-97751, CVE-2026-97776, CVE-2026-97752, CVE-2026-97761, CVE-2026-97747, CVE-2026-97780, CVE-2026-97770, CVE-2026-97771, CVE-2026-97755, CVE-2026-97765, CVE-2026-97739, CVE-2026-97778, CVE-2026-97759, CVE-2026-77902, CVE-2026-88154, CVE-2026-88172, CVE-2026-88184, CVE-2026-88192, CVE-2026-88195, CVE-2026-97007, CVE-2026-97779, CVE-2026-97756, CVE-2026-97008, CVE-2026-97773, CVE-2026-97010, CVE-2026-97743, CVE-2026-97777, CVE-2026-97762, CVE-2026-97011, CVE-2026-97757, CVE-2026-97738, CVE-2026-97742, CVE-2026-97746, CVE-2026-97763, CVE-2026-97775, CVE-2026-97768, CVE-2026-97745, CVE-2026-100211, CVE-2026-100210, CVE-2026-108446.

CVE-2026-97754

CVE-2026-97754 describes a heap-based buffer overflow vulnerability in Microsoft Office Excel that enables a remote, unauthorized attacker to execute arbitrary code. The vulnerability is triggered via network-based vectors, potentially through malicious file delivery.

Affected products:

  • Office
  • Excel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97754

Related in this roundup: CVE-2026-102867, CVE-2026-88150, CVE-2026-88145, CVE-2026-88197, CVE-2026-88196, CVE-2026-96996, CVE-2026-69922, CVE-2026-108442.

CVE-2026-97761

A stack-based buffer overflow vulnerability in Microsoft Excel allows a remote, unauthorized attacker to execute arbitrary code on the target system. The vulnerability is triggered during the processing of specially crafted files.

Affected products:

  • Excel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97761

Related in this roundup: CVE-2026-105718, CVE-2026-88153, CVE-2026-88175, CVE-2026-97009, CVE-2026-97753, CVE-2026-97017, CVE-2026-97740, CVE-2026-97766, CVE-2026-97003, CVE-2026-97751, CVE-2026-97776, CVE-2026-97752, CVE-2026-97758, CVE-2026-97747, CVE-2026-97780, CVE-2026-97770, CVE-2026-97771, CVE-2026-97755, CVE-2026-97765, CVE-2026-97739, CVE-2026-97778, CVE-2026-97759, CVE-2026-77902, CVE-2026-88154, CVE-2026-88172, CVE-2026-88184, CVE-2026-88192, CVE-2026-88195, CVE-2026-97007, CVE-2026-97779, CVE-2026-97756, CVE-2026-97008, CVE-2026-97773, CVE-2026-97010, CVE-2026-97743, CVE-2026-97777, CVE-2026-97762, CVE-2026-97011, CVE-2026-97757, CVE-2026-97738, CVE-2026-97742, CVE-2026-97746, CVE-2026-97763, CVE-2026-97775, CVE-2026-97768, CVE-2026-97745, CVE-2026-100211, CVE-2026-100210, CVE-2026-108446.

CVE-2026-97747

CVE-2026-97747 is a remote code execution vulnerability in Microsoft Excel caused by a use-after-free condition. An attacker can exploit this flaw by enticing a user to open a specially crafted file, leading to arbitrary code execution within the context of the current user.

Affected products:

  • Excel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97747

Related in this roundup: CVE-2026-105718, CVE-2026-88153, CVE-2026-88175, CVE-2026-97009, CVE-2026-97753, CVE-2026-97017, CVE-2026-97740, CVE-2026-97766, CVE-2026-97003, CVE-2026-97751, CVE-2026-97776, CVE-2026-97752, CVE-2026-97758, CVE-2026-97761, CVE-2026-97780, CVE-2026-97770, CVE-2026-97771, CVE-2026-97755, CVE-2026-97765, CVE-2026-97739, CVE-2026-97778, CVE-2026-97759, CVE-2026-77902, CVE-2026-88154, CVE-2026-88172, CVE-2026-88184, CVE-2026-88192, CVE-2026-88195, CVE-2026-97007, CVE-2026-97779, CVE-2026-97756, CVE-2026-97008, CVE-2026-97773, CVE-2026-97010, CVE-2026-97743, CVE-2026-97777, CVE-2026-97762, CVE-2026-97011, CVE-2026-97757, CVE-2026-97738, CVE-2026-97742, CVE-2026-97746, CVE-2026-97763, CVE-2026-97775, CVE-2026-97768, CVE-2026-97745, CVE-2026-100211, CVE-2026-100210, CVE-2026-108446.

CVE-2026-97780

CVE-2026-97780 is a heap-based buffer overflow vulnerability in Microsoft Excel that allows a remote, unauthorized attacker to execute arbitrary code. The vulnerability occurs due to improper memory handling when processing malicious Excel files, potentially leading to full system compromise if exploited successfully.

Affected products:

  • Excel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97780

Related in this roundup: CVE-2026-105718, CVE-2026-88153, CVE-2026-88175, CVE-2026-97009, CVE-2026-97753, CVE-2026-97017, CVE-2026-97740, CVE-2026-97766, CVE-2026-97003, CVE-2026-97751, CVE-2026-97776, CVE-2026-97752, CVE-2026-97758, CVE-2026-97761, CVE-2026-97747, CVE-2026-97770, CVE-2026-97771, CVE-2026-97755, CVE-2026-97765, CVE-2026-97739, CVE-2026-97778, CVE-2026-97759, CVE-2026-77902, CVE-2026-88154, CVE-2026-88172, CVE-2026-88184, CVE-2026-88192, CVE-2026-88195, CVE-2026-97007, CVE-2026-97779, CVE-2026-97756, CVE-2026-97008, CVE-2026-97773, CVE-2026-97010, CVE-2026-97743, CVE-2026-97777, CVE-2026-97762, CVE-2026-97011, CVE-2026-97757, CVE-2026-97738, CVE-2026-97742, CVE-2026-97746, CVE-2026-97763, CVE-2026-97775, CVE-2026-97768, CVE-2026-97745, CVE-2026-100211, CVE-2026-100210, CVE-2026-108446.

CVE-2026-97767

CVE-2026-97767 is a remote code execution vulnerability in Microsoft Office Excel caused by a double free memory management error. An unauthorized attacker can leverage this flaw to execute arbitrary code on a target system over the network.

Affected products:

  • Office Excel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97767

Related in this roundup: CVE-2026-88151, CVE-2026-88201, CVE-2026-97014, CVE-2026-97750, CVE-2026-70214, CVE-2026-70254, CVE-2026-88190, CVE-2026-97748, CVE-2026-97769, CVE-2026-97760, CVE-2026-97004, CVE-2026-97741, CVE-2026-97772, CVE-2026-100209, CVE-2026-100212.

CVE-2026-97770

Microsoft Office Excel contains a stack-based buffer overflow vulnerability that enables a remote, unauthorized attacker to achieve code execution through the processing of a maliciously crafted file.

Affected products:

  • Excel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97770

Related in this roundup: CVE-2026-105718, CVE-2026-88153, CVE-2026-88175, CVE-2026-97009, CVE-2026-97753, CVE-2026-97017, CVE-2026-97740, CVE-2026-97766, CVE-2026-97003, CVE-2026-97751, CVE-2026-97776, CVE-2026-97752, CVE-2026-97758, CVE-2026-97761, CVE-2026-97747, CVE-2026-97780, CVE-2026-97771, CVE-2026-97755, CVE-2026-97765, CVE-2026-97739, CVE-2026-97778, CVE-2026-97759, CVE-2026-77902, CVE-2026-88154, CVE-2026-88172, CVE-2026-88184, CVE-2026-88192, CVE-2026-88195, CVE-2026-97007, CVE-2026-97779, CVE-2026-97756, CVE-2026-97008, CVE-2026-97773, CVE-2026-97010, CVE-2026-97743, CVE-2026-97777, CVE-2026-97762, CVE-2026-97011, CVE-2026-97757, CVE-2026-97738, CVE-2026-97742, CVE-2026-97746, CVE-2026-97763, CVE-2026-97775, CVE-2026-97768, CVE-2026-97745, CVE-2026-100211, CVE-2026-100210, CVE-2026-108446.

CVE-2026-97771

A use-after-free vulnerability in Microsoft Office Excel enables an unauthorized attacker to achieve remote code execution via network-based vectors. This vulnerability allows for memory corruption that can be leveraged to execute arbitrary code on the victim's system.

Affected products:

  • Excel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97771

Related in this roundup: CVE-2026-105718, CVE-2026-88153, CVE-2026-88175, CVE-2026-97009, CVE-2026-97753, CVE-2026-97017, CVE-2026-97740, CVE-2026-97766, CVE-2026-97003, CVE-2026-97751, CVE-2026-97776, CVE-2026-97752, CVE-2026-97758, CVE-2026-97761, CVE-2026-97747, CVE-2026-97780, CVE-2026-97770, CVE-2026-97755, CVE-2026-97765, CVE-2026-97739, CVE-2026-97778, CVE-2026-97759, CVE-2026-77902, CVE-2026-88154, CVE-2026-88172, CVE-2026-88184, CVE-2026-88192, CVE-2026-88195, CVE-2026-97007, CVE-2026-97779, CVE-2026-97756, CVE-2026-97008, CVE-2026-97773, CVE-2026-97010, CVE-2026-97743, CVE-2026-97777, CVE-2026-97762, CVE-2026-97011, CVE-2026-97757, CVE-2026-97738, CVE-2026-97742, CVE-2026-97746, CVE-2026-97763, CVE-2026-97775, CVE-2026-97768, CVE-2026-97745, CVE-2026-100211, CVE-2026-100210, CVE-2026-108446.

CVE-2026-97755

CVE-2026-97755 is an out-of-bounds read vulnerability in Microsoft Excel that allows a remote, unauthorized attacker to achieve remote code execution via network-based vectors. Detection engineering should focus on monitoring for anomalous Excel process behavior, unexpected file parsing, or memory corruption patterns originating from untrusted network sources.

Affected products:

  • Excel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97755

Related in this roundup: CVE-2026-105718, CVE-2026-88153, CVE-2026-88175, CVE-2026-97009, CVE-2026-97753, CVE-2026-97017, CVE-2026-97740, CVE-2026-97766, CVE-2026-97003, CVE-2026-97751, CVE-2026-97776, CVE-2026-97752, CVE-2026-97758, CVE-2026-97761, CVE-2026-97747, CVE-2026-97780, CVE-2026-97770, CVE-2026-97771, CVE-2026-97765, CVE-2026-97739, CVE-2026-97778, CVE-2026-97759, CVE-2026-77902, CVE-2026-88154, CVE-2026-88172, CVE-2026-88184, CVE-2026-88192, CVE-2026-88195, CVE-2026-97007, CVE-2026-97779, CVE-2026-97756, CVE-2026-97008, CVE-2026-97773, CVE-2026-97010, CVE-2026-97743, CVE-2026-97777, CVE-2026-97762, CVE-2026-97011, CVE-2026-97757, CVE-2026-97738, CVE-2026-97742, CVE-2026-97746, CVE-2026-97763, CVE-2026-97775, CVE-2026-97768, CVE-2026-97745, CVE-2026-100211, CVE-2026-100210, CVE-2026-108446.

CVE-2026-97765

CVE-2026-97765 describes a heap-based buffer overflow vulnerability in Microsoft Excel that allows a remote, unauthorized attacker to achieve remote code execution. Detection efforts should focus on identifying malformed Excel documents or anomalous behavior in the Excel application process.

Affected products:

  • Excel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97765

Related in this roundup: CVE-2026-105718, CVE-2026-88153, CVE-2026-88175, CVE-2026-97009, CVE-2026-97753, CVE-2026-97017, CVE-2026-97740, CVE-2026-97766, CVE-2026-97003, CVE-2026-97751, CVE-2026-97776, CVE-2026-97752, CVE-2026-97758, CVE-2026-97761, CVE-2026-97747, CVE-2026-97780, CVE-2026-97770, CVE-2026-97771, CVE-2026-97755, CVE-2026-97739, CVE-2026-97778, CVE-2026-97759, CVE-2026-77902, CVE-2026-88154, CVE-2026-88172, CVE-2026-88184, CVE-2026-88192, CVE-2026-88195, CVE-2026-97007, CVE-2026-97779, CVE-2026-97756, CVE-2026-97008, CVE-2026-97773, CVE-2026-97010, CVE-2026-97743, CVE-2026-97777, CVE-2026-97762, CVE-2026-97011, CVE-2026-97757, CVE-2026-97738, CVE-2026-97742, CVE-2026-97746, CVE-2026-97763, CVE-2026-97775, CVE-2026-97768, CVE-2026-97745, CVE-2026-100211, CVE-2026-100210, CVE-2026-108446.

CVE-2026-97739

CVE-2026-97739 describes an integer underflow vulnerability in Microsoft Excel that allows an unauthenticated remote attacker to achieve arbitrary code execution. This vulnerability stems from improper handling of integer arithmetic during file processing, potentially triggered by a maliciously crafted Excel document.

Affected products:

  • Excel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97739

Related in this roundup: CVE-2026-105718, CVE-2026-88153, CVE-2026-88175, CVE-2026-97009, CVE-2026-97753, CVE-2026-97017, CVE-2026-97740, CVE-2026-97766, CVE-2026-97003, CVE-2026-97751, CVE-2026-97776, CVE-2026-97752, CVE-2026-97758, CVE-2026-97761, CVE-2026-97747, CVE-2026-97780, CVE-2026-97770, CVE-2026-97771, CVE-2026-97755, CVE-2026-97765, CVE-2026-97778, CVE-2026-97759, CVE-2026-77902, CVE-2026-88154, CVE-2026-88172, CVE-2026-88184, CVE-2026-88192, CVE-2026-88195, CVE-2026-97007, CVE-2026-97779, CVE-2026-97756, CVE-2026-97008, CVE-2026-97773, CVE-2026-97010, CVE-2026-97743, CVE-2026-97777, CVE-2026-97762, CVE-2026-97011, CVE-2026-97757, CVE-2026-97738, CVE-2026-97742, CVE-2026-97746, CVE-2026-97763, CVE-2026-97775, CVE-2026-97768, CVE-2026-97745, CVE-2026-100211, CVE-2026-100210, CVE-2026-108446.

CVE-2026-97778

CVE-2026-97778 describes an integer overflow or wraparound vulnerability in Microsoft Excel that allows an unauthenticated, remote attacker to execute arbitrary code. The vulnerability is triggered during the processing of malformed Excel files, potentially leading to remote code execution on the host machine.

Affected products:

  • Excel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97778

Related in this roundup: CVE-2026-105718, CVE-2026-88153, CVE-2026-88175, CVE-2026-97009, CVE-2026-97753, CVE-2026-97017, CVE-2026-97740, CVE-2026-97766, CVE-2026-97003, CVE-2026-97751, CVE-2026-97776, CVE-2026-97752, CVE-2026-97758, CVE-2026-97761, CVE-2026-97747, CVE-2026-97780, CVE-2026-97770, CVE-2026-97771, CVE-2026-97755, CVE-2026-97765, CVE-2026-97739, CVE-2026-97759, CVE-2026-77902, CVE-2026-88154, CVE-2026-88172, CVE-2026-88184, CVE-2026-88192, CVE-2026-88195, CVE-2026-97007, CVE-2026-97779, CVE-2026-97756, CVE-2026-97008, CVE-2026-97773, CVE-2026-97010, CVE-2026-97743, CVE-2026-97777, CVE-2026-97762, CVE-2026-97011, CVE-2026-97757, CVE-2026-97738, CVE-2026-97742, CVE-2026-97746, CVE-2026-97763, CVE-2026-97775, CVE-2026-97768, CVE-2026-97745, CVE-2026-100211, CVE-2026-100210, CVE-2026-108446.

CVE-2026-97759

CVE-2026-97759 describes a use-after-free vulnerability in Microsoft Office Excel that allows a remote, unauthorized attacker to achieve remote code execution (RCE) over a network.

Affected products:

  • Excel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97759

Related in this roundup: CVE-2026-105718, CVE-2026-88153, CVE-2026-88175, CVE-2026-97009, CVE-2026-97753, CVE-2026-97017, CVE-2026-97740, CVE-2026-97766, CVE-2026-97003, CVE-2026-97751, CVE-2026-97776, CVE-2026-97752, CVE-2026-97758, CVE-2026-97761, CVE-2026-97747, CVE-2026-97780, CVE-2026-97770, CVE-2026-97771, CVE-2026-97755, CVE-2026-97765, CVE-2026-97739, CVE-2026-97778, CVE-2026-77902, CVE-2026-88154, CVE-2026-88172, CVE-2026-88184, CVE-2026-88192, CVE-2026-88195, CVE-2026-97007, CVE-2026-97779, CVE-2026-97756, CVE-2026-97008, CVE-2026-97773, CVE-2026-97010, CVE-2026-97743, CVE-2026-97777, CVE-2026-97762, CVE-2026-97011, CVE-2026-97757, CVE-2026-97738, CVE-2026-97742, CVE-2026-97746, CVE-2026-97763, CVE-2026-97775, CVE-2026-97768, CVE-2026-97745, CVE-2026-100211, CVE-2026-100210, CVE-2026-108446.

CVE-2026-97774

CVE-2026-97774 is a time-of-check time-of-use (TOCTOU) race condition vulnerability in Microsoft Office Click-To-Run. An authenticated attacker can exploit this flaw to perform local privilege escalation on affected Windows systems.

Affected products:

  • Office Click-To-Run

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97774

Related in this roundup: CVE-2026-70276, CVE-2026-88109, CVE-2026-85340.

CVE-2026-97782

CVE-2026-97782 is a tampering vulnerability in Microsoft Office SharePoint that allows an authenticated attacker to modify data or system integrity over the network.

Affected products:

  • SharePoint

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97782

Related in this roundup: CVE-2026-102859, CVE-2026-102860, CVE-2026-102861, CVE-2026-102862, CVE-2026-102863, CVE-2026-102865, CVE-2026-102866, CVE-2026-105720, CVE-2026-69943, CVE-2026-70267, CVE-2026-70251, CVE-2026-70259, CVE-2026-70266, CVE-2026-70298, CVE-2026-85900, CVE-2026-88155, CVE-2026-88198, CVE-2026-88209, CVE-2026-88208, CVE-2026-97783, CVE-2026-70202, CVE-2026-70217, CVE-2026-70246, CVE-2026-85932, CVE-2026-88163, CVE-2026-88164, CVE-2026-88166, CVE-2026-88200, CVE-2026-88206, CVE-2026-96044, CVE-2026-105013.

CVE-2026-97783

CVE-2026-97783 is a spoofing vulnerability in Microsoft SharePoint caused by improper neutralization of input during web page generation. An attacker can exploit this via a cross-site scripting (XSS) vector over a network to perform spoofing attacks against the target application.

Affected products:

  • SharePoint

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97783

Related in this roundup: CVE-2026-102859, CVE-2026-102860, CVE-2026-102861, CVE-2026-102862, CVE-2026-102863, CVE-2026-102865, CVE-2026-102866, CVE-2026-105720, CVE-2026-69943, CVE-2026-70267, CVE-2026-70251, CVE-2026-70259, CVE-2026-70266, CVE-2026-70298, CVE-2026-85900, CVE-2026-88155, CVE-2026-88198, CVE-2026-88209, CVE-2026-88208, CVE-2026-97782, CVE-2026-70202, CVE-2026-70217, CVE-2026-70246, CVE-2026-85932, CVE-2026-88163, CVE-2026-88164, CVE-2026-88166, CVE-2026-88200, CVE-2026-88206, CVE-2026-96044, CVE-2026-105013.

CVE-2026-96096

CVE-2026-96096 is a heap-based buffer overflow vulnerability in Windows Media Player that enables remote code execution. An attacker can exploit this via the network to execute arbitrary code on a vulnerable system.

Affected products:

  • Windows Media Player

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96096

CVE-2026-97789

CVE-2026-97789 describes a use-after-free vulnerability in the Microsoft Remote Desktop Client that allows an unauthenticated, remote attacker to achieve code execution over a network.

Affected products:

  • Remote Desktop Client

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97789

Related in this roundup: CVE-2026-108458, CVE-2026-69976, CVE-2026-83688, CVE-2026-85337, CVE-2026-69984, CVE-2026-69986, CVE-2026-69988, CVE-2026-69987, CVE-2026-69995, CVE-2026-69997, CVE-2026-69996, CVE-2026-69991, CVE-2026-69994, CVE-2026-69998, CVE-2026-70012, CVE-2026-70004, CVE-2026-70006, CVE-2026-103575.

CVE-2026-97794

A heap-based buffer overflow vulnerability in the Windows Container Isolation FS Filter Driver (unionfs.sys) allows a locally authenticated attacker to achieve privilege escalation by exploiting the driver's memory handling.

Affected products:

  • Windows Container Isolation FS Filter Driver

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97794

Related in this roundup: CVE-2026-97790, CVE-2026-97792, CVE-2026-102202, CVE-2026-97810.

CVE-2026-59116

CVE-2026-59116 describes a vulnerability in Windows Remote Desktop where the use of insecure or broken cryptographic algorithms allows a remote, unauthenticated attacker to bypass security features. Detection engineers should monitor for anomalous RDP connection patterns or attempts to negotiate weak cryptographic suites during the authentication handshake.

Affected products:

  • Windows Remote Desktop

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-59116

CVE-2026-62879

CVE-2026-62879 describes a security vulnerability in Windows SmartScreen where a missing authentication mechanism for a critical function enables an authorized local attacker to tamper with the application's security controls. This could allow an attacker to bypass security checks or modify the behavior of the SmartScreen protection mechanism.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62879

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-62687

The Windows Backup Engine contains an improper link resolution vulnerability (link following) that enables a locally authenticated attacker to gain unauthorized access to sensitive information. An attacker must have local access to the system to exploit this vulnerability, which results in information disclosure.

Affected products:

  • Windows Backup Engine

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62687

Related in this roundup: CVE-2026-108135, CVE-2026-70184.

CVE-2026-69931

CVE-2026-69931 is a race condition vulnerability within Windows Storage that enables a local, authorized attacker to achieve privilege escalation by exploiting improper synchronization during concurrent resource access.

Affected products:

  • Windows Storage

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69931

Related in this roundup: CVE-2026-69766, CVE-2026-69935, CVE-2026-83911, CVE-2026-69856, CVE-2026-96944, CVE-2026-100216, CVE-2026-102189.

CVE-2026-69856

CVE-2026-69856 is a privilege escalation vulnerability in Windows Storage caused by a use-after-free flaw. An authorized attacker can exploit this locally to gain elevated privileges on the affected system.

Affected products:

  • Windows Storage

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69856

Related in this roundup: CVE-2026-69766, CVE-2026-69935, CVE-2026-83911, CVE-2026-69931, CVE-2026-96944, CVE-2026-100216, CVE-2026-102189.

CVE-2026-69880

CVE-2026-69880 is a type confusion vulnerability in the Desktop Window Manager (DWM) that allows an authenticated local attacker to gain elevated privileges on the affected Windows system.

Affected products:

  • Desktop Window Manager

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69880

Related in this roundup: CVE-2026-69926, CVE-2026-69974, CVE-2026-70234, CVE-2026-70255, CVE-2026-96108, CVE-2026-70228, CVE-2026-88093.

CVE-2026-69984

CVE-2026-69984 is a use-after-free vulnerability in the Microsoft Remote Desktop Client that allows an unauthenticated, remote attacker to achieve remote code execution over a network.

Affected products:

  • Remote Desktop Client

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69984

Related in this roundup: CVE-2026-108458, CVE-2026-69976, CVE-2026-83688, CVE-2026-85337, CVE-2026-97789, CVE-2026-69986, CVE-2026-69988, CVE-2026-69987, CVE-2026-69995, CVE-2026-69997, CVE-2026-69996, CVE-2026-69991, CVE-2026-69994, CVE-2026-69998, CVE-2026-70012, CVE-2026-70004, CVE-2026-70006, CVE-2026-103575.

CVE-2026-69985

CVE-2026-69985 is a heap-based buffer overflow vulnerability in the Windows implementation of Libarchive. An unauthenticated attacker can exploit this via a network-delivered malicious archive, leading to remote code execution on the target system.

Affected products:

  • Libarchive

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69985

CVE-2026-69986

A use-after-free vulnerability in the Microsoft Remote Desktop Client allows an unauthenticated, remote attacker to achieve code execution by sending a specially crafted packet over the network to a vulnerable client, potentially leading to full system compromise.

Affected products:

  • Remote Desktop Client

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69986

Related in this roundup: CVE-2026-108458, CVE-2026-69976, CVE-2026-83688, CVE-2026-85337, CVE-2026-97789, CVE-2026-69984, CVE-2026-69988, CVE-2026-69987, CVE-2026-69995, CVE-2026-69997, CVE-2026-69996, CVE-2026-69991, CVE-2026-69994, CVE-2026-69998, CVE-2026-70012, CVE-2026-70004, CVE-2026-70006, CVE-2026-103575.

CVE-2026-69988

A use-after-free vulnerability exists in the Microsoft Remote Desktop Client, which can be exploited by an unauthenticated attacker to achieve remote code execution over a network connection.

Affected products:

  • Remote Desktop Client

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69988

Related in this roundup: CVE-2026-108458, CVE-2026-69976, CVE-2026-83688, CVE-2026-85337, CVE-2026-97789, CVE-2026-69984, CVE-2026-69986, CVE-2026-69987, CVE-2026-69995, CVE-2026-69997, CVE-2026-69996, CVE-2026-69991, CVE-2026-69994, CVE-2026-69998, CVE-2026-70012, CVE-2026-70004, CVE-2026-70006, CVE-2026-103575.

CVE-2026-69987

CVE-2026-69987 is a use-after-free vulnerability in the Microsoft Remote Desktop Client that enables a remote, unauthorized attacker to execute arbitrary code over the network. Successful exploitation requires the attacker to trigger memory corruption within the client application.

Affected products:

  • Remote Desktop Client

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69987

Related in this roundup: CVE-2026-108458, CVE-2026-69976, CVE-2026-83688, CVE-2026-85337, CVE-2026-97789, CVE-2026-69984, CVE-2026-69986, CVE-2026-69988, CVE-2026-69995, CVE-2026-69997, CVE-2026-69996, CVE-2026-69991, CVE-2026-69994, CVE-2026-69998, CVE-2026-70012, CVE-2026-70004, CVE-2026-70006, CVE-2026-103575.

CVE-2026-69995

CVE-2026-69995 is a use-after-free vulnerability in the Microsoft Remote Desktop Client that allows a remote, unauthorized attacker to achieve code execution over a network connection.

Affected products:

  • Remote Desktop Client

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69995

Related in this roundup: CVE-2026-108458, CVE-2026-69976, CVE-2026-83688, CVE-2026-85337, CVE-2026-97789, CVE-2026-69984, CVE-2026-69986, CVE-2026-69988, CVE-2026-69987, CVE-2026-69997, CVE-2026-69996, CVE-2026-69991, CVE-2026-69994, CVE-2026-69998, CVE-2026-70012, CVE-2026-70004, CVE-2026-70006, CVE-2026-103575.

CVE-2026-69997

CVE-2026-69997 is a use-after-free vulnerability in the Microsoft Remote Desktop Client that allows an unauthenticated remote attacker to achieve remote code execution via network-based exploitation.

Affected products:

  • Remote Desktop Client

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69997

Related in this roundup: CVE-2026-108458, CVE-2026-69976, CVE-2026-83688, CVE-2026-85337, CVE-2026-97789, CVE-2026-69984, CVE-2026-69986, CVE-2026-69988, CVE-2026-69987, CVE-2026-69995, CVE-2026-69996, CVE-2026-69991, CVE-2026-69994, CVE-2026-69998, CVE-2026-70012, CVE-2026-70004, CVE-2026-70006, CVE-2026-103575.

CVE-2026-69996

CVE-2026-69996 is a use-after-free vulnerability in the Microsoft Remote Desktop Client that allows a remote, unauthorized attacker to execute arbitrary code over the network. Detection should focus on monitoring anomalous network traffic originating from or destined for Remote Desktop services, as well as unexpected child processes spawned by the RDP client application.

Affected products:

  • Remote Desktop Client

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69996

Related in this roundup: CVE-2026-108458, CVE-2026-69976, CVE-2026-83688, CVE-2026-85337, CVE-2026-97789, CVE-2026-69984, CVE-2026-69986, CVE-2026-69988, CVE-2026-69987, CVE-2026-69995, CVE-2026-69997, CVE-2026-69991, CVE-2026-69994, CVE-2026-69998, CVE-2026-70012, CVE-2026-70004, CVE-2026-70006, CVE-2026-103575.

CVE-2026-69991

CVE-2026-69991 describes a use-after-free vulnerability in the Microsoft Remote Desktop Client that enables an unauthenticated attacker to achieve remote code execution over a network connection.

Affected products:

  • Remote Desktop Client

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69991

Related in this roundup: CVE-2026-108458, CVE-2026-69976, CVE-2026-83688, CVE-2026-85337, CVE-2026-97789, CVE-2026-69984, CVE-2026-69986, CVE-2026-69988, CVE-2026-69987, CVE-2026-69995, CVE-2026-69997, CVE-2026-69996, CVE-2026-69994, CVE-2026-69998, CVE-2026-70012, CVE-2026-70004, CVE-2026-70006, CVE-2026-103575.

CVE-2026-69994

CVE-2026-69994 is a use-after-free vulnerability in the Microsoft Remote Desktop Client that allows an unauthenticated, remote attacker to achieve remote code execution (RCE) over a network connection.

Affected products:

  • Remote Desktop Client

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69994

Related in this roundup: CVE-2026-108458, CVE-2026-69976, CVE-2026-83688, CVE-2026-85337, CVE-2026-97789, CVE-2026-69984, CVE-2026-69986, CVE-2026-69988, CVE-2026-69987, CVE-2026-69995, CVE-2026-69997, CVE-2026-69996, CVE-2026-69991, CVE-2026-69998, CVE-2026-70012, CVE-2026-70004, CVE-2026-70006, CVE-2026-103575.

CVE-2026-69992

CVE-2026-69992 is a use-after-free vulnerability in Microsoft Remote Desktop Services that enables an unauthorized remote attacker to achieve arbitrary code execution over the network, posing a critical risk to affected Windows systems.

Affected products:

  • Remote Desktop Services

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69992

CVE-2026-69998

A use-after-free vulnerability exists in the Microsoft Remote Desktop Client that allows an unauthenticated, remote attacker to achieve remote code execution over a network via specifically crafted requests.

Affected products:

  • Remote Desktop Client

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69998

Related in this roundup: CVE-2026-108458, CVE-2026-69976, CVE-2026-83688, CVE-2026-85337, CVE-2026-97789, CVE-2026-69984, CVE-2026-69986, CVE-2026-69988, CVE-2026-69987, CVE-2026-69995, CVE-2026-69997, CVE-2026-69996, CVE-2026-69991, CVE-2026-69994, CVE-2026-70012, CVE-2026-70004, CVE-2026-70006, CVE-2026-103575.

CVE-2026-69999

CVE-2026-69999 describes an out-of-bounds read vulnerability in Windows Update that enables a locally authorized attacker to perform information disclosure. Detection efforts should focus on identifying unauthorized attempts to access sensitive memory spaces or anomalous behavior associated with the Windows Update service process.

Affected products:

  • Windows Update

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69999

Related in this roundup: CVE-2026-69633, CVE-2026-69673, CVE-2026-69718, CVE-2026-69882, CVE-2026-69733, CVE-2026-69783, CVE-2026-96323.

CVE-2026-70012

A use-after-free vulnerability in the Microsoft Remote Desktop Client allows an unauthenticated remote attacker to execute arbitrary code on the host machine over a network.

Affected products:

  • Remote Desktop Client

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70012

Related in this roundup: CVE-2026-108458, CVE-2026-69976, CVE-2026-83688, CVE-2026-85337, CVE-2026-97789, CVE-2026-69984, CVE-2026-69986, CVE-2026-69988, CVE-2026-69987, CVE-2026-69995, CVE-2026-69997, CVE-2026-69996, CVE-2026-69991, CVE-2026-69994, CVE-2026-69998, CVE-2026-70004, CVE-2026-70006, CVE-2026-103575.

CVE-2026-70004

CVE-2026-70004 is a use-after-free vulnerability in the Microsoft Remote Desktop Client that enables an unauthorized remote attacker to achieve remote code execution on the target system by sending malicious network traffic.

Affected products:

  • Remote Desktop Client

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70004

Related in this roundup: CVE-2026-108458, CVE-2026-69976, CVE-2026-83688, CVE-2026-85337, CVE-2026-97789, CVE-2026-69984, CVE-2026-69986, CVE-2026-69988, CVE-2026-69987, CVE-2026-69995, CVE-2026-69997, CVE-2026-69996, CVE-2026-69991, CVE-2026-69994, CVE-2026-69998, CVE-2026-70012, CVE-2026-70006, CVE-2026-103575.

CVE-2026-70006

CVE-2026-70006 describes a use-after-free vulnerability in the Microsoft Remote Desktop Client that enables an unauthenticated attacker to achieve remote code execution over a network. Detection engineers should monitor for anomalous network traffic and unexpected process spawns originating from the Remote Desktop Client application.

Affected products:

  • Remote Desktop Client

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70006

Related in this roundup: CVE-2026-108458, CVE-2026-69976, CVE-2026-83688, CVE-2026-85337, CVE-2026-97789, CVE-2026-69984, CVE-2026-69986, CVE-2026-69988, CVE-2026-69987, CVE-2026-69995, CVE-2026-69997, CVE-2026-69996, CVE-2026-69991, CVE-2026-69994, CVE-2026-69998, CVE-2026-70012, CVE-2026-70004, CVE-2026-103575.

CVE-2026-70051

CVE-2026-70051 is a type confusion vulnerability in Windows SmartScreen that enables a locally authenticated attacker to perform privilege escalation. Detection engineers should monitor for suspicious local process execution patterns or attempts to manipulate Windows SmartScreen components.

Affected products:

  • Windows SmartScreen

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70051

Related in this roundup: CVE-2026-108463, CVE-2026-83504, CVE-2026-85851.

CVE-2026-70055

CVE-2026-70055 is an information disclosure vulnerability within Windows Cryptographic Services. An authenticated local attacker can exploit this flaw to gain unauthorized access to sensitive system information, potentially facilitating further malicious activities.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70055

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-70066

CVE-2026-70066 is a privilege escalation vulnerability in the Windows DHCP Server component resulting from a use-after-free condition. An authorized local attacker can exploit this vulnerability to elevate their privileges on the affected host.

Affected products:

  • Windows DHCP Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70066

Related in this roundup: CVE-2026-70058, CVE-2026-69830, CVE-2026-83691, CVE-2026-83787, CVE-2026-85841, CVE-2026-85865, CVE-2026-70069, CVE-2026-70201, CVE-2026-83665, CVE-2026-88171, CVE-2026-88117, CVE-2026-88119, CVE-2026-88120, CVE-2026-96320, CVE-2026-96934.

CVE-2026-70067

A use-after-free vulnerability exists in the Windows Win32k kernel subsystem that allows a local, authenticated attacker to escalate their privileges to a higher integrity level.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70067

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-70069

A stack-based buffer overflow vulnerability in the Windows DHCP Server service allows an authorized attacker to execute arbitrary code over the network. Detection should focus on monitoring the DHCP server service process for abnormal memory access patterns or unexpected child process spawning indicative of remote code execution.

Affected products:

  • Windows DHCP Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70069

Related in this roundup: CVE-2026-70058, CVE-2026-69830, CVE-2026-83691, CVE-2026-83787, CVE-2026-85841, CVE-2026-85865, CVE-2026-70066, CVE-2026-70201, CVE-2026-83665, CVE-2026-88171, CVE-2026-88117, CVE-2026-88119, CVE-2026-88120, CVE-2026-96320, CVE-2026-96934.

CVE-2026-70071

CVE-2026-70071 is a vulnerability in the Microsoft DNS Server component caused by improper verification of cryptographic signatures. An attacker with local access can exploit this flaw to perform unauthorized tampering with DNS records, potentially leading to traffic redirection or service disruption.

Affected products:

  • DNS Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70071

Related in this roundup: CVE-2026-70085, CVE-2026-70083, CVE-2026-70087, CVE-2026-83635, CVE-2026-88123, CVE-2026-88125, CVE-2026-88129, CVE-2026-88130, CVE-2026-96926, CVE-2026-103560, CVE-2026-97817, CVE-2026-97819, CVE-2026-97820, CVE-2026-97821, CVE-2026-97822, CVE-2026-97823, CVE-2026-97824, CVE-2026-97825, CVE-2026-97827, CVE-2026-97829, CVE-2026-97831, CVE-2026-97836, CVE-2026-97841, CVE-2026-97842, CVE-2026-97843, CVE-2026-97844, CVE-2026-108127, CVE-2026-108128.

CVE-2026-70074

CVE-2026-70074 describes an out-of-bounds read vulnerability in the Windows DNS component that enables an authorized attacker to perform local information disclosure. The vulnerability requires the attacker to already have a level of access to the system to exploit.

Affected products:

  • Windows DNS

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70074

Related in this roundup: CVE-2026-70079, CVE-2026-70082, CVE-2026-70166, CVE-2026-70119, CVE-2026-70155.

CVE-2026-70072

A denial of service vulnerability in the Windows Netlogon component allows an authorized attacker to exhaust system resources due to a lack of limits or throttling on resource allocation, potentially impacting network service availability.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70072

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-70075

A time-of-check time-of-use (TOCTOU) race condition exists in Windows Virtualization-Based Security (VBS) Enclave, which allows a local authorized attacker to bypass security features. This vulnerability is related to improper validation of state during concurrent operations within the enclave environment.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70075

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-70144

A use-after-free vulnerability exists in the Windows Win32 Kernel Subsystem that allows a locally authenticated attacker to elevate their privileges to a higher level of authority.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70144

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-70207

CVE-2026-70207 is a heap-based buffer overflow vulnerability in the Microsoft Network Policy Server (NPS) service that allows an authorized attacker to achieve remote code execution over a network. Detection efforts should focus on anomalous traffic patterns or unexpected process behavior originating from the NPS service.

Affected products:

  • Network Policy Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70207

Related in this roundup: CVE-2026-100222, CVE-2026-85806, CVE-2026-83655, CVE-2026-85371, CVE-2026-85799, CVE-2026-85811, CVE-2026-96246.

CVE-2026-70199

CVE-2026-70199 is an information disclosure vulnerability in the Windows Kernel. An authenticated local attacker can exploit this flaw to expose sensitive system information, potentially facilitating further malicious activities by bypassing security restrictions.

Affected products:

  • Windows Kernel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70199

Related in this roundup: CVE-2026-108462, CVE-2026-108466, CVE-2026-70063, CVE-2026-70106, CVE-2026-70121, CVE-2026-70114, CVE-2026-83690, CVE-2026-83768, CVE-2026-83833, CVE-2026-85372, CVE-2026-85836, CVE-2026-85837, CVE-2026-70170, CVE-2026-85939, CVE-2026-85945, CVE-2026-96216, CVE-2026-96317, CVE-2026-96868, CVE-2026-70232, CVE-2026-83736, CVE-2026-83735, CVE-2026-83918, CVE-2026-83924, CVE-2026-83925, CVE-2026-88134, CVE-2026-88139, CVE-2026-88141, CVE-2026-70160, CVE-2026-70111, CVE-2026-96913, CVE-2026-96929, CVE-2026-102207, CVE-2026-103578, CVE-2026-97803.

CVE-2026-70211

CVE-2026-70211 is an information disclosure vulnerability residing in the Windows Win32 Kernel Subsystem. An authorized attacker can leverage this out-of-bounds read vulnerability to gain unauthorized access to sensitive information on the local system.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70211

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-70201

CVE-2026-70201 is a vulnerability in the Windows DHCP Server component that allows an authorized attacker to trigger a denial of service condition via an out-of-bounds read.

Affected products:

  • Windows DHCP Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70201

Related in this roundup: CVE-2026-70058, CVE-2026-69830, CVE-2026-83691, CVE-2026-83787, CVE-2026-85841, CVE-2026-85865, CVE-2026-70066, CVE-2026-70069, CVE-2026-83665, CVE-2026-88171, CVE-2026-88117, CVE-2026-88119, CVE-2026-88120, CVE-2026-96320, CVE-2026-96934.

CVE-2026-70230

A use-after-free vulnerability in the Windows Audio Service allows a local, authorized attacker to achieve privilege escalation by exploiting flaws in memory management within the service.

Affected products:

  • Windows Audio Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70230

Related in this roundup: CVE-2026-70140, CVE-2026-70118, CVE-2026-83571, CVE-2026-83644, CVE-2026-96314, CVE-2026-97799.

CVE-2026-70208

CVE-2026-70208 is an out-of-bounds read vulnerability in the Windows HTTP.sys driver. An authorized attacker could exploit this flaw to perform local information disclosure by reading memory contents outside the allocated buffer boundaries of the driver.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70208

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-70209

A use-after-free vulnerability exists in the Windows Win32k kernel subsystem that can be exploited by a local, authenticated attacker to achieve privilege escalation by manipulating memory management within the kernel.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70209

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-70232

CVE-2026-70232 is an information disclosure vulnerability in the Windows Kernel that allows an authorized local attacker to gain access to sensitive system information. Exploitation requires the attacker to be authenticated on the local system.

Affected products:

  • Windows Kernel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70232

Related in this roundup: CVE-2026-108462, CVE-2026-108466, CVE-2026-70063, CVE-2026-70106, CVE-2026-70121, CVE-2026-70114, CVE-2026-83690, CVE-2026-83768, CVE-2026-83833, CVE-2026-85372, CVE-2026-85836, CVE-2026-85837, CVE-2026-70170, CVE-2026-85939, CVE-2026-85945, CVE-2026-96216, CVE-2026-96317, CVE-2026-96868, CVE-2026-70199, CVE-2026-83736, CVE-2026-83735, CVE-2026-83918, CVE-2026-83924, CVE-2026-83925, CVE-2026-88134, CVE-2026-88139, CVE-2026-88141, CVE-2026-70160, CVE-2026-70111, CVE-2026-96913, CVE-2026-96929, CVE-2026-102207, CVE-2026-103578, CVE-2026-97803.

CVE-2026-70236

A use-after-free vulnerability exists in the Windows Win32k kernel subsystem, which can be exploited by a local authenticated attacker to gain elevated privileges on the target system.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70236

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-70237

A use-after-free vulnerability exists in the Windows Ancillary Function Driver for WinSock (afdsys.sys) that allows a locally authenticated attacker to achieve privilege escalation by exploiting memory management flaws in the driver.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70237

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-70258

CVE-2026-70258 is a heap-based buffer overflow vulnerability within Microsoft Windows Media Foundation that permits remote code execution. An attacker can exploit this via the network to execute arbitrary code on an affected Windows system.

Affected products:

  • Windows Media Foundation

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70258

Related in this roundup: CVE-2026-83517, CVE-2026-85814, CVE-2026-70278, CVE-2026-70044, CVE-2026-70131, CVE-2026-96186, CVE-2026-96952, CVE-2026-102201.

CVE-2026-70288

CVE-2026-70288 describes a time-of-check time-of-use (TOCTOU) race condition within the Windows Win32 Kernel Subsystem. This vulnerability allows an authenticated local attacker to perform an information disclosure attack by exploiting the race condition.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70288

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-70292

CVE-2026-70292 is an out-of-bounds read vulnerability in the Windows Win32 Kernel Subsystem. An authorized local attacker can exploit this flaw to perform unauthorized information disclosure.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70292

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-70293

CVE-2026-70293 is an information disclosure vulnerability in the Windows Win32 Kernel Subsystem. The flaw arises from the use of uninitialized resources, which can be exploited by an authorized attacker to gain unauthorized access to sensitive information locally.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70293

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-70294

CVE-2026-70294 describes an out-of-bounds read vulnerability in the Windows Win32 Kernel Subsystem. This flaw allows an authorized local attacker to bypass security measures to disclose sensitive information from the kernel memory space.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70294

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-70295

CVE-2026-70295 is an out-of-bounds read vulnerability in the Windows Win32 Kernel Subsystem (win32k.sys). The flaw allows an authenticated local attacker to bypass memory protections and disclose sensitive kernel information, which could potentially be leveraged to facilitate further exploitation of the operating system.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70295

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-69736

CVE-2026-69736 identifies a race condition vulnerability within the Windows Credential Manager. This flaw allows an authenticated local attacker to perform a privilege escalation attack by exploiting improper synchronization during concurrent resource access.

Affected products:

  • Windows Credential Manager

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69736

CVE-2026-69765

A use-after-free vulnerability exists in the Windows Storport Miniport Driver that can be exploited by an unauthorized remote attacker to achieve arbitrary code execution over a network.

Affected products:

  • Windows Storport Miniport Driver

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69765

CVE-2026-77902

CVE-2026-77902 is a heap-based buffer overflow vulnerability in Microsoft Excel that allows a remote, unauthorized attacker to execute arbitrary code on a target system. Exploitation requires processing a specially crafted file, leading to potential system compromise.

Affected products:

  • Excel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77902

Related in this roundup: CVE-2026-105718, CVE-2026-88153, CVE-2026-88175, CVE-2026-97009, CVE-2026-97753, CVE-2026-97017, CVE-2026-97740, CVE-2026-97766, CVE-2026-97003, CVE-2026-97751, CVE-2026-97776, CVE-2026-97752, CVE-2026-97758, CVE-2026-97761, CVE-2026-97747, CVE-2026-97780, CVE-2026-97770, CVE-2026-97771, CVE-2026-97755, CVE-2026-97765, CVE-2026-97739, CVE-2026-97778, CVE-2026-97759, CVE-2026-88154, CVE-2026-88172, CVE-2026-88184, CVE-2026-88192, CVE-2026-88195, CVE-2026-97007, CVE-2026-97779, CVE-2026-97756, CVE-2026-97008, CVE-2026-97773, CVE-2026-97010, CVE-2026-97743, CVE-2026-97777, CVE-2026-97762, CVE-2026-97011, CVE-2026-97757, CVE-2026-97738, CVE-2026-97742, CVE-2026-97746, CVE-2026-97763, CVE-2026-97775, CVE-2026-97768, CVE-2026-97745, CVE-2026-100211, CVE-2026-100210, CVE-2026-108446.

CVE-2026-69640

CVE-2026-69640 describes a security feature bypass vulnerability in the Windows Key Distribution Center (KDC). An attacker who has already gained authorized access to the network can leverage this flaw to circumvent existing security controls within the authentication service.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69640

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-69733

An untrusted search path vulnerability exists in Windows Update that allows an authorized local attacker to elevate their privileges by exploiting insecure search practices during the update process.

Affected products:

  • Windows Update

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69733

Related in this roundup: CVE-2026-69633, CVE-2026-69673, CVE-2026-69718, CVE-2026-69882, CVE-2026-69999, CVE-2026-69783, CVE-2026-96323.

CVE-2026-69783

CVE-2026-69783 is an elevation of privilege vulnerability in Windows Update stemming from external control of file names or paths, allowing an authorized local attacker to gain higher privileges.

Affected products:

  • Windows Update

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69783

Related in this roundup: CVE-2026-69633, CVE-2026-69673, CVE-2026-69718, CVE-2026-69882, CVE-2026-69999, CVE-2026-69733, CVE-2026-96323.

CVE-2026-69471

CVE-2026-69471 describes a heap-based buffer overflow vulnerability in the Windows Installer service. An authenticated local attacker can leverage this flaw to execute code with elevated privileges, resulting in privilege escalation.

Affected products:

  • Windows Installer

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69471

Related in this roundup: CVE-2026-108468, CVE-2026-70272, CVE-2026-83708, CVE-2026-83775, CVE-2026-83779, CVE-2026-85358, CVE-2026-85361, CVE-2026-85364, CVE-2026-85366, CVE-2026-85374, CVE-2026-85796, CVE-2026-85830, CVE-2026-88080, CVE-2026-87708, CVE-2026-87711, CVE-2026-88124, CVE-2026-96302, CVE-2026-96305, CVE-2026-96307, CVE-2026-96308, CVE-2026-69635, CVE-2026-83672, CVE-2026-83676, CVE-2026-83680, CVE-2026-83702, CVE-2026-83717, CVE-2026-83718, CVE-2026-83752, CVE-2026-83767, CVE-2026-83899, CVE-2026-85941, CVE-2026-88076, CVE-2026-87693, CVE-2026-87694, CVE-2026-87704, CVE-2026-87700, CVE-2026-87715.

CVE-2026-69577

An out-of-bounds read vulnerability exists in Microsoft Azure Attestation and Device Health Attestation services, allowing an unauthenticated remote attacker to perform unauthorized information disclosure over the network.

Affected products:

  • Azure Attestation
  • Device Health Attestation

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69577

Related in this roundup: CVE-2026-69454.

CVE-2026-69596

A use-after-free vulnerability in the Windows Program Compatibility Assistant Service allows a locally authorized attacker to achieve privilege escalation by exploiting memory corruption within the service.

Affected products:

  • Windows Program Compatibility Assistant Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69596

Related in this roundup: CVE-2026-72968, CVE-2026-72934, CVE-2026-69743, CVE-2026-96920, CVE-2026-83781.

CVE-2026-69635

CVE-2026-69635 is a heap-based buffer overflow vulnerability in Windows Installer that allows an authorized attacker with physical access to perform a privilege escalation attack.

Affected products:

  • Windows Installer

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69635

Related in this roundup: CVE-2026-108468, CVE-2026-70272, CVE-2026-83708, CVE-2026-83775, CVE-2026-83779, CVE-2026-85358, CVE-2026-85361, CVE-2026-85364, CVE-2026-85366, CVE-2026-85374, CVE-2026-85796, CVE-2026-85830, CVE-2026-88080, CVE-2026-87708, CVE-2026-87711, CVE-2026-88124, CVE-2026-96302, CVE-2026-96305, CVE-2026-96307, CVE-2026-96308, CVE-2026-69471, CVE-2026-83672, CVE-2026-83676, CVE-2026-83680, CVE-2026-83702, CVE-2026-83717, CVE-2026-83718, CVE-2026-83752, CVE-2026-83767, CVE-2026-83899, CVE-2026-85941, CVE-2026-88076, CVE-2026-87693, CVE-2026-87694, CVE-2026-87704, CVE-2026-87700, CVE-2026-87715.

CVE-2026-77496

A heap-based buffer overflow vulnerability exists in the Windows Imaging Component that allows a remote, unauthorized attacker to execute arbitrary code on a vulnerable system by sending a specially crafted request.

Affected products:

  • Windows Imaging Component

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77496

Related in this roundup: CVE-2026-69886, CVE-2026-96859.

CVE-2026-69326

CVE-2026-69326 is a heap-based buffer overflow vulnerability in the Windows Graphic Fonts component. An unauthenticated attacker can exploit this flaw to achieve remote code execution over a network by tricking a user into processing a specially crafted font file.

Affected products:

  • Graphic Fonts

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69326

CVE-2026-69454

CVE-2026-69454 is an out-of-bounds read vulnerability in the Microsoft Azure Attestation and Device Health Attestation services. This flaw permits an unauthenticated remote attacker to perform an information disclosure attack, potentially leaking sensitive data from the service memory over the network.

Affected products:

  • Azure Attestation
  • Device Health Attestation Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69454

Related in this roundup: CVE-2026-69577.

CVE-2026-83505

CVE-2026-83505 is a local privilege escalation vulnerability in the Windows Setup Files Cleanup component caused by a time-of-check time-of-use (TOCTOU) race condition. An authenticated attacker can exploit this flaw to gain elevated privileges on the system.

Affected products:

  • Windows Setup Files Cleanup

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83505

CVE-2026-83506

An untrusted search path vulnerability in the Windows Servicing Stack allows a local, authorized attacker to achieve privilege escalation by manipulating the search environment to load malicious files.

Affected products:

  • Windows Servicing Stack

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83506

CVE-2026-83508

An out-of-bounds read vulnerability exists in the Windows New Technology File System (NTFS) driver, which can be exploited by a locally authenticated attacker to escalate their privileges on the system.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83508

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-83507

The Windows Update Orchestrator Service is vulnerable to an information disclosure flaw caused by improper link resolution before file access. An authenticated attacker could exploit this vulnerability by manipulating symbolic links to gain unauthorized access to sensitive local information.

Affected products:

  • Windows Update Orchestrator Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83507

Related in this roundup: CVE-2026-81964, CVE-2026-83793, CVE-2026-83886, CVE-2026-83930, CVE-2026-83933, CVE-2026-97812.

CVE-2026-83511

CVE-2026-83511 is a spoofing vulnerability in Microsoft Active Directory Federation Services (AD FS) caused by weak authentication mechanisms. An unauthenticated attacker can exploit this flaw over a network to impersonate legitimate entities, potentially leading to unauthorized access to protected resources.

Affected products:

  • Active Directory Federation Services

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83511

Related in this roundup: CVE-2026-83646, CVE-2026-85319, CVE-2026-85321, CVE-2026-85324, CVE-2026-83674, CVE-2026-69982, CVE-2026-70005, CVE-2026-83645, CVE-2026-96252, CVE-2026-97788, CVE-2026-103576, CVE-2026-108131.

CVE-2026-83514

The Windows Partition Management Driver is susceptible to a heap-based buffer overflow vulnerability that enables a locally authenticated attacker to escalate their privileges on an affected system.

Affected products:

  • Windows Partition Management Driver

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83514

Related in this roundup: CVE-2026-97805, CVE-2026-83851, CVE-2026-83797, CVE-2026-103553.

CVE-2026-83513

A use-after-free vulnerability in the Windows Universal Disk Format File System Driver (UDFS) allows a locally authenticated attacker to elevate their privileges to a higher level within the system, potentially achieving system-level access.

Affected products:

  • Windows Universal Disk Format File System Driver

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83513

Related in this roundup: CVE-2026-83713, CVE-2026-85820, CVE-2026-85821, CVE-2026-85825, CVE-2026-83857, CVE-2026-85909, CVE-2026-96930, CVE-2026-96946, CVE-2026-96947, CVE-2026-96949, CVE-2026-96950, CVE-2026-96953, CVE-2026-102205, CVE-2026-102218, CVE-2026-102215.

CVE-2026-83522

CVE-2026-83522 is a spoofing vulnerability in the Windows IKE Extension caused by improper validation of untrusted inputs during security decision-making processes. An unauthenticated attacker can exploit this over a network to perform spoofing attacks, potentially allowing the impersonation of network entities or interception of traffic.

Affected products:

  • Windows IKE Extension

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83522

CVE-2026-83523

CVE-2026-83523 is a heap-based buffer overflow vulnerability within the Windows Image Acquisition service that allows unauthenticated remote attackers to achieve arbitrary code execution over a network.

Affected products:

  • Windows Image Acquisition

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83523

Related in this roundup: CVE-2026-85842, CVE-2026-85930.

CVE-2026-83564

A use-after-free vulnerability exists in the Microsoft Windows Search Component that enables an authenticated local attacker to escalate their privileges on the host system.

Affected products:

  • Windows Search Component

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83564

Related in this roundup: CVE-2026-105010, CVE-2026-108136, CVE-2026-70136, CVE-2026-70141, CVE-2026-70173, CVE-2026-70150, CVE-2026-70177, CVE-2026-70156, CVE-2026-83575, CVE-2026-83704, CVE-2026-70086, CVE-2026-83920, CVE-2026-85869, CVE-2026-88160, CVE-2026-83570, CVE-2026-83686, CVE-2026-83725, CVE-2026-83829, CVE-2026-83850, CVE-2026-88182, CVE-2026-88191, CVE-2026-96324, CVE-2026-96911, CVE-2026-96910, CVE-2026-96937.

CVE-2026-83565

CVE-2026-83565 is a buffer over-read vulnerability in the Windows Encrypting File System (EFS) that allows an authenticated local attacker to perform unauthorized information disclosure.

Affected products:

  • Windows Encrypting File System

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83565

Related in this roundup: CVE-2026-83759, CVE-2026-83784, CVE-2026-85791, CVE-2026-88162.

CVE-2026-83566

A use-after-free vulnerability in the Windows Win32K ICOMP component allows a locally authenticated attacker to elevate their privileges to a higher integrity level.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83566

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-83567

CVE-2026-83567 describes an out-of-bounds read vulnerability within the Windows NTFS file system driver that can be exploited by a local authenticated attacker to achieve privilege escalation.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83567

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-83568

A local privilege escalation vulnerability exists in Windows Kernel-Mode Drivers due to improper access control. An attacker who has already gained low-privileged access to a system can exploit this flaw to execute code with higher privileges.

Affected products:

  • Windows Kernel-Mode Drivers

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83568

Related in this roundup: CVE-2026-69971, CVE-2026-83834, CVE-2026-85857, CVE-2026-85871, CVE-2026-96247, CVE-2026-96849, CVE-2026-83637, CVE-2026-83837, CVE-2026-96915.

CVE-2026-83570

The Microsoft Windows Search Component contains a use-after-free vulnerability that allows an authorized local attacker to achieve privilege escalation by exploiting the way the component handles memory.

Affected products:

  • Windows Search Component

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83570

Related in this roundup: CVE-2026-105010, CVE-2026-108136, CVE-2026-70136, CVE-2026-70141, CVE-2026-70173, CVE-2026-70150, CVE-2026-70177, CVE-2026-70156, CVE-2026-83575, CVE-2026-83704, CVE-2026-70086, CVE-2026-83920, CVE-2026-85869, CVE-2026-88160, CVE-2026-83564, CVE-2026-83686, CVE-2026-83725, CVE-2026-83829, CVE-2026-83850, CVE-2026-88182, CVE-2026-88191, CVE-2026-96324, CVE-2026-96911, CVE-2026-96910, CVE-2026-96937.

CVE-2026-83573

An integer overflow or wraparound vulnerability in the Windows Kernel-Mode Driver allows an attacker with physical access to the target system to achieve privilege escalation.

Affected products:

  • Windows Kernel-Mode Driver

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83573

CVE-2026-83574

The Microsoft Windows Search Component contains a use-after-free vulnerability that enables a locally authenticated attacker to escalate their privileges. This vulnerability requires the attacker to already have access to the system to exploit the flaw in the service's memory management.

Affected products:

  • Windows Search Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83574

CVE-2026-83579

A heap-based buffer overflow vulnerability exists in the Windows Smart Card component that allows an authorized local attacker to elevate their privileges on the affected system.

Affected products:

  • Windows Smart Card

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83579

CVE-2026-83582

A use-after-free vulnerability in the Windows Graphics Kernel allows an authorized local attacker to perform an information disclosure attack.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83582

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-83585

A privilege escalation vulnerability exists in the Windows NTFS component due to the use of an externally-controlled format string. An authorized local attacker can exploit this flaw to gain elevated privileges on the affected system.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83585

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-83588

A heap-based buffer overflow vulnerability in the Windows USB Driver allows a locally authenticated attacker to elevate their privileges to a higher integrity level on the affected system.

Affected products:

  • Windows USB Driver

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83588

CVE-2026-83634

A vulnerability in Windows BitLocker allows a locally authenticated attacker to achieve privilege escalation via a double free memory corruption flaw.

Affected products:

  • Windows BitLocker

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83634

CVE-2026-83636

A null pointer dereference vulnerability exists in Windows Hyper-V that allows a locally authorized attacker to trigger a denial of service condition.

Affected products:

  • Hyper-V

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83636

Related in this roundup: CVE-2026-108399, CVE-2026-83671, CVE-2026-83839, CVE-2026-70248, CVE-2026-85343, CVE-2026-88071, CVE-2026-83716, CVE-2026-83728, CVE-2026-83766, CVE-2026-83931, CVE-2026-87705, CVE-2026-70023, CVE-2026-102214, CVE-2026-97813.

CVE-2026-83637

A vulnerability in Windows Kernel-Mode Drivers allows an authorized local attacker to perform an out-of-bounds read, leading to privilege escalation on the affected Windows system.

Affected products:

  • Windows Kernel-Mode Drivers

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83637

Related in this roundup: CVE-2026-69971, CVE-2026-83834, CVE-2026-85857, CVE-2026-85871, CVE-2026-96247, CVE-2026-96849, CVE-2026-83568, CVE-2026-83837, CVE-2026-96915.

CVE-2026-83638

A heap-based buffer overflow in the Windows USB driver allows a local, authorized attacker to escalate their privileges. The vulnerability is triggered by improper memory management within the driver's handling of USB requests.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83638

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-83639

A heap-based buffer overflow vulnerability in the Windows Sensor Data Service allows an attacker with local, authorized access to escalate privileges, potentially gaining higher-level system permissions.

Affected products:

  • Windows Sensor Data Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83639

CVE-2026-83640

A heap-based buffer overflow vulnerability exists in the Windows NTFS file system, which may allow an authorized local attacker to execute arbitrary code with elevated privileges.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83640

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-83643

CVE-2026-83643 describes a stack-based buffer overflow vulnerability in the Windows Error Reporting component, which can be exploited by a remote, unauthorized attacker to achieve remote code execution (RCE) via network-based vectors.

Affected products:

  • Windows Error Reporting

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83643

Related in this roundup: CVE-2026-83519, CVE-2026-83693, CVE-2026-83748, CVE-2026-97815, CVE-2026-69363, CVE-2026-70103, CVE-2026-69354, CVE-2026-69387, CVE-2026-83658, CVE-2026-83669, CVE-2026-83715, CVE-2026-83758, CVE-2026-83826, CVE-2026-83916, CVE-2026-85354, CVE-2026-85800, CVE-2026-83689, CVE-2026-83747, CVE-2026-83750, CVE-2026-83840, CVE-2026-97798.

CVE-2026-83645

A denial of service vulnerability exists in Active Directory Federation Services (AD FS) due to improper allocation of resources without limits or throttling. An unauthenticated remote attacker can exploit this flaw by sending specifically crafted network requests to the target service to exhaust resources and cause a denial of service.

Affected products:

  • Active Directory Federation Services

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83645

Related in this roundup: CVE-2026-83646, CVE-2026-85319, CVE-2026-85321, CVE-2026-85324, CVE-2026-83674, CVE-2026-69982, CVE-2026-70005, CVE-2026-83511, CVE-2026-96252, CVE-2026-97788, CVE-2026-103576, CVE-2026-108131.

CVE-2026-83651

CVE-2026-83651 is an out-of-bounds read vulnerability in the Windows Graphics Device Interface (GDI) component. Successful exploitation allows a remote, unauthorized attacker to disclose sensitive information from the target system over a network connection.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83651

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-83656

CVE-2026-83656 is a vulnerability in Windows Modern Device Management (MDM) caused by missing authentication for a critical function. An attacker with existing local access can exploit this flaw to perform unauthorized tampering operations on the system.

Affected products:

  • Windows Modern Device Management

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83656

Related in this roundup: CVE-2026-108133, CVE-2026-108396, CVE-2026-83654, CVE-2026-83657, CVE-2026-85833, CVE-2026-96855, CVE-2026-83697, CVE-2026-96850.

CVE-2026-83659

CVE-2026-83659 is a privilege escalation vulnerability in the Windows User Profile Service caused by improper link resolution before file access. An authorized local attacker can exploit this flaw to elevate their privileges on the target system.

Affected products:

  • Windows User Profile Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83659

CVE-2026-83664

CVE-2026-83664 describes a type confusion vulnerability within the Windows Portable Device File System Driver. This flaw allows an authorized local attacker to exploit the driver to disclose sensitive information, potentially leading to unauthorized data access.

Affected products:

  • Windows Portable Device File System Driver

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83664

Related in this roundup: CVE-2026-70132.

CVE-2026-83665

A null pointer dereference vulnerability in the Windows DHCP Server component allows an unauthorized remote attacker to trigger a denial of service (DoS) condition by sending specially crafted network traffic.

Affected products:

  • Windows DHCP Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83665

Related in this roundup: CVE-2026-70058, CVE-2026-69830, CVE-2026-83691, CVE-2026-83787, CVE-2026-85841, CVE-2026-85865, CVE-2026-70066, CVE-2026-70069, CVE-2026-70201, CVE-2026-88171, CVE-2026-88117, CVE-2026-88119, CVE-2026-88120, CVE-2026-96320, CVE-2026-96934.

CVE-2026-83668

CVE-2026-83668 is an out-of-bounds read vulnerability in the Windows WLAN Service. An authorized attacker can exploit this flaw to perform local information disclosure, potentially exposing sensitive data processed by the service.

Affected products:

  • Windows WLAN Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83668

CVE-2026-83670

CVE-2026-83670 is an out-of-bounds read vulnerability in the Function Discovery Service (fdwsd.dll) on Windows. An unauthorized, unauthenticated attacker can exploit this vulnerability over a network to achieve information disclosure by triggering an improper memory read operation within the service.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83670

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-83672

CVE-2026-83672 describes an information disclosure vulnerability in the Windows Installer component. The vulnerability allows an authenticated attacker with local access to bypass security controls and access sensitive system information, potentially aiding in further exploitation or reconnaissance on the target machine.

Affected products:

  • Windows Installer

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83672

Related in this roundup: CVE-2026-108468, CVE-2026-70272, CVE-2026-83708, CVE-2026-83775, CVE-2026-83779, CVE-2026-85358, CVE-2026-85361, CVE-2026-85364, CVE-2026-85366, CVE-2026-85374, CVE-2026-85796, CVE-2026-85830, CVE-2026-88080, CVE-2026-87708, CVE-2026-87711, CVE-2026-88124, CVE-2026-96302, CVE-2026-96305, CVE-2026-96307, CVE-2026-96308, CVE-2026-69471, CVE-2026-69635, CVE-2026-83676, CVE-2026-83680, CVE-2026-83702, CVE-2026-83717, CVE-2026-83718, CVE-2026-83752, CVE-2026-83767, CVE-2026-83899, CVE-2026-85941, CVE-2026-88076, CVE-2026-87693, CVE-2026-87694, CVE-2026-87704, CVE-2026-87700, CVE-2026-87715.

CVE-2026-83676

CVE-2026-83676 is a local privilege escalation vulnerability in the Windows Installer service caused by an integer underflow flaw. This allows an authenticated attacker to gain higher levels of privilege on the affected Windows system.

Affected products:

  • Windows Installer

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83676

Related in this roundup: CVE-2026-108468, CVE-2026-70272, CVE-2026-83708, CVE-2026-83775, CVE-2026-83779, CVE-2026-85358, CVE-2026-85361, CVE-2026-85364, CVE-2026-85366, CVE-2026-85374, CVE-2026-85796, CVE-2026-85830, CVE-2026-88080, CVE-2026-87708, CVE-2026-87711, CVE-2026-88124, CVE-2026-96302, CVE-2026-96305, CVE-2026-96307, CVE-2026-96308, CVE-2026-69471, CVE-2026-69635, CVE-2026-83672, CVE-2026-83680, CVE-2026-83702, CVE-2026-83717, CVE-2026-83718, CVE-2026-83752, CVE-2026-83767, CVE-2026-83899, CVE-2026-85941, CVE-2026-88076, CVE-2026-87693, CVE-2026-87694, CVE-2026-87704, CVE-2026-87700, CVE-2026-87715.

CVE-2026-83677

CVE-2026-83677 describes a vulnerability in the Windows DHCP Client involving a memory leak (missing release of memory after effective lifetime) that can be triggered by an unauthorized attacker over the network to cause a denial of service condition.

Affected products:

  • Windows DHCP Client

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83677

Related in this roundup: CVE-2026-70250.

CVE-2026-83679

A use-after-free vulnerability in the Windows Defender Firewall Service allows an authorized local attacker to achieve privilege escalation by exploiting improper memory management within the service.

Affected products:

  • Windows Defender Firewall Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83679

CVE-2026-83680

CVE-2026-83680 is a heap-based buffer overflow vulnerability in the Windows Installer service that allows an authenticated local attacker to execute code with elevated privileges on the target Windows system.

Affected products:

  • Windows Installer

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83680

Related in this roundup: CVE-2026-108468, CVE-2026-70272, CVE-2026-83708, CVE-2026-83775, CVE-2026-83779, CVE-2026-85358, CVE-2026-85361, CVE-2026-85364, CVE-2026-85366, CVE-2026-85374, CVE-2026-85796, CVE-2026-85830, CVE-2026-88080, CVE-2026-87708, CVE-2026-87711, CVE-2026-88124, CVE-2026-96302, CVE-2026-96305, CVE-2026-96307, CVE-2026-96308, CVE-2026-69471, CVE-2026-69635, CVE-2026-83672, CVE-2026-83676, CVE-2026-83702, CVE-2026-83717, CVE-2026-83718, CVE-2026-83752, CVE-2026-83767, CVE-2026-83899, CVE-2026-85941, CVE-2026-88076, CVE-2026-87693, CVE-2026-87694, CVE-2026-87704, CVE-2026-87700, CVE-2026-87715.

CVE-2026-83682

A use-after-free vulnerability exists in the Windows TCP/IP stack that can be exploited by an authenticated attacker to perform local privilege escalation on affected systems.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83682

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-83683

CVE-2026-83683 is an information disclosure vulnerability in the Windows Encrypting File System (EFS) caused by absolute path traversal. An authenticated attacker can exploit this flaw to gain unauthorized access to sensitive information over a network.

Affected products:

  • Encrypting File System

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83683

CVE-2026-83685

A buffer over-read vulnerability exists in the Windows Internet Key Exchange (IKE) Extension, which can be exploited by an authorized attacker over a network to cause a denial of service condition.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83685

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-83686

An out-of-bounds read vulnerability exists in the Microsoft Windows Search Component that enables an authorized local attacker to perform information disclosure.

Affected products:

  • Windows Search Component

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83686

Related in this roundup: CVE-2026-105010, CVE-2026-108136, CVE-2026-70136, CVE-2026-70141, CVE-2026-70173, CVE-2026-70150, CVE-2026-70177, CVE-2026-70156, CVE-2026-83575, CVE-2026-83704, CVE-2026-70086, CVE-2026-83920, CVE-2026-85869, CVE-2026-88160, CVE-2026-83564, CVE-2026-83570, CVE-2026-83725, CVE-2026-83829, CVE-2026-83850, CVE-2026-88182, CVE-2026-88191, CVE-2026-96324, CVE-2026-96911, CVE-2026-96910, CVE-2026-96937.

CVE-2026-83689

CVE-2026-83689 is a use-after-free vulnerability within the Windows Error Reporting component that allows a locally authenticated attacker to escalate privileges on the target system.

Affected products:

  • Windows Error Reporting

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83689

Related in this roundup: CVE-2026-83519, CVE-2026-83693, CVE-2026-83748, CVE-2026-97815, CVE-2026-69363, CVE-2026-70103, CVE-2026-69354, CVE-2026-69387, CVE-2026-83658, CVE-2026-83669, CVE-2026-83715, CVE-2026-83758, CVE-2026-83826, CVE-2026-83916, CVE-2026-85354, CVE-2026-85800, CVE-2026-83643, CVE-2026-83747, CVE-2026-83750, CVE-2026-83840, CVE-2026-97798.

CVE-2026-83696

A vulnerability exists in the Windows Cloud Files Mini Filter Driver where a use-after-free condition allows a locally authenticated attacker to escalate their privileges to a higher level of access.

Affected products:

  • Windows Cloud Files Mini Filter Driver

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83696

Related in this roundup: CVE-2026-88107.

CVE-2026-83695

The Windows Event Logging Service contains a vulnerability involving the use of an uninitialized resource, which allows a local attacker with authorization to disclose sensitive information from the system.

Affected products:

  • Windows Event Logging Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83695

Related in this roundup: CVE-2026-83723, CVE-2026-95904, CVE-2026-83856.

CVE-2026-83697

CVE-2026-83697 is a time-of-check time-of-use (TOCTOU) race condition vulnerability in Windows Modern Device Management (MDM). The flaw allows an authenticated local attacker to perform unauthorized tampering with the MDM service, potentially leading to security policy bypass or elevated privileges on the system.

Affected products:

  • Windows Modern Device Management

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83697

Related in this roundup: CVE-2026-108133, CVE-2026-108396, CVE-2026-83654, CVE-2026-83657, CVE-2026-85833, CVE-2026-96855, CVE-2026-83656, CVE-2026-96850.

CVE-2026-83698

A heap-based buffer overflow vulnerability in the Windows Client-Side Caching (CSC) Service allows a local, authorized attacker to escalate their privileges to a higher integrity level on affected Windows systems.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83698

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-83701

A use-after-free vulnerability in the Windows Now Playing Session Manager allows a locally authenticated attacker to achieve privilege escalation by exploiting memory corruption flaws within the session management component.

Affected products:

  • Windows Now Playing Session Manager

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83701

Related in this roundup: CVE-2026-83700.

CVE-2026-83702

CVE-2026-83702 is a local privilege escalation vulnerability in Windows Installer caused by a use-after-free flaw. An attacker with local authorization can exploit this vulnerability to gain elevated privileges on the affected system.

Affected products:

  • Windows Installer

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83702

Related in this roundup: CVE-2026-108468, CVE-2026-70272, CVE-2026-83708, CVE-2026-83775, CVE-2026-83779, CVE-2026-85358, CVE-2026-85361, CVE-2026-85364, CVE-2026-85366, CVE-2026-85374, CVE-2026-85796, CVE-2026-85830, CVE-2026-88080, CVE-2026-87708, CVE-2026-87711, CVE-2026-88124, CVE-2026-96302, CVE-2026-96305, CVE-2026-96307, CVE-2026-96308, CVE-2026-69471, CVE-2026-69635, CVE-2026-83672, CVE-2026-83676, CVE-2026-83680, CVE-2026-83717, CVE-2026-83718, CVE-2026-83752, CVE-2026-83767, CVE-2026-83899, CVE-2026-85941, CVE-2026-88076, CVE-2026-87693, CVE-2026-87694, CVE-2026-87704, CVE-2026-87700, CVE-2026-87715.

CVE-2026-83703

CVE-2026-83703 is a vulnerability in the Windows Wi-Fi Driver involving an out-of-bounds read. An unauthorized attacker located on an adjacent network can exploit this flaw to trigger a denial-of-service condition.

Affected products:

  • Windows Wi-Fi Driver

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83703

CVE-2026-83709

A heap-based buffer overflow vulnerability in Windows NTLM allows a locally authenticated attacker to escalate privileges. The vulnerability resides within the NTLM authentication component of the Windows operating system.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83709

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-83714

CVE-2026-83714 is an information disclosure vulnerability in the Windows HTTP.sys driver caused by the use of an uninitialized resource. An authorized attacker can exploit this locally to access sensitive information on the host system.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83714

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-83716

CVE-2026-83716 is a heap-based buffer overflow vulnerability in Windows Hyper-V that enables an authorized attacker to achieve local remote code execution on the host system.

Affected products:

  • Hyper-V

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83716

Related in this roundup: CVE-2026-108399, CVE-2026-83671, CVE-2026-83839, CVE-2026-70248, CVE-2026-85343, CVE-2026-88071, CVE-2026-83636, CVE-2026-83728, CVE-2026-83766, CVE-2026-83931, CVE-2026-87705, CVE-2026-70023, CVE-2026-102214, CVE-2026-97813.

CVE-2026-83717

A use-after-free vulnerability exists in the Windows Installer component that allows a locally authenticated attacker to elevate their privileges to a higher integrity level.

Affected products:

  • Windows Installer

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83717

Related in this roundup: CVE-2026-108468, CVE-2026-70272, CVE-2026-83708, CVE-2026-83775, CVE-2026-83779, CVE-2026-85358, CVE-2026-85361, CVE-2026-85364, CVE-2026-85366, CVE-2026-85374, CVE-2026-85796, CVE-2026-85830, CVE-2026-88080, CVE-2026-87708, CVE-2026-87711, CVE-2026-88124, CVE-2026-96302, CVE-2026-96305, CVE-2026-96307, CVE-2026-96308, CVE-2026-69471, CVE-2026-69635, CVE-2026-83672, CVE-2026-83676, CVE-2026-83680, CVE-2026-83702, CVE-2026-83718, CVE-2026-83752, CVE-2026-83767, CVE-2026-83899, CVE-2026-85941, CVE-2026-88076, CVE-2026-87693, CVE-2026-87694, CVE-2026-87704, CVE-2026-87700, CVE-2026-87715.

CVE-2026-83718

CVE-2026-83718 is a local elevation of privilege vulnerability in the Windows Installer component caused by a use-after-free condition, allowing an authenticated attacker to gain higher privileges on the host system.

Affected products:

  • Windows Installer

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83718

Related in this roundup: CVE-2026-108468, CVE-2026-70272, CVE-2026-83708, CVE-2026-83775, CVE-2026-83779, CVE-2026-85358, CVE-2026-85361, CVE-2026-85364, CVE-2026-85366, CVE-2026-85374, CVE-2026-85796, CVE-2026-85830, CVE-2026-88080, CVE-2026-87708, CVE-2026-87711, CVE-2026-88124, CVE-2026-96302, CVE-2026-96305, CVE-2026-96307, CVE-2026-96308, CVE-2026-69471, CVE-2026-69635, CVE-2026-83672, CVE-2026-83676, CVE-2026-83680, CVE-2026-83702, CVE-2026-83717, CVE-2026-83752, CVE-2026-83767, CVE-2026-83899, CVE-2026-85941, CVE-2026-88076, CVE-2026-87693, CVE-2026-87694, CVE-2026-87704, CVE-2026-87700, CVE-2026-87715.

CVE-2026-83720

A use-after-free vulnerability exists in the Windows Kerberos component that allows an authenticated local attacker to achieve privilege escalation.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83720

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-83721

CVE-2026-83721 is a local privilege escalation vulnerability in the Win32k component of the Windows operating system. It stems from a use-after-free flaw that allows an authenticated attacker to execute code with elevated permissions.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83721

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-83724

A heap-based buffer overflow vulnerability exists within Windows Management Instrumentation (WMI) that permits an authenticated attacker to perform local privilege escalation on affected Windows systems.

Affected products:

  • Windows Management Instrumentation

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83724

Related in this roundup: CVE-2026-85362, CVE-2026-85852, CVE-2026-88091, CVE-2026-96851, CVE-2026-96856, CVE-2026-83783.

CVE-2026-83725

CVE-2026-83725 is a heap-based buffer overflow vulnerability within the Microsoft Windows Search Component. The flaw allows a remote, unauthorized attacker to achieve remote code execution via network-based exploitation of the search service.

Affected products:

  • Windows Search Component

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83725

Related in this roundup: CVE-2026-105010, CVE-2026-108136, CVE-2026-70136, CVE-2026-70141, CVE-2026-70173, CVE-2026-70150, CVE-2026-70177, CVE-2026-70156, CVE-2026-83575, CVE-2026-83704, CVE-2026-70086, CVE-2026-83920, CVE-2026-85869, CVE-2026-88160, CVE-2026-83564, CVE-2026-83570, CVE-2026-83686, CVE-2026-83829, CVE-2026-83850, CVE-2026-88182, CVE-2026-88191, CVE-2026-96324, CVE-2026-96911, CVE-2026-96910, CVE-2026-96937.

CVE-2026-83728

CVE-2026-83728 is a spoofing vulnerability in Windows Hyper-V caused by improper validation of syntactic input. An authorized local attacker can exploit this flaw to perform spoofing actions within the hypervisor environment.

Affected products:

  • Hyper-V

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83728

Related in this roundup: CVE-2026-108399, CVE-2026-83671, CVE-2026-83839, CVE-2026-70248, CVE-2026-85343, CVE-2026-88071, CVE-2026-83636, CVE-2026-83716, CVE-2026-83766, CVE-2026-83931, CVE-2026-87705, CVE-2026-70023, CVE-2026-102214, CVE-2026-97813.

CVE-2026-83732

CVE-2026-83732 is a privilege escalation vulnerability in the Windows Win32k subsystem caused by a use-after-free error. An authorized attacker can exploit this local flaw to gain elevated privileges on the system.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83732

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-83739

A use-after-free vulnerability in the Windows Bluetooth Service allows an unauthenticated, adjacent attacker to achieve remote code execution on affected Windows systems.

Affected products:

  • Windows Bluetooth Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83739

Related in this roundup: CVE-2026-83777.

CVE-2026-83736

CVE-2026-83736 is a heap-based buffer overflow vulnerability in the Windows Kernel that allows an authorized local attacker to elevate their privileges to a higher level within the operating system.

Affected products:

  • Windows Kernel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83736

Related in this roundup: CVE-2026-108462, CVE-2026-108466, CVE-2026-70063, CVE-2026-70106, CVE-2026-70121, CVE-2026-70114, CVE-2026-83690, CVE-2026-83768, CVE-2026-83833, CVE-2026-85372, CVE-2026-85836, CVE-2026-85837, CVE-2026-70170, CVE-2026-85939, CVE-2026-85945, CVE-2026-96216, CVE-2026-96317, CVE-2026-96868, CVE-2026-70199, CVE-2026-70232, CVE-2026-83735, CVE-2026-83918, CVE-2026-83924, CVE-2026-83925, CVE-2026-88134, CVE-2026-88139, CVE-2026-88141, CVE-2026-70160, CVE-2026-70111, CVE-2026-96913, CVE-2026-96929, CVE-2026-102207, CVE-2026-103578, CVE-2026-97803.

CVE-2026-83735

CVE-2026-83735 is a local privilege escalation vulnerability in the Windows Kernel caused by the release of an invalid pointer or reference. An authorized attacker can exploit this flaw to gain elevated privileges on the target system.

Affected products:

  • Windows Kernel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83735

Related in this roundup: CVE-2026-108462, CVE-2026-108466, CVE-2026-70063, CVE-2026-70106, CVE-2026-70121, CVE-2026-70114, CVE-2026-83690, CVE-2026-83768, CVE-2026-83833, CVE-2026-85372, CVE-2026-85836, CVE-2026-85837, CVE-2026-70170, CVE-2026-85939, CVE-2026-85945, CVE-2026-96216, CVE-2026-96317, CVE-2026-96868, CVE-2026-70199, CVE-2026-70232, CVE-2026-83736, CVE-2026-83918, CVE-2026-83924, CVE-2026-83925, CVE-2026-88134, CVE-2026-88139, CVE-2026-88141, CVE-2026-70160, CVE-2026-70111, CVE-2026-96913, CVE-2026-96929, CVE-2026-102207, CVE-2026-103578, CVE-2026-97803.

CVE-2026-83737

CVE-2026-83737 is an out-of-bounds read vulnerability in the Windows NTFS file system driver. An authorized local attacker can exploit this flaw to perform unauthorized information disclosure on the host system.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83737

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-83747

CVE-2026-83747 is an out-of-bounds read vulnerability in the Windows Error Reporting component. The vulnerability allows a locally authenticated attacker to read sensitive memory contents, potentially leading to information disclosure.

Affected products:

  • Windows Error Reporting

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83747

Related in this roundup: CVE-2026-83519, CVE-2026-83693, CVE-2026-83748, CVE-2026-97815, CVE-2026-69363, CVE-2026-70103, CVE-2026-69354, CVE-2026-69387, CVE-2026-83658, CVE-2026-83669, CVE-2026-83715, CVE-2026-83758, CVE-2026-83826, CVE-2026-83916, CVE-2026-85354, CVE-2026-85800, CVE-2026-83643, CVE-2026-83689, CVE-2026-83750, CVE-2026-83840, CVE-2026-97798.

CVE-2026-83750

A time-of-check time-of-use (TOCTOU) race condition vulnerability in Windows Error Reporting (WER) allows a locally authenticated attacker to escalate privileges. Successful exploitation requires the attacker to win a race condition to manipulate file operations performed by the service.

Affected products:

  • Windows Error Reporting

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83750

Related in this roundup: CVE-2026-83519, CVE-2026-83693, CVE-2026-83748, CVE-2026-97815, CVE-2026-69363, CVE-2026-70103, CVE-2026-69354, CVE-2026-69387, CVE-2026-83658, CVE-2026-83669, CVE-2026-83715, CVE-2026-83758, CVE-2026-83826, CVE-2026-83916, CVE-2026-85354, CVE-2026-85800, CVE-2026-83643, CVE-2026-83689, CVE-2026-83747, CVE-2026-83840, CVE-2026-97798.

CVE-2026-83751

A use-after-free vulnerability in the Windows MIDI Service Module allows an authenticated, local attacker to escalate their privileges to a higher level of access.

Affected products:

  • Windows MIDI Service Module

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83751

Related in this roundup: CVE-2026-83828, CVE-2026-88079.

CVE-2026-83752

CVE-2026-83752 describes a use-after-free vulnerability in the Windows Installer service that allows a locally authenticated attacker to achieve privilege escalation. This vulnerability indicates a memory corruption issue that could be leveraged by a malicious actor to elevate their security context on a compromised system.

Affected products:

  • Windows Installer

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83752

Related in this roundup: CVE-2026-108468, CVE-2026-70272, CVE-2026-83708, CVE-2026-83775, CVE-2026-83779, CVE-2026-85358, CVE-2026-85361, CVE-2026-85364, CVE-2026-85366, CVE-2026-85374, CVE-2026-85796, CVE-2026-85830, CVE-2026-88080, CVE-2026-87708, CVE-2026-87711, CVE-2026-88124, CVE-2026-96302, CVE-2026-96305, CVE-2026-96307, CVE-2026-96308, CVE-2026-69471, CVE-2026-69635, CVE-2026-83672, CVE-2026-83676, CVE-2026-83680, CVE-2026-83702, CVE-2026-83717, CVE-2026-83718, CVE-2026-83767, CVE-2026-83899, CVE-2026-85941, CVE-2026-88076, CVE-2026-87693, CVE-2026-87694, CVE-2026-87704, CVE-2026-87700, CVE-2026-87715.

CVE-2026-83755

CVE-2026-83755 is an information disclosure vulnerability in the Windows Win32K subsystem caused by the use of an uninitialized resource. An authorized local attacker can exploit this flaw to gain unauthorized access to sensitive information from the kernel memory space.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83755

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-83756

A use-after-free vulnerability exists in the Windows Win32 Kernel Subsystem that allows a local, authenticated attacker to escalate privileges to a higher integrity level. The vulnerability is triggered by improper handling of memory objects within the kernel, enabling an attacker to execute arbitrary code or manipulate system state with elevated permissions.

Affected products:

  • Windows Win32 Kernel Subsystem

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83756

Related in this roundup: CVE-2026-85858, CVE-2026-96848.

CVE-2026-83757

A heap-based buffer overflow vulnerability exists in the Windows Win32K component, which can be exploited by a locally authenticated attacker to achieve privilege escalation.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83757

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-83762

CVE-2026-83762 is a use-after-free vulnerability in the Windows Win32k component that allows a local, authorized attacker to elevate their privileges on an affected Windows system.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83762

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-83765

CVE-2026-83765 is an out-of-bounds read vulnerability in the Windows DWM Core Library that allows a locally authenticated attacker to read sensitive memory contents, potentially leading to information disclosure.

Affected products:

  • Windows DWM Core Library

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83765

Related in this roundup: CVE-2026-83726, CVE-2026-85855, CVE-2026-88194, CVE-2026-88189.

CVE-2026-83763

CVE-2026-83763 is a type confusion vulnerability in the Windows Input System that enables a locally authenticated attacker to achieve privilege escalation by exploiting resource access using incompatible types.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83763

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-83766

CVE-2026-83766 is a security feature bypass vulnerability in Windows Hyper-V caused by incorrect authorization. An attacker with authorized network access can exploit this flaw over an adjacent network to bypass security controls, potentially leading to unauthorized privilege escalation within the virtualization environment.

Affected products:

  • Hyper-V

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83766

Related in this roundup: CVE-2026-108399, CVE-2026-83671, CVE-2026-83839, CVE-2026-70248, CVE-2026-85343, CVE-2026-88071, CVE-2026-83636, CVE-2026-83716, CVE-2026-83728, CVE-2026-83931, CVE-2026-87705, CVE-2026-70023, CVE-2026-102214, CVE-2026-97813.

CVE-2026-83767

CVE-2026-83767 is a stack-based buffer overflow vulnerability in the Windows Installer service that allows an authenticated local attacker to execute code with elevated privileges, resulting in privilege escalation.

Affected products:

  • Windows Installer

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83767

Related in this roundup: CVE-2026-108468, CVE-2026-70272, CVE-2026-83708, CVE-2026-83775, CVE-2026-83779, CVE-2026-85358, CVE-2026-85361, CVE-2026-85364, CVE-2026-85366, CVE-2026-85374, CVE-2026-85796, CVE-2026-85830, CVE-2026-88080, CVE-2026-87708, CVE-2026-87711, CVE-2026-88124, CVE-2026-96302, CVE-2026-96305, CVE-2026-96307, CVE-2026-96308, CVE-2026-69471, CVE-2026-69635, CVE-2026-83672, CVE-2026-83676, CVE-2026-83680, CVE-2026-83702, CVE-2026-83717, CVE-2026-83718, CVE-2026-83752, CVE-2026-83899, CVE-2026-85941, CVE-2026-88076, CVE-2026-87693, CVE-2026-87694, CVE-2026-87704, CVE-2026-87700, CVE-2026-87715.

CVE-2026-83771

CVE-2026-83771 describes a use-after-free vulnerability in the Windows Camera Frame Server Monitor, enabling an attacker with adjacent network access to perform privilege escalation on the affected host.

Affected products:

  • Windows Camera Frame Server Monitor

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83771

Related in this roundup: CVE-2026-83753.

CVE-2026-83773

An information disclosure vulnerability exists in the Windows MIDI Service Module that allows a local, authorized attacker to expose sensitive system information.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83773

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-83774

CVE-2026-83774 is an information disclosure vulnerability within the Windows Win32 Kernel Subsystem. An authorized local attacker can exploit this flaw to gain unauthorized access to sensitive system information.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83774

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-83778

A heap-based buffer overflow vulnerability in the Microsoft Internet Messaging API allows a remote, unauthenticated attacker to achieve remote code execution by sending a specially crafted message over the network.

Affected products:

  • Internet Messaging API

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83778

Related in this roundup: CVE-2026-83919.

CVE-2026-83777

CVE-2026-83777 describes a heap-based buffer overflow vulnerability in the Windows Bluetooth Service that enables an unauthenticated attacker located within an adjacent network to elevate their privileges on a target system.

Affected products:

  • Windows Bluetooth Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83777

Related in this roundup: CVE-2026-83739.

CVE-2026-83783

CVE-2026-83783 is a heap-based buffer overflow vulnerability in Windows Management Instrumentation that permits an authenticated local attacker to escalate their privileges. Detection should focus on anomalous WMI activity or unexpected process execution patterns resulting from privilege escalation attempts.

Affected products:

  • Windows Management Instrumentation

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83783

Related in this roundup: CVE-2026-85362, CVE-2026-85852, CVE-2026-88091, CVE-2026-96851, CVE-2026-96856, CVE-2026-83724.

CVE-2026-83785

CVE-2026-83785 describes a use-after-free vulnerability within the Windows COM+ Event System Service that enables an authenticated, locally-present attacker to escalate their privileges. Detection should focus on monitoring for anomalous interactions or crashes related to the COM+ Event System Service process (eventsys.dll/svchost.exe) which may indicate exploitation attempts.

Affected products:

  • Windows COM+ Event System Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83785

Related in this roundup: CVE-2026-83848, CVE-2026-83830.

CVE-2026-83781

A privilege escalation vulnerability exists in the Windows Program Compatibility Assistant Service due to improper null termination, allowing a locally authorized attacker to gain elevated privileges on the system.

Affected products:

  • Windows Program Compatibility Assistant Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83781

Related in this roundup: CVE-2026-72968, CVE-2026-72934, CVE-2026-69743, CVE-2026-96920, CVE-2026-69596.

CVE-2026-83786

CVE-2026-83786 describes an information disclosure vulnerability within the Windows NTFS filesystem. An authorized local attacker can exploit this flaw to trigger the generation of error messages that contain sensitive information, potentially allowing for the unauthorized exposure of system data.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83786

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-83788

CVE-2026-83788 is an information disclosure vulnerability within the Windows rndismp6.sys driver, stemming from a buffer over-read in the Remote Network Driver Interface Specification (RNDIS) implementation. The vulnerability requires physical access to exploit and enables an unauthorized attacker to read sensitive memory contents.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83788

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-83789

CVE-2026-83789 is a heap-based buffer overflow vulnerability in the Windows SMB Client that enables an unauthenticated attacker to escalate privileges over a network connection.

Affected products:

  • Windows SMB Client

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83789

Related in this roundup: CVE-2026-84011.

CVE-2026-83790

CVE-2026-83790 is a use-after-free vulnerability within Windows Hello that permits an authenticated local attacker to escalate their privileges. Detection should focus on monitoring for abnormal process behavior or unexpected privilege changes associated with Windows Hello authentication processes.

Affected products:

  • Windows Hello

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83790

Related in this roundup: CVE-2026-70280, CVE-2026-83740, CVE-2026-83849, CVE-2026-83853, CVE-2026-83926, CVE-2026-83907.

CVE-2026-83792

The Windows Device Install Service contains an incorrect authorization vulnerability that permits a locally authenticated attacker to escalate their privileges. This vulnerability is classified as an elevation of privilege flaw within the service responsible for device installation.

Affected products:

  • Windows Device Install Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83792

CVE-2026-83794

A local, authorized attacker can exploit an out-of-bounds read vulnerability in the Windows Portable Device MTP Driver to disclose sensitive information from the system.

Affected products:

  • Windows Portable Device MTP Driver

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83794

Related in this roundup: CVE-2026-102206.

CVE-2026-83795

A heap-based buffer overflow vulnerability exists in the Windows Internet Key Exchange (IKE) Extension, which can be exploited by an unauthorized remote attacker to cause a denial-of-service condition on the affected system.

Affected products:

  • Windows Internet Key Exchange Extension

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83795

CVE-2026-83797

CVE-2026-83797 is an out-of-bounds read vulnerability in the Windows Partition Management Driver that permits an unauthorized attacker to achieve remote code execution over a network. This flaw represents a critical security risk as it affects the core driver layer, potentially allowing full system compromise.

Affected products:

  • Windows Partition Management Driver

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83797

Related in this roundup: CVE-2026-97805, CVE-2026-83851, CVE-2026-83514, CVE-2026-103553.

CVE-2026-83829

A heap-based buffer overflow vulnerability in the Microsoft Windows Search Component allows a locally authenticated attacker to escalate privileges on the affected system.

Affected products:

  • Windows Search Component

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83829

Related in this roundup: CVE-2026-105010, CVE-2026-108136, CVE-2026-70136, CVE-2026-70141, CVE-2026-70173, CVE-2026-70150, CVE-2026-70177, CVE-2026-70156, CVE-2026-83575, CVE-2026-83704, CVE-2026-70086, CVE-2026-83920, CVE-2026-85869, CVE-2026-88160, CVE-2026-83564, CVE-2026-83570, CVE-2026-83686, CVE-2026-83725, CVE-2026-83850, CVE-2026-88182, CVE-2026-88191, CVE-2026-96324, CVE-2026-96911, CVE-2026-96910, CVE-2026-96937.

CVE-2026-83830

CVE-2026-83830 is a heap-based buffer overflow vulnerability in the Windows COM+ Event System Service that enables a local, authorized attacker to escalate privileges to higher permission levels.

Affected products:

  • Windows COM+ Event System Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83830

Related in this roundup: CVE-2026-83848, CVE-2026-83785.

CVE-2026-83835

CVE-2026-83835 is an information disclosure vulnerability in the Windows Common Log File System (CLFS) driver caused by a buffer over-read. An authorized attacker can exploit this locally to gain access to sensitive information.

Affected products:

  • Windows Common Log File System Driver

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83835

Related in this roundup: CVE-2026-70233, CVE-2026-85355, CVE-2026-85868.

CVE-2026-83837

A privilege escalation vulnerability exists in Windows Kernel-Mode Drivers due to improper access control. An attacker who has already gained local access to a system can exploit this vulnerability to elevate their privileges to a higher integrity level.

Affected products:

  • Windows Kernel-Mode Drivers

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83837

Related in this roundup: CVE-2026-69971, CVE-2026-83834, CVE-2026-85857, CVE-2026-85871, CVE-2026-96247, CVE-2026-96849, CVE-2026-83568, CVE-2026-83637, CVE-2026-96915.

CVE-2026-83840

CVE-2026-83840 is a local privilege escalation vulnerability in Windows Error Reporting caused by weak authentication, allowing an authorized attacker to gain higher levels of system access.

Affected products:

  • Windows Error Reporting

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83840

Related in this roundup: CVE-2026-83519, CVE-2026-83693, CVE-2026-83748, CVE-2026-97815, CVE-2026-69363, CVE-2026-70103, CVE-2026-69354, CVE-2026-69387, CVE-2026-83658, CVE-2026-83669, CVE-2026-83715, CVE-2026-83758, CVE-2026-83826, CVE-2026-83916, CVE-2026-85354, CVE-2026-85800, CVE-2026-83643, CVE-2026-83689, CVE-2026-83747, CVE-2026-83750, CVE-2026-97798.

CVE-2026-83845

A vulnerability in the wininet.dll component of Windows allows an authorized local attacker to exploit improper privilege management to perform spoofing, potentially leading to unauthorized manipulation or deception within the local system context.

Affected products:

  • Windows Internet

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83845

CVE-2026-83850

CVE-2026-83850 is a heap-based buffer overflow vulnerability within the Microsoft Windows Search Component. The flaw can be exploited by an authorized local attacker to achieve privilege escalation on the affected Windows system.

Affected products:

  • Windows Search Component

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83850

Related in this roundup: CVE-2026-105010, CVE-2026-108136, CVE-2026-70136, CVE-2026-70141, CVE-2026-70173, CVE-2026-70150, CVE-2026-70177, CVE-2026-70156, CVE-2026-83575, CVE-2026-83704, CVE-2026-70086, CVE-2026-83920, CVE-2026-85869, CVE-2026-88160, CVE-2026-83564, CVE-2026-83570, CVE-2026-83686, CVE-2026-83725, CVE-2026-83829, CVE-2026-88182, CVE-2026-88191, CVE-2026-96324, CVE-2026-96911, CVE-2026-96910, CVE-2026-96937.

CVE-2026-83856

CVE-2026-83856 is a remote code execution vulnerability residing in the Windows Event Logging Service. The vulnerability is triggered by an out-of-bounds read condition, which can be exploited by an unauthorized network-based attacker to gain execution privileges on the target system.

Affected products:

  • Windows Event Logging Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83856

Related in this roundup: CVE-2026-83723, CVE-2026-95904, CVE-2026-83695.

CVE-2026-83857

A use-after-free vulnerability in the Windows Universal Disk Format (UDFS) file system driver allows an authenticated local attacker to achieve privilege escalation by exploiting the memory management error during file system operations.

Affected products:

  • Windows Universal Disk Format File System Driver

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83857

Related in this roundup: CVE-2026-83713, CVE-2026-85820, CVE-2026-85821, CVE-2026-85825, CVE-2026-83513, CVE-2026-85909, CVE-2026-96930, CVE-2026-96946, CVE-2026-96947, CVE-2026-96949, CVE-2026-96950, CVE-2026-96953, CVE-2026-102205, CVE-2026-102218, CVE-2026-102215.

CVE-2026-83859

CVE-2026-83859 is a use-after-free vulnerability in the Windows NTFS file system that enables a local, authorized attacker to achieve privilege escalation on the affected system.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83859

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-83860

CVE-2026-83860 is a stack-based buffer overflow vulnerability within the Windows Graphics Device Interface (GDI) component. An unauthorized remote attacker can exploit this flaw to trigger a denial of service condition on affected Windows systems.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83860

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-83861

CVE-2026-83861 is a heap-based buffer overflow vulnerability in the Windows Remote Desktop Protocol (RDP) that allows an authenticated local attacker to escalate their privileges. Detection should focus on monitoring anomalous RDP-related service activity or memory access patterns consistent with heap corruption on Windows systems.

Affected products:

  • Windows Remote Desktop Protocol

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83861

Related in this roundup: CVE-2026-96322, CVE-2026-102198.

CVE-2026-83863

A heap-based buffer overflow vulnerability in the Windows Servicing Stack Updates allows an authenticated, local attacker to execute arbitrary code with elevated system privileges.

Affected products:

  • Servicing Stack Updates

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83863

Related in this roundup: CVE-2026-83719, CVE-2026-85318, CVE-2026-85365, CVE-2026-85835, CVE-2026-96939.

CVE-2026-83874

CVE-2026-83874 describes a heap-based buffer overflow vulnerability in Windows Event Tracing that enables a remote, unauthorized attacker to achieve remote code execution on affected Windows systems.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83874

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-83883

CVE-2026-83883 is a use-after-free vulnerability within the Windows Win32k subsystem that enables a locally authenticated attacker to perform privilege escalation on the affected system.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83883

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-83881

A heap-based buffer overflow vulnerability in the Windows exFAT File System allows a locally authenticated attacker to escalate privileges. The vulnerability resides in how the file system driver processes specific inputs, potentially leading to unauthorized execution with elevated permissions.

Affected products:

  • Windows exFAT File System

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83881

CVE-2026-83887

CVE-2026-83887 is an out-of-bounds read vulnerability in the Windows HID Parser Library that enables an authenticated, locally-situated attacker to perform unauthorized information disclosure. The vulnerability resides within the parsing logic used for Human Interface Device data.

Affected products:

  • HID Parser Library

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83887

Related in this roundup: CVE-2026-70128, CVE-2026-83569, CVE-2026-83898, CVE-2026-83904.

CVE-2026-83884

CVE-2026-83884 describes an out-of-bounds read vulnerability within the Windows HID Parser Library. An authorized local attacker can exploit this flaw to read memory locations outside the intended buffer, potentially leading to the disclosure of sensitive information.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83884

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-83898

The Microsoft HID Parser Library is vulnerable to an out-of-bounds read, enabling a locally authenticated attacker to perform information disclosure. The vulnerability resides in the library's memory management during HID report processing, allowing unauthorized access to sensitive memory contents.

Affected products:

  • HID Parser Library

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83898

Related in this roundup: CVE-2026-70128, CVE-2026-83569, CVE-2026-83887, CVE-2026-83904.

CVE-2026-83870

An information disclosure vulnerability exists in the Windows Aggregated Data Platform Service due to an out-of-bounds read flaw. An authenticated attacker could exploit this vulnerability to read sensitive data from the system's memory, potentially leading to unauthorized information disclosure.

Affected products:

  • Windows Aggregated Data Platform Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83870

CVE-2026-83895

CVE-2026-83895 is a heap-based buffer overflow vulnerability within the Windows Win32 Kernel Subsystem. An unauthorized attacker with physical access to the target system can exploit this flaw to execute code with elevated privileges.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83895

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-83877

An integer overflow or wraparound vulnerability exists within the Windows HID Parser Library. This flaw allows a locally authenticated attacker to exploit the library to achieve privilege escalation on the affected system.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83877

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-83873

CVE-2026-83873 is a privilege escalation vulnerability in the Windows Shell caused by a relative path traversal flaw. An authorized local attacker can exploit this to gain elevated privileges on the affected system.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83873

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-83889

CVE-2026-83889 is a remote code execution vulnerability in the Microsoft Windows DNS Server component. The vulnerability is caused by a release of an invalid pointer or reference, which can be triggered by an authorized attacker over a network to achieve arbitrary code execution.

Affected products:

  • Windows DNS Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83889

Related in this roundup: CVE-2026-70244, CVE-2026-97826, CVE-2026-97828, CVE-2026-97832, CVE-2026-97833, CVE-2026-97834, CVE-2026-97838, CVE-2026-97840.

CVE-2026-83897

A vulnerability exists in the Windows Win32 Kernel Subsystem that allows a locally authorized attacker to disclose sensitive system information, potentially aiding in further exploitation of the target system.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83897

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-83899

CVE-2026-83899 describes an improper privilege management vulnerability in Windows Installer that allows an authenticated local attacker to escalate privileges. Detection engineers should monitor for unauthorized attempts to invoke the Windows Installer service (msiexec.exe) in ways that deviate from standard software deployment patterns or anomalous use of high-privileged process execution originating from the installer service.

Affected products:

  • Windows Installer

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83899

Related in this roundup: CVE-2026-108468, CVE-2026-70272, CVE-2026-83708, CVE-2026-83775, CVE-2026-83779, CVE-2026-85358, CVE-2026-85361, CVE-2026-85364, CVE-2026-85366, CVE-2026-85374, CVE-2026-85796, CVE-2026-85830, CVE-2026-88080, CVE-2026-87708, CVE-2026-87711, CVE-2026-88124, CVE-2026-96302, CVE-2026-96305, CVE-2026-96307, CVE-2026-96308, CVE-2026-69471, CVE-2026-69635, CVE-2026-83672, CVE-2026-83676, CVE-2026-83680, CVE-2026-83702, CVE-2026-83717, CVE-2026-83718, CVE-2026-83752, CVE-2026-83767, CVE-2026-85941, CVE-2026-88076, CVE-2026-87693, CVE-2026-87694, CVE-2026-87704, CVE-2026-87700, CVE-2026-87715.

CVE-2026-83900

A use-after-free vulnerability in the Windows Bind Filter Driver allows a locally authenticated attacker to gain elevated privileges on the system.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83900

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-83903

A heap-based buffer overflow vulnerability exists in the Windows Direct Composition component, allowing an authenticated local attacker to execute arbitrary code with elevated system privileges.

Affected products:

  • Windows Direct Composition

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83903

CVE-2026-85872

A use-after-free vulnerability exists in the Windows Storage VSP Driver that can be exploited by a locally authenticated attacker to achieve privilege escalation.

Affected products:

  • Windows Storage VSP Driver

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85872

CVE-2026-85901

CVE-2026-85901 is a heap-based buffer overflow vulnerability in the Windows Win32K graphics component. An authenticated attacker can exploit this flaw to achieve local privilege escalation by executing arbitrary code with higher permissions.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85901

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-85902

A heap-based buffer overflow vulnerability in the Windows Direct Composition component allows a locally authenticated attacker to escalate privileges to a higher integrity level.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85902

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-85903

CVE-2026-85903 is a remote code execution vulnerability in the Windows Domain Name Service caused by an untrusted pointer dereference. An unauthenticated attacker can exploit this via the network to execute arbitrary code with elevated privileges on the affected DNS server.

Affected products:

  • Windows Domain Name Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85903

Related in this roundup: CVE-2026-70127, CVE-2026-70167, CVE-2026-88112, CVE-2026-88114, CVE-2026-88116.

CVE-2026-83904

The HID Parser Library contains an out-of-bounds read vulnerability that allows a local, authorized attacker to disclose sensitive information. Detection engineers should monitor for unauthorized local attempts to access or parse HID (Human Interface Device) descriptors or associated memory regions managed by the HID parser.

Affected products:

  • HID Parser Library

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83904

Related in this roundup: CVE-2026-70128, CVE-2026-83569, CVE-2026-83887, CVE-2026-83898.

CVE-2026-83905

An information disclosure vulnerability exists in the Windows Shell component that allows a local, authorized attacker to gain unauthorized access to sensitive system information by exploiting the way the shell handles data.

Affected products:

  • Windows Shell

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83905

Related in this roundup: CVE-2026-83782, CVE-2026-70222, CVE-2026-83906.

CVE-2026-85905

CVE-2026-85905 is a heap-based buffer overflow vulnerability in the Windows UI Immersive Server API, which can be exploited by an authorized attacker to achieve local privilege escalation on affected Windows systems.

Affected products:

  • Windows UI Immersive Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85905

CVE-2026-85906

A use-after-free vulnerability in the Windows Direct Composition component allows a locally authenticated attacker to execute code with elevated privileges.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85906

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-83907

CVE-2026-83907 is an information disclosure vulnerability in Windows Hello that allows an authenticated local attacker to access sensitive system information by leveraging a flaw in how the component exposes data to an unauthorized control sphere.

Affected products:

  • Windows Hello

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83907

Related in this roundup: CVE-2026-70280, CVE-2026-83740, CVE-2026-83849, CVE-2026-83853, CVE-2026-83926, CVE-2026-83790.

CVE-2026-83908

CVE-2026-83908 describes an elevation of privilege vulnerability in the Windows RPC Runtime caused by the release of an invalid pointer or reference. An authenticated local attacker could exploit this flaw to escalate privileges on the affected system.

Affected products:

  • RPC Runtime

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83908

Related in this roundup: CVE-2026-83518.

CVE-2026-85908

A heap-based buffer overflow vulnerability in the Win32K Graphics component (GRFX) allows a locally authenticated attacker to escalate privileges. The vulnerability resides within the Windows kernel-mode driver, facilitating elevated execution context.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85908

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-85909

CVE-2026-85909 is an out-of-bounds read vulnerability in the Windows Universal Disk Format File System Driver (UDFS). An authorized local attacker can exploit this flaw to disclose sensitive information from the system, likely through memory read primitives.

Affected products:

  • Windows Universal Disk Format File System Driver

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85909

Related in this roundup: CVE-2026-83713, CVE-2026-85820, CVE-2026-85821, CVE-2026-85825, CVE-2026-83513, CVE-2026-83857, CVE-2026-96930, CVE-2026-96946, CVE-2026-96947, CVE-2026-96949, CVE-2026-96950, CVE-2026-96953, CVE-2026-102205, CVE-2026-102218, CVE-2026-102215.

CVE-2026-85910

The Windows StateRepository API contains a buffer over-read vulnerability that allows an authorized local attacker to perform an information disclosure attack.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85910

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-85911

A use-after-free vulnerability exists in the Windows StateRepository API that allows an authenticated local attacker to execute arbitrary code with elevated privileges.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85911

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-83913

CVE-2026-83913 is a local privilege escalation vulnerability in the Windows Kernel caused by a use-after-free flaw. An authenticated attacker can exploit this vulnerability to gain higher privileges on the target system.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83913

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-85912

CVE-2026-85912 describes a race condition vulnerability in the Windows Clipboard User Service, enabling an authorized local attacker to elevate their privileges to a higher integrity level on the target system.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85912

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-83915

A use-after-free vulnerability exists in the Windows Diagnostic Policy Service that can be exploited by a local, authorized attacker to achieve privilege escalation.

Affected products:

  • Windows Diagnostic Policy Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83915

CVE-2026-83918

CVE-2026-83918 describes an integer overflow or wraparound vulnerability within the Windows Kernel. An authorized local attacker can exploit this flaw to escalate their privileges to a higher level of access on the target system.

Affected products:

  • Windows Kernel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83918

Related in this roundup: CVE-2026-108462, CVE-2026-108466, CVE-2026-70063, CVE-2026-70106, CVE-2026-70121, CVE-2026-70114, CVE-2026-83690, CVE-2026-83768, CVE-2026-83833, CVE-2026-85372, CVE-2026-85836, CVE-2026-85837, CVE-2026-70170, CVE-2026-85939, CVE-2026-85945, CVE-2026-96216, CVE-2026-96317, CVE-2026-96868, CVE-2026-70199, CVE-2026-70232, CVE-2026-83736, CVE-2026-83735, CVE-2026-83924, CVE-2026-83925, CVE-2026-88134, CVE-2026-88139, CVE-2026-88141, CVE-2026-70160, CVE-2026-70111, CVE-2026-96913, CVE-2026-96929, CVE-2026-102207, CVE-2026-103578, CVE-2026-97803.

CVE-2026-83923

A relative path traversal vulnerability exists in the OpenSSH for Windows service, which can be exploited by an unauthenticated remote attacker to achieve remote code execution on the target system.

Affected products:

  • OpenSSH for Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83923

Related in this roundup: CVE-2026-97816, CVE-2026-83754, CVE-2026-70163, CVE-2026-83769, CVE-2026-83871, CVE-2026-88157, CVE-2026-97811.

CVE-2026-83924

A use-after-free vulnerability in the Windows Kernel allows a locally authenticated attacker to elevate their privileges to a higher level of access.

Affected products:

  • Windows Kernel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83924

Related in this roundup: CVE-2026-108462, CVE-2026-108466, CVE-2026-70063, CVE-2026-70106, CVE-2026-70121, CVE-2026-70114, CVE-2026-83690, CVE-2026-83768, CVE-2026-83833, CVE-2026-85372, CVE-2026-85836, CVE-2026-85837, CVE-2026-70170, CVE-2026-85939, CVE-2026-85945, CVE-2026-96216, CVE-2026-96317, CVE-2026-96868, CVE-2026-70199, CVE-2026-70232, CVE-2026-83736, CVE-2026-83735, CVE-2026-83918, CVE-2026-83925, CVE-2026-88134, CVE-2026-88139, CVE-2026-88141, CVE-2026-70160, CVE-2026-70111, CVE-2026-96913, CVE-2026-96929, CVE-2026-102207, CVE-2026-103578, CVE-2026-97803.

CVE-2026-83925

CVE-2026-83925 describes an information disclosure vulnerability in the Windows Kernel caused by the use of uninitialized resources. An authorized local attacker can exploit this flaw to read sensitive data from the kernel memory space.

Affected products:

  • Windows Kernel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83925

Related in this roundup: CVE-2026-108462, CVE-2026-108466, CVE-2026-70063, CVE-2026-70106, CVE-2026-70121, CVE-2026-70114, CVE-2026-83690, CVE-2026-83768, CVE-2026-83833, CVE-2026-85372, CVE-2026-85836, CVE-2026-85837, CVE-2026-70170, CVE-2026-85939, CVE-2026-85945, CVE-2026-96216, CVE-2026-96317, CVE-2026-96868, CVE-2026-70199, CVE-2026-70232, CVE-2026-83736, CVE-2026-83735, CVE-2026-83918, CVE-2026-83924, CVE-2026-88134, CVE-2026-88139, CVE-2026-88141, CVE-2026-70160, CVE-2026-70111, CVE-2026-96913, CVE-2026-96929, CVE-2026-102207, CVE-2026-103578, CVE-2026-97803.

CVE-2026-83931

CVE-2026-83931 describes a heap-based buffer overflow vulnerability in Windows Hyper-V. An authorized local attacker can exploit this flaw to achieve remote code execution, likely leading to privilege escalation within the context of the virtualization host.

Affected products:

  • Hyper-V

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83931

Related in this roundup: CVE-2026-108399, CVE-2026-83671, CVE-2026-83839, CVE-2026-70248, CVE-2026-85343, CVE-2026-88071, CVE-2026-83636, CVE-2026-83716, CVE-2026-83728, CVE-2026-83766, CVE-2026-87705, CVE-2026-70023, CVE-2026-102214, CVE-2026-97813.

CVE-2026-83930

A use-after-free vulnerability in the Windows Update Orchestrator Service allows an authenticated local attacker to gain elevated privileges by exploiting memory corruption within the service.

Affected products:

  • Windows Update Orchestrator Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83930

Related in this roundup: CVE-2026-81964, CVE-2026-83793, CVE-2026-83886, CVE-2026-83507, CVE-2026-83933, CVE-2026-97812.

CVE-2026-83933

An information disclosure vulnerability exists in the Windows Update Orchestrator Service due to improper link resolution before file access (link following). An authorized local attacker could exploit this vulnerability to disclose sensitive information on the local system.

Affected products:

  • Windows Update Orchestrator Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83933

Related in this roundup: CVE-2026-81964, CVE-2026-83793, CVE-2026-83886, CVE-2026-83507, CVE-2026-83930, CVE-2026-97812.

CVE-2026-83934

A stack-based buffer overflow vulnerability in Windows GDI+ allows a remote, unauthorized attacker to execute arbitrary code. The vulnerability is triggered over a network, making it a critical risk for remote code execution on affected systems.

Affected products:

  • Windows GDI+

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83934

CVE-2026-85874

A use-after-free vulnerability in the Windows Message Queuing Queue Manager allows an authorized, local attacker to execute arbitrary code. The vulnerability exists within the message processing service, potentially allowing for privilege escalation or remote code execution depending on the attacker's level of access to the service.

Affected products:

  • Windows Message Queuing Queue Manager

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85874

Related in this roundup: CVE-2026-100202.

CVE-2026-69789

A heap-based buffer overflow vulnerability exists in the Windows Reliable Multicast Transport Driver (RMCAST) that allows a remote, unauthorized attacker to achieve remote code execution via an adjacent network.

Affected products:

  • Windows Reliable Multicast Transport Driver

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69789

CVE-2026-69798

A use-after-free vulnerability in the Windows Wired AutoConfig Service allows a local, authenticated attacker to gain elevated privileges on the system.

Affected products:

  • Windows Wired AutoConfig Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69798

CVE-2026-85884

The Windows Health and Optimized Experiences Service is vulnerable to a privilege escalation flaw due to a missing authentication check on a critical function, allowing a local attacker with authorization to elevate their privileges on the affected system.

Affected products:

  • Windows Health and Optimized Experiences Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85884

Related in this roundup: CVE-2026-96183.

CVE-2026-85941

CVE-2026-85941 is a local privilege escalation vulnerability in the Windows Installer service caused by a race condition (CWE-367). An authorized attacker can exploit this concurrency issue to gain elevated privileges on a Windows system.

Affected products:

  • Windows Installer

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85941

Related in this roundup: CVE-2026-108468, CVE-2026-70272, CVE-2026-83708, CVE-2026-83775, CVE-2026-83779, CVE-2026-85358, CVE-2026-85361, CVE-2026-85364, CVE-2026-85366, CVE-2026-85374, CVE-2026-85796, CVE-2026-85830, CVE-2026-88080, CVE-2026-87708, CVE-2026-87711, CVE-2026-88124, CVE-2026-96302, CVE-2026-96305, CVE-2026-96307, CVE-2026-96308, CVE-2026-69471, CVE-2026-69635, CVE-2026-83672, CVE-2026-83676, CVE-2026-83680, CVE-2026-83702, CVE-2026-83717, CVE-2026-83718, CVE-2026-83752, CVE-2026-83767, CVE-2026-83899, CVE-2026-88076, CVE-2026-87693, CVE-2026-87694, CVE-2026-87704, CVE-2026-87700, CVE-2026-87715.

CVE-2026-87699

CVE-2026-87699 is a heap-based buffer overflow vulnerability in the Windows Winlogon component. An authorized attacker can exploit this flaw to execute code with elevated privileges on the local system.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87699

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-88076

CVE-2026-88076 describes a null pointer dereference vulnerability within the Windows Installer service that enables a locally authenticated attacker to escalate their privileges to a higher integrity level on the target system.

Affected products:

  • Windows Installer

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88076

Related in this roundup: CVE-2026-108468, CVE-2026-70272, CVE-2026-83708, CVE-2026-83775, CVE-2026-83779, CVE-2026-85358, CVE-2026-85361, CVE-2026-85364, CVE-2026-85366, CVE-2026-85374, CVE-2026-85796, CVE-2026-85830, CVE-2026-88080, CVE-2026-87708, CVE-2026-87711, CVE-2026-88124, CVE-2026-96302, CVE-2026-96305, CVE-2026-96307, CVE-2026-96308, CVE-2026-69471, CVE-2026-69635, CVE-2026-83672, CVE-2026-83676, CVE-2026-83680, CVE-2026-83702, CVE-2026-83717, CVE-2026-83718, CVE-2026-83752, CVE-2026-83767, CVE-2026-83899, CVE-2026-85941, CVE-2026-87693, CVE-2026-87694, CVE-2026-87704, CVE-2026-87700, CVE-2026-87715.

CVE-2026-87705

CVE-2026-87705 is a security feature bypass vulnerability in Windows Hyper-V caused by improper verification of the communication channel source. An attacker on an adjacent network can exploit this flaw to circumvent security controls without requiring authentication.

Affected products:

  • Hyper-V

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87705

Related in this roundup: CVE-2026-108399, CVE-2026-83671, CVE-2026-83839, CVE-2026-70248, CVE-2026-85343, CVE-2026-88071, CVE-2026-83636, CVE-2026-83716, CVE-2026-83728, CVE-2026-83766, CVE-2026-83931, CVE-2026-70023, CVE-2026-102214, CVE-2026-97813.

CVE-2026-87693

A use-after-free vulnerability in the Windows Installer component allows a locally authenticated attacker to elevate their privileges on the host system.

Affected products:

  • Windows Installer

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87693

Related in this roundup: CVE-2026-108468, CVE-2026-70272, CVE-2026-83708, CVE-2026-83775, CVE-2026-83779, CVE-2026-85358, CVE-2026-85361, CVE-2026-85364, CVE-2026-85366, CVE-2026-85374, CVE-2026-85796, CVE-2026-85830, CVE-2026-88080, CVE-2026-87708, CVE-2026-87711, CVE-2026-88124, CVE-2026-96302, CVE-2026-96305, CVE-2026-96307, CVE-2026-96308, CVE-2026-69471, CVE-2026-69635, CVE-2026-83672, CVE-2026-83676, CVE-2026-83680, CVE-2026-83702, CVE-2026-83717, CVE-2026-83718, CVE-2026-83752, CVE-2026-83767, CVE-2026-83899, CVE-2026-85941, CVE-2026-88076, CVE-2026-87694, CVE-2026-87704, CVE-2026-87700, CVE-2026-87715.

CVE-2026-87694

CVE-2026-87694 is a privilege escalation vulnerability in the Windows Installer service caused by a use-after-free flaw. An authenticated local attacker can leverage this vulnerability to gain elevated privileges on the target system.

Affected products:

  • Windows Installer

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87694

Related in this roundup: CVE-2026-108468, CVE-2026-70272, CVE-2026-83708, CVE-2026-83775, CVE-2026-83779, CVE-2026-85358, CVE-2026-85361, CVE-2026-85364, CVE-2026-85366, CVE-2026-85374, CVE-2026-85796, CVE-2026-85830, CVE-2026-88080, CVE-2026-87708, CVE-2026-87711, CVE-2026-88124, CVE-2026-96302, CVE-2026-96305, CVE-2026-96307, CVE-2026-96308, CVE-2026-69471, CVE-2026-69635, CVE-2026-83672, CVE-2026-83676, CVE-2026-83680, CVE-2026-83702, CVE-2026-83717, CVE-2026-83718, CVE-2026-83752, CVE-2026-83767, CVE-2026-83899, CVE-2026-85941, CVE-2026-88076, CVE-2026-87693, CVE-2026-87704, CVE-2026-87700, CVE-2026-87715.

CVE-2026-87709

CVE-2026-87709 is a vulnerability in the Windows Host Guardian Service resulting from improper access control. The flaw allows a locally authenticated attacker to tamper with the service, potentially leading to unauthorized modifications or privilege escalation.

Affected products:

  • Windows Host Guardian Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87709

Related in this roundup: CVE-2026-96248, CVE-2026-88072.

CVE-2026-87698

CVE-2026-87698 is an out-of-bounds read vulnerability in the Windows Remote Access Service Infrastructure. An authorized local attacker can exploit this flaw to perform unauthorized information disclosure, potentially leading to the leakage of sensitive data residing in memory.

Affected products:

  • Windows Remote Access Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87698

CVE-2026-87704

CVE-2026-87704 is a local privilege escalation vulnerability in the Windows Installer service caused by a use-after-free defect. An attacker who has already gained initial local access can exploit this vulnerability to execute arbitrary code or commands with elevated privileges on the system.

Affected products:

  • Windows Installer

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87704

Related in this roundup: CVE-2026-108468, CVE-2026-70272, CVE-2026-83708, CVE-2026-83775, CVE-2026-83779, CVE-2026-85358, CVE-2026-85361, CVE-2026-85364, CVE-2026-85366, CVE-2026-85374, CVE-2026-85796, CVE-2026-85830, CVE-2026-88080, CVE-2026-87708, CVE-2026-87711, CVE-2026-88124, CVE-2026-96302, CVE-2026-96305, CVE-2026-96307, CVE-2026-96308, CVE-2026-69471, CVE-2026-69635, CVE-2026-83672, CVE-2026-83676, CVE-2026-83680, CVE-2026-83702, CVE-2026-83717, CVE-2026-83718, CVE-2026-83752, CVE-2026-83767, CVE-2026-83899, CVE-2026-85941, CVE-2026-88076, CVE-2026-87693, CVE-2026-87694, CVE-2026-87700, CVE-2026-87715.

CVE-2026-87700

CVE-2026-87700 is a use-after-free vulnerability in the Windows Installer service that allows a locally authenticated attacker to escalate their privileges to a higher level of authority on the host system.

Affected products:

  • Windows Installer

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87700

Related in this roundup: CVE-2026-108468, CVE-2026-70272, CVE-2026-83708, CVE-2026-83775, CVE-2026-83779, CVE-2026-85358, CVE-2026-85361, CVE-2026-85364, CVE-2026-85366, CVE-2026-85374, CVE-2026-85796, CVE-2026-85830, CVE-2026-88080, CVE-2026-87708, CVE-2026-87711, CVE-2026-88124, CVE-2026-96302, CVE-2026-96305, CVE-2026-96307, CVE-2026-96308, CVE-2026-69471, CVE-2026-69635, CVE-2026-83672, CVE-2026-83676, CVE-2026-83680, CVE-2026-83702, CVE-2026-83717, CVE-2026-83718, CVE-2026-83752, CVE-2026-83767, CVE-2026-83899, CVE-2026-85941, CVE-2026-88076, CVE-2026-87693, CVE-2026-87694, CVE-2026-87704, CVE-2026-87715.

CVE-2026-87715

CVE-2026-87715 is a use-after-free vulnerability within the Windows Installer service that enables an authenticated attacker to achieve local privilege escalation on affected Windows systems.

Affected products:

  • Windows Installer

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87715

Related in this roundup: CVE-2026-108468, CVE-2026-70272, CVE-2026-83708, CVE-2026-83775, CVE-2026-83779, CVE-2026-85358, CVE-2026-85361, CVE-2026-85364, CVE-2026-85366, CVE-2026-85374, CVE-2026-85796, CVE-2026-85830, CVE-2026-88080, CVE-2026-87708, CVE-2026-87711, CVE-2026-88124, CVE-2026-96302, CVE-2026-96305, CVE-2026-96307, CVE-2026-96308, CVE-2026-69471, CVE-2026-69635, CVE-2026-83672, CVE-2026-83676, CVE-2026-83680, CVE-2026-83702, CVE-2026-83717, CVE-2026-83718, CVE-2026-83752, CVE-2026-83767, CVE-2026-83899, CVE-2026-85941, CVE-2026-88076, CVE-2026-87693, CVE-2026-87694, CVE-2026-87704, CVE-2026-87700.

CVE-2026-88072

CVE-2026-88072 is a privilege escalation vulnerability in the Windows Host Guardian Service caused by improper access control. The vulnerability allows an authenticated attacker to gain higher levels of privilege on a vulnerable host system.

Affected products:

  • Windows Host Guardian Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88072

Related in this roundup: CVE-2026-96248, CVE-2026-87709.

CVE-2026-87702

CVE-2026-87702 describes an elevation of privilege vulnerability in Windows Resource Management (MRM) caused by an integer overflow or wraparound condition. A local attacker with authorization can exploit this flaw to gain elevated privileges on the affected system.

Affected products:

  • Windows Resource Management

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87702

CVE-2026-88079

A null pointer dereference vulnerability exists within the Windows MIDI Service Module that allows a locally authorized attacker to escalate privileges. The vulnerability stems from improper handling of null pointers during service operation, which could be exploited to achieve unauthorized privilege levels on the host system.

Affected products:

  • Windows MIDI Service Module

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88079

Related in this roundup: CVE-2026-83828, CVE-2026-83751.

CVE-2026-88103

A use-after-free vulnerability in the Windows Broadcast DVR User Service allows a local, authorized attacker to escalate their privileges. This vulnerability requires the attacker to have existing access to the system to exploit the service and gain higher-level permissions.

Affected products:

  • Windows Broadcast DVR User Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88103

Related in this roundup: CVE-2026-108461, CVE-2026-105722, CVE-2026-88105, CVE-2026-88113, CVE-2026-70122, CVE-2026-70148, CVE-2026-96919, CVE-2026-102193, CVE-2026-102195, CVE-2026-102196, CVE-2026-102197, CVE-2026-103554, CVE-2026-103565, CVE-2026-103567, CVE-2026-97806, CVE-2026-97807, CVE-2026-97808.

CVE-2026-88105

CVE-2026-88105 is a use-after-free vulnerability in the Windows Broadcast DVR User Service that allows an authenticated local attacker to execute arbitrary code with elevated privileges, effectively resulting in a privilege escalation attack.

Affected products:

  • Windows Broadcast DVR User Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88105

Related in this roundup: CVE-2026-108461, CVE-2026-105722, CVE-2026-88103, CVE-2026-88113, CVE-2026-70122, CVE-2026-70148, CVE-2026-96919, CVE-2026-102193, CVE-2026-102195, CVE-2026-102196, CVE-2026-102197, CVE-2026-103554, CVE-2026-103565, CVE-2026-103567, CVE-2026-97806, CVE-2026-97807, CVE-2026-97808.

CVE-2026-88127

A use-after-free vulnerability in the Windows SMB Server allows a locally authenticated attacker to escalate privileges to a higher integrity level.

Affected products:

  • Windows SMB Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88127

Related in this roundup: CVE-2026-70133, CVE-2026-96325.

CVE-2026-88134

CVE-2026-88134 is a use-after-free vulnerability in the Windows Kernel that enables a local, authenticated attacker to escalate their privileges. Detection efforts should focus on monitoring for anomalous kernel-mode memory access patterns or unexpected attempts to gain higher integrity levels from a standard user process.

Affected products:

  • Windows Kernel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88134

Related in this roundup: CVE-2026-108462, CVE-2026-108466, CVE-2026-70063, CVE-2026-70106, CVE-2026-70121, CVE-2026-70114, CVE-2026-83690, CVE-2026-83768, CVE-2026-83833, CVE-2026-85372, CVE-2026-85836, CVE-2026-85837, CVE-2026-70170, CVE-2026-85939, CVE-2026-85945, CVE-2026-96216, CVE-2026-96317, CVE-2026-96868, CVE-2026-70199, CVE-2026-70232, CVE-2026-83736, CVE-2026-83735, CVE-2026-83918, CVE-2026-83924, CVE-2026-83925, CVE-2026-88139, CVE-2026-88141, CVE-2026-70160, CVE-2026-70111, CVE-2026-96913, CVE-2026-96929, CVE-2026-102207, CVE-2026-103578, CVE-2026-97803.

CVE-2026-88109

CVE-2026-88109 describes a use-after-free vulnerability in Microsoft Office Click-To-Run that enables a locally authenticated attacker to escalate their privileges on the system.

Affected products:

  • Office Click-To-Run

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88109

Related in this roundup: CVE-2026-70276, CVE-2026-97774, CVE-2026-85340.

CVE-2026-88126

CVE-2026-88126 is a local privilege escalation vulnerability in the WebDAV component due to an untrusted pointer dereference. An attacker must have local access and be authorized to perform the exploit to gain higher-level privileges on the affected Windows system.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88126

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-88110

A heap-based buffer overflow vulnerability in the Windows Graphics Kernel allows a locally authenticated attacker to elevate their privileges to a higher integrity level.

Affected products:

  • Windows Graphics Kernel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88110

Related in this roundup: CVE-2026-88073, CVE-2026-96118.

CVE-2026-88113

A use-after-free vulnerability in the Windows Broadcast DVR User Service allows a locally authenticated attacker to achieve privilege escalation by leveraging memory mismanagement within the service.

Affected products:

  • Windows Broadcast DVR User Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88113

Related in this roundup: CVE-2026-108461, CVE-2026-105722, CVE-2026-88103, CVE-2026-88105, CVE-2026-70122, CVE-2026-70148, CVE-2026-96919, CVE-2026-102193, CVE-2026-102195, CVE-2026-102196, CVE-2026-102197, CVE-2026-103554, CVE-2026-103565, CVE-2026-103567, CVE-2026-97806, CVE-2026-97807, CVE-2026-97808.

CVE-2026-88115

CVE-2026-88115 is a remote code execution vulnerability in the Windows Server NFS component resulting from an out-of-bounds read. An unauthorized remote attacker can leverage this vulnerability to execute arbitrary code on the affected server.

Affected products:

  • Windows Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88115

Related in this roundup: CVE-2026-96113, CVE-2026-88122, CVE-2026-97835, CVE-2026-97837, CVE-2026-97839.

CVE-2026-88128

CVE-2026-88128 is a heap-based buffer overflow vulnerability in the Windows Desktop Window Manager (DWM) Core Library. The vulnerability allows an already authorized local attacker to achieve privilege escalation on affected Windows systems by exploiting the memory corruption flaw.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88128

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-88118

An integer overflow or wraparound vulnerability in the Windows Background Intelligent Transfer Service (BITS) enables a locally authenticated attacker to escalate their privileges. This vulnerability is classified as an elevation of privilege flaw, potentially allowing an attacker to gain higher-level permissions on the compromised system.

Affected products:

  • Windows Background Intelligent Transfer Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88118

Related in this roundup: CVE-2026-85832, CVE-2026-85843, CVE-2026-85848, CVE-2026-88121, CVE-2026-88152, CVE-2026-88142.

CVE-2026-88147

CVE-2026-88147 is a heap-based buffer overflow vulnerability in the Windows Secure Socket Tunneling Protocol (SSTP). An authorized local attacker can exploit this flaw to execute code with elevated privileges on the target system.

Affected products:

  • Windows Secure Socket Tunneling Protocol

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88147

CVE-2026-88121

A use-after-free vulnerability exists in the Windows Background Intelligent Transfer Service (BITS) that allows an unauthenticated, remote attacker to achieve code execution on the target system by sending a specially crafted network request.

Affected products:

  • Windows Background Intelligent Transfer Service (BITS)

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88121

Related in this roundup: CVE-2026-85832, CVE-2026-85843, CVE-2026-85848, CVE-2026-88118, CVE-2026-88152, CVE-2026-88142.

CVE-2026-88152

A use-after-free vulnerability in the Windows Background Intelligent Transfer Service (BITS) allows an authenticated local attacker to gain elevated privileges on the system.

Affected products:

  • Windows Background Intelligent Transfer Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88152

Related in this roundup: CVE-2026-85832, CVE-2026-85843, CVE-2026-85848, CVE-2026-88118, CVE-2026-88121, CVE-2026-88142.

CVE-2026-88139

A use-after-free vulnerability exists in the Windows Kernel that allows a locally authenticated attacker to elevate their privileges to a higher level of access.

Affected products:

  • Windows Kernel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88139

Related in this roundup: CVE-2026-108462, CVE-2026-108466, CVE-2026-70063, CVE-2026-70106, CVE-2026-70121, CVE-2026-70114, CVE-2026-83690, CVE-2026-83768, CVE-2026-83833, CVE-2026-85372, CVE-2026-85836, CVE-2026-85837, CVE-2026-70170, CVE-2026-85939, CVE-2026-85945, CVE-2026-96216, CVE-2026-96317, CVE-2026-96868, CVE-2026-70199, CVE-2026-70232, CVE-2026-83736, CVE-2026-83735, CVE-2026-83918, CVE-2026-83924, CVE-2026-83925, CVE-2026-88134, CVE-2026-88141, CVE-2026-70160, CVE-2026-70111, CVE-2026-96913, CVE-2026-96929, CVE-2026-102207, CVE-2026-103578, CVE-2026-97803.

CVE-2026-88141

CVE-2026-88141 describes a use-after-free vulnerability within the Windows Kernel that allows an authenticated local attacker to escalate their privileges. Detection and mitigation focus on applying the security patches provided by Microsoft.

Affected products:

  • Windows Kernel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88141

Related in this roundup: CVE-2026-108462, CVE-2026-108466, CVE-2026-70063, CVE-2026-70106, CVE-2026-70121, CVE-2026-70114, CVE-2026-83690, CVE-2026-83768, CVE-2026-83833, CVE-2026-85372, CVE-2026-85836, CVE-2026-85837, CVE-2026-70170, CVE-2026-85939, CVE-2026-85945, CVE-2026-96216, CVE-2026-96317, CVE-2026-96868, CVE-2026-70199, CVE-2026-70232, CVE-2026-83736, CVE-2026-83735, CVE-2026-83918, CVE-2026-83924, CVE-2026-83925, CVE-2026-88134, CVE-2026-88139, CVE-2026-70160, CVE-2026-70111, CVE-2026-96913, CVE-2026-96929, CVE-2026-102207, CVE-2026-103578, CVE-2026-97803.

CVE-2026-88142

CVE-2026-88142 is a remote code execution vulnerability in the Windows Background Intelligent Transfer Service (BITS) triggered by a use-after-free condition. An unauthenticated attacker can exploit this flaw over a network to execute arbitrary code with the privileges of the BITS service.

Affected products:

  • Windows Background Intelligent Transfer Service (BITS)

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88142

Related in this roundup: CVE-2026-85832, CVE-2026-85843, CVE-2026-85848, CVE-2026-88118, CVE-2026-88121, CVE-2026-88152.

CVE-2026-88149

CVE-2026-88149 is a local privilege escalation vulnerability in the Windows Ancillary Function Driver for WinSock caused by a double free condition. An authenticated attacker can exploit this vulnerability to gain elevated privileges on the target system.

Affected products:

  • Windows Ancillary Function Driver for WinSock

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88149

Related in this roundup: CVE-2026-70168, CVE-2026-70205, CVE-2026-70225.

CVE-2026-88171

A double free vulnerability exists in the Windows DHCP Server component that allows an unauthenticated remote attacker to execute arbitrary code over the network, potentially leading to full system compromise.

Affected products:

  • Windows DHCP Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88171

Related in this roundup: CVE-2026-70058, CVE-2026-69830, CVE-2026-83691, CVE-2026-83787, CVE-2026-85841, CVE-2026-85865, CVE-2026-70066, CVE-2026-70069, CVE-2026-70201, CVE-2026-83665, CVE-2026-88117, CVE-2026-88119, CVE-2026-88120, CVE-2026-96320, CVE-2026-96934.

CVE-2026-88174

A race condition vulnerability in Windows Deployment Services enables an unauthorized remote attacker to achieve code execution over a network by exploiting improper synchronization during concurrent shared resource access.

Affected products:

  • Windows Deployment Services

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88174

CVE-2026-88177

The Windows DWM Core Library contains an out-of-bounds read vulnerability that can be exploited by an authorized attacker to achieve local privilege escalation on affected Windows systems.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88177

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-88179

An out-of-bounds read vulnerability in the Windows DWM Core Library allows an authorized, locally authenticated attacker to elevate privileges on the affected system.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88179

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-88180

CVE-2026-88180 is an out-of-bounds read vulnerability in the Windows DWM (Desktop Window Manager) Core Library that allows a local, authorized attacker to elevate privileges on an affected system.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88180

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-88182

A use-after-free vulnerability exists in the Microsoft Windows Search Component that enables a locally authenticated attacker to escalate their privileges on the target system.

Affected products:

  • Windows Search Component

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88182

Related in this roundup: CVE-2026-105010, CVE-2026-108136, CVE-2026-70136, CVE-2026-70141, CVE-2026-70173, CVE-2026-70150, CVE-2026-70177, CVE-2026-70156, CVE-2026-83575, CVE-2026-83704, CVE-2026-70086, CVE-2026-83920, CVE-2026-85869, CVE-2026-88160, CVE-2026-83564, CVE-2026-83570, CVE-2026-83686, CVE-2026-83725, CVE-2026-83829, CVE-2026-83850, CVE-2026-88191, CVE-2026-96324, CVE-2026-96911, CVE-2026-96910, CVE-2026-96937.

CVE-2026-88181

CVE-2026-88181 describes an out-of-bounds read vulnerability in the Windows DWM (Desktop Window Manager) Core Library that permits an authorized local attacker to achieve privilege escalation.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88181

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-88194

CVE-2026-88194 is an out-of-bounds read vulnerability in the Windows DWM Core Library that enables a local, authenticated attacker to achieve privilege escalation on the affected system.

Affected products:

  • Windows DWM Core Library

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88194

Related in this roundup: CVE-2026-83726, CVE-2026-85855, CVE-2026-83765, CVE-2026-88189.

CVE-2026-88189

CVE-2026-88189 is an elevation of privilege vulnerability in the Windows DWM Core Library. The vulnerability is caused by an out-of-bounds read, which allows an attacker who is already authorized on the system to escalate their privileges locally.

Affected products:

  • Windows DWM Core Library

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88189

Related in this roundup: CVE-2026-83726, CVE-2026-85855, CVE-2026-83765, CVE-2026-88194.

CVE-2026-88191

An improper link resolution vulnerability in the Microsoft Windows Search Component allows a locally authenticated attacker to elevate their privileges by exploiting a 'link following' flaw before file access, potentially enabling unauthorized system access.

Affected products:

  • Windows Search Component

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88191

Related in this roundup: CVE-2026-105010, CVE-2026-108136, CVE-2026-70136, CVE-2026-70141, CVE-2026-70173, CVE-2026-70150, CVE-2026-70177, CVE-2026-70156, CVE-2026-83575, CVE-2026-83704, CVE-2026-70086, CVE-2026-83920, CVE-2026-85869, CVE-2026-88160, CVE-2026-83564, CVE-2026-83570, CVE-2026-83686, CVE-2026-83725, CVE-2026-83829, CVE-2026-83850, CVE-2026-88182, CVE-2026-96324, CVE-2026-96911, CVE-2026-96910, CVE-2026-96937.

CVE-2026-88188

A vulnerability in the Windows DWM Core Library allows a locally authenticated attacker to gain elevated privileges through an out-of-bounds read flaw.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88188

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-88193

A heap-based buffer overflow vulnerability in the Microsoft Scripting Engine allows an authenticated local attacker to elevate privileges on the affected system.

Affected products:

  • Scripting Engine

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88193

CVE-2026-69884

CVE-2026-69884 is a privilege escalation vulnerability in the Windows Graphics Device Interface (GDI) component. The flaw is caused by a buffer over-read, which can be exploited by a locally authenticated attacker to gain elevated privileges on the affected system.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69884

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-69902

CVE-2026-69902 describes an untrusted pointer dereference vulnerability within the Windows NTFS driver. An authorized local attacker can exploit this flaw to achieve remote code execution, likely leading to privilege escalation or system compromise.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69902

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-69915

CVE-2026-69915 is a local privilege escalation vulnerability found in the Windows NTFS driver, caused by a use-after-free defect. An authorized attacker can exploit this flaw to gain elevated privileges on a compromised Windows system.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69915

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-70054

CVE-2026-70054 describes a heap-based buffer overflow vulnerability in the Windows NetBIOS component that allows a local, authorized attacker to elevate their privileges to a higher level of access.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70054

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-70084

An information disclosure vulnerability exists in the Windows Projected File System due to improper access control. An authorized, local attacker could exploit this vulnerability to gain unauthorized access to sensitive information.

Affected products:

  • Windows Projected File System

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70084

Related in this roundup: CVE-2026-84009, CVE-2026-85328, CVE-2026-96857.

CVE-2026-70112

CVE-2026-70112 is a heap-based buffer overflow vulnerability in the Windows Spaceport.sys driver. An authorized attacker can leverage this flaw to achieve local remote code execution by sending specifically crafted input to the vulnerable driver.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70112

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-70122

The Windows Broadcast DVR User Service contains a time-of-check time-of-use (TOCTOU) race condition vulnerability that enables a locally authenticated attacker to escalate their privileges.

Affected products:

  • Windows Broadcast DVR User Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70122

Related in this roundup: CVE-2026-108461, CVE-2026-105722, CVE-2026-88103, CVE-2026-88105, CVE-2026-88113, CVE-2026-70148, CVE-2026-96919, CVE-2026-102193, CVE-2026-102195, CVE-2026-102196, CVE-2026-102197, CVE-2026-103554, CVE-2026-103565, CVE-2026-103567, CVE-2026-97806, CVE-2026-97807, CVE-2026-97808.

CVE-2026-70143

CVE-2026-70143 is a heap-based buffer overflow vulnerability within the Windows Network File System. An authorized attacker can leverage this flaw to achieve remote code execution, though exploitation requires local access to the affected system.

Affected products:

  • Windows Network File System

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70143

Related in this roundup: CVE-2026-69675, CVE-2026-96209.

CVE-2026-70148

CVE-2026-70148 describes an information disclosure vulnerability in the Windows Broadcast DVR User Service caused by improper authorization. An authorized local attacker can exploit this flaw to gain unauthorized access to sensitive information.

Affected products:

  • Windows Broadcast DVR User Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70148

Related in this roundup: CVE-2026-108461, CVE-2026-105722, CVE-2026-88103, CVE-2026-88105, CVE-2026-88113, CVE-2026-70122, CVE-2026-96919, CVE-2026-102193, CVE-2026-102195, CVE-2026-102196, CVE-2026-102197, CVE-2026-103554, CVE-2026-103565, CVE-2026-103567, CVE-2026-97806, CVE-2026-97807, CVE-2026-97808.

CVE-2026-70158

A remote code execution vulnerability exists in the Windows Routing and Remote Access Service (RRAS) that allows an unauthenticated attacker to gain unauthorized access to an affected system.

Affected products:

  • Routing and Remote Access Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70158

Related in this roundup: CVE-2026-85809, CVE-2026-70057, CVE-2026-84020, CVE-2026-85322, CVE-2026-85808, CVE-2026-96245, CVE-2026-96316.

CVE-2026-70160

A use-after-free vulnerability in the Windows Kernel allows an authenticated, local attacker to escalate privileges on the affected system.

Affected products:

  • Windows Kernel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70160

Related in this roundup: CVE-2026-108462, CVE-2026-108466, CVE-2026-70063, CVE-2026-70106, CVE-2026-70121, CVE-2026-70114, CVE-2026-83690, CVE-2026-83768, CVE-2026-83833, CVE-2026-85372, CVE-2026-85836, CVE-2026-85837, CVE-2026-70170, CVE-2026-85939, CVE-2026-85945, CVE-2026-96216, CVE-2026-96317, CVE-2026-96868, CVE-2026-70199, CVE-2026-70232, CVE-2026-83736, CVE-2026-83735, CVE-2026-83918, CVE-2026-83924, CVE-2026-83925, CVE-2026-88134, CVE-2026-88139, CVE-2026-88141, CVE-2026-70111, CVE-2026-96913, CVE-2026-96929, CVE-2026-102207, CVE-2026-103578, CVE-2026-97803.

CVE-2026-85922

CVE-2026-85922 is a security feature bypass vulnerability in Microsoft Azure Key Vault caused by weak authentication mechanisms. An unauthenticated attacker can exploit this flaw over a network to bypass intended security controls.

Affected products:

  • Azure Key Vault

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85922

Related in this roundup: CVE-2026-88132, CVE-2026-85925.

CVE-2026-85925

CVE-2026-85925 is a vulnerability in the Azure Key Vault Client SDK where improper restriction of communication channels allows an authenticated attacker to perform a privilege escalation via network-based communication.

Affected products:

  • Azure Key Vault

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85925

Related in this roundup: CVE-2026-88132, CVE-2026-85922.

CVE-2026-70111

A vulnerability in the Windows Kernel allows a remote, unauthorized attacker to perform an untrusted pointer dereference, which can be leveraged to achieve privilege escalation on the affected system.

Affected products:

  • Windows Kernel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70111

Related in this roundup: CVE-2026-108462, CVE-2026-108466, CVE-2026-70063, CVE-2026-70106, CVE-2026-70121, CVE-2026-70114, CVE-2026-83690, CVE-2026-83768, CVE-2026-83833, CVE-2026-85372, CVE-2026-85836, CVE-2026-85837, CVE-2026-70170, CVE-2026-85939, CVE-2026-85945, CVE-2026-96216, CVE-2026-96317, CVE-2026-96868, CVE-2026-70199, CVE-2026-70232, CVE-2026-83736, CVE-2026-83735, CVE-2026-83918, CVE-2026-83924, CVE-2026-83925, CVE-2026-88134, CVE-2026-88139, CVE-2026-88141, CVE-2026-70160, CVE-2026-96913, CVE-2026-96929, CVE-2026-102207, CVE-2026-103578, CVE-2026-97803.

CVE-2026-70184

CVE-2026-70184 describes a local privilege escalation vulnerability in the Windows Backup Engine caused by improper path equivalence resolution, allowing an authenticated attacker to gain higher privileges on a vulnerable system.

Affected products:

  • Windows Backup Engine

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70184

Related in this roundup: CVE-2026-108135, CVE-2026-62687.

CVE-2026-70227

An out-of-bounds read vulnerability exists in the Windows Device Association Service that allows a locally authorized attacker to perform information disclosure.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70227

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-70228

CVE-2026-70228 describes an out-of-bounds read vulnerability in the Windows Desktop Window Manager (DWM) component. An attacker who has already achieved local access on a system can exploit this flaw to execute an elevation of privilege attack, bypassing standard security controls to gain higher-level permissions.

Affected products:

  • Desktop Window Manager

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70228

Related in this roundup: CVE-2026-69926, CVE-2026-69974, CVE-2026-70234, CVE-2026-70255, CVE-2026-96108, CVE-2026-69880, CVE-2026-88093.

CVE-2026-70250

A use-after-free vulnerability in the Windows DHCP Client allows an unauthenticated, adjacent attacker to achieve remote code execution by sending specifically crafted packets to the target service.

Affected products:

  • Windows DHCP Client

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70250

Related in this roundup: CVE-2026-83677.

CVE-2026-70260

CVE-2026-70260 is an information disclosure vulnerability within the Microsoft Trace Data Helper component. An authorized attacker can exploit this flaw to gain unauthorized access to sensitive system information locally, potentially facilitating further reconnaissance or credential access.

Affected products:

  • Trace Data Helper

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70260

Related in this roundup: CVE-2026-70261.

CVE-2026-70261

CVE-2026-70261 is an information disclosure vulnerability in the Microsoft Trace Data Helper component. An authorized attacker can exploit this flaw to gain unauthorized access to sensitive system information locally, potentially aiding in further reconnaissance or credential gathering.

Affected products:

  • Trace Data Helper

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70261

Related in this roundup: CVE-2026-70260.

CVE-2026-70264

CVE-2026-70264 describes an information disclosure vulnerability in Microsoft Defender resulting from improper link resolution. An attacker with local access can exploit this flaw to gain unauthorized access to information by following symbolic links before file access checks are performed.

Affected products:

  • Defender

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70264

CVE-2026-70297

CVE-2026-70297 is an absolute path traversal vulnerability in Microsoft Skype for Business and Lync that allows an authorized attacker to achieve remote code execution over a network.

Affected products:

  • Skype for Business
  • Lync

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70297

Related in this roundup: CVE-2026-83746, CVE-2026-85873.

CVE-2026-83746

CVE-2026-83746 describes an absolute path traversal vulnerability within Skype for Business and Microsoft Lync that permits an authenticated attacker to perform a privilege escalation attack over the network.

Affected products:

  • Skype for Business
  • Microsoft Lync

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83746

Related in this roundup: CVE-2026-70297, CVE-2026-85873.

CVE-2026-85873

CVE-2026-85873 is a privilege escalation vulnerability in Skype for Business and Microsoft Lync due to improper authorization. An authorized attacker on the network can leverage this flaw to gain elevated privileges, highlighting a critical risk for internal environment security.

Affected products:

  • Skype for Business
  • Lync

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85873

Related in this roundup: CVE-2026-70297, CVE-2026-83746.

CVE-2026-88075

Microsoft Configuration Manager is vulnerable to an SQL injection attack that can be exploited by an authorized attacker to achieve privilege escalation over the network.

Affected products:

  • Configuration Manager

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88075

Related in this roundup: CVE-2026-70049.

CVE-2026-88093

CVE-2026-88093 is a heap-based buffer overflow vulnerability in the Desktop Window Manager component of Windows. An authorized, locally authenticated attacker can exploit this flaw to execute code with elevated privileges on the target system.

Affected products:

  • Desktop Window Manager

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88093

Related in this roundup: CVE-2026-69926, CVE-2026-69974, CVE-2026-70234, CVE-2026-70255, CVE-2026-96108, CVE-2026-69880, CVE-2026-70228.

CVE-2026-88112

A remote code execution vulnerability exists in the Windows Domain Name Service due to an untrusted pointer dereference. An unauthorized attacker can exploit this flaw by sending specifically crafted network requests to the DNS server, potentially leading to arbitrary code execution on the target server.

Affected products:

  • Windows Domain Name Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88112

Related in this roundup: CVE-2026-70127, CVE-2026-70167, CVE-2026-85903, CVE-2026-88114, CVE-2026-88116.

CVE-2026-88114

CVE-2026-88114 is a remote code execution vulnerability in the Windows Domain Name Service (DNS) caused by an untrusted pointer dereference. An unauthenticated attacker can exploit this flaw by sending specifically crafted network packets to the DNS server, potentially leading to arbitrary code execution with high-level system privileges.

Affected products:

  • Windows Domain Name Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88114

Related in this roundup: CVE-2026-70127, CVE-2026-70167, CVE-2026-85903, CVE-2026-88112, CVE-2026-88116.

CVE-2026-88116

CVE-2026-88116 describes a remote code execution vulnerability in the Windows Domain Name Service (DNS) caused by an untrusted pointer dereference. An unauthenticated attacker can exploit this over the network to execute arbitrary code with elevated privileges on the affected DNS server.

Affected products:

  • Windows Domain Name Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88116

Related in this roundup: CVE-2026-70127, CVE-2026-70167, CVE-2026-85903, CVE-2026-88112, CVE-2026-88114.

CVE-2026-88117

CVE-2026-88117 describes a use-after-free vulnerability in the Windows DHCP Server component that allows an unauthenticated remote attacker to achieve remote code execution. Detection engineers should monitor network traffic directed at DHCP services for anomalous packets potentially triggering memory corruption errors associated with DHCP handling.

Affected products:

  • Windows DHCP Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88117

Related in this roundup: CVE-2026-70058, CVE-2026-69830, CVE-2026-83691, CVE-2026-83787, CVE-2026-85841, CVE-2026-85865, CVE-2026-70066, CVE-2026-70069, CVE-2026-70201, CVE-2026-83665, CVE-2026-88171, CVE-2026-88119, CVE-2026-88120, CVE-2026-96320, CVE-2026-96934.

CVE-2026-88119

A use-after-free vulnerability in the Windows DHCP Server component allows an unauthorized, remote attacker to execute arbitrary code. The vulnerability exists within the network-facing DHCP service, potentially allowing for unauthenticated exploitation over the network.

Affected products:

  • Windows DHCP Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88119

Related in this roundup: CVE-2026-70058, CVE-2026-69830, CVE-2026-83691, CVE-2026-83787, CVE-2026-85841, CVE-2026-85865, CVE-2026-70066, CVE-2026-70069, CVE-2026-70201, CVE-2026-83665, CVE-2026-88171, CVE-2026-88117, CVE-2026-88120, CVE-2026-96320, CVE-2026-96934.

CVE-2026-88120

A use-after-free vulnerability in the Microsoft Windows DHCP Server component allows an unauthorized, remote attacker to achieve arbitrary code execution via network-based exploitation.

Affected products:

  • Windows DHCP Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88120

Related in this roundup: CVE-2026-70058, CVE-2026-69830, CVE-2026-83691, CVE-2026-83787, CVE-2026-85841, CVE-2026-85865, CVE-2026-70066, CVE-2026-70069, CVE-2026-70201, CVE-2026-83665, CVE-2026-88171, CVE-2026-88117, CVE-2026-88119, CVE-2026-96320, CVE-2026-96934.

CVE-2026-88122

CVE-2026-88122 is an out-of-bounds read vulnerability in the Windows DNS Server component that can be exploited by an authorized attacker to trigger a denial-of-service condition over the network.

Affected products:

  • Windows Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88122

Related in this roundup: CVE-2026-96113, CVE-2026-88115, CVE-2026-97835, CVE-2026-97837, CVE-2026-97839.

CVE-2026-88123

CVE-2026-88123 is an out-of-bounds read vulnerability in the Microsoft DNS Server component that can be triggered by an authorized attacker over a network to cause a denial-of-service condition.

Affected products:

  • DNS Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88123

Related in this roundup: CVE-2026-70085, CVE-2026-70083, CVE-2026-70087, CVE-2026-83635, CVE-2026-70071, CVE-2026-88125, CVE-2026-88129, CVE-2026-88130, CVE-2026-96926, CVE-2026-103560, CVE-2026-97817, CVE-2026-97819, CVE-2026-97820, CVE-2026-97821, CVE-2026-97822, CVE-2026-97823, CVE-2026-97824, CVE-2026-97825, CVE-2026-97827, CVE-2026-97829, CVE-2026-97831, CVE-2026-97836, CVE-2026-97841, CVE-2026-97842, CVE-2026-97843, CVE-2026-97844, CVE-2026-108127, CVE-2026-108128.

CVE-2026-88125

CVE-2026-88125 is an out-of-bounds read vulnerability in the Microsoft DNS Server component that allows an authorized attacker to trigger a denial of service condition over the network.

Affected products:

  • DNS Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88125

Related in this roundup: CVE-2026-70085, CVE-2026-70083, CVE-2026-70087, CVE-2026-83635, CVE-2026-70071, CVE-2026-88123, CVE-2026-88129, CVE-2026-88130, CVE-2026-96926, CVE-2026-103560, CVE-2026-97817, CVE-2026-97819, CVE-2026-97820, CVE-2026-97821, CVE-2026-97822, CVE-2026-97823, CVE-2026-97824, CVE-2026-97825, CVE-2026-97827, CVE-2026-97829, CVE-2026-97831, CVE-2026-97836, CVE-2026-97841, CVE-2026-97842, CVE-2026-97843, CVE-2026-97844, CVE-2026-108127, CVE-2026-108128.

CVE-2026-88129

CVE-2026-88129 is an out-of-bounds read vulnerability in the Microsoft DNS Server component. An authorized attacker can exploit this flaw over the network to trigger a denial of service condition.

Affected products:

  • DNS Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88129

Related in this roundup: CVE-2026-70085, CVE-2026-70083, CVE-2026-70087, CVE-2026-83635, CVE-2026-70071, CVE-2026-88123, CVE-2026-88125, CVE-2026-88130, CVE-2026-96926, CVE-2026-103560, CVE-2026-97817, CVE-2026-97819, CVE-2026-97820, CVE-2026-97821, CVE-2026-97822, CVE-2026-97823, CVE-2026-97824, CVE-2026-97825, CVE-2026-97827, CVE-2026-97829, CVE-2026-97831, CVE-2026-97836, CVE-2026-97841, CVE-2026-97842, CVE-2026-97843, CVE-2026-97844, CVE-2026-108127, CVE-2026-108128.

CVE-2026-88130

CVE-2026-88130 describes an out-of-bounds read vulnerability in the Microsoft DNS Server component that can be exploited by an authorized attacker to trigger a denial of service condition over the network.

Affected products:

  • DNS Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88130

Related in this roundup: CVE-2026-70085, CVE-2026-70083, CVE-2026-70087, CVE-2026-83635, CVE-2026-70071, CVE-2026-88123, CVE-2026-88125, CVE-2026-88129, CVE-2026-96926, CVE-2026-103560, CVE-2026-97817, CVE-2026-97819, CVE-2026-97820, CVE-2026-97821, CVE-2026-97822, CVE-2026-97823, CVE-2026-97824, CVE-2026-97825, CVE-2026-97827, CVE-2026-97829, CVE-2026-97831, CVE-2026-97836, CVE-2026-97841, CVE-2026-97842, CVE-2026-97843, CVE-2026-97844, CVE-2026-108127, CVE-2026-108128.

CVE-2026-69802

The Network Device Enrollment Service (NDES) contains a vulnerability due to weak authentication that allows a remote, unauthenticated attacker to execute arbitrary code on the affected system.

Affected products:

  • Network Device Enrollment Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69802

Related in this roundup: CVE-2026-85323, CVE-2026-96866, CVE-2026-96861.

CVE-2026-69919

CVE-2026-69919 is an out-of-bounds read vulnerability in Windows Cryptographic Services that permits an authenticated local attacker to perform unauthorized information disclosure. Detection efforts should focus on anomalous access patterns to cryptographic subsystems or unusual process memory reads targeting cryptographic service handles.

Affected products:

  • Windows Cryptographic Services

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69919

Related in this roundup: CVE-2026-70014.

CVE-2026-70202

CVE-2026-70202 is a server-side request forgery vulnerability in Microsoft Office SharePoint that can be leveraged by an authorized attacker to achieve privilege escalation over the network.

Affected products:

  • SharePoint

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70202

Related in this roundup: CVE-2026-102859, CVE-2026-102860, CVE-2026-102861, CVE-2026-102862, CVE-2026-102863, CVE-2026-102865, CVE-2026-102866, CVE-2026-105720, CVE-2026-69943, CVE-2026-70267, CVE-2026-70251, CVE-2026-70259, CVE-2026-70266, CVE-2026-70298, CVE-2026-85900, CVE-2026-88155, CVE-2026-88198, CVE-2026-88209, CVE-2026-88208, CVE-2026-97782, CVE-2026-97783, CVE-2026-70217, CVE-2026-70246, CVE-2026-85932, CVE-2026-88163, CVE-2026-88164, CVE-2026-88166, CVE-2026-88200, CVE-2026-88206, CVE-2026-96044, CVE-2026-105013.

CVE-2026-70214

CVE-2026-70214 describes an out-of-bounds read vulnerability in Microsoft Office Excel that enables an unauthorized attacker to perform unauthorized information disclosure on the local system.

Affected products:

  • Office Excel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70214

Related in this roundup: CVE-2026-88151, CVE-2026-88201, CVE-2026-97014, CVE-2026-97750, CVE-2026-97767, CVE-2026-70254, CVE-2026-88190, CVE-2026-97748, CVE-2026-97769, CVE-2026-97760, CVE-2026-97004, CVE-2026-97741, CVE-2026-97772, CVE-2026-100209, CVE-2026-100212.

CVE-2026-70254

CVE-2026-70254 is a remote code execution vulnerability in Microsoft Office Excel resulting from an out-of-bounds read. An attacker can exploit this flaw by convincing a user to open a specially crafted malicious file, leading to arbitrary code execution on the target system.

Affected products:

  • Office Excel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70254

Related in this roundup: CVE-2026-88151, CVE-2026-88201, CVE-2026-97014, CVE-2026-97750, CVE-2026-97767, CVE-2026-70214, CVE-2026-88190, CVE-2026-97748, CVE-2026-97769, CVE-2026-97760, CVE-2026-97004, CVE-2026-97741, CVE-2026-97772, CVE-2026-100209, CVE-2026-100212.

CVE-2026-70219

CVE-2026-70219 describes an out-of-bounds read vulnerability in Microsoft Office Excel that allows a remote, unauthorized attacker to disclose sensitive information over the network.

Affected products:

  • Microsoft Office Excel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70219

CVE-2026-70217

CVE-2026-70217 describes an information disclosure vulnerability in Microsoft SharePoint caused by improper access control. An authorized attacker on the network can exploit this flaw to gain unauthorized access to sensitive information.

Affected products:

  • SharePoint

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70217

Related in this roundup: CVE-2026-102859, CVE-2026-102860, CVE-2026-102861, CVE-2026-102862, CVE-2026-102863, CVE-2026-102865, CVE-2026-102866, CVE-2026-105720, CVE-2026-69943, CVE-2026-70267, CVE-2026-70251, CVE-2026-70259, CVE-2026-70266, CVE-2026-70298, CVE-2026-85900, CVE-2026-88155, CVE-2026-88198, CVE-2026-88209, CVE-2026-88208, CVE-2026-97782, CVE-2026-97783, CVE-2026-70202, CVE-2026-70246, CVE-2026-85932, CVE-2026-88163, CVE-2026-88164, CVE-2026-88166, CVE-2026-88200, CVE-2026-88206, CVE-2026-96044, CVE-2026-105013.

CVE-2026-70215

A use-after-free vulnerability in Microsoft PowerPoint allows a remote, unauthorized attacker to execute arbitrary code on the victim's machine over a network by leveraging memory management flaws within the application.

Affected products:

  • PowerPoint

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70215

Related in this roundup: CVE-2026-88178, CVE-2026-97744, CVE-2026-88144, CVE-2026-88203.

CVE-2026-70246

CVE-2026-70246 describes an elevation of privilege vulnerability in Microsoft Office SharePoint caused by incorrect authorization. An authenticated attacker on the network can leverage this flaw to gain unauthorized access to higher privilege levels within the application environment.

Affected products:

  • SharePoint

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70246

Related in this roundup: CVE-2026-102859, CVE-2026-102860, CVE-2026-102861, CVE-2026-102862, CVE-2026-102863, CVE-2026-102865, CVE-2026-102866, CVE-2026-105720, CVE-2026-69943, CVE-2026-70267, CVE-2026-70251, CVE-2026-70259, CVE-2026-70266, CVE-2026-70298, CVE-2026-85900, CVE-2026-88155, CVE-2026-88198, CVE-2026-88209, CVE-2026-88208, CVE-2026-97782, CVE-2026-97783, CVE-2026-70202, CVE-2026-70217, CVE-2026-85932, CVE-2026-88163, CVE-2026-88164, CVE-2026-88166, CVE-2026-88200, CVE-2026-88206, CVE-2026-96044, CVE-2026-105013.

CVE-2026-70242

A heap-based buffer overflow vulnerability exists in Microsoft Office Outlook that allows a remote, unauthorized attacker to achieve remote code execution via network-based exploitation.

Affected products:

  • Office Outlook

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70242

Related in this roundup: CVE-2026-88156, CVE-2026-97016, CVE-2026-70256, CVE-2026-70257, CVE-2026-70291, CVE-2026-97749.

CVE-2026-88144

CVE-2026-88144 is a use-after-free vulnerability in Microsoft Office PowerPoint that allows a remote attacker to execute arbitrary code on the targeted system through malicious crafted files.

Affected products:

  • PowerPoint

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88144

Related in this roundup: CVE-2026-88178, CVE-2026-97744, CVE-2026-70215, CVE-2026-88203.

CVE-2026-85340

CVE-2026-85340 is a local privilege escalation vulnerability in Microsoft Office Click-To-Run caused by a use-after-free condition. An attacker who has already gained authorized local access can exploit this flaw to execute code with higher privileges.

Affected products:

  • Office Click-To-Run

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85340

Related in this roundup: CVE-2026-70276, CVE-2026-97774, CVE-2026-88109.

CVE-2026-85932

CVE-2026-85932 is an information disclosure vulnerability in Microsoft SharePoint caused by improper limitation of a pathname to a restricted directory. An authorized attacker can exploit this path traversal vulnerability to access sensitive information over the network.

Affected products:

  • SharePoint

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85932

Related in this roundup: CVE-2026-102859, CVE-2026-102860, CVE-2026-102861, CVE-2026-102862, CVE-2026-102863, CVE-2026-102865, CVE-2026-102866, CVE-2026-105720, CVE-2026-69943, CVE-2026-70267, CVE-2026-70251, CVE-2026-70259, CVE-2026-70266, CVE-2026-70298, CVE-2026-85900, CVE-2026-88155, CVE-2026-88198, CVE-2026-88209, CVE-2026-88208, CVE-2026-97782, CVE-2026-97783, CVE-2026-70202, CVE-2026-70217, CVE-2026-70246, CVE-2026-88163, CVE-2026-88164, CVE-2026-88166, CVE-2026-88200, CVE-2026-88206, CVE-2026-96044, CVE-2026-105013.

CVE-2026-88163

CVE-2026-88163 is a remote code execution vulnerability in Microsoft SharePoint caused by an integer overflow or wraparound condition. An authorized attacker on the network can leverage this flaw to execute arbitrary code, necessitating immediate patch management for affected SharePoint installations.

Affected products:

  • SharePoint

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88163

Related in this roundup: CVE-2026-102859, CVE-2026-102860, CVE-2026-102861, CVE-2026-102862, CVE-2026-102863, CVE-2026-102865, CVE-2026-102866, CVE-2026-105720, CVE-2026-69943, CVE-2026-70267, CVE-2026-70251, CVE-2026-70259, CVE-2026-70266, CVE-2026-70298, CVE-2026-85900, CVE-2026-88155, CVE-2026-88198, CVE-2026-88209, CVE-2026-88208, CVE-2026-97782, CVE-2026-97783, CVE-2026-70202, CVE-2026-70217, CVE-2026-70246, CVE-2026-85932, CVE-2026-88164, CVE-2026-88166, CVE-2026-88200, CVE-2026-88206, CVE-2026-96044, CVE-2026-105013.

CVE-2026-88154

CVE-2026-88154 is an information disclosure vulnerability in Microsoft Excel caused by an out-of-bounds read. An attacker can exploit this flaw to read sensitive data over a network, potentially compromising system confidentiality.

Affected products:

  • Excel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88154

Related in this roundup: CVE-2026-105718, CVE-2026-88153, CVE-2026-88175, CVE-2026-97009, CVE-2026-97753, CVE-2026-97017, CVE-2026-97740, CVE-2026-97766, CVE-2026-97003, CVE-2026-97751, CVE-2026-97776, CVE-2026-97752, CVE-2026-97758, CVE-2026-97761, CVE-2026-97747, CVE-2026-97780, CVE-2026-97770, CVE-2026-97771, CVE-2026-97755, CVE-2026-97765, CVE-2026-97739, CVE-2026-97778, CVE-2026-97759, CVE-2026-77902, CVE-2026-88172, CVE-2026-88184, CVE-2026-88192, CVE-2026-88195, CVE-2026-97007, CVE-2026-97779, CVE-2026-97756, CVE-2026-97008, CVE-2026-97773, CVE-2026-97010, CVE-2026-97743, CVE-2026-97777, CVE-2026-97762, CVE-2026-97011, CVE-2026-97757, CVE-2026-97738, CVE-2026-97742, CVE-2026-97746, CVE-2026-97763, CVE-2026-97775, CVE-2026-97768, CVE-2026-97745, CVE-2026-100211, CVE-2026-100210, CVE-2026-108446.

CVE-2026-88164

CVE-2026-88164 describes an elevation of privilege vulnerability in Microsoft SharePoint caused by missing authorization checks. An authenticated attacker can exploit this flaw over the network to gain elevated privileges within the application environment.

Affected products:

  • SharePoint

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88164

Related in this roundup: CVE-2026-102859, CVE-2026-102860, CVE-2026-102861, CVE-2026-102862, CVE-2026-102863, CVE-2026-102865, CVE-2026-102866, CVE-2026-105720, CVE-2026-69943, CVE-2026-70267, CVE-2026-70251, CVE-2026-70259, CVE-2026-70266, CVE-2026-70298, CVE-2026-85900, CVE-2026-88155, CVE-2026-88198, CVE-2026-88209, CVE-2026-88208, CVE-2026-97782, CVE-2026-97783, CVE-2026-70202, CVE-2026-70217, CVE-2026-70246, CVE-2026-85932, CVE-2026-88163, CVE-2026-88166, CVE-2026-88200, CVE-2026-88206, CVE-2026-96044, CVE-2026-105013.

CVE-2026-88172

CVE-2026-88172 is an out-of-bounds read vulnerability in Microsoft Excel that allows an unauthorized attacker to disclose sensitive information over a network. The vulnerability exists within the application's processing of data, potentially exposing memory contents.

Affected products:

  • Excel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88172

Related in this roundup: CVE-2026-105718, CVE-2026-88153, CVE-2026-88175, CVE-2026-97009, CVE-2026-97753, CVE-2026-97017, CVE-2026-97740, CVE-2026-97766, CVE-2026-97003, CVE-2026-97751, CVE-2026-97776, CVE-2026-97752, CVE-2026-97758, CVE-2026-97761, CVE-2026-97747, CVE-2026-97780, CVE-2026-97770, CVE-2026-97771, CVE-2026-97755, CVE-2026-97765, CVE-2026-97739, CVE-2026-97778, CVE-2026-97759, CVE-2026-77902, CVE-2026-88154, CVE-2026-88184, CVE-2026-88192, CVE-2026-88195, CVE-2026-97007, CVE-2026-97779, CVE-2026-97756, CVE-2026-97008, CVE-2026-97773, CVE-2026-97010, CVE-2026-97743, CVE-2026-97777, CVE-2026-97762, CVE-2026-97011, CVE-2026-97757, CVE-2026-97738, CVE-2026-97742, CVE-2026-97746, CVE-2026-97763, CVE-2026-97775, CVE-2026-97768, CVE-2026-97745, CVE-2026-100211, CVE-2026-100210, CVE-2026-108446.

CVE-2026-88184

CVE-2026-88184 is an out-of-bounds read vulnerability in Microsoft Excel that allows a remote, unauthorized attacker to disclose sensitive information over the network through a specially crafted file.

Affected products:

  • Excel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88184

Related in this roundup: CVE-2026-105718, CVE-2026-88153, CVE-2026-88175, CVE-2026-97009, CVE-2026-97753, CVE-2026-97017, CVE-2026-97740, CVE-2026-97766, CVE-2026-97003, CVE-2026-97751, CVE-2026-97776, CVE-2026-97752, CVE-2026-97758, CVE-2026-97761, CVE-2026-97747, CVE-2026-97780, CVE-2026-97770, CVE-2026-97771, CVE-2026-97755, CVE-2026-97765, CVE-2026-97739, CVE-2026-97778, CVE-2026-97759, CVE-2026-77902, CVE-2026-88154, CVE-2026-88172, CVE-2026-88192, CVE-2026-88195, CVE-2026-97007, CVE-2026-97779, CVE-2026-97756, CVE-2026-97008, CVE-2026-97773, CVE-2026-97010, CVE-2026-97743, CVE-2026-97777, CVE-2026-97762, CVE-2026-97011, CVE-2026-97757, CVE-2026-97738, CVE-2026-97742, CVE-2026-97746, CVE-2026-97763, CVE-2026-97775, CVE-2026-97768, CVE-2026-97745, CVE-2026-100211, CVE-2026-100210, CVE-2026-108446.

CVE-2026-88166

CVE-2026-88166 describes an integer overflow or wraparound vulnerability in Microsoft SharePoint that allows an authorized network-based attacker to achieve remote code execution on the target server.

Affected products:

  • SharePoint

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88166

Related in this roundup: CVE-2026-102859, CVE-2026-102860, CVE-2026-102861, CVE-2026-102862, CVE-2026-102863, CVE-2026-102865, CVE-2026-102866, CVE-2026-105720, CVE-2026-69943, CVE-2026-70267, CVE-2026-70251, CVE-2026-70259, CVE-2026-70266, CVE-2026-70298, CVE-2026-85900, CVE-2026-88155, CVE-2026-88198, CVE-2026-88209, CVE-2026-88208, CVE-2026-97782, CVE-2026-97783, CVE-2026-70202, CVE-2026-70217, CVE-2026-70246, CVE-2026-85932, CVE-2026-88163, CVE-2026-88164, CVE-2026-88200, CVE-2026-88206, CVE-2026-96044, CVE-2026-105013.

CVE-2026-88200

CVE-2026-88200 describes a privilege context switching vulnerability in Microsoft Office SharePoint that permits an authorized, network-adjacent attacker to escalate their privileges within the application.

Affected products:

  • SharePoint

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88200

Related in this roundup: CVE-2026-102859, CVE-2026-102860, CVE-2026-102861, CVE-2026-102862, CVE-2026-102863, CVE-2026-102865, CVE-2026-102866, CVE-2026-105720, CVE-2026-69943, CVE-2026-70267, CVE-2026-70251, CVE-2026-70259, CVE-2026-70266, CVE-2026-70298, CVE-2026-85900, CVE-2026-88155, CVE-2026-88198, CVE-2026-88209, CVE-2026-88208, CVE-2026-97782, CVE-2026-97783, CVE-2026-70202, CVE-2026-70217, CVE-2026-70246, CVE-2026-85932, CVE-2026-88163, CVE-2026-88164, CVE-2026-88166, CVE-2026-88206, CVE-2026-96044, CVE-2026-105013.

CVE-2026-88185

CVE-2026-88185 describes a heap-based buffer overflow vulnerability in Microsoft Office Word that enables an unauthenticated attacker to achieve remote code execution over a network.

Affected products:

  • Office Word

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88185

Related in this roundup: CVE-2026-70300, CVE-2026-105715, CVE-2026-70268, CVE-2026-70220, CVE-2026-70206, CVE-2026-70269, CVE-2026-70263, CVE-2026-70287, CVE-2026-70302, CVE-2026-70301, CVE-2026-83891, CVE-2026-88167, CVE-2026-88169, CVE-2026-88202, CVE-2026-96995, CVE-2026-97001, CVE-2026-88186, CVE-2026-108426, CVE-2026-108427, CVE-2026-108428, CVE-2026-108429, CVE-2026-108430, CVE-2026-108431, CVE-2026-108432, CVE-2026-108433, CVE-2026-108437, CVE-2026-108439, CVE-2026-108440, CVE-2026-108441, CVE-2026-108443, CVE-2026-108445, CVE-2026-108447, CVE-2026-108449, CVE-2026-108450, CVE-2026-108451.

CVE-2026-88186

CVE-2026-88186 describes a heap-based buffer overflow vulnerability in Microsoft Office Word that enables a remote, unauthorized attacker to achieve remote code execution (RCE) via network-based vectors. Detection should focus on monitoring anomalous child processes spawned by Winword.exe and identifying malformed Office document structures associated with heap corruption attempts.

Affected products:

  • Office Word

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88186

Related in this roundup: CVE-2026-70300, CVE-2026-105715, CVE-2026-70268, CVE-2026-70220, CVE-2026-70206, CVE-2026-70269, CVE-2026-70263, CVE-2026-70287, CVE-2026-70302, CVE-2026-70301, CVE-2026-83891, CVE-2026-88167, CVE-2026-88169, CVE-2026-88202, CVE-2026-96995, CVE-2026-97001, CVE-2026-88185, CVE-2026-108426, CVE-2026-108427, CVE-2026-108428, CVE-2026-108429, CVE-2026-108430, CVE-2026-108431, CVE-2026-108432, CVE-2026-108433, CVE-2026-108437, CVE-2026-108439, CVE-2026-108440, CVE-2026-108441, CVE-2026-108443, CVE-2026-108445, CVE-2026-108447, CVE-2026-108449, CVE-2026-108450, CVE-2026-108451.

CVE-2026-88183

CVE-2026-88183 is an out-of-bounds read vulnerability in Microsoft Office PowerPoint that allows an unauthorized attacker to perform information disclosure over a network, potentially exposing sensitive data.

Affected products:

  • Office PowerPoint

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88183

Related in this roundup: CVE-2026-105599, CVE-2026-97005, CVE-2026-88207.

CVE-2026-88192

CVE-2026-88192 is an out-of-bounds read vulnerability in Microsoft Office Excel that enables an unauthorized attacker to perform information disclosure over a network. The vulnerability exists due to improper memory handling, which could allow an attacker to read sensitive data.

Affected products:

  • Excel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88192

Related in this roundup: CVE-2026-105718, CVE-2026-88153, CVE-2026-88175, CVE-2026-97009, CVE-2026-97753, CVE-2026-97017, CVE-2026-97740, CVE-2026-97766, CVE-2026-97003, CVE-2026-97751, CVE-2026-97776, CVE-2026-97752, CVE-2026-97758, CVE-2026-97761, CVE-2026-97747, CVE-2026-97780, CVE-2026-97770, CVE-2026-97771, CVE-2026-97755, CVE-2026-97765, CVE-2026-97739, CVE-2026-97778, CVE-2026-97759, CVE-2026-77902, CVE-2026-88154, CVE-2026-88172, CVE-2026-88184, CVE-2026-88195, CVE-2026-97007, CVE-2026-97779, CVE-2026-97756, CVE-2026-97008, CVE-2026-97773, CVE-2026-97010, CVE-2026-97743, CVE-2026-97777, CVE-2026-97762, CVE-2026-97011, CVE-2026-97757, CVE-2026-97738, CVE-2026-97742, CVE-2026-97746, CVE-2026-97763, CVE-2026-97775, CVE-2026-97768, CVE-2026-97745, CVE-2026-100211, CVE-2026-100210, CVE-2026-108446.

CVE-2026-88190

CVE-2026-88190 describes an out-of-bounds read vulnerability in Microsoft Office Excel that allows a remote, unauthorized attacker to disclose sensitive information over a network.

Affected products:

  • Office Excel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88190

Related in this roundup: CVE-2026-88151, CVE-2026-88201, CVE-2026-97014, CVE-2026-97750, CVE-2026-97767, CVE-2026-70214, CVE-2026-70254, CVE-2026-97748, CVE-2026-97769, CVE-2026-97760, CVE-2026-97004, CVE-2026-97741, CVE-2026-97772, CVE-2026-100209, CVE-2026-100212.

CVE-2026-88195

CVE-2026-88195 describes a buffer over-read vulnerability in Microsoft Excel that enables a remote, unauthorized attacker to perform unauthorized information disclosure over a network by leveraging memory access errors.

Affected products:

  • Excel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88195

Related in this roundup: CVE-2026-105718, CVE-2026-88153, CVE-2026-88175, CVE-2026-97009, CVE-2026-97753, CVE-2026-97017, CVE-2026-97740, CVE-2026-97766, CVE-2026-97003, CVE-2026-97751, CVE-2026-97776, CVE-2026-97752, CVE-2026-97758, CVE-2026-97761, CVE-2026-97747, CVE-2026-97780, CVE-2026-97770, CVE-2026-97771, CVE-2026-97755, CVE-2026-97765, CVE-2026-97739, CVE-2026-97778, CVE-2026-97759, CVE-2026-77902, CVE-2026-88154, CVE-2026-88172, CVE-2026-88184, CVE-2026-88192, CVE-2026-97007, CVE-2026-97779, CVE-2026-97756, CVE-2026-97008, CVE-2026-97773, CVE-2026-97010, CVE-2026-97743, CVE-2026-97777, CVE-2026-97762, CVE-2026-97011, CVE-2026-97757, CVE-2026-97738, CVE-2026-97742, CVE-2026-97746, CVE-2026-97763, CVE-2026-97775, CVE-2026-97768, CVE-2026-97745, CVE-2026-100211, CVE-2026-100210, CVE-2026-108446.

CVE-2026-88203

Microsoft Office PowerPoint is susceptible to an information disclosure vulnerability stemming from an untrusted pointer dereference. An unauthenticated attacker can exploit this flaw over the network to gain unauthorized access to sensitive information.

Affected products:

  • PowerPoint

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88203

Related in this roundup: CVE-2026-88178, CVE-2026-97744, CVE-2026-70215, CVE-2026-88144.

CVE-2026-88206

CVE-2026-88206 is a server-side request forgery (SSRF) vulnerability in Microsoft Office SharePoint that permits an authenticated attacker to perform an elevation of privilege over the network.

Affected products:

  • SharePoint

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88206

Related in this roundup: CVE-2026-102859, CVE-2026-102860, CVE-2026-102861, CVE-2026-102862, CVE-2026-102863, CVE-2026-102865, CVE-2026-102866, CVE-2026-105720, CVE-2026-69943, CVE-2026-70267, CVE-2026-70251, CVE-2026-70259, CVE-2026-70266, CVE-2026-70298, CVE-2026-85900, CVE-2026-88155, CVE-2026-88198, CVE-2026-88209, CVE-2026-88208, CVE-2026-97782, CVE-2026-97783, CVE-2026-70202, CVE-2026-70217, CVE-2026-70246, CVE-2026-85932, CVE-2026-88163, CVE-2026-88164, CVE-2026-88166, CVE-2026-88200, CVE-2026-96044, CVE-2026-105013.

CVE-2026-88210

CVE-2026-88210 is a security feature bypass vulnerability in Microsoft Office Word caused by the improper validation of untrusted inputs during a security decision. An attacker can exploit this locally to circumvent intended security controls.

Affected products:

  • Microsoft Office Word

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88210

CVE-2026-88207

CVE-2026-88207 is a heap-based buffer overflow vulnerability in Microsoft Office PowerPoint that allows a remote, unauthorized attacker to execute arbitrary code on a target system via the network.

Affected products:

  • Office PowerPoint

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88207

Related in this roundup: CVE-2026-105599, CVE-2026-97005, CVE-2026-88183.

CVE-2026-70343

CVE-2026-70343 is a heap-based buffer overflow vulnerability in the Microsoft MPEG-2 Video Extension that enables an unauthorized remote attacker to achieve code execution over a network. Detection engineers should monitor for abnormal process behavior or crashes associated with the MPEG-2 media decoding component.

Affected products:

  • MPEG-2 Video Extension

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70343

CVE-2026-96044

An elevation of privilege vulnerability exists in Microsoft SharePoint that allows an authorized attacker to escalate their privileges over the network.

Affected products:

  • SharePoint

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96044

Related in this roundup: CVE-2026-102859, CVE-2026-102860, CVE-2026-102861, CVE-2026-102862, CVE-2026-102863, CVE-2026-102865, CVE-2026-102866, CVE-2026-105720, CVE-2026-69943, CVE-2026-70267, CVE-2026-70251, CVE-2026-70259, CVE-2026-70266, CVE-2026-70298, CVE-2026-85900, CVE-2026-88155, CVE-2026-88198, CVE-2026-88209, CVE-2026-88208, CVE-2026-97782, CVE-2026-97783, CVE-2026-70202, CVE-2026-70217, CVE-2026-70246, CVE-2026-85932, CVE-2026-88163, CVE-2026-88164, CVE-2026-88166, CVE-2026-88200, CVE-2026-88206, CVE-2026-105013.

CVE-2026-96186

Microsoft Windows Media Foundation is susceptible to a privilege escalation vulnerability due to the deserialization of untrusted data. An authorized local attacker can exploit this flaw to elevate their privileges on the host system.

Affected products:

  • Windows Media Foundation

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96186

Related in this roundup: CVE-2026-83517, CVE-2026-85814, CVE-2026-70278, CVE-2026-70044, CVE-2026-70131, CVE-2026-70258, CVE-2026-96952, CVE-2026-102201.

CVE-2026-96188

An elevation of privilege vulnerability in Microsoft PowerToys allows an authorized local attacker to manipulate system configurations to gain higher privileges on the target Windows system.

Affected products:

  • PowerToys

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96188

Related in this roundup: CVE-2026-83681.

CVE-2026-96233

An out-of-bounds write vulnerability in ASP.NET Core enables an unauthorized, remote attacker to trigger a denial of service condition. This vulnerability typically impacts the processing of incoming network requests.

Affected products:

  • ASP.NET Core

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96233

Related in this roundup: CVE-2026-70188, CVE-2026-88092, CVE-2026-70186, CVE-2026-70159, CVE-2026-70175, CVE-2026-70196, CVE-2026-70181, CVE-2026-70183, CVE-2026-102870.

CVE-2026-96243

CVE-2026-96243 is a privilege escalation vulnerability in the Windows WalletService caused by improper link resolution before file access. An authorized local attacker can exploit this 'link following' flaw to gain elevated privileges on the affected system.

Affected products:

  • Windows WalletService

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96243

CVE-2026-96249

CVE-2026-96249 describes a use-after-free vulnerability in the Windows Win32 Kernel Subsystem that enables a local attacker to achieve privilege escalation. This vulnerability requires the attacker to already have authorized access to the system to exploit.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96249

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-96250

A use-after-free vulnerability exists in the Windows USB Print Driver that allows a locally authenticated attacker to escalate their privileges to a higher integrity level.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96250

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-96301

A use-after-free vulnerability in the Windows USB Print Driver allows an authenticated local attacker to gain elevated privileges on affected Windows systems.

Affected products:

  • Windows USB Print Driver

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96301

Related in this roundup: CVE-2026-96319, CVE-2026-96310.

CVE-2026-96310

CVE-2026-96310 is a use-after-free vulnerability within the Windows USB Print Driver that enables a locally authenticated attacker to gain elevated privileges on the affected system.

Affected products:

  • Windows USB Print Driver

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96310

Related in this roundup: CVE-2026-96319, CVE-2026-96301.

CVE-2026-96254

CVE-2026-96254 describes a use-after-free vulnerability within the Windows USB Print Driver, which can be exploited by an authorized local attacker to gain elevated privileges on the affected system.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96254

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-96253

The Windows USB Print Driver contains a use-after-free vulnerability that allows a locally authenticated attacker to elevate their privileges to a higher integrity level.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96253

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-96252

CVE-2026-96252 is a spoofing vulnerability in Microsoft Active Directory Federation Services (AD FS) caused by improper cryptographic signature verification. An unauthorized attacker can exploit this flaw over a network to spoof identity or session claims, potentially leading to unauthorized access.

Affected products:

  • Active Directory Federation Services

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96252

Related in this roundup: CVE-2026-83646, CVE-2026-85319, CVE-2026-85321, CVE-2026-85324, CVE-2026-83674, CVE-2026-69982, CVE-2026-70005, CVE-2026-83511, CVE-2026-83645, CVE-2026-97788, CVE-2026-103576, CVE-2026-108131.

CVE-2026-96300

A denial of service vulnerability in the RPC Endpoint Mapper Service allows an unauthenticated remote attacker to cause resource exhaustion by sending crafted requests, leading to service disruption.

Affected products:

  • RPC Endpoint Mapper Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96300

CVE-2026-96304

A use-after-free vulnerability in the Windows USB Print Driver allows an authenticated local attacker to execute arbitrary code with elevated privileges on the affected system.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96304

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-96320

A heap-based buffer overflow vulnerability in the Windows DHCP Server component allows an unauthorized, remote attacker to execute arbitrary code over the network. The vulnerability resides in the way the DHCP service handles network requests, and it can be exploited without authentication.

Affected products:

  • Windows DHCP Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96320

Related in this roundup: CVE-2026-70058, CVE-2026-69830, CVE-2026-83691, CVE-2026-83787, CVE-2026-85841, CVE-2026-85865, CVE-2026-70066, CVE-2026-70069, CVE-2026-70201, CVE-2026-83665, CVE-2026-88171, CVE-2026-88117, CVE-2026-88119, CVE-2026-88120, CVE-2026-96934.

CVE-2026-96323

CVE-2026-96323 describes a use-after-free vulnerability in the Windows Update component that allows an attacker with existing local access to escalate their privileges on the host system.

Affected products:

  • Windows Update

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96323

Related in this roundup: CVE-2026-69633, CVE-2026-69673, CVE-2026-69718, CVE-2026-69882, CVE-2026-69999, CVE-2026-69733, CVE-2026-69783.

CVE-2026-96322

A use-after-free vulnerability exists in the Windows Remote Desktop Protocol that allows an authorized local attacker to elevate their privileges on the target system.

Affected products:

  • Windows Remote Desktop Protocol

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96322

Related in this roundup: CVE-2026-83861, CVE-2026-102198.

CVE-2026-96321

An out-of-bounds read vulnerability in the Microsoft Remote Desktop Display Driver allows an authorized local attacker to perform an information disclosure attack by reading sensitive data from memory.

Affected products:

  • Remote Desktop Display Driver

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96321

CVE-2026-96324

A use-after-free vulnerability exists in the Microsoft Windows Search Component that allows a locally authenticated attacker to elevate their privileges to a higher integrity level.

Affected products:

  • Windows Search Component

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96324

Related in this roundup: CVE-2026-105010, CVE-2026-108136, CVE-2026-70136, CVE-2026-70141, CVE-2026-70173, CVE-2026-70150, CVE-2026-70177, CVE-2026-70156, CVE-2026-83575, CVE-2026-83704, CVE-2026-70086, CVE-2026-83920, CVE-2026-85869, CVE-2026-88160, CVE-2026-83564, CVE-2026-83570, CVE-2026-83686, CVE-2026-83725, CVE-2026-83829, CVE-2026-83850, CVE-2026-88182, CVE-2026-88191, CVE-2026-96911, CVE-2026-96910, CVE-2026-96937.

CVE-2026-96325

CVE-2026-96325 is a denial-of-service vulnerability in the Windows SMB Server component caused by a missing reference to an active allocated resource. An unauthorized remote attacker can trigger this condition to crash the service, leading to service interruption for legitimate users.

Affected products:

  • Windows SMB Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96325

Related in this roundup: CVE-2026-70133, CVE-2026-88127.

CVE-2026-96850

An information disclosure vulnerability exists in Windows Modern Device Management (MDM) due to the use of an uninitialized resource. An authorized local attacker can exploit this flaw to gain unauthorized access to sensitive information.

Affected products:

  • Windows Modern Device Management

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96850

Related in this roundup: CVE-2026-108133, CVE-2026-108396, CVE-2026-83654, CVE-2026-83657, CVE-2026-85833, CVE-2026-96855, CVE-2026-83656, CVE-2026-83697.

CVE-2026-96844

CVE-2026-96844 describes an integer underflow vulnerability in the Microsoft Bluetooth Driver that enables an authorized attacker to achieve privilege escalation via an adjacent network connection.

Affected products:

  • Bluetooth Driver

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96844

Related in this roundup: CVE-2026-83760, CVE-2026-83868.

CVE-2026-96846

CVE-2026-96846 is an out-of-bounds read vulnerability in the WebDAV component of Windows, which can be exploited by an authorized attacker to disclose sensitive information locally.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96846

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-96843

A heap-based buffer overflow vulnerability in the WebDAV component allows an authenticated local attacker to escalate privileges to a higher level of access.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96843

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-96854

The Windows Device Association Service contains a type confusion vulnerability that allows an authorized local attacker to bypass security restrictions and disclose sensitive information.

Affected products:

  • Windows Device Association Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96854

Related in this roundup: CVE-2026-85331, CVE-2026-85336, CVE-2026-85342, CVE-2026-85352, CVE-2026-83710, CVE-2026-85904.

CVE-2026-96852

CVE-2026-96852 is a use-after-free vulnerability within the Windows TCP/IP stack that allows a locally authenticated attacker to escalate privileges to higher permission levels.

Affected products:

  • Windows TCP/IP

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96852

Related in this roundup: CVE-2026-85368, CVE-2026-85834.

CVE-2026-96853

A time-of-check time-of-use (TOCTOU) race condition vulnerability exists in the Windows Win32 Kernel Subsystem. This vulnerability allows an authorized local attacker to perform an information disclosure attack by exploiting the race condition within the kernel subsystem.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96853

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-96858

CVE-2026-96858 is a vulnerability in the Windows Security Account Manager (SAM) where missing authentication for a critical function enables an authorized, locally authenticated attacker to perform unauthorized tampering with the SAM database, potentially leading to privilege escalation.

Affected products:

  • Windows Security Account Manager

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96858

CVE-2026-96909

CVE-2026-96909 describes a heap-based buffer overflow vulnerability in Windows BitLocker that enables a remote, unauthorized attacker to execute arbitrary code over a network connection.

Affected products:

  • BitLocker

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96909

Related in this roundup: CVE-2026-83500, CVE-2026-85920.

CVE-2026-96916

A heap-based buffer overflow vulnerability exists in the Windows NTFS file system driver, which allows a locally authenticated attacker to elevate their privileges to a higher level of authority on the target system.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96916

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-96911

The Microsoft Windows Search Component is vulnerable to an elevation of privilege due to improper link resolution before file access (link following). An authorized local attacker can exploit this vulnerability to gain higher privileges on the affected system.

Affected products:

  • Windows Search Component

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96911

Related in this roundup: CVE-2026-105010, CVE-2026-108136, CVE-2026-70136, CVE-2026-70141, CVE-2026-70173, CVE-2026-70150, CVE-2026-70177, CVE-2026-70156, CVE-2026-83575, CVE-2026-83704, CVE-2026-70086, CVE-2026-83920, CVE-2026-85869, CVE-2026-88160, CVE-2026-83564, CVE-2026-83570, CVE-2026-83686, CVE-2026-83725, CVE-2026-83829, CVE-2026-83850, CVE-2026-88182, CVE-2026-88191, CVE-2026-96324, CVE-2026-96910, CVE-2026-96937.

CVE-2026-96910

The Microsoft Windows Search Component is vulnerable to an untrusted pointer dereference, which allows an authorized local attacker to perform an information disclosure attack.

Affected products:

  • Windows Search Component

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96910

Related in this roundup: CVE-2026-105010, CVE-2026-108136, CVE-2026-70136, CVE-2026-70141, CVE-2026-70173, CVE-2026-70150, CVE-2026-70177, CVE-2026-70156, CVE-2026-83575, CVE-2026-83704, CVE-2026-70086, CVE-2026-83920, CVE-2026-85869, CVE-2026-88160, CVE-2026-83564, CVE-2026-83570, CVE-2026-83686, CVE-2026-83725, CVE-2026-83829, CVE-2026-83850, CVE-2026-88182, CVE-2026-88191, CVE-2026-96324, CVE-2026-96911, CVE-2026-96937.

CVE-2026-96912

A use-after-free vulnerability exists in the Windows Client License Service that allows a local, authorized attacker to escalate their privileges to a higher level of access.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96912

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-96913

A heap-based buffer overflow vulnerability in the Windows Kernel allows an authenticated local attacker to gain elevated privileges on the system.

Affected products:

  • Windows Kernel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96913

Related in this roundup: CVE-2026-108462, CVE-2026-108466, CVE-2026-70063, CVE-2026-70106, CVE-2026-70121, CVE-2026-70114, CVE-2026-83690, CVE-2026-83768, CVE-2026-83833, CVE-2026-85372, CVE-2026-85836, CVE-2026-85837, CVE-2026-70170, CVE-2026-85939, CVE-2026-85945, CVE-2026-96216, CVE-2026-96317, CVE-2026-96868, CVE-2026-70199, CVE-2026-70232, CVE-2026-83736, CVE-2026-83735, CVE-2026-83918, CVE-2026-83924, CVE-2026-83925, CVE-2026-88134, CVE-2026-88139, CVE-2026-88141, CVE-2026-70160, CVE-2026-70111, CVE-2026-96929, CVE-2026-102207, CVE-2026-103578, CVE-2026-97803.

CVE-2026-96915

CVE-2026-96915 is a local privilege escalation vulnerability in Windows Kernel-Mode Drivers caused by an integer overflow or wraparound condition. An authorized attacker can exploit this flaw to execute code with elevated permissions on the host system.

Affected products:

  • Windows Kernel-Mode Drivers

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96915

Related in this roundup: CVE-2026-69971, CVE-2026-83834, CVE-2026-85857, CVE-2026-85871, CVE-2026-96247, CVE-2026-96849, CVE-2026-83568, CVE-2026-83637, CVE-2026-83837.

CVE-2026-96917

A heap-based buffer overflow vulnerability exists in the Windows PCI Bus Driver that can be exploited by an authenticated local attacker to gain elevated privileges on the target system.

Affected products:

  • Windows PCI Bus Driver

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96917

CVE-2026-96919

CVE-2026-96919 is a use-after-free vulnerability within the Windows Broadcast DVR User Service that enables a local, authorized attacker to achieve privilege escalation.

Affected products:

  • Windows Broadcast DVR User Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96919

Related in this roundup: CVE-2026-108461, CVE-2026-105722, CVE-2026-88103, CVE-2026-88105, CVE-2026-88113, CVE-2026-70122, CVE-2026-70148, CVE-2026-102193, CVE-2026-102195, CVE-2026-102196, CVE-2026-102197, CVE-2026-103554, CVE-2026-103565, CVE-2026-103567, CVE-2026-97806, CVE-2026-97807, CVE-2026-97808.

CVE-2026-96923

A use-after-free vulnerability in the Windows Workstation Service allows a local, authorized attacker to escalate their privileges to a higher level of authority on the target system.

Affected products:

  • Windows Workstation Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96923

CVE-2026-96925

CVE-2026-96925 is an information disclosure vulnerability in the Windows NTFS file system caused by an integer underflow condition. An authorized local attacker can exploit this flaw to read sensitive data from the system.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96925

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-96924

A vulnerability exists in Windows OLE due to an untrusted pointer dereference, which allows an unauthenticated attacker to achieve remote code execution over a network.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96924

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-96927

CVE-2026-96927 is an information disclosure vulnerability in the Windows NTFS filesystem caused by an out-of-bounds read. An authenticated attacker can exploit this locally to access sensitive information that should not be accessible.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96927

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-96930

CVE-2026-96930 is an out-of-bounds read vulnerability in the Windows Universal Disk Format File System Driver (UDFS). An authorized local attacker can exploit this flaw to disclose sensitive information from the system memory.

Affected products:

  • Windows Universal Disk Format File System Driver

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96930

Related in this roundup: CVE-2026-83713, CVE-2026-85820, CVE-2026-85821, CVE-2026-85825, CVE-2026-83513, CVE-2026-83857, CVE-2026-85909, CVE-2026-96946, CVE-2026-96947, CVE-2026-96949, CVE-2026-96950, CVE-2026-96953, CVE-2026-102205, CVE-2026-102218, CVE-2026-102215.

CVE-2026-96934

A use-after-free vulnerability in the Windows DHCP Server component allows a remote, unauthorized attacker to execute arbitrary code over the network. Detection should focus on anomalous traffic patterns directed at the DHCP service and unauthorized attempts to interact with the service management interface.

Affected products:

  • Windows DHCP Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96934

Related in this roundup: CVE-2026-70058, CVE-2026-69830, CVE-2026-83691, CVE-2026-83787, CVE-2026-85841, CVE-2026-85865, CVE-2026-70066, CVE-2026-70069, CVE-2026-70201, CVE-2026-83665, CVE-2026-88171, CVE-2026-88117, CVE-2026-88119, CVE-2026-88120, CVE-2026-96320.

CVE-2026-96932

CVE-2026-96932 describes a race condition vulnerability in the Windows Embedded Mode Service caused by improper synchronization when accessing shared resources. An authorized local attacker can exploit this flaw to elevate their privileges on the affected Windows system.

Affected products:

  • Windows Embedded Mode Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96932

Related in this roundup: CVE-2026-85914.

CVE-2026-96929

A heap-based buffer overflow vulnerability exists in the Windows Kernel, which can be exploited by an authorized local attacker to achieve privilege escalation.

Affected products:

  • Windows Kernel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96929

Related in this roundup: CVE-2026-108462, CVE-2026-108466, CVE-2026-70063, CVE-2026-70106, CVE-2026-70121, CVE-2026-70114, CVE-2026-83690, CVE-2026-83768, CVE-2026-83833, CVE-2026-85372, CVE-2026-85836, CVE-2026-85837, CVE-2026-70170, CVE-2026-85939, CVE-2026-85945, CVE-2026-96216, CVE-2026-96317, CVE-2026-96868, CVE-2026-70199, CVE-2026-70232, CVE-2026-83736, CVE-2026-83735, CVE-2026-83918, CVE-2026-83924, CVE-2026-83925, CVE-2026-88134, CVE-2026-88139, CVE-2026-88141, CVE-2026-70160, CVE-2026-70111, CVE-2026-96913, CVE-2026-102207, CVE-2026-103578, CVE-2026-97803.

CVE-2026-96926

A vulnerability in the Microsoft DNS Server component allows a locally authenticated attacker to bypass authorization controls, enabling them to tamper with DNS configurations.

Affected products:

  • DNS Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96926

Related in this roundup: CVE-2026-70085, CVE-2026-70083, CVE-2026-70087, CVE-2026-83635, CVE-2026-70071, CVE-2026-88123, CVE-2026-88125, CVE-2026-88129, CVE-2026-88130, CVE-2026-103560, CVE-2026-97817, CVE-2026-97819, CVE-2026-97820, CVE-2026-97821, CVE-2026-97822, CVE-2026-97823, CVE-2026-97824, CVE-2026-97825, CVE-2026-97827, CVE-2026-97829, CVE-2026-97831, CVE-2026-97836, CVE-2026-97841, CVE-2026-97842, CVE-2026-97843, CVE-2026-97844, CVE-2026-108127, CVE-2026-108128.

CVE-2026-69675

CVE-2026-69675 is an information disclosure vulnerability in the Windows Network File System caused by an out-of-bounds read flaw. An authorized local attacker can exploit this vulnerability to read sensitive data from the system memory.

Affected products:

  • Windows Network File System

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69675

Related in this roundup: CVE-2026-70143, CVE-2026-96209.

CVE-2026-85866

CVE-2026-85866 describes an information disclosure vulnerability in Windows Advanced Local Procedure Call (ALPC) that allows an authenticated local attacker to read sensitive system information from an unauthorized control sphere.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85866

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-96937

A use-after-free vulnerability exists in the Microsoft Windows Search Component that allows a locally authenticated attacker to escalate privileges on the target system.

Affected products:

  • Windows Search Component

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96937

Related in this roundup: CVE-2026-105010, CVE-2026-108136, CVE-2026-70136, CVE-2026-70141, CVE-2026-70173, CVE-2026-70150, CVE-2026-70177, CVE-2026-70156, CVE-2026-83575, CVE-2026-83704, CVE-2026-70086, CVE-2026-83920, CVE-2026-85869, CVE-2026-88160, CVE-2026-83564, CVE-2026-83570, CVE-2026-83686, CVE-2026-83725, CVE-2026-83829, CVE-2026-83850, CVE-2026-88182, CVE-2026-88191, CVE-2026-96324, CVE-2026-96911, CVE-2026-96910.

CVE-2026-96938

CVE-2026-96938 is a heap-based buffer overflow vulnerability in the Windows Distributed File System (DFS) that enables an authenticated attacker to perform a local privilege escalation. This vulnerability impacts the core DFS service functionality on affected Windows systems.

Affected products:

  • Windows Distributed File System

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96938

Related in this roundup: CVE-2026-105723, CVE-2026-85798, CVE-2026-85931.

CVE-2026-96939

A time-of-check time-of-use (TOCTOU) race condition exists in Microsoft Servicing Stack Updates, which could allow a locally authenticated attacker to gain elevated privileges on a Windows system. The vulnerability requires the attacker to be authorized to execute code on the host, at which point they can exploit the race condition to perform unauthorized operations with higher permissions.

Affected products:

  • Servicing Stack Updates

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96939

Related in this roundup: CVE-2026-83719, CVE-2026-85318, CVE-2026-85365, CVE-2026-85835, CVE-2026-83863.

CVE-2026-88094

CVE-2026-88094 describes an elevation of privilege vulnerability in the Azure Storage Library caused by improper neutralization of special elements in output, potentially allowing an authorized attacker to escalate privileges over a network via an injection attack.

Affected products:

  • Azure Storage Library

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88094

CVE-2026-96202

A heap-based buffer overflow vulnerability in the Windows Raw Image Extension allows a remote, unauthorized attacker to achieve remote code execution (RCE) by processing a specially crafted image file.

Affected products:

  • Windows Raw Image Extension

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96202

Related in this roundup: CVE-2026-96943.

CVE-2026-96944

CVE-2026-96944 is an information disclosure vulnerability in Windows Storage where sensitive information is inserted into externally-accessible files or directories, allowing an authorized local attacker to read data they should not have access to.

Affected products:

  • Windows Storage

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96944

Related in this roundup: CVE-2026-69766, CVE-2026-69935, CVE-2026-83911, CVE-2026-69931, CVE-2026-69856, CVE-2026-100216, CVE-2026-102189.

CVE-2026-96945

A denial of service vulnerability exists in the Windows Failover Cluster component due to an uncaught exception, which can be triggered by an unauthorized attacker over the network to disrupt cluster services.

Affected products:

  • Windows Failover Cluster

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96945

Related in this roundup: CVE-2026-88102, CVE-2026-88099, CVE-2026-102192.

CVE-2026-96946

A use-after-free vulnerability exists in the Windows Universal Disk Format File System Driver (UDFS) that allows a locally authenticated attacker to escalate privileges to the level of the system.

Affected products:

  • Windows Universal Disk Format File System Driver

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96946

Related in this roundup: CVE-2026-83713, CVE-2026-85820, CVE-2026-85821, CVE-2026-85825, CVE-2026-83513, CVE-2026-83857, CVE-2026-85909, CVE-2026-96930, CVE-2026-96947, CVE-2026-96949, CVE-2026-96950, CVE-2026-96953, CVE-2026-102205, CVE-2026-102218, CVE-2026-102215.

CVE-2026-96947

A use-after-free vulnerability in the Windows Universal Disk Format File System Driver (UDFS) allows a locally authenticated attacker to escalate their privileges. Successful exploitation requires an attacker to already have local access to the system.

Affected products:

  • Windows Universal Disk Format File System Driver

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96947

Related in this roundup: CVE-2026-83713, CVE-2026-85820, CVE-2026-85821, CVE-2026-85825, CVE-2026-83513, CVE-2026-83857, CVE-2026-85909, CVE-2026-96930, CVE-2026-96946, CVE-2026-96949, CVE-2026-96950, CVE-2026-96953, CVE-2026-102205, CVE-2026-102218, CVE-2026-102215.

CVE-2026-96948

The Windows Client Side Caching driver (csc.sys) contains an information disclosure vulnerability that allows an authorized local attacker to gain access to sensitive information. The flaw resides within the driver's handling of cached data, which can be exploited by an attacker with local access to the system to bypass standard access controls.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96948

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-96949

A use-after-free vulnerability in the Windows Universal Disk Format File System Driver (UDFS) allows a locally authenticated attacker to elevate their privileges on the system.

Affected products:

  • Windows Universal Disk Format File System Driver

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96949

Related in this roundup: CVE-2026-83713, CVE-2026-85820, CVE-2026-85821, CVE-2026-85825, CVE-2026-83513, CVE-2026-83857, CVE-2026-85909, CVE-2026-96930, CVE-2026-96946, CVE-2026-96947, CVE-2026-96950, CVE-2026-96953, CVE-2026-102205, CVE-2026-102218, CVE-2026-102215.

CVE-2026-96950

A use-after-free vulnerability in the Windows Universal Disk Format File System Driver (UDFS) allows a locally authenticated attacker to escalate privileges on the target system by exploiting the memory management flaw.

Affected products:

  • Windows Universal Disk Format File System Driver

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96950

Related in this roundup: CVE-2026-83713, CVE-2026-85820, CVE-2026-85821, CVE-2026-85825, CVE-2026-83513, CVE-2026-83857, CVE-2026-85909, CVE-2026-96930, CVE-2026-96946, CVE-2026-96947, CVE-2026-96949, CVE-2026-96953, CVE-2026-102205, CVE-2026-102218, CVE-2026-102215.

CVE-2026-96953

A null pointer dereference vulnerability exists in the Windows Universal Disk Format File System Driver (UDFS), which can be exploited by an authorized attacker to achieve local remote code execution on affected Windows systems.

Affected products:

  • Windows Universal Disk Format File System Driver

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96953

Related in this roundup: CVE-2026-83713, CVE-2026-85820, CVE-2026-85821, CVE-2026-85825, CVE-2026-83513, CVE-2026-83857, CVE-2026-85909, CVE-2026-96930, CVE-2026-96946, CVE-2026-96947, CVE-2026-96949, CVE-2026-96950, CVE-2026-102205, CVE-2026-102218, CVE-2026-102215.

CVE-2026-96952

CVE-2026-96952 is a heap-based buffer overflow vulnerability in Microsoft Windows Media Foundation. An unauthenticated attacker can trigger this vulnerability over a network to achieve remote code execution on affected Windows systems.

Affected products:

  • Windows Media Foundation

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96952

Related in this roundup: CVE-2026-83517, CVE-2026-85814, CVE-2026-70278, CVE-2026-70044, CVE-2026-70131, CVE-2026-70258, CVE-2026-96186, CVE-2026-102201.

CVE-2026-95943

The Connected Devices Platform Service (Cdpsvc) on Windows contains a double free vulnerability that enables a locally authenticated attacker to escalate their privileges.

Affected products:

  • Connected Devices Platform Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95943

Related in this roundup: CVE-2026-83846.

CVE-2026-97748

CVE-2026-97748 is a heap-based buffer overflow vulnerability in Microsoft Office Excel that enables a remote, unauthorized attacker to achieve remote code execution via network-based exploitation.

Affected products:

  • Office Excel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97748

Related in this roundup: CVE-2026-88151, CVE-2026-88201, CVE-2026-97014, CVE-2026-97750, CVE-2026-97767, CVE-2026-70214, CVE-2026-70254, CVE-2026-88190, CVE-2026-97769, CVE-2026-97760, CVE-2026-97004, CVE-2026-97741, CVE-2026-97772, CVE-2026-100209, CVE-2026-100212.

CVE-2026-97007

CVE-2026-97007 is a heap-based buffer overflow vulnerability in Microsoft Excel that allows a remote, unauthorized attacker to achieve remote code execution by sending a malicious file or payload. Detection should focus on monitoring for anomalous Excel process behavior, unexpected network connections originating from Excel, or the spawning of child processes from the application.

Affected products:

  • Excel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97007

Related in this roundup: CVE-2026-105718, CVE-2026-88153, CVE-2026-88175, CVE-2026-97009, CVE-2026-97753, CVE-2026-97017, CVE-2026-97740, CVE-2026-97766, CVE-2026-97003, CVE-2026-97751, CVE-2026-97776, CVE-2026-97752, CVE-2026-97758, CVE-2026-97761, CVE-2026-97747, CVE-2026-97780, CVE-2026-97770, CVE-2026-97771, CVE-2026-97755, CVE-2026-97765, CVE-2026-97739, CVE-2026-97778, CVE-2026-97759, CVE-2026-77902, CVE-2026-88154, CVE-2026-88172, CVE-2026-88184, CVE-2026-88192, CVE-2026-88195, CVE-2026-97779, CVE-2026-97756, CVE-2026-97008, CVE-2026-97773, CVE-2026-97010, CVE-2026-97743, CVE-2026-97777, CVE-2026-97762, CVE-2026-97011, CVE-2026-97757, CVE-2026-97738, CVE-2026-97742, CVE-2026-97746, CVE-2026-97763, CVE-2026-97775, CVE-2026-97768, CVE-2026-97745, CVE-2026-100211, CVE-2026-100210, CVE-2026-108446.

CVE-2026-97779

CVE-2026-97779 is an out-of-bounds read vulnerability in Microsoft Office Excel that allows a remote, unauthorized attacker to perform information disclosure over a network by leveraging the memory access flaw.

Affected products:

  • Excel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97779

Related in this roundup: CVE-2026-105718, CVE-2026-88153, CVE-2026-88175, CVE-2026-97009, CVE-2026-97753, CVE-2026-97017, CVE-2026-97740, CVE-2026-97766, CVE-2026-97003, CVE-2026-97751, CVE-2026-97776, CVE-2026-97752, CVE-2026-97758, CVE-2026-97761, CVE-2026-97747, CVE-2026-97780, CVE-2026-97770, CVE-2026-97771, CVE-2026-97755, CVE-2026-97765, CVE-2026-97739, CVE-2026-97778, CVE-2026-97759, CVE-2026-77902, CVE-2026-88154, CVE-2026-88172, CVE-2026-88184, CVE-2026-88192, CVE-2026-88195, CVE-2026-97007, CVE-2026-97756, CVE-2026-97008, CVE-2026-97773, CVE-2026-97010, CVE-2026-97743, CVE-2026-97777, CVE-2026-97762, CVE-2026-97011, CVE-2026-97757, CVE-2026-97738, CVE-2026-97742, CVE-2026-97746, CVE-2026-97763, CVE-2026-97775, CVE-2026-97768, CVE-2026-97745, CVE-2026-100211, CVE-2026-100210, CVE-2026-108446.

CVE-2026-97756

A heap-based buffer overflow vulnerability in Microsoft Excel allows a remote, unauthorized attacker to achieve remote code execution. Detection efforts should focus on monitoring for anomalous child processes spawned by Excel and identifying malicious workbook files that trigger abnormal memory access patterns.

Affected products:

  • Excel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97756

Related in this roundup: CVE-2026-105718, CVE-2026-88153, CVE-2026-88175, CVE-2026-97009, CVE-2026-97753, CVE-2026-97017, CVE-2026-97740, CVE-2026-97766, CVE-2026-97003, CVE-2026-97751, CVE-2026-97776, CVE-2026-97752, CVE-2026-97758, CVE-2026-97761, CVE-2026-97747, CVE-2026-97780, CVE-2026-97770, CVE-2026-97771, CVE-2026-97755, CVE-2026-97765, CVE-2026-97739, CVE-2026-97778, CVE-2026-97759, CVE-2026-77902, CVE-2026-88154, CVE-2026-88172, CVE-2026-88184, CVE-2026-88192, CVE-2026-88195, CVE-2026-97007, CVE-2026-97779, CVE-2026-97008, CVE-2026-97773, CVE-2026-97010, CVE-2026-97743, CVE-2026-97777, CVE-2026-97762, CVE-2026-97011, CVE-2026-97757, CVE-2026-97738, CVE-2026-97742, CVE-2026-97746, CVE-2026-97763, CVE-2026-97775, CVE-2026-97768, CVE-2026-97745, CVE-2026-100211, CVE-2026-100210, CVE-2026-108446.

CVE-2026-97008

CVE-2026-97008 is a remote code execution vulnerability in Microsoft Excel caused by a buffer underwrite (buffer underflow) condition. An unauthenticated attacker can exploit this via the network to execute arbitrary code on the victim's machine.

Affected products:

  • Excel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97008

Related in this roundup: CVE-2026-105718, CVE-2026-88153, CVE-2026-88175, CVE-2026-97009, CVE-2026-97753, CVE-2026-97017, CVE-2026-97740, CVE-2026-97766, CVE-2026-97003, CVE-2026-97751, CVE-2026-97776, CVE-2026-97752, CVE-2026-97758, CVE-2026-97761, CVE-2026-97747, CVE-2026-97780, CVE-2026-97770, CVE-2026-97771, CVE-2026-97755, CVE-2026-97765, CVE-2026-97739, CVE-2026-97778, CVE-2026-97759, CVE-2026-77902, CVE-2026-88154, CVE-2026-88172, CVE-2026-88184, CVE-2026-88192, CVE-2026-88195, CVE-2026-97007, CVE-2026-97779, CVE-2026-97756, CVE-2026-97773, CVE-2026-97010, CVE-2026-97743, CVE-2026-97777, CVE-2026-97762, CVE-2026-97011, CVE-2026-97757, CVE-2026-97738, CVE-2026-97742, CVE-2026-97746, CVE-2026-97763, CVE-2026-97775, CVE-2026-97768, CVE-2026-97745, CVE-2026-100211, CVE-2026-100210, CVE-2026-108446.

CVE-2026-97769

CVE-2026-97769 is a heap-based buffer overflow vulnerability in Microsoft Office Excel that enables a remote, unauthorized attacker to execute arbitrary code. The vulnerability occurs due to improper memory handling within the application when processing malicious Excel files.

Affected products:

  • Office Excel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97769

Related in this roundup: CVE-2026-88151, CVE-2026-88201, CVE-2026-97014, CVE-2026-97750, CVE-2026-97767, CVE-2026-70214, CVE-2026-70254, CVE-2026-88190, CVE-2026-97748, CVE-2026-97760, CVE-2026-97004, CVE-2026-97741, CVE-2026-97772, CVE-2026-100209, CVE-2026-100212.

CVE-2026-97773

CVE-2026-97773 is a heap-based buffer overflow vulnerability in Microsoft Excel that enables a remote, unauthorized attacker to achieve remote code execution by sending a specially crafted file over the network.

Affected products:

  • Excel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97773

Related in this roundup: CVE-2026-105718, CVE-2026-88153, CVE-2026-88175, CVE-2026-97009, CVE-2026-97753, CVE-2026-97017, CVE-2026-97740, CVE-2026-97766, CVE-2026-97003, CVE-2026-97751, CVE-2026-97776, CVE-2026-97752, CVE-2026-97758, CVE-2026-97761, CVE-2026-97747, CVE-2026-97780, CVE-2026-97770, CVE-2026-97771, CVE-2026-97755, CVE-2026-97765, CVE-2026-97739, CVE-2026-97778, CVE-2026-97759, CVE-2026-77902, CVE-2026-88154, CVE-2026-88172, CVE-2026-88184, CVE-2026-88192, CVE-2026-88195, CVE-2026-97007, CVE-2026-97779, CVE-2026-97756, CVE-2026-97008, CVE-2026-97010, CVE-2026-97743, CVE-2026-97777, CVE-2026-97762, CVE-2026-97011, CVE-2026-97757, CVE-2026-97738, CVE-2026-97742, CVE-2026-97746, CVE-2026-97763, CVE-2026-97775, CVE-2026-97768, CVE-2026-97745, CVE-2026-100211, CVE-2026-100210, CVE-2026-108446.

CVE-2026-97010

A use-after-free vulnerability in Microsoft Excel allows an unauthorized remote attacker to execute arbitrary code. The vulnerability exists within the memory management logic of the application, potentially triggered by opening a specially crafted document.

Affected products:

  • Excel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97010

Related in this roundup: CVE-2026-105718, CVE-2026-88153, CVE-2026-88175, CVE-2026-97009, CVE-2026-97753, CVE-2026-97017, CVE-2026-97740, CVE-2026-97766, CVE-2026-97003, CVE-2026-97751, CVE-2026-97776, CVE-2026-97752, CVE-2026-97758, CVE-2026-97761, CVE-2026-97747, CVE-2026-97780, CVE-2026-97770, CVE-2026-97771, CVE-2026-97755, CVE-2026-97765, CVE-2026-97739, CVE-2026-97778, CVE-2026-97759, CVE-2026-77902, CVE-2026-88154, CVE-2026-88172, CVE-2026-88184, CVE-2026-88192, CVE-2026-88195, CVE-2026-97007, CVE-2026-97779, CVE-2026-97756, CVE-2026-97008, CVE-2026-97773, CVE-2026-97743, CVE-2026-97777, CVE-2026-97762, CVE-2026-97011, CVE-2026-97757, CVE-2026-97738, CVE-2026-97742, CVE-2026-97746, CVE-2026-97763, CVE-2026-97775, CVE-2026-97768, CVE-2026-97745, CVE-2026-100211, CVE-2026-100210, CVE-2026-108446.

CVE-2026-97743

CVE-2026-97743 is a use-after-free vulnerability in Microsoft Office Excel that enables an unauthorized remote attacker to disclose sensitive information. Detection engineers should monitor for abnormal memory access patterns or unexpected crashes associated with Excel processes.

Affected products:

  • Excel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97743

Related in this roundup: CVE-2026-105718, CVE-2026-88153, CVE-2026-88175, CVE-2026-97009, CVE-2026-97753, CVE-2026-97017, CVE-2026-97740, CVE-2026-97766, CVE-2026-97003, CVE-2026-97751, CVE-2026-97776, CVE-2026-97752, CVE-2026-97758, CVE-2026-97761, CVE-2026-97747, CVE-2026-97780, CVE-2026-97770, CVE-2026-97771, CVE-2026-97755, CVE-2026-97765, CVE-2026-97739, CVE-2026-97778, CVE-2026-97759, CVE-2026-77902, CVE-2026-88154, CVE-2026-88172, CVE-2026-88184, CVE-2026-88192, CVE-2026-88195, CVE-2026-97007, CVE-2026-97779, CVE-2026-97756, CVE-2026-97008, CVE-2026-97773, CVE-2026-97010, CVE-2026-97777, CVE-2026-97762, CVE-2026-97011, CVE-2026-97757, CVE-2026-97738, CVE-2026-97742, CVE-2026-97746, CVE-2026-97763, CVE-2026-97775, CVE-2026-97768, CVE-2026-97745, CVE-2026-100211, CVE-2026-100210, CVE-2026-108446.

CVE-2026-97777

A heap-based buffer overflow vulnerability exists in Microsoft Excel, which can be exploited by an unauthorized remote attacker to achieve remote code execution (RCE) via a crafted file or network-based vector.

Affected products:

  • Excel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97777

Related in this roundup: CVE-2026-105718, CVE-2026-88153, CVE-2026-88175, CVE-2026-97009, CVE-2026-97753, CVE-2026-97017, CVE-2026-97740, CVE-2026-97766, CVE-2026-97003, CVE-2026-97751, CVE-2026-97776, CVE-2026-97752, CVE-2026-97758, CVE-2026-97761, CVE-2026-97747, CVE-2026-97780, CVE-2026-97770, CVE-2026-97771, CVE-2026-97755, CVE-2026-97765, CVE-2026-97739, CVE-2026-97778, CVE-2026-97759, CVE-2026-77902, CVE-2026-88154, CVE-2026-88172, CVE-2026-88184, CVE-2026-88192, CVE-2026-88195, CVE-2026-97007, CVE-2026-97779, CVE-2026-97756, CVE-2026-97008, CVE-2026-97773, CVE-2026-97010, CVE-2026-97743, CVE-2026-97762, CVE-2026-97011, CVE-2026-97757, CVE-2026-97738, CVE-2026-97742, CVE-2026-97746, CVE-2026-97763, CVE-2026-97775, CVE-2026-97768, CVE-2026-97745, CVE-2026-100211, CVE-2026-100210, CVE-2026-108446.

CVE-2026-97762

Microsoft Office Excel contains an out-of-bounds write vulnerability that allows a remote, unauthorized attacker to execute arbitrary code on a target system. Exploitation requires the processing of a maliciously crafted Excel file, leading to potential RCE.

Affected products:

  • Excel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97762

Related in this roundup: CVE-2026-105718, CVE-2026-88153, CVE-2026-88175, CVE-2026-97009, CVE-2026-97753, CVE-2026-97017, CVE-2026-97740, CVE-2026-97766, CVE-2026-97003, CVE-2026-97751, CVE-2026-97776, CVE-2026-97752, CVE-2026-97758, CVE-2026-97761, CVE-2026-97747, CVE-2026-97780, CVE-2026-97770, CVE-2026-97771, CVE-2026-97755, CVE-2026-97765, CVE-2026-97739, CVE-2026-97778, CVE-2026-97759, CVE-2026-77902, CVE-2026-88154, CVE-2026-88172, CVE-2026-88184, CVE-2026-88192, CVE-2026-88195, CVE-2026-97007, CVE-2026-97779, CVE-2026-97756, CVE-2026-97008, CVE-2026-97773, CVE-2026-97010, CVE-2026-97743, CVE-2026-97777, CVE-2026-97011, CVE-2026-97757, CVE-2026-97738, CVE-2026-97742, CVE-2026-97746, CVE-2026-97763, CVE-2026-97775, CVE-2026-97768, CVE-2026-97745, CVE-2026-100211, CVE-2026-100210, CVE-2026-108446.

CVE-2026-97011

CVE-2026-97011 is a remote code execution vulnerability in Microsoft Excel caused by the use of an uninitialized resource. An attacker can exploit this flaw over a network to execute arbitrary code on the victim's system.

Affected products:

  • Excel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97011

Related in this roundup: CVE-2026-105718, CVE-2026-88153, CVE-2026-88175, CVE-2026-97009, CVE-2026-97753, CVE-2026-97017, CVE-2026-97740, CVE-2026-97766, CVE-2026-97003, CVE-2026-97751, CVE-2026-97776, CVE-2026-97752, CVE-2026-97758, CVE-2026-97761, CVE-2026-97747, CVE-2026-97780, CVE-2026-97770, CVE-2026-97771, CVE-2026-97755, CVE-2026-97765, CVE-2026-97739, CVE-2026-97778, CVE-2026-97759, CVE-2026-77902, CVE-2026-88154, CVE-2026-88172, CVE-2026-88184, CVE-2026-88192, CVE-2026-88195, CVE-2026-97007, CVE-2026-97779, CVE-2026-97756, CVE-2026-97008, CVE-2026-97773, CVE-2026-97010, CVE-2026-97743, CVE-2026-97777, CVE-2026-97762, CVE-2026-97757, CVE-2026-97738, CVE-2026-97742, CVE-2026-97746, CVE-2026-97763, CVE-2026-97775, CVE-2026-97768, CVE-2026-97745, CVE-2026-100211, CVE-2026-100210, CVE-2026-108446.

CVE-2026-97757

CVE-2026-97757 is a heap-based buffer overflow vulnerability in Microsoft Excel that can be exploited by an attacker to achieve remote code execution via a specially crafted file or network stream.

Affected products:

  • Excel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97757

Related in this roundup: CVE-2026-105718, CVE-2026-88153, CVE-2026-88175, CVE-2026-97009, CVE-2026-97753, CVE-2026-97017, CVE-2026-97740, CVE-2026-97766, CVE-2026-97003, CVE-2026-97751, CVE-2026-97776, CVE-2026-97752, CVE-2026-97758, CVE-2026-97761, CVE-2026-97747, CVE-2026-97780, CVE-2026-97770, CVE-2026-97771, CVE-2026-97755, CVE-2026-97765, CVE-2026-97739, CVE-2026-97778, CVE-2026-97759, CVE-2026-77902, CVE-2026-88154, CVE-2026-88172, CVE-2026-88184, CVE-2026-88192, CVE-2026-88195, CVE-2026-97007, CVE-2026-97779, CVE-2026-97756, CVE-2026-97008, CVE-2026-97773, CVE-2026-97010, CVE-2026-97743, CVE-2026-97777, CVE-2026-97762, CVE-2026-97011, CVE-2026-97738, CVE-2026-97742, CVE-2026-97746, CVE-2026-97763, CVE-2026-97775, CVE-2026-97768, CVE-2026-97745, CVE-2026-100211, CVE-2026-100210, CVE-2026-108446.

CVE-2026-97738

CVE-2026-97738 is a remote code execution vulnerability in Microsoft Excel caused by a use-after-free error. An unauthenticated attacker can exploit this flaw over a network to execute arbitrary code in the context of the current user.

Affected products:

  • Excel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97738

Related in this roundup: CVE-2026-105718, CVE-2026-88153, CVE-2026-88175, CVE-2026-97009, CVE-2026-97753, CVE-2026-97017, CVE-2026-97740, CVE-2026-97766, CVE-2026-97003, CVE-2026-97751, CVE-2026-97776, CVE-2026-97752, CVE-2026-97758, CVE-2026-97761, CVE-2026-97747, CVE-2026-97780, CVE-2026-97770, CVE-2026-97771, CVE-2026-97755, CVE-2026-97765, CVE-2026-97739, CVE-2026-97778, CVE-2026-97759, CVE-2026-77902, CVE-2026-88154, CVE-2026-88172, CVE-2026-88184, CVE-2026-88192, CVE-2026-88195, CVE-2026-97007, CVE-2026-97779, CVE-2026-97756, CVE-2026-97008, CVE-2026-97773, CVE-2026-97010, CVE-2026-97743, CVE-2026-97777, CVE-2026-97762, CVE-2026-97011, CVE-2026-97757, CVE-2026-97742, CVE-2026-97746, CVE-2026-97763, CVE-2026-97775, CVE-2026-97768, CVE-2026-97745, CVE-2026-100211, CVE-2026-100210, CVE-2026-108446.

CVE-2026-97742

CVE-2026-97742 is a remote code execution vulnerability in Microsoft Excel caused by a stack-based buffer overflow. An unauthenticated attacker can exploit this flaw over a network to execute arbitrary code, potentially leading to full system compromise depending on user permissions.

Affected products:

  • Excel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97742

Related in this roundup: CVE-2026-105718, CVE-2026-88153, CVE-2026-88175, CVE-2026-97009, CVE-2026-97753, CVE-2026-97017, CVE-2026-97740, CVE-2026-97766, CVE-2026-97003, CVE-2026-97751, CVE-2026-97776, CVE-2026-97752, CVE-2026-97758, CVE-2026-97761, CVE-2026-97747, CVE-2026-97780, CVE-2026-97770, CVE-2026-97771, CVE-2026-97755, CVE-2026-97765, CVE-2026-97739, CVE-2026-97778, CVE-2026-97759, CVE-2026-77902, CVE-2026-88154, CVE-2026-88172, CVE-2026-88184, CVE-2026-88192, CVE-2026-88195, CVE-2026-97007, CVE-2026-97779, CVE-2026-97756, CVE-2026-97008, CVE-2026-97773, CVE-2026-97010, CVE-2026-97743, CVE-2026-97777, CVE-2026-97762, CVE-2026-97011, CVE-2026-97757, CVE-2026-97738, CVE-2026-97746, CVE-2026-97763, CVE-2026-97775, CVE-2026-97768, CVE-2026-97745, CVE-2026-100211, CVE-2026-100210, CVE-2026-108446.

CVE-2026-97760

CVE-2026-97760 is an out-of-bounds read vulnerability in Microsoft Office Excel that allows a remote attacker to disclose sensitive information over a network. The vulnerability occurs due to improper handling of memory during data processing, which can be triggered by a specially crafted file.

Affected products:

  • Office Excel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97760

Related in this roundup: CVE-2026-88151, CVE-2026-88201, CVE-2026-97014, CVE-2026-97750, CVE-2026-97767, CVE-2026-70214, CVE-2026-70254, CVE-2026-88190, CVE-2026-97748, CVE-2026-97769, CVE-2026-97004, CVE-2026-97741, CVE-2026-97772, CVE-2026-100209, CVE-2026-100212.

CVE-2026-97746

Microsoft Office Excel contains an integer underflow vulnerability that can be exploited by an unauthorized remote attacker to execute arbitrary code. The vulnerability is triggered during the processing of malformed Excel files, potentially leading to remote code execution.

Affected products:

  • Excel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97746

Related in this roundup: CVE-2026-105718, CVE-2026-88153, CVE-2026-88175, CVE-2026-97009, CVE-2026-97753, CVE-2026-97017, CVE-2026-97740, CVE-2026-97766, CVE-2026-97003, CVE-2026-97751, CVE-2026-97776, CVE-2026-97752, CVE-2026-97758, CVE-2026-97761, CVE-2026-97747, CVE-2026-97780, CVE-2026-97770, CVE-2026-97771, CVE-2026-97755, CVE-2026-97765, CVE-2026-97739, CVE-2026-97778, CVE-2026-97759, CVE-2026-77902, CVE-2026-88154, CVE-2026-88172, CVE-2026-88184, CVE-2026-88192, CVE-2026-88195, CVE-2026-97007, CVE-2026-97779, CVE-2026-97756, CVE-2026-97008, CVE-2026-97773, CVE-2026-97010, CVE-2026-97743, CVE-2026-97777, CVE-2026-97762, CVE-2026-97011, CVE-2026-97757, CVE-2026-97738, CVE-2026-97742, CVE-2026-97763, CVE-2026-97775, CVE-2026-97768, CVE-2026-97745, CVE-2026-100211, CVE-2026-100210, CVE-2026-108446.

CVE-2026-97004

CVE-2026-97004 is a heap-based buffer overflow vulnerability in Microsoft Office Excel that enables an unauthorized remote attacker to achieve remote code execution (RCE). Detection engineers should monitor for anomalous Excel process behavior and suspicious child processes originating from Excel when handling untrusted spreadsheet files.

Affected products:

  • Office Excel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97004

Related in this roundup: CVE-2026-88151, CVE-2026-88201, CVE-2026-97014, CVE-2026-97750, CVE-2026-97767, CVE-2026-70214, CVE-2026-70254, CVE-2026-88190, CVE-2026-97748, CVE-2026-97769, CVE-2026-97760, CVE-2026-97741, CVE-2026-97772, CVE-2026-100209, CVE-2026-100212.

CVE-2026-97741

CVE-2026-97741 is a heap-based buffer overflow vulnerability in Microsoft Office Excel that enables an unauthorized remote attacker to achieve remote code execution via a network-based attack vector.

Affected products:

  • Office Excel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97741

Related in this roundup: CVE-2026-88151, CVE-2026-88201, CVE-2026-97014, CVE-2026-97750, CVE-2026-97767, CVE-2026-70214, CVE-2026-70254, CVE-2026-88190, CVE-2026-97748, CVE-2026-97769, CVE-2026-97760, CVE-2026-97004, CVE-2026-97772, CVE-2026-100209, CVE-2026-100212.

CVE-2026-97763

CVE-2026-97763 is a heap-based buffer overflow vulnerability in Microsoft Office Excel that enables a remote, unauthorized attacker to execute arbitrary code. The vulnerability occurs due to improper memory handling when processing malicious Excel files, potentially leading to remote code execution (RCE) without user interaction beyond opening a specially crafted file.

Affected products:

  • Excel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97763

Related in this roundup: CVE-2026-105718, CVE-2026-88153, CVE-2026-88175, CVE-2026-97009, CVE-2026-97753, CVE-2026-97017, CVE-2026-97740, CVE-2026-97766, CVE-2026-97003, CVE-2026-97751, CVE-2026-97776, CVE-2026-97752, CVE-2026-97758, CVE-2026-97761, CVE-2026-97747, CVE-2026-97780, CVE-2026-97770, CVE-2026-97771, CVE-2026-97755, CVE-2026-97765, CVE-2026-97739, CVE-2026-97778, CVE-2026-97759, CVE-2026-77902, CVE-2026-88154, CVE-2026-88172, CVE-2026-88184, CVE-2026-88192, CVE-2026-88195, CVE-2026-97007, CVE-2026-97779, CVE-2026-97756, CVE-2026-97008, CVE-2026-97773, CVE-2026-97010, CVE-2026-97743, CVE-2026-97777, CVE-2026-97762, CVE-2026-97011, CVE-2026-97757, CVE-2026-97738, CVE-2026-97742, CVE-2026-97746, CVE-2026-97775, CVE-2026-97768, CVE-2026-97745, CVE-2026-100211, CVE-2026-100210, CVE-2026-108446.

CVE-2026-97775

CVE-2026-97775 is a use-after-free vulnerability in Microsoft Excel that allows an unauthenticated remote attacker to execute arbitrary code. The vulnerability occurs during the processing of specially crafted files, enabling remote code execution when a victim opens a malicious document.

Affected products:

  • Excel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97775

Related in this roundup: CVE-2026-105718, CVE-2026-88153, CVE-2026-88175, CVE-2026-97009, CVE-2026-97753, CVE-2026-97017, CVE-2026-97740, CVE-2026-97766, CVE-2026-97003, CVE-2026-97751, CVE-2026-97776, CVE-2026-97752, CVE-2026-97758, CVE-2026-97761, CVE-2026-97747, CVE-2026-97780, CVE-2026-97770, CVE-2026-97771, CVE-2026-97755, CVE-2026-97765, CVE-2026-97739, CVE-2026-97778, CVE-2026-97759, CVE-2026-77902, CVE-2026-88154, CVE-2026-88172, CVE-2026-88184, CVE-2026-88192, CVE-2026-88195, CVE-2026-97007, CVE-2026-97779, CVE-2026-97756, CVE-2026-97008, CVE-2026-97773, CVE-2026-97010, CVE-2026-97743, CVE-2026-97777, CVE-2026-97762, CVE-2026-97011, CVE-2026-97757, CVE-2026-97738, CVE-2026-97742, CVE-2026-97746, CVE-2026-97763, CVE-2026-97768, CVE-2026-97745, CVE-2026-100211, CVE-2026-100210, CVE-2026-108446.

CVE-2026-97772

A double-free vulnerability exists in Microsoft Office Excel that enables a remote, unauthorized attacker to execute arbitrary code on a target system. This flaw typically occurs during the parsing of malicious Excel files, leading to a memory management error that can be exploited for remote code execution.

Affected products:

  • Office Excel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97772

Related in this roundup: CVE-2026-88151, CVE-2026-88201, CVE-2026-97014, CVE-2026-97750, CVE-2026-97767, CVE-2026-70214, CVE-2026-70254, CVE-2026-88190, CVE-2026-97748, CVE-2026-97769, CVE-2026-97760, CVE-2026-97004, CVE-2026-97741, CVE-2026-100209, CVE-2026-100212.

CVE-2026-97768

A heap-based buffer overflow vulnerability in Microsoft Excel allows a remote, unauthorized attacker to achieve remote code execution via specially crafted files or network-based vectors.

Affected products:

  • Excel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97768

Related in this roundup: CVE-2026-105718, CVE-2026-88153, CVE-2026-88175, CVE-2026-97009, CVE-2026-97753, CVE-2026-97017, CVE-2026-97740, CVE-2026-97766, CVE-2026-97003, CVE-2026-97751, CVE-2026-97776, CVE-2026-97752, CVE-2026-97758, CVE-2026-97761, CVE-2026-97747, CVE-2026-97780, CVE-2026-97770, CVE-2026-97771, CVE-2026-97755, CVE-2026-97765, CVE-2026-97739, CVE-2026-97778, CVE-2026-97759, CVE-2026-77902, CVE-2026-88154, CVE-2026-88172, CVE-2026-88184, CVE-2026-88192, CVE-2026-88195, CVE-2026-97007, CVE-2026-97779, CVE-2026-97756, CVE-2026-97008, CVE-2026-97773, CVE-2026-97010, CVE-2026-97743, CVE-2026-97777, CVE-2026-97762, CVE-2026-97011, CVE-2026-97757, CVE-2026-97738, CVE-2026-97742, CVE-2026-97746, CVE-2026-97763, CVE-2026-97775, CVE-2026-97745, CVE-2026-100211, CVE-2026-100210, CVE-2026-108446.

CVE-2026-97745

A use-after-free vulnerability in Microsoft Office Excel allows an unauthorized attacker to achieve remote code execution over a network by leveraging memory corruption during file processing.

Affected products:

  • Excel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97745

Related in this roundup: CVE-2026-105718, CVE-2026-88153, CVE-2026-88175, CVE-2026-97009, CVE-2026-97753, CVE-2026-97017, CVE-2026-97740, CVE-2026-97766, CVE-2026-97003, CVE-2026-97751, CVE-2026-97776, CVE-2026-97752, CVE-2026-97758, CVE-2026-97761, CVE-2026-97747, CVE-2026-97780, CVE-2026-97770, CVE-2026-97771, CVE-2026-97755, CVE-2026-97765, CVE-2026-97739, CVE-2026-97778, CVE-2026-97759, CVE-2026-77902, CVE-2026-88154, CVE-2026-88172, CVE-2026-88184, CVE-2026-88192, CVE-2026-88195, CVE-2026-97007, CVE-2026-97779, CVE-2026-97756, CVE-2026-97008, CVE-2026-97773, CVE-2026-97010, CVE-2026-97743, CVE-2026-97777, CVE-2026-97762, CVE-2026-97011, CVE-2026-97757, CVE-2026-97738, CVE-2026-97742, CVE-2026-97746, CVE-2026-97763, CVE-2026-97775, CVE-2026-97768, CVE-2026-100211, CVE-2026-100210, CVE-2026-108446.

CVE-2026-96071

CVE-2026-96071 is a heap-based buffer overflow vulnerability in Windows Media that allows a remote, unauthorized attacker to execute arbitrary code over a network.

Affected products:

  • Windows Media

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96071

Related in this roundup: CVE-2026-83641, CVE-2026-83650.

CVE-2026-96118

CVE-2026-96118 is a local privilege escalation vulnerability in the Windows Graphics Kernel caused by an out-of-bounds read. An authorized local attacker can exploit this vulnerability to elevate privileges on the affected system.

Affected products:

  • Windows Graphics Kernel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96118

Related in this roundup: CVE-2026-88073, CVE-2026-88110.

CVE-2026-97788

CVE-2026-97788 is an information disclosure vulnerability in Microsoft Active Directory Federation Services (AD FS) that enables an unauthorized attacker to retrieve sensitive information over a network due to an observable discrepancy.

Affected products:

  • Active Directory Federation Services

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97788

Related in this roundup: CVE-2026-83646, CVE-2026-85319, CVE-2026-85321, CVE-2026-85324, CVE-2026-83674, CVE-2026-69982, CVE-2026-70005, CVE-2026-83511, CVE-2026-83645, CVE-2026-96252, CVE-2026-103576, CVE-2026-108131.

CVE-2026-97790

CVE-2026-97790 is a local tampering vulnerability in the Windows Container Isolation FS Filter Driver (unionfs.sys) caused by improper link resolution before file access. An authenticated attacker can exploit this flaw to perform unauthorized file system operations by manipulating link following behaviors.

Affected products:

  • Windows Container Isolation FS Filter Driver

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97790

Related in this roundup: CVE-2026-97794, CVE-2026-97792, CVE-2026-102202, CVE-2026-97810.

CVE-2026-97792

A privilege escalation vulnerability exists in the Windows Container Isolation FS Filter Driver (unionfs.sys) due to improper access control. An authorized local attacker can exploit this flaw to elevate their privileges on the host system.

Affected products:

  • Windows Container Isolation FS Filter Driver

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97792

Related in this roundup: CVE-2026-97794, CVE-2026-97790, CVE-2026-102202, CVE-2026-97810.

CVE-2026-100211

CVE-2026-100211 is a use-after-free vulnerability in Microsoft Office Excel that allows a remote, unauthorized attacker to execute arbitrary code. The flaw is triggered via network interaction, making it a critical risk for users of the affected software.

Affected products:

  • Excel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-100211

Related in this roundup: CVE-2026-105718, CVE-2026-88153, CVE-2026-88175, CVE-2026-97009, CVE-2026-97753, CVE-2026-97017, CVE-2026-97740, CVE-2026-97766, CVE-2026-97003, CVE-2026-97751, CVE-2026-97776, CVE-2026-97752, CVE-2026-97758, CVE-2026-97761, CVE-2026-97747, CVE-2026-97780, CVE-2026-97770, CVE-2026-97771, CVE-2026-97755, CVE-2026-97765, CVE-2026-97739, CVE-2026-97778, CVE-2026-97759, CVE-2026-77902, CVE-2026-88154, CVE-2026-88172, CVE-2026-88184, CVE-2026-88192, CVE-2026-88195, CVE-2026-97007, CVE-2026-97779, CVE-2026-97756, CVE-2026-97008, CVE-2026-97773, CVE-2026-97010, CVE-2026-97743, CVE-2026-97777, CVE-2026-97762, CVE-2026-97011, CVE-2026-97757, CVE-2026-97738, CVE-2026-97742, CVE-2026-97746, CVE-2026-97763, CVE-2026-97775, CVE-2026-97768, CVE-2026-97745, CVE-2026-100210, CVE-2026-108446.

CVE-2026-100209

CVE-2026-100209 describes a use-after-free vulnerability in Microsoft Office Excel that enables a remote attacker to achieve code execution over a network. Detection engineers should monitor for anomalous Excel process behavior or unexpected child processes spawned by Excel.

Affected products:

  • Office Excel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-100209

Related in this roundup: CVE-2026-88151, CVE-2026-88201, CVE-2026-97014, CVE-2026-97750, CVE-2026-97767, CVE-2026-70214, CVE-2026-70254, CVE-2026-88190, CVE-2026-97748, CVE-2026-97769, CVE-2026-97760, CVE-2026-97004, CVE-2026-97741, CVE-2026-97772, CVE-2026-100212.

CVE-2026-100210

A heap-based buffer overflow vulnerability in Microsoft Excel allows an unauthorized remote attacker to execute arbitrary code. The vulnerability occurs due to improper memory handling, potentially leading to remote code execution when a victim opens a maliciously crafted file.

Affected products:

  • Excel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-100210

Related in this roundup: CVE-2026-105718, CVE-2026-88153, CVE-2026-88175, CVE-2026-97009, CVE-2026-97753, CVE-2026-97017, CVE-2026-97740, CVE-2026-97766, CVE-2026-97003, CVE-2026-97751, CVE-2026-97776, CVE-2026-97752, CVE-2026-97758, CVE-2026-97761, CVE-2026-97747, CVE-2026-97780, CVE-2026-97770, CVE-2026-97771, CVE-2026-97755, CVE-2026-97765, CVE-2026-97739, CVE-2026-97778, CVE-2026-97759, CVE-2026-77902, CVE-2026-88154, CVE-2026-88172, CVE-2026-88184, CVE-2026-88192, CVE-2026-88195, CVE-2026-97007, CVE-2026-97779, CVE-2026-97756, CVE-2026-97008, CVE-2026-97773, CVE-2026-97010, CVE-2026-97743, CVE-2026-97777, CVE-2026-97762, CVE-2026-97011, CVE-2026-97757, CVE-2026-97738, CVE-2026-97742, CVE-2026-97746, CVE-2026-97763, CVE-2026-97775, CVE-2026-97768, CVE-2026-97745, CVE-2026-100211, CVE-2026-108446.

CVE-2026-100212

CVE-2026-100212 is a use-after-free vulnerability in Microsoft Office Excel that allows a remote, unauthorized attacker to achieve remote code execution by exploiting memory management flaws during document processing.

Affected products:

  • Office Excel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-100212

Related in this roundup: CVE-2026-88151, CVE-2026-88201, CVE-2026-97014, CVE-2026-97750, CVE-2026-97767, CVE-2026-70214, CVE-2026-70254, CVE-2026-88190, CVE-2026-97748, CVE-2026-97769, CVE-2026-97760, CVE-2026-97004, CVE-2026-97741, CVE-2026-97772, CVE-2026-100209.

CVE-2026-102851

CVE-2026-102851 describes a security feature bypass vulnerability in Visual Studio Code resulting from incorrect privilege assignment. A local, authorized attacker can exploit this flaw to circumvent existing security controls, potentially leading to unauthorized actions or elevated access within the application's context.

Affected products:

  • Visual Studio Code

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102851

Related in this roundup: CVE-2026-102238, CVE-2026-102231, CVE-2026-102233, CVE-2026-102229, CVE-2026-102232, CVE-2026-102234, CVE-2026-102235, CVE-2026-70098, CVE-2026-69370.

CVE-2026-102870

A code injection vulnerability exists in ASP.NET Core that allows a remote, unauthorized attacker to achieve remote code execution via network requests due to improper control of generated code.

Affected products:

  • ASP.NET Core

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102870

Related in this roundup: CVE-2026-70188, CVE-2026-88092, CVE-2026-70186, CVE-2026-70159, CVE-2026-70175, CVE-2026-70196, CVE-2026-70181, CVE-2026-70183, CVE-2026-96233.

CVE-2026-105729

An untrusted pointer dereference vulnerability in Microsoft Sysinternals allows a locally authenticated attacker to achieve privilege escalation via a local exploit.

Affected products:

  • Sysinternals

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105729

Related in this roundup: CVE-2026-100205.

CVE-2026-100214

CVE-2026-100214 is a remote code execution vulnerability in Microsoft Dynamics 365 Business Central caused by insecure deserialization of untrusted data, which can be exploited by an authorized attacker over a network.

Affected products:

  • Dynamics 365 Business Central

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-100214

Related in this roundup: CVE-2026-105727.

CVE-2026-100216

CVE-2026-100216 is a stack-based buffer overflow vulnerability in Windows Storage that allows an authorized local attacker to elevate their privileges on the host system.

Affected products:

  • Windows Storage

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-100216

Related in this roundup: CVE-2026-69766, CVE-2026-69935, CVE-2026-83911, CVE-2026-69931, CVE-2026-69856, CVE-2026-96944, CVE-2026-102189.

CVE-2026-100217

CVE-2026-100217 describes an improper privilege management vulnerability within Windows Group Policy that enables an authenticated attacker to elevate their local privileges to a higher level. Detection engineers should monitor for unauthorized modifications to Group Policy objects or unexpected process executions originating from elevated security contexts associated with Group Policy services.

Affected products:

  • Windows Group Policy

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-100217

CVE-2026-100218

A use-after-free vulnerability in the Microsoft Remote Desktop Gateway Service allows a remote, unauthenticated attacker to achieve remote code execution by sending specifically crafted requests over the network.

Affected products:

  • Remote Desktop Gateway Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-100218

Related in this roundup: CVE-2026-84007, CVE-2026-84012, CVE-2026-70187.

CVE-2026-88219

A vulnerability in the RPC Runtime Library allows an unauthenticated remote attacker to perform an untrusted pointer dereference, leading to remote code execution over the network. This issue impacts the core Windows RPC subsystem.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88219

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-69506

An out-of-bounds read vulnerability exists in the Windows Key Storage Provider that allows a locally authenticated attacker to perform an information disclosure attack.

Affected products:

  • Windows Key Storage Provider

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69506

Related in this roundup: CVE-2026-88140.

CVE-2026-100225

A heap-based buffer overflow vulnerability in the Windows Storage component allows a locally authenticated attacker to escalate privileges. The vulnerability permits unauthorized access to elevated permissions by exploiting memory corruption within the affected storage subsystem.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-100225

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-70023

CVE-2026-70023 is a use-after-free vulnerability in Microsoft Windows Hyper-V that allows an authenticated local attacker to escalate their privileges. Detection should focus on monitoring for unauthorized attempts to interact with Hyper-V management interfaces or anomalous system process behavior indicative of privilege escalation attempts.

Affected products:

  • Hyper-V

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70023

Related in this roundup: CVE-2026-108399, CVE-2026-83671, CVE-2026-83839, CVE-2026-70248, CVE-2026-85343, CVE-2026-88071, CVE-2026-83636, CVE-2026-83716, CVE-2026-83728, CVE-2026-83766, CVE-2026-83931, CVE-2026-87705, CVE-2026-102214, CVE-2026-97813.

CVE-2026-70212

A vulnerability in Windows Security Center allows a locally authenticated attacker to elevate privileges by exploiting an improper restriction of communication channels to intended endpoints.

Affected products:

  • Windows Security Center

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70212

Related in this roundup: CVE-2026-71347.

CVE-2026-88226

CVE-2026-88226 is an out-of-bounds read vulnerability in the Windows Storage Port Driver that enables an unauthorized attacker with physical access to the target system to perform information disclosure.

Affected products:

  • Windows Storage Port Driver

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88226

Related in this roundup: CVE-2026-96863, CVE-2026-102188.

CVE-2026-96209

An out-of-bounds read vulnerability exists in the Windows Network File System (NFS) that allows an authorized local attacker to escalate their privileges on the affected system.

Affected products:

  • Windows Network File System

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96209

Related in this roundup: CVE-2026-70143, CVE-2026-69675.

CVE-2026-102187

CVE-2026-102187 is an information disclosure vulnerability in the Windows Kernel caused by the use of an uninitialized resource. A local, authorized attacker can exploit this flaw to read sensitive data from system memory.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102187

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-102186

An untrusted pointer dereference vulnerability exists within the Windows Network File System component. An authorized attacker could exploit this flaw to perform unauthorized information disclosure on the local system.

Affected products:

  • Network File System

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102186

CVE-2026-102188

CVE-2026-102188 describes an untrusted pointer dereference vulnerability within the Windows Storage Port Driver. An unauthorized attacker can leverage this flaw to perform a privilege escalation, though the attack requires physical access to the target system.

Affected products:

  • Windows Storage Port Driver

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102188

Related in this roundup: CVE-2026-96863, CVE-2026-88226.

CVE-2026-102189

A heap-based buffer overflow vulnerability in Windows Storage allows a locally authenticated attacker to escalate privileges. The vulnerability occurs within the Windows storage subsystem, necessitating that the attacker already possesses authorized access to the system to exploit.

Affected products:

  • Windows Storage

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102189

Related in this roundup: CVE-2026-69766, CVE-2026-69935, CVE-2026-83911, CVE-2026-69931, CVE-2026-69856, CVE-2026-96944, CVE-2026-100216.

CVE-2026-102191

CVE-2026-102191 is a heap-based buffer overflow vulnerability in Windows Storage that allows an authenticated, local attacker to escalate their privileges. Successful exploitation results in the attacker gaining higher-level access to the system.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102191

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-102192

An integer underflow vulnerability in the Windows Failover Cluster component allows an unauthorized remote attacker to trigger a denial of service condition on affected systems.

Affected products:

  • Windows Failover Cluster

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102192

Related in this roundup: CVE-2026-88102, CVE-2026-88099, CVE-2026-96945.

CVE-2026-102193

CVE-2026-102193 is a use-after-free vulnerability within the Windows Broadcast DVR User Service that allows an authorized local attacker to achieve privilege escalation on the target system.

Affected products:

  • Windows Broadcast DVR User Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102193

Related in this roundup: CVE-2026-108461, CVE-2026-105722, CVE-2026-88103, CVE-2026-88105, CVE-2026-88113, CVE-2026-70122, CVE-2026-70148, CVE-2026-96919, CVE-2026-102195, CVE-2026-102196, CVE-2026-102197, CVE-2026-103554, CVE-2026-103565, CVE-2026-103567, CVE-2026-97806, CVE-2026-97807, CVE-2026-97808.

CVE-2026-102194

CVE-2026-102194 is a use-after-free vulnerability within the Windows Graphics Kernel that can be exploited by an authenticated local attacker to achieve privilege escalation.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102194

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-102195

A use-after-free vulnerability in the Windows Broadcast DVR User Service allows a local, authorized attacker to escalate their privileges. Successful exploitation requires the attacker to be already authenticated on the system.

Affected products:

  • Windows Broadcast DVR User Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102195

Related in this roundup: CVE-2026-108461, CVE-2026-105722, CVE-2026-88103, CVE-2026-88105, CVE-2026-88113, CVE-2026-70122, CVE-2026-70148, CVE-2026-96919, CVE-2026-102193, CVE-2026-102196, CVE-2026-102197, CVE-2026-103554, CVE-2026-103565, CVE-2026-103567, CVE-2026-97806, CVE-2026-97807, CVE-2026-97808.

CVE-2026-102196

CVE-2026-102196 is a privilege escalation vulnerability in the Windows Broadcast DVR User Service caused by a use-after-free flaw. An authenticated local attacker can leverage this vulnerability to execute code with elevated privileges on the system.

Affected products:

  • Windows Broadcast DVR User Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102196

Related in this roundup: CVE-2026-108461, CVE-2026-105722, CVE-2026-88103, CVE-2026-88105, CVE-2026-88113, CVE-2026-70122, CVE-2026-70148, CVE-2026-96919, CVE-2026-102193, CVE-2026-102195, CVE-2026-102197, CVE-2026-103554, CVE-2026-103565, CVE-2026-103567, CVE-2026-97806, CVE-2026-97807, CVE-2026-97808.

CVE-2026-102197

CVE-2026-102197 is a local privilege escalation vulnerability in the Windows Broadcast DVR User Service caused by a use-after-free flaw. An authenticated attacker can exploit this vulnerability to gain elevated privileges on a compromised Windows system.

Affected products:

  • Windows Broadcast DVR User Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102197

Related in this roundup: CVE-2026-108461, CVE-2026-105722, CVE-2026-88103, CVE-2026-88105, CVE-2026-88113, CVE-2026-70122, CVE-2026-70148, CVE-2026-96919, CVE-2026-102193, CVE-2026-102195, CVE-2026-102196, CVE-2026-103554, CVE-2026-103565, CVE-2026-103567, CVE-2026-97806, CVE-2026-97807, CVE-2026-97808.

CVE-2026-102198

CVE-2026-102198 describes an out-of-bounds read vulnerability in the Windows Remote Desktop Protocol (RDP) that allows an authenticated attacker to perform unauthorized information disclosure over the network.

Affected products:

  • Windows Remote Desktop Protocol

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102198

Related in this roundup: CVE-2026-83861, CVE-2026-96322.

CVE-2026-102199

A stack-based buffer overflow vulnerability exists in the Microsoft Windows Codecs Library, which can be exploited by an unauthorized remote attacker to cause a denial of service condition on affected Windows systems.

Affected products:

  • Windows Codecs Library

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102199

Related in this roundup: CVE-2026-108400.

CVE-2026-102201

CVE-2026-102201 is a use-after-free vulnerability within Microsoft Windows Media Foundation that allows a local, authenticated attacker to achieve privilege escalation on a compromised system.

Affected products:

  • Windows Media Foundation

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102201

Related in this roundup: CVE-2026-83517, CVE-2026-85814, CVE-2026-70278, CVE-2026-70044, CVE-2026-70131, CVE-2026-70258, CVE-2026-96186, CVE-2026-96952.

CVE-2026-102203

A type confusion vulnerability exists in the RPC Runtime of Windows, which can be exploited by an unauthorized remote attacker to achieve remote code execution over a network.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102203

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-102202

CVE-2026-102202 describes an improper access control vulnerability within the unionfs.sys driver on Windows, which can be exploited by a locally authenticated attacker to achieve privilege escalation.

Affected products:

  • Windows Container Isolation FS Filter Driver

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102202

Related in this roundup: CVE-2026-97794, CVE-2026-97790, CVE-2026-97792, CVE-2026-97810.

CVE-2026-102206

A heap-based buffer overflow vulnerability in the Windows Portable Device MTP Driver allows an unauthorized attacker with physical access to the target machine to achieve privilege escalation.

Affected products:

  • Windows Portable Device MTP Driver

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102206

Related in this roundup: CVE-2026-83794.

CVE-2026-102205

The Windows Universal Disk Format File System Driver (UDFS) contains a heap-based buffer overflow vulnerability that enables an authenticated local attacker to execute code with elevated privileges, potentially resulting in full system compromise.

Affected products:

  • Windows Universal Disk Format File System Driver

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102205

Related in this roundup: CVE-2026-83713, CVE-2026-85820, CVE-2026-85821, CVE-2026-85825, CVE-2026-83513, CVE-2026-83857, CVE-2026-85909, CVE-2026-96930, CVE-2026-96946, CVE-2026-96947, CVE-2026-96949, CVE-2026-96950, CVE-2026-96953, CVE-2026-102218, CVE-2026-102215.

CVE-2026-102207

A race condition vulnerability exists within the Windows Kernel due to improper synchronization during concurrent execution with shared resources. This vulnerability allows an authenticated attacker to perform a local privilege escalation, gaining higher levels of access on the affected system.

Affected products:

  • Windows Kernel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102207

Related in this roundup: CVE-2026-108462, CVE-2026-108466, CVE-2026-70063, CVE-2026-70106, CVE-2026-70121, CVE-2026-70114, CVE-2026-83690, CVE-2026-83768, CVE-2026-83833, CVE-2026-85372, CVE-2026-85836, CVE-2026-85837, CVE-2026-70170, CVE-2026-85939, CVE-2026-85945, CVE-2026-96216, CVE-2026-96317, CVE-2026-96868, CVE-2026-70199, CVE-2026-70232, CVE-2026-83736, CVE-2026-83735, CVE-2026-83918, CVE-2026-83924, CVE-2026-83925, CVE-2026-88134, CVE-2026-88139, CVE-2026-88141, CVE-2026-70160, CVE-2026-70111, CVE-2026-96913, CVE-2026-96929, CVE-2026-103578, CVE-2026-97803.

CVE-2026-102208

CVE-2026-102208 is a use-after-free vulnerability in the Windows Win32 Kernel Subsystem that enables a local, authorized attacker to achieve privilege escalation on the affected system.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102208

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-102209

CVE-2026-102209 is a heap-based buffer overflow vulnerability within the Microsoft Graphics Component. This vulnerability allows an authorized local attacker to achieve privilege escalation by exploiting the memory corruption flaw.

Affected products:

  • Graphics Component

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102209

Related in this roundup: CVE-2026-70123, CVE-2026-85338, CVE-2026-100215.

CVE-2026-102211

A use-after-free vulnerability exists within Windows Virtualization-Based Security (VBS) Enclaves, enabling a locally authenticated attacker to escalate their privileges. This vulnerability requires local access to the system and exploitation of memory management flaws within the VBS isolated environment.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102211

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-102216

A type confusion vulnerability exists in the Windows StateRepository API, which can be exploited by an authenticated local attacker to achieve privilege escalation.

Affected products:

  • Windows StateRepository API

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102216

CVE-2026-102218

A heap-based buffer overflow vulnerability in the Windows Universal Disk Format File System Driver (UDFS) allows an authorized local attacker to achieve privilege escalation by exploiting the driver component.

Affected products:

  • Windows Universal Disk Format File System Driver

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102218

Related in this roundup: CVE-2026-83713, CVE-2026-85820, CVE-2026-85821, CVE-2026-85825, CVE-2026-83513, CVE-2026-83857, CVE-2026-85909, CVE-2026-96930, CVE-2026-96946, CVE-2026-96947, CVE-2026-96949, CVE-2026-96950, CVE-2026-96953, CVE-2026-102205, CVE-2026-102215.

CVE-2026-102215

The Windows Universal Disk Format File System Driver (UDFS) contains a heap-based buffer overflow vulnerability that allows an authorized local attacker to elevate their privileges on the host system.

Affected products:

  • Windows Universal Disk Format File System Driver

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102215

Related in this roundup: CVE-2026-83713, CVE-2026-85820, CVE-2026-85821, CVE-2026-85825, CVE-2026-83513, CVE-2026-83857, CVE-2026-85909, CVE-2026-96930, CVE-2026-96946, CVE-2026-96947, CVE-2026-96949, CVE-2026-96950, CVE-2026-96953, CVE-2026-102205, CVE-2026-102218.

CVE-2026-102221

A security feature bypass vulnerability exists in Windows Secure Boot, which allows an authorized attacker with local access to circumvent security controls. Exploitation of this vulnerability may allow an attacker to bypass Secure Boot protections on the targeted system.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102221

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-102220

The Windows VHD miniport driver is susceptible to a use-after-free vulnerability, which can be exploited by a local, authorized attacker to achieve privilege escalation on the affected system.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102220

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-102214

CVE-2026-102214 is a use-after-free vulnerability within the Windows Hyper-V hypervisor component. An authorized local attacker can exploit this flaw to achieve remote code execution, typically by triggering the vulnerability while interacting with the Hyper-V interface.

Affected products:

  • Hyper-V

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102214

Related in this roundup: CVE-2026-108399, CVE-2026-83671, CVE-2026-83839, CVE-2026-70248, CVE-2026-85343, CVE-2026-88071, CVE-2026-83636, CVE-2026-83716, CVE-2026-83728, CVE-2026-83766, CVE-2026-83931, CVE-2026-87705, CVE-2026-70023, CVE-2026-97813.

CVE-2026-100215

CVE-2026-100215 is a heap-based buffer overflow vulnerability within the Microsoft Graphics Component that enables a local, unauthorized attacker to execute arbitrary code on the host system.

Affected products:

  • Graphics Component

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-100215

Related in this roundup: CVE-2026-70123, CVE-2026-85338, CVE-2026-102209.

CVE-2026-102225

CVE-2026-102225 describes an out-of-bounds read vulnerability in the Windows Text Shaping component that facilitates remote code execution over a network. The vulnerability requires no authorization, making it a critical risk for Windows environments.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102225

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-102226

Dynamics Business Central contains a path traversal vulnerability that permits an authorized user to escalate their privileges over a network connection.

Affected products:

  • Dynamics Business Central

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102226

Related in this roundup: CVE-2026-105728.

CVE-2026-109453

The Virtual Hard Disk (VHD) Miniport Driver in Microsoft Windows contains a heap-based buffer overflow vulnerability that allows a locally authorized attacker to escalate privileges to SYSTEM level.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-109453

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-69922

CVE-2026-69922 is an out-of-bounds read vulnerability in Microsoft Excel that allows a remote, unauthorized attacker to disclose sensitive information over the network.

Affected products:

  • Office
  • Excel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69922

Related in this roundup: CVE-2026-102867, CVE-2026-88150, CVE-2026-88145, CVE-2026-88197, CVE-2026-88196, CVE-2026-96996, CVE-2026-97754, CVE-2026-108442.

CVE-2026-103553

An out-of-bounds read vulnerability exists within the Windows Partition Management Driver that enables a locally authorized attacker to escalate their current privileges on the affected system.

Affected products:

  • Windows Partition Management Driver

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-103553

Related in this roundup: CVE-2026-97805, CVE-2026-83851, CVE-2026-83514, CVE-2026-83797.

CVE-2026-103554

CVE-2026-103554 is a local privilege escalation vulnerability in the Windows Broadcast DVR User Service caused by a use-after-free flaw. An authenticated attacker can exploit this vulnerability to execute code with elevated privileges on the affected Windows system.

Affected products:

  • Windows Broadcast DVR User Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-103554

Related in this roundup: CVE-2026-108461, CVE-2026-105722, CVE-2026-88103, CVE-2026-88105, CVE-2026-88113, CVE-2026-70122, CVE-2026-70148, CVE-2026-96919, CVE-2026-102193, CVE-2026-102195, CVE-2026-102196, CVE-2026-102197, CVE-2026-103565, CVE-2026-103567, CVE-2026-97806, CVE-2026-97807, CVE-2026-97808.

CVE-2026-103555

The Virtual Hard Disk (VHD) Miniport Driver contains a heap-based buffer overflow vulnerability that enables an authenticated local attacker to gain elevated privileges on the affected Windows system.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-103555

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-103558

A deadlock vulnerability exists in the Windows Routing and Remote Access Service (RRAS) that can be exploited by an unauthenticated remote attacker to trigger a denial of service condition.

Affected products:

  • Windows Routing and Remote Access Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-103558

Related in this roundup: CVE-2026-85792, CVE-2026-84017, CVE-2026-85339, CVE-2026-85794.

CVE-2026-103560

CVE-2026-103560 describes an improper authorization vulnerability in the Windows DNS Server component that enables an authenticated local attacker to perform unauthorized tampering with DNS records or configurations.

Affected products:

  • DNS Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-103560

Related in this roundup: CVE-2026-70085, CVE-2026-70083, CVE-2026-70087, CVE-2026-83635, CVE-2026-70071, CVE-2026-88123, CVE-2026-88125, CVE-2026-88129, CVE-2026-88130, CVE-2026-96926, CVE-2026-97817, CVE-2026-97819, CVE-2026-97820, CVE-2026-97821, CVE-2026-97822, CVE-2026-97823, CVE-2026-97824, CVE-2026-97825, CVE-2026-97827, CVE-2026-97829, CVE-2026-97831, CVE-2026-97836, CVE-2026-97841, CVE-2026-97842, CVE-2026-97843, CVE-2026-97844, CVE-2026-108127, CVE-2026-108128.

CVE-2026-103565

CVE-2026-103565 is a use-after-free vulnerability within the Windows Broadcast DVR User Service that enables an authorized local attacker to achieve privilege escalation. Security teams should monitor for unexpected service state transitions or process crashes associated with the Broadcast DVR component as indicators of potential exploitation attempts.

Affected products:

  • Windows Broadcast DVR User Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-103565

Related in this roundup: CVE-2026-108461, CVE-2026-105722, CVE-2026-88103, CVE-2026-88105, CVE-2026-88113, CVE-2026-70122, CVE-2026-70148, CVE-2026-96919, CVE-2026-102193, CVE-2026-102195, CVE-2026-102196, CVE-2026-102197, CVE-2026-103554, CVE-2026-103567, CVE-2026-97806, CVE-2026-97807, CVE-2026-97808.

CVE-2026-103567

CVE-2026-103567 is an information disclosure vulnerability within the Windows Broadcast DVR User Service caused by a buffer over-read. An authorized attacker can exploit this locally to access unauthorized information.

Affected products:

  • Windows Broadcast DVR User Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-103567

Related in this roundup: CVE-2026-108461, CVE-2026-105722, CVE-2026-88103, CVE-2026-88105, CVE-2026-88113, CVE-2026-70122, CVE-2026-70148, CVE-2026-96919, CVE-2026-102193, CVE-2026-102195, CVE-2026-102196, CVE-2026-102197, CVE-2026-103554, CVE-2026-103565, CVE-2026-97806, CVE-2026-97807, CVE-2026-97808.

CVE-2026-103568

CVE-2026-103568 describes a race condition vulnerability within Windows Credential Providers that allows a locally authorized attacker to escalate their privileges to a higher level of access.

Affected products:

  • Windows Credential Providers

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-103568

CVE-2026-103575

A use-after-free vulnerability exists in the Microsoft Remote Desktop Client that enables an unauthorized remote attacker to achieve remote code execution over a network.

Affected products:

  • Remote Desktop Client

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-103575

Related in this roundup: CVE-2026-108458, CVE-2026-69976, CVE-2026-83688, CVE-2026-85337, CVE-2026-97789, CVE-2026-69984, CVE-2026-69986, CVE-2026-69988, CVE-2026-69987, CVE-2026-69995, CVE-2026-69997, CVE-2026-69996, CVE-2026-69991, CVE-2026-69994, CVE-2026-69998, CVE-2026-70012, CVE-2026-70004, CVE-2026-70006.

CVE-2026-103576

CVE-2026-103576 describes an open redirect vulnerability in Microsoft Active Directory Federation Services (AD FS). The flaw allows an unauthorized remote attacker to craft malicious links that redirect users to untrusted sites, facilitating spoofing attacks over the network.

Affected products:

  • Active Directory Federation Services

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-103576

Related in this roundup: CVE-2026-83646, CVE-2026-85319, CVE-2026-85321, CVE-2026-85324, CVE-2026-83674, CVE-2026-69982, CVE-2026-70005, CVE-2026-83511, CVE-2026-83645, CVE-2026-96252, CVE-2026-97788, CVE-2026-108131.

CVE-2026-103578

CVE-2026-103578 describes an untrusted pointer dereference vulnerability within the Windows Kernel. An unauthorized attacker with physical access to the target system can exploit this flaw to perform a privilege escalation attack.

Affected products:

  • Windows Kernel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-103578

Related in this roundup: CVE-2026-108462, CVE-2026-108466, CVE-2026-70063, CVE-2026-70106, CVE-2026-70121, CVE-2026-70114, CVE-2026-83690, CVE-2026-83768, CVE-2026-83833, CVE-2026-85372, CVE-2026-85836, CVE-2026-85837, CVE-2026-70170, CVE-2026-85939, CVE-2026-85945, CVE-2026-96216, CVE-2026-96317, CVE-2026-96868, CVE-2026-70199, CVE-2026-70232, CVE-2026-83736, CVE-2026-83735, CVE-2026-83918, CVE-2026-83924, CVE-2026-83925, CVE-2026-88134, CVE-2026-88139, CVE-2026-88141, CVE-2026-70160, CVE-2026-70111, CVE-2026-96913, CVE-2026-96929, CVE-2026-102207, CVE-2026-97803.

CVE-2026-105003

A heap-based buffer overflow vulnerability in the HID class driver allows a local, authorized attacker to escalate privileges on affected Windows systems.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105003

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-105004

CVE-2026-105004 is an out-of-bounds read vulnerability in the Windows Overlay Filter that enables a locally authenticated attacker to escalate their privileges. This vulnerability requires the attacker to have existing low-privileged access to the target system.

Affected products:

  • Windows Overlay Filter

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105004

Related in this roundup: CVE-2026-69942, CVE-2026-69947, CVE-2026-69952, CVE-2026-69953, CVE-2026-69954, CVE-2026-69958, CVE-2026-69967, CVE-2026-83727, CVE-2026-83749, CVE-2026-83879, CVE-2026-96315.

CVE-2026-105005

CVE-2026-105005 is a remote code execution vulnerability located in the Windows Schannel component. The vulnerability is caused by an out-of-bounds write flaw that allows an unauthorized, unauthenticated network-based attacker to execute arbitrary code on an affected Windows system.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105005

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-105006

The HID class driver in Microsoft Windows is vulnerable to a use-after-free condition that can be exploited by an unauthorized attacker to achieve privilege escalation via a physical attack vector.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105006

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105007, CVE-2026-97804, CVE-2026-97809.

CVE-2026-105007

CVE-2026-105007 is an elevation of privilege vulnerability in the Windows Network Driver Interface Specification (NDIS) component, specifically within ndis.sys. The vulnerability arises from an improper buffer length validation when copying memory, which an attacker with local access can exploit to execute arbitrary code with elevated privileges. Detection engineers should monitor for unauthorized attempts to interact with or exploit kernel-level drivers, particularly those involving memory buffer operations.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105007

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-97804, CVE-2026-97809.

CVE-2026-105008

CVE-2026-105008 is a spoofing vulnerability within the Windows Schannel component that allows an unauthorized, unauthenticated network-based attacker to perform spoofing attacks. Detection engineers should monitor for anomalous authentication patterns or TLS handshake irregularities originating from external sources.

Affected products:

  • Windows Schannel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105008

Related in this roundup: CVE-2026-85818.

CVE-2026-105009

CVE-2026-105009 is a privilege escalation vulnerability in Windows Server Update Service caused by incorrect default permissions, allowing an authenticated attacker to gain higher levels of access on the local host.

Affected products:

  • Windows Server Update Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105009

Related in this roundup: CVE-2026-81969, CVE-2026-83499.

CVE-2026-97798

CVE-2026-97798 is a local privilege escalation vulnerability in the Windows Error Reporting (WER) service caused by improper neutralization of argument delimiters, which can be exploited by an authorized attacker to execute arbitrary commands with higher privileges.

Affected products:

  • Windows Error Reporting

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97798

Related in this roundup: CVE-2026-83519, CVE-2026-83693, CVE-2026-83748, CVE-2026-97815, CVE-2026-69363, CVE-2026-70103, CVE-2026-69354, CVE-2026-69387, CVE-2026-83658, CVE-2026-83669, CVE-2026-83715, CVE-2026-83758, CVE-2026-83826, CVE-2026-83916, CVE-2026-85354, CVE-2026-85800, CVE-2026-83643, CVE-2026-83689, CVE-2026-83747, CVE-2026-83750, CVE-2026-83840.

CVE-2026-97799

CVE-2026-97799 describes a local privilege escalation vulnerability in the Windows Audio Service caused by improper verification of cryptographic signatures. An authorized local attacker can exploit this flaw to execute code or perform actions with elevated permissions.

Affected products:

  • Windows Audio Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97799

Related in this roundup: CVE-2026-70140, CVE-2026-70118, CVE-2026-83571, CVE-2026-83644, CVE-2026-96314, CVE-2026-70230.

CVE-2026-105013

CVE-2026-105013 is a remote code execution vulnerability in Microsoft SharePoint caused by the insecure deserialization of untrusted data. An authorized attacker can leverage this flaw to execute arbitrary code over a network, potentially compromising the integrity and availability of the SharePoint environment.

Affected products:

  • SharePoint

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105013

Related in this roundup: CVE-2026-102859, CVE-2026-102860, CVE-2026-102861, CVE-2026-102862, CVE-2026-102863, CVE-2026-102865, CVE-2026-102866, CVE-2026-105720, CVE-2026-69943, CVE-2026-70267, CVE-2026-70251, CVE-2026-70259, CVE-2026-70266, CVE-2026-70298, CVE-2026-85900, CVE-2026-88155, CVE-2026-88198, CVE-2026-88209, CVE-2026-88208, CVE-2026-97782, CVE-2026-97783, CVE-2026-70202, CVE-2026-70217, CVE-2026-70246, CVE-2026-85932, CVE-2026-88163, CVE-2026-88164, CVE-2026-88166, CVE-2026-88200, CVE-2026-88206, CVE-2026-96044.

CVE-2026-97803

A heap-based buffer overflow vulnerability in the Windows Kernel allows an authenticated local attacker to escalate their privileges. This vulnerability requires the attacker to already have access to the system to exploit the flaw.

Affected products:

  • Windows Kernel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97803

Related in this roundup: CVE-2026-108462, CVE-2026-108466, CVE-2026-70063, CVE-2026-70106, CVE-2026-70121, CVE-2026-70114, CVE-2026-83690, CVE-2026-83768, CVE-2026-83833, CVE-2026-85372, CVE-2026-85836, CVE-2026-85837, CVE-2026-70170, CVE-2026-85939, CVE-2026-85945, CVE-2026-96216, CVE-2026-96317, CVE-2026-96868, CVE-2026-70199, CVE-2026-70232, CVE-2026-83736, CVE-2026-83735, CVE-2026-83918, CVE-2026-83924, CVE-2026-83925, CVE-2026-88134, CVE-2026-88139, CVE-2026-88141, CVE-2026-70160, CVE-2026-70111, CVE-2026-96913, CVE-2026-96929, CVE-2026-102207, CVE-2026-103578.

CVE-2026-97804

A heap-based buffer overflow vulnerability in the HID class driver allows a local, authorized attacker to achieve privilege escalation on the affected system.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97804

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97809.

CVE-2026-97806

CVE-2026-97806 is a privilege escalation vulnerability in the Windows Broadcast DVR User Service caused by a use-after-free defect. An authorized attacker can exploit this locally to gain elevated privileges on the affected Windows system.

Affected products:

  • Windows Broadcast DVR User Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97806

Related in this roundup: CVE-2026-108461, CVE-2026-105722, CVE-2026-88103, CVE-2026-88105, CVE-2026-88113, CVE-2026-70122, CVE-2026-70148, CVE-2026-96919, CVE-2026-102193, CVE-2026-102195, CVE-2026-102196, CVE-2026-102197, CVE-2026-103554, CVE-2026-103565, CVE-2026-103567, CVE-2026-97807, CVE-2026-97808.

CVE-2026-97807

A use-after-free vulnerability exists in the Windows Broadcast DVR User Service, which can be exploited by an authorized local attacker to achieve privilege escalation.

Affected products:

  • Windows Broadcast DVR User Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97807

Related in this roundup: CVE-2026-108461, CVE-2026-105722, CVE-2026-88103, CVE-2026-88105, CVE-2026-88113, CVE-2026-70122, CVE-2026-70148, CVE-2026-96919, CVE-2026-102193, CVE-2026-102195, CVE-2026-102196, CVE-2026-102197, CVE-2026-103554, CVE-2026-103565, CVE-2026-103567, CVE-2026-97806, CVE-2026-97808.

CVE-2026-97808

CVE-2026-97808 describes a use-after-free vulnerability in the Windows Broadcast DVR User Service that enables an authorized local attacker to achieve privilege escalation. Detection engineers should monitor for abnormal activity or service crashes related to the Broadcast DVR User Service process, as these may indicate exploitation attempts.

Affected products:

  • Windows Broadcast DVR User Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97808

Related in this roundup: CVE-2026-108461, CVE-2026-105722, CVE-2026-88103, CVE-2026-88105, CVE-2026-88113, CVE-2026-70122, CVE-2026-70148, CVE-2026-96919, CVE-2026-102193, CVE-2026-102195, CVE-2026-102196, CVE-2026-102197, CVE-2026-103554, CVE-2026-103565, CVE-2026-103567, CVE-2026-97806, CVE-2026-97807.

CVE-2026-97809

CVE-2026-97809 describes a use-after-free vulnerability in the Windows Broadcast DVR User Service that allows an authorized local attacker to elevate their privileges to those of the service.

Affected products:

  • Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97809

Related in this roundup: CVE-2026-69705, CVE-2026-69883, CVE-2026-83770, CVE-2026-97814, CVE-2026-103569, CVE-2026-108130, CVE-2026-108132, CVE-2026-96951, CVE-2026-70235, CVE-2026-69898, CVE-2026-70566, CVE-2026-69763, CVE-2026-69795, CVE-2026-69840, CVE-2026-69850, CVE-2026-69913, CVE-2026-69950, CVE-2026-69959, CVE-2026-69964, CVE-2026-69973, CVE-2026-69978, CVE-2026-70010, CVE-2026-70021, CVE-2026-70026, CVE-2026-70059, CVE-2026-70060, CVE-2026-70076, CVE-2026-70077, CVE-2026-70090, CVE-2026-70097, CVE-2026-70095, CVE-2026-70108, CVE-2026-70117, CVE-2026-70115, CVE-2026-70176, CVE-2026-70195, CVE-2026-70223, CVE-2026-70249, CVE-2026-70253, CVE-2026-70252, CVE-2026-70271, CVE-2026-70273, CVE-2026-70274, CVE-2026-70284, CVE-2026-70285, CVE-2026-68836, CVE-2026-69521, CVE-2026-69644, CVE-2026-69721, CVE-2026-72955, CVE-2026-72969, CVE-2026-83515, CVE-2026-83521, CVE-2026-83584, CVE-2026-83649, CVE-2026-83652, CVE-2026-83675, CVE-2026-83678, CVE-2026-83705, CVE-2026-83706, CVE-2026-83707, CVE-2026-83712, CVE-2026-83738, CVE-2026-83761, CVE-2026-83796, CVE-2026-83832, CVE-2026-83838, CVE-2026-83842, CVE-2026-83852, CVE-2026-83854, CVE-2026-83855, CVE-2026-83864, CVE-2026-83865, CVE-2026-83875, CVE-2026-83876, CVE-2026-83866, CVE-2026-83882, CVE-2026-83901, CVE-2026-83902, CVE-2026-83885, CVE-2026-83892, CVE-2026-83893, CVE-2026-83896, CVE-2026-70089, CVE-2026-70151, CVE-2026-83909, CVE-2026-70241, CVE-2026-70243, CVE-2026-70286, CVE-2026-83912, CVE-2026-83917, CVE-2026-83922, CVE-2026-83932, CVE-2026-83929, CVE-2026-84014, CVE-2026-84016, CVE-2026-85332, CVE-2026-85341, CVE-2026-85367, CVE-2026-85370, CVE-2026-85793, CVE-2026-85797, CVE-2026-85802, CVE-2026-85803, CVE-2026-85804, CVE-2026-85815, CVE-2026-85816, CVE-2026-85822, CVE-2026-85826, CVE-2026-85827, CVE-2026-85828, CVE-2026-85829, CVE-2026-85850, CVE-2026-85853, CVE-2026-85854, CVE-2026-85863, CVE-2026-85915, CVE-2026-88158, CVE-2026-88161, CVE-2026-70041, CVE-2026-70048, CVE-2026-70164, CVE-2026-70303, CVE-2026-83888, CVE-2026-85926, CVE-2026-85935, CVE-2026-85938, CVE-2026-85936, CVE-2026-87712, CVE-2026-87713, CVE-2026-88070, CVE-2026-88100, CVE-2026-88106, CVE-2026-88136, CVE-2026-88137, CVE-2026-88143, CVE-2026-70038, CVE-2026-70031, CVE-2026-70013, CVE-2026-70134, CVE-2026-70102, CVE-2026-70068, CVE-2026-70149, CVE-2026-96217, CVE-2026-96220, CVE-2026-96312, CVE-2026-96862, CVE-2026-96860, CVE-2026-96865, CVE-2026-96928, CVE-2026-96935, CVE-2026-62879, CVE-2026-70055, CVE-2026-70067, CVE-2026-70072, CVE-2026-70075, CVE-2026-70144, CVE-2026-70211, CVE-2026-70208, CVE-2026-70209, CVE-2026-70236, CVE-2026-70237, CVE-2026-70288, CVE-2026-70292, CVE-2026-70293, CVE-2026-70294, CVE-2026-70295, CVE-2026-69640, CVE-2026-83508, CVE-2026-83566, CVE-2026-83567, CVE-2026-83582, CVE-2026-83585, CVE-2026-83638, CVE-2026-83640, CVE-2026-83651, CVE-2026-83670, CVE-2026-83682, CVE-2026-83685, CVE-2026-83698, CVE-2026-83709, CVE-2026-83714, CVE-2026-83720, CVE-2026-83721, CVE-2026-83732, CVE-2026-83737, CVE-2026-83755, CVE-2026-83757, CVE-2026-83762, CVE-2026-83763, CVE-2026-83773, CVE-2026-83774, CVE-2026-83786, CVE-2026-83788, CVE-2026-83859, CVE-2026-83860, CVE-2026-83874, CVE-2026-83883, CVE-2026-83884, CVE-2026-83895, CVE-2026-83877, CVE-2026-83873, CVE-2026-83897, CVE-2026-83900, CVE-2026-85901, CVE-2026-85902, CVE-2026-85906, CVE-2026-85908, CVE-2026-85910, CVE-2026-85911, CVE-2026-83913, CVE-2026-85912, CVE-2026-87699, CVE-2026-88126, CVE-2026-88128, CVE-2026-88177, CVE-2026-88179, CVE-2026-88180, CVE-2026-88181, CVE-2026-88188, CVE-2026-69884, CVE-2026-69902, CVE-2026-69915, CVE-2026-70054, CVE-2026-70112, CVE-2026-70227, CVE-2026-96249, CVE-2026-96250, CVE-2026-96254, CVE-2026-96253, CVE-2026-96304, CVE-2026-96846, CVE-2026-96843, CVE-2026-96853, CVE-2026-96916, CVE-2026-96912, CVE-2026-96925, CVE-2026-96924, CVE-2026-96927, CVE-2026-85866, CVE-2026-96948, CVE-2026-88219, CVE-2026-100225, CVE-2026-102187, CVE-2026-102191, CVE-2026-102194, CVE-2026-102203, CVE-2026-102208, CVE-2026-102211, CVE-2026-102221, CVE-2026-102220, CVE-2026-102225, CVE-2026-109453, CVE-2026-103555, CVE-2026-105003, CVE-2026-105005, CVE-2026-105006, CVE-2026-105007, CVE-2026-97804.

CVE-2026-97810

A heap-based buffer overflow vulnerability exists in the Windows Container Isolation FS Filter Driver (unionfs.sys) that can be exploited by an authenticated attacker to perform local privilege escalation on affected Windows systems.

Affected products:

  • Windows Container Isolation FS Filter Driver

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97810

Related in this roundup: CVE-2026-97794, CVE-2026-97790, CVE-2026-97792, CVE-2026-102202.

CVE-2026-97811

A double-free vulnerability exists in Microsoft OpenSSH for Windows that allows an authenticated local attacker to perform privilege escalation. Detection engineers should monitor for suspicious process execution patterns originating from OpenSSH service sessions.

Affected products:

  • OpenSSH for Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97811

Related in this roundup: CVE-2026-97816, CVE-2026-83754, CVE-2026-70163, CVE-2026-83769, CVE-2026-83871, CVE-2026-88157, CVE-2026-83923.

CVE-2026-97812

A double-free vulnerability exists in the Windows Update Orchestrator Service, which can be exploited by an authorized local attacker to achieve privilege escalation.

Affected products:

  • Windows Update Orchestrator Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97812

Related in this roundup: CVE-2026-81964, CVE-2026-83793, CVE-2026-83886, CVE-2026-83507, CVE-2026-83930, CVE-2026-83933.

CVE-2026-97813

CVE-2026-97813 describes a heap-based buffer overflow vulnerability in Windows Hyper-V, which can be exploited by an authorized attacker to achieve unauthorized information disclosure over a network.

Affected products:

  • Hyper-V

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97813

Related in this roundup: CVE-2026-108399, CVE-2026-83671, CVE-2026-83839, CVE-2026-70248, CVE-2026-85343, CVE-2026-88071, CVE-2026-83636, CVE-2026-83716, CVE-2026-83728, CVE-2026-83766, CVE-2026-83931, CVE-2026-87705, CVE-2026-70023, CVE-2026-102214.

CVE-2026-97817

CVE-2026-97817 is a heap-based buffer overflow vulnerability in the Microsoft DNS Server role. An authorized attacker can exploit this flaw to disclose sensitive information over the network.

Affected products:

  • DNS Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97817

Related in this roundup: CVE-2026-70085, CVE-2026-70083, CVE-2026-70087, CVE-2026-83635, CVE-2026-70071, CVE-2026-88123, CVE-2026-88125, CVE-2026-88129, CVE-2026-88130, CVE-2026-96926, CVE-2026-103560, CVE-2026-97819, CVE-2026-97820, CVE-2026-97821, CVE-2026-97822, CVE-2026-97823, CVE-2026-97824, CVE-2026-97825, CVE-2026-97827, CVE-2026-97829, CVE-2026-97831, CVE-2026-97836, CVE-2026-97841, CVE-2026-97842, CVE-2026-97843, CVE-2026-97844, CVE-2026-108127, CVE-2026-108128.

CVE-2026-97819

CVE-2026-97819 is an out-of-bounds read vulnerability in the Microsoft DNS Server component that allows an authorized attacker to perform unauthorized information disclosure over a network connection.

Affected products:

  • DNS Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97819

Related in this roundup: CVE-2026-70085, CVE-2026-70083, CVE-2026-70087, CVE-2026-83635, CVE-2026-70071, CVE-2026-88123, CVE-2026-88125, CVE-2026-88129, CVE-2026-88130, CVE-2026-96926, CVE-2026-103560, CVE-2026-97817, CVE-2026-97820, CVE-2026-97821, CVE-2026-97822, CVE-2026-97823, CVE-2026-97824, CVE-2026-97825, CVE-2026-97827, CVE-2026-97829, CVE-2026-97831, CVE-2026-97836, CVE-2026-97841, CVE-2026-97842, CVE-2026-97843, CVE-2026-97844, CVE-2026-108127, CVE-2026-108128.

CVE-2026-97820

A vulnerability in the Windows DNS Server component allows an authorized attacker to perform an out-of-bounds read, resulting in the disclosure of sensitive information over the network.

Affected products:

  • DNS Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97820

Related in this roundup: CVE-2026-70085, CVE-2026-70083, CVE-2026-70087, CVE-2026-83635, CVE-2026-70071, CVE-2026-88123, CVE-2026-88125, CVE-2026-88129, CVE-2026-88130, CVE-2026-96926, CVE-2026-103560, CVE-2026-97817, CVE-2026-97819, CVE-2026-97821, CVE-2026-97822, CVE-2026-97823, CVE-2026-97824, CVE-2026-97825, CVE-2026-97827, CVE-2026-97829, CVE-2026-97831, CVE-2026-97836, CVE-2026-97841, CVE-2026-97842, CVE-2026-97843, CVE-2026-97844, CVE-2026-108127, CVE-2026-108128.

CVE-2026-97821

CVE-2026-97821 is an out-of-bounds read vulnerability in the Microsoft DNS Server component that allows an authorized attacker to perform unauthorized information disclosure over a network.

Affected products:

  • DNS Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97821

Related in this roundup: CVE-2026-70085, CVE-2026-70083, CVE-2026-70087, CVE-2026-83635, CVE-2026-70071, CVE-2026-88123, CVE-2026-88125, CVE-2026-88129, CVE-2026-88130, CVE-2026-96926, CVE-2026-103560, CVE-2026-97817, CVE-2026-97819, CVE-2026-97820, CVE-2026-97822, CVE-2026-97823, CVE-2026-97824, CVE-2026-97825, CVE-2026-97827, CVE-2026-97829, CVE-2026-97831, CVE-2026-97836, CVE-2026-97841, CVE-2026-97842, CVE-2026-97843, CVE-2026-97844, CVE-2026-108127, CVE-2026-108128.

CVE-2026-97822

CVE-2026-97822 is an information disclosure vulnerability in the Microsoft DNS Server component resulting from an out-of-bounds read. An authorized attacker on the network can leverage this flaw to access sensitive information, potentially impacting system confidentiality.

Affected products:

  • DNS Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97822

Related in this roundup: CVE-2026-70085, CVE-2026-70083, CVE-2026-70087, CVE-2026-83635, CVE-2026-70071, CVE-2026-88123, CVE-2026-88125, CVE-2026-88129, CVE-2026-88130, CVE-2026-96926, CVE-2026-103560, CVE-2026-97817, CVE-2026-97819, CVE-2026-97820, CVE-2026-97821, CVE-2026-97823, CVE-2026-97824, CVE-2026-97825, CVE-2026-97827, CVE-2026-97829, CVE-2026-97831, CVE-2026-97836, CVE-2026-97841, CVE-2026-97842, CVE-2026-97843, CVE-2026-97844, CVE-2026-108127, CVE-2026-108128.

CVE-2026-97823

CVE-2026-97823 is an out-of-bounds read vulnerability in the Microsoft DNS Server component that allows an authorized attacker to perform unauthorized information disclosure over the network.

Affected products:

  • DNS Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97823

Related in this roundup: CVE-2026-70085, CVE-2026-70083, CVE-2026-70087, CVE-2026-83635, CVE-2026-70071, CVE-2026-88123, CVE-2026-88125, CVE-2026-88129, CVE-2026-88130, CVE-2026-96926, CVE-2026-103560, CVE-2026-97817, CVE-2026-97819, CVE-2026-97820, CVE-2026-97821, CVE-2026-97822, CVE-2026-97824, CVE-2026-97825, CVE-2026-97827, CVE-2026-97829, CVE-2026-97831, CVE-2026-97836, CVE-2026-97841, CVE-2026-97842, CVE-2026-97843, CVE-2026-97844, CVE-2026-108127, CVE-2026-108128.

CVE-2026-97824

CVE-2026-97824 is an out-of-bounds read vulnerability in the Windows DNS Server component that allows an authenticated attacker to perform unauthorized information disclosure over the network.

Affected products:

  • DNS Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97824

Related in this roundup: CVE-2026-70085, CVE-2026-70083, CVE-2026-70087, CVE-2026-83635, CVE-2026-70071, CVE-2026-88123, CVE-2026-88125, CVE-2026-88129, CVE-2026-88130, CVE-2026-96926, CVE-2026-103560, CVE-2026-97817, CVE-2026-97819, CVE-2026-97820, CVE-2026-97821, CVE-2026-97822, CVE-2026-97823, CVE-2026-97825, CVE-2026-97827, CVE-2026-97829, CVE-2026-97831, CVE-2026-97836, CVE-2026-97841, CVE-2026-97842, CVE-2026-97843, CVE-2026-97844, CVE-2026-108127, CVE-2026-108128.

CVE-2026-97825

CVE-2026-97825 is an out-of-bounds read vulnerability in the Windows DNS Server component that allows an authorized attacker to perform unauthorized information disclosure over the network.

Affected products:

  • DNS Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97825

Related in this roundup: CVE-2026-70085, CVE-2026-70083, CVE-2026-70087, CVE-2026-83635, CVE-2026-70071, CVE-2026-88123, CVE-2026-88125, CVE-2026-88129, CVE-2026-88130, CVE-2026-96926, CVE-2026-103560, CVE-2026-97817, CVE-2026-97819, CVE-2026-97820, CVE-2026-97821, CVE-2026-97822, CVE-2026-97823, CVE-2026-97824, CVE-2026-97827, CVE-2026-97829, CVE-2026-97831, CVE-2026-97836, CVE-2026-97841, CVE-2026-97842, CVE-2026-97843, CVE-2026-97844, CVE-2026-108127, CVE-2026-108128.

CVE-2026-97826

CVE-2026-97826 is an out-of-bounds read vulnerability in the Windows DNS Server component that allows an authorized attacker to perform unauthorized information disclosure over the network.

Affected products:

  • Windows DNS Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97826

Related in this roundup: CVE-2026-70244, CVE-2026-83889, CVE-2026-97828, CVE-2026-97832, CVE-2026-97833, CVE-2026-97834, CVE-2026-97838, CVE-2026-97840.

CVE-2026-97827

CVE-2026-97827 is an out-of-bounds read vulnerability in the Windows DNS Server component. An authorized attacker can exploit this flaw to perform unauthorized information disclosure over the network, potentially exposing sensitive memory contents.

Affected products:

  • DNS Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97827

Related in this roundup: CVE-2026-70085, CVE-2026-70083, CVE-2026-70087, CVE-2026-83635, CVE-2026-70071, CVE-2026-88123, CVE-2026-88125, CVE-2026-88129, CVE-2026-88130, CVE-2026-96926, CVE-2026-103560, CVE-2026-97817, CVE-2026-97819, CVE-2026-97820, CVE-2026-97821, CVE-2026-97822, CVE-2026-97823, CVE-2026-97824, CVE-2026-97825, CVE-2026-97829, CVE-2026-97831, CVE-2026-97836, CVE-2026-97841, CVE-2026-97842, CVE-2026-97843, CVE-2026-97844, CVE-2026-108127, CVE-2026-108128.

CVE-2026-97828

CVE-2026-97828 is a buffer over-read vulnerability in the Microsoft Windows DNS Server that allows an authorized attacker to perform information disclosure via network traffic.

Affected products:

  • Windows DNS Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97828

Related in this roundup: CVE-2026-70244, CVE-2026-83889, CVE-2026-97826, CVE-2026-97832, CVE-2026-97833, CVE-2026-97834, CVE-2026-97838, CVE-2026-97840.

CVE-2026-97829

CVE-2026-97829 is an out-of-bounds read vulnerability in the Windows DNS Server component. An authorized attacker can exploit this flaw over the network to perform unauthorized information disclosure.

Affected products:

  • DNS Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97829

Related in this roundup: CVE-2026-70085, CVE-2026-70083, CVE-2026-70087, CVE-2026-83635, CVE-2026-70071, CVE-2026-88123, CVE-2026-88125, CVE-2026-88129, CVE-2026-88130, CVE-2026-96926, CVE-2026-103560, CVE-2026-97817, CVE-2026-97819, CVE-2026-97820, CVE-2026-97821, CVE-2026-97822, CVE-2026-97823, CVE-2026-97824, CVE-2026-97825, CVE-2026-97827, CVE-2026-97831, CVE-2026-97836, CVE-2026-97841, CVE-2026-97842, CVE-2026-97843, CVE-2026-97844, CVE-2026-108127, CVE-2026-108128.

CVE-2026-97831

CVE-2026-97831 is an out-of-bounds read vulnerability in the Microsoft DNS Server component. An authorized attacker can exploit this flaw to perform unauthorized information disclosure over the network.

Affected products:

  • DNS Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97831

Related in this roundup: CVE-2026-70085, CVE-2026-70083, CVE-2026-70087, CVE-2026-83635, CVE-2026-70071, CVE-2026-88123, CVE-2026-88125, CVE-2026-88129, CVE-2026-88130, CVE-2026-96926, CVE-2026-103560, CVE-2026-97817, CVE-2026-97819, CVE-2026-97820, CVE-2026-97821, CVE-2026-97822, CVE-2026-97823, CVE-2026-97824, CVE-2026-97825, CVE-2026-97827, CVE-2026-97829, CVE-2026-97836, CVE-2026-97841, CVE-2026-97842, CVE-2026-97843, CVE-2026-97844, CVE-2026-108127, CVE-2026-108128.

CVE-2026-97832

An out-of-bounds read vulnerability exists in the Microsoft DNS Server component, which can be exploited by an authorized attacker to disclose sensitive information over the network.

Affected products:

  • Windows DNS Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97832

Related in this roundup: CVE-2026-70244, CVE-2026-83889, CVE-2026-97826, CVE-2026-97828, CVE-2026-97833, CVE-2026-97834, CVE-2026-97838, CVE-2026-97840.

CVE-2026-97833

CVE-2026-97833 describes an out-of-bounds read vulnerability in the Windows DNS Server component. This flaw allows an authenticated attacker to perform unauthorized information disclosure over the network, potentially leading to the leakage of sensitive data residing in memory.

Affected products:

  • Windows DNS Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97833

Related in this roundup: CVE-2026-70244, CVE-2026-83889, CVE-2026-97826, CVE-2026-97828, CVE-2026-97832, CVE-2026-97834, CVE-2026-97838, CVE-2026-97840.

CVE-2026-97834

CVE-2026-97834 is an out-of-bounds read vulnerability in the Microsoft DNS Server role. An authorized attacker can exploit this flaw to perform unauthorized information disclosure over the network.

Affected products:

  • Windows DNS Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97834

Related in this roundup: CVE-2026-70244, CVE-2026-83889, CVE-2026-97826, CVE-2026-97828, CVE-2026-97832, CVE-2026-97833, CVE-2026-97838, CVE-2026-97840.

CVE-2026-97835

CVE-2026-97835 is an out-of-bounds read vulnerability in the Windows DNS Server component that allows an authorized attacker to perform unauthorized information disclosure over the network.

Affected products:

  • Windows Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97835

Related in this roundup: CVE-2026-96113, CVE-2026-88115, CVE-2026-88122, CVE-2026-97837, CVE-2026-97839.

CVE-2026-97836

CVE-2026-97836 is an out-of-bounds read vulnerability in the Windows DNS Server component. A successfully authenticated attacker can exploit this flaw to read sensitive memory content, leading to information disclosure over the network.

Affected products:

  • DNS Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97836

Related in this roundup: CVE-2026-70085, CVE-2026-70083, CVE-2026-70087, CVE-2026-83635, CVE-2026-70071, CVE-2026-88123, CVE-2026-88125, CVE-2026-88129, CVE-2026-88130, CVE-2026-96926, CVE-2026-103560, CVE-2026-97817, CVE-2026-97819, CVE-2026-97820, CVE-2026-97821, CVE-2026-97822, CVE-2026-97823, CVE-2026-97824, CVE-2026-97825, CVE-2026-97827, CVE-2026-97829, CVE-2026-97831, CVE-2026-97841, CVE-2026-97842, CVE-2026-97843, CVE-2026-97844, CVE-2026-108127, CVE-2026-108128.

CVE-2026-97837

CVE-2026-97837 describes an out-of-bounds read vulnerability in the Windows DNS Server component that enables an authorized network-based attacker to perform information disclosure.

Affected products:

  • Windows Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97837

Related in this roundup: CVE-2026-96113, CVE-2026-88115, CVE-2026-88122, CVE-2026-97835, CVE-2026-97839.

CVE-2026-97838

CVE-2026-97838 is an out-of-bounds read vulnerability in the Microsoft Windows DNS Server component. An authenticated attacker can exploit this flaw to perform unauthorized information disclosure over the network.

Affected products:

  • Windows DNS Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97838

Related in this roundup: CVE-2026-70244, CVE-2026-83889, CVE-2026-97826, CVE-2026-97828, CVE-2026-97832, CVE-2026-97833, CVE-2026-97834, CVE-2026-97840.

CVE-2026-97839

CVE-2026-97839 is an out-of-bounds read vulnerability in the Windows DNS Server component that allows an authorized attacker to perform unauthorized information disclosure over the network.

Affected products:

  • Windows Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97839

Related in this roundup: CVE-2026-96113, CVE-2026-88115, CVE-2026-88122, CVE-2026-97835, CVE-2026-97837.

CVE-2026-97840

CVE-2026-97840 is an out-of-bounds read vulnerability in the Windows DNS Server component. An authorized attacker can exploit this flaw to perform information disclosure over a network.

Affected products:

  • Windows DNS Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97840

Related in this roundup: CVE-2026-70244, CVE-2026-83889, CVE-2026-97826, CVE-2026-97828, CVE-2026-97832, CVE-2026-97833, CVE-2026-97834, CVE-2026-97838.

CVE-2026-97841

CVE-2026-97841 is an out-of-bounds read vulnerability in the Windows DNS Server component that allows an authorized attacker to perform unauthorized information disclosure over the network.

Affected products:

  • DNS Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97841

Related in this roundup: CVE-2026-70085, CVE-2026-70083, CVE-2026-70087, CVE-2026-83635, CVE-2026-70071, CVE-2026-88123, CVE-2026-88125, CVE-2026-88129, CVE-2026-88130, CVE-2026-96926, CVE-2026-103560, CVE-2026-97817, CVE-2026-97819, CVE-2026-97820, CVE-2026-97821, CVE-2026-97822, CVE-2026-97823, CVE-2026-97824, CVE-2026-97825, CVE-2026-97827, CVE-2026-97829, CVE-2026-97831, CVE-2026-97836, CVE-2026-97842, CVE-2026-97843, CVE-2026-97844, CVE-2026-108127, CVE-2026-108128.

CVE-2026-97842

CVE-2026-97842 is an out-of-bounds read vulnerability in the Windows DNS Server component. The vulnerability allows an authorized attacker to remotely disclose sensitive information by exploiting the way the DNS Server processes network requests.

Affected products:

  • DNS Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97842

Related in this roundup: CVE-2026-70085, CVE-2026-70083, CVE-2026-70087, CVE-2026-83635, CVE-2026-70071, CVE-2026-88123, CVE-2026-88125, CVE-2026-88129, CVE-2026-88130, CVE-2026-96926, CVE-2026-103560, CVE-2026-97817, CVE-2026-97819, CVE-2026-97820, CVE-2026-97821, CVE-2026-97822, CVE-2026-97823, CVE-2026-97824, CVE-2026-97825, CVE-2026-97827, CVE-2026-97829, CVE-2026-97831, CVE-2026-97836, CVE-2026-97841, CVE-2026-97843, CVE-2026-97844, CVE-2026-108127, CVE-2026-108128.

CVE-2026-97843

An out-of-bounds read vulnerability exists in the Microsoft DNS Server component that allows an authorized attacker to perform information disclosure over a network. The vulnerability requires the attacker to have existing authorization to interact with the service to successfully exploit the flaw.

Affected products:

  • DNS Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97843

Related in this roundup: CVE-2026-70085, CVE-2026-70083, CVE-2026-70087, CVE-2026-83635, CVE-2026-70071, CVE-2026-88123, CVE-2026-88125, CVE-2026-88129, CVE-2026-88130, CVE-2026-96926, CVE-2026-103560, CVE-2026-97817, CVE-2026-97819, CVE-2026-97820, CVE-2026-97821, CVE-2026-97822, CVE-2026-97823, CVE-2026-97824, CVE-2026-97825, CVE-2026-97827, CVE-2026-97829, CVE-2026-97831, CVE-2026-97836, CVE-2026-97841, CVE-2026-97842, CVE-2026-97844, CVE-2026-108127, CVE-2026-108128.

CVE-2026-97844

CVE-2026-97844 is an out-of-bounds read vulnerability in the Windows DNS Server component that enables an authenticated attacker to perform unauthorized information disclosure over the network. Detection should focus on monitoring anomalous DNS service traffic patterns and access logs indicating unexpected read operations on memory segments associated with DNS service processes.

Affected products:

  • DNS Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97844

Related in this roundup: CVE-2026-70085, CVE-2026-70083, CVE-2026-70087, CVE-2026-83635, CVE-2026-70071, CVE-2026-88123, CVE-2026-88125, CVE-2026-88129, CVE-2026-88130, CVE-2026-96926, CVE-2026-103560, CVE-2026-97817, CVE-2026-97819, CVE-2026-97820, CVE-2026-97821, CVE-2026-97822, CVE-2026-97823, CVE-2026-97824, CVE-2026-97825, CVE-2026-97827, CVE-2026-97829, CVE-2026-97831, CVE-2026-97836, CVE-2026-97841, CVE-2026-97842, CVE-2026-97843, CVE-2026-108127, CVE-2026-108128.

CVE-2026-108127

CVE-2026-108127 is an out-of-bounds read vulnerability in the Windows DNS Server component. An authorized attacker could exploit this vulnerability to disclose sensitive memory information over the network.

Affected products:

  • DNS Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108127

Related in this roundup: CVE-2026-70085, CVE-2026-70083, CVE-2026-70087, CVE-2026-83635, CVE-2026-70071, CVE-2026-88123, CVE-2026-88125, CVE-2026-88129, CVE-2026-88130, CVE-2026-96926, CVE-2026-103560, CVE-2026-97817, CVE-2026-97819, CVE-2026-97820, CVE-2026-97821, CVE-2026-97822, CVE-2026-97823, CVE-2026-97824, CVE-2026-97825, CVE-2026-97827, CVE-2026-97829, CVE-2026-97831, CVE-2026-97836, CVE-2026-97841, CVE-2026-97842, CVE-2026-97843, CVE-2026-97844, CVE-2026-108128.

CVE-2026-108128

CVE-2026-108128 is an out-of-bounds read vulnerability in the Windows DNS Server component that allows an authorized attacker to perform information disclosure via network requests.

Affected products:

  • DNS Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108128

Related in this roundup: CVE-2026-70085, CVE-2026-70083, CVE-2026-70087, CVE-2026-83635, CVE-2026-70071, CVE-2026-88123, CVE-2026-88125, CVE-2026-88129, CVE-2026-88130, CVE-2026-96926, CVE-2026-103560, CVE-2026-97817, CVE-2026-97819, CVE-2026-97820, CVE-2026-97821, CVE-2026-97822, CVE-2026-97823, CVE-2026-97824, CVE-2026-97825, CVE-2026-97827, CVE-2026-97829, CVE-2026-97831, CVE-2026-97836, CVE-2026-97841, CVE-2026-97842, CVE-2026-97843, CVE-2026-97844, CVE-2026-108127.

CVE-2026-108129

CVE-2026-108129 is an out-of-bounds read vulnerability in the Microsoft DNS Server component that allows an authorized attacker to perform information disclosure over the network.

Affected products:

  • Windows Server DNS Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108129

CVE-2026-108131

CVE-2026-108131 describes a spoofing vulnerability in Microsoft Active Directory Federation Services (AD FS) that allows an unauthorized network-based attacker to conduct spoofing attacks. Detection engineers should monitor AD FS authentication traffic for anomalous requests or unauthorized identity assertions originating from the network.

Affected products:

  • Active Directory Federation Services

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108131

Related in this roundup: CVE-2026-83646, CVE-2026-85319, CVE-2026-85321, CVE-2026-85324, CVE-2026-83674, CVE-2026-69982, CVE-2026-70005, CVE-2026-83511, CVE-2026-83645, CVE-2026-96252, CVE-2026-97788, CVE-2026-103576.

CVE-2026-97781

Microsoft Office OneNote is vulnerable to a remote code execution vulnerability caused by improper neutralization of special elements in a command, allowing an attacker to execute arbitrary code over a network.

Affected products:

  • OneNote

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97781

Related in this roundup: CVE-2026-96997.

CVE-2026-108426

CVE-2026-108426 is a heap-based buffer overflow vulnerability in Microsoft Office Word that allows an unauthenticated remote attacker to execute arbitrary code via a malicious file or network interaction. This vulnerability can be leveraged as an entry point for code execution on affected client systems.

Affected products:

  • Office Word

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-108426

Related in this roundup: CVE-2026-70300, CVE-2026-105715, CVE-2026-70268, CVE-2026-70220, CVE-2026-70206, CVE-2026-70269, CVE-2026-70263, CVE-2026-70287, CVE-2026-70302, CVE-2026-70301, CVE-2026-83891, CVE-2026-88167, CVE-2026-88169, CVE-2026-88202, CVE-2026-96995, CVE-2026-97001, CVE-2026-88185, CVE-2026-88186, CVE-2026-108427, CVE-2026-108428, CVE-2026-108429, CVE-2026-108430, CVE-2026-108431, CVE-2026-108432, CVE-2026-108433, CVE-2026-108437, CVE-2026-108439, CVE-2026-108440, CVE-2026-108441, CVE-2026-108443, CVE-2026-108445, CVE-2026-108447, CVE-2026-108449, CVE-2026-108450, CVE-2026-108451.

CVE-2026-108427

CVE-2026-108427 is a heap-based buffer overflow vulnerability in Microsoft Office Word that enables an unauthorized remote attacker to execute arbitrary code. The vulnerability is exploitable over a network, presenting a significant risk to systems running the affected software.

Affected products:

  • Office Word

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-108427

Related in this roundup: CVE-2026-70300, CVE-2026-105715, CVE-2026-70268, CVE-2026-70220, CVE-2026-70206, CVE-2026-70269, CVE-2026-70263, CVE-2026-70287, CVE-2026-70302, CVE-2026-70301, CVE-2026-83891, CVE-2026-88167, CVE-2026-88169, CVE-2026-88202, CVE-2026-96995, CVE-2026-97001, CVE-2026-88185, CVE-2026-88186, CVE-2026-108426, CVE-2026-108428, CVE-2026-108429, CVE-2026-108430, CVE-2026-108431, CVE-2026-108432, CVE-2026-108433, CVE-2026-108437, CVE-2026-108439, CVE-2026-108440, CVE-2026-108441, CVE-2026-108443, CVE-2026-108445, CVE-2026-108447, CVE-2026-108449, CVE-2026-108450, CVE-2026-108451.

CVE-2026-108428

CVE-2026-108428 describes a heap-based buffer overflow vulnerability in Microsoft Office Word that can be exploited by an unauthorized attacker over a network to achieve remote code execution. Detection engineering teams should monitor for anomalous execution patterns or child processes originating from winword.exe that deviate from standard document processing behavior.

Affected products:

  • Office Word

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-108428

Related in this roundup: CVE-2026-70300, CVE-2026-105715, CVE-2026-70268, CVE-2026-70220, CVE-2026-70206, CVE-2026-70269, CVE-2026-70263, CVE-2026-70287, CVE-2026-70302, CVE-2026-70301, CVE-2026-83891, CVE-2026-88167, CVE-2026-88169, CVE-2026-88202, CVE-2026-96995, CVE-2026-97001, CVE-2026-88185, CVE-2026-88186, CVE-2026-108426, CVE-2026-108427, CVE-2026-108429, CVE-2026-108430, CVE-2026-108431, CVE-2026-108432, CVE-2026-108433, CVE-2026-108437, CVE-2026-108439, CVE-2026-108440, CVE-2026-108441, CVE-2026-108443, CVE-2026-108445, CVE-2026-108447, CVE-2026-108449, CVE-2026-108450, CVE-2026-108451.

CVE-2026-108429

CVE-2026-108429 is a heap-based buffer overflow vulnerability in Microsoft Office Word that allows an unauthorized remote attacker to execute arbitrary code. The vulnerability can be triggered over a network, presenting a significant risk for remote code execution.

Affected products:

  • Office Word

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-108429

Related in this roundup: CVE-2026-70300, CVE-2026-105715, CVE-2026-70268, CVE-2026-70220, CVE-2026-70206, CVE-2026-70269, CVE-2026-70263, CVE-2026-70287, CVE-2026-70302, CVE-2026-70301, CVE-2026-83891, CVE-2026-88167, CVE-2026-88169, CVE-2026-88202, CVE-2026-96995, CVE-2026-97001, CVE-2026-88185, CVE-2026-88186, CVE-2026-108426, CVE-2026-108427, CVE-2026-108428, CVE-2026-108430, CVE-2026-108431, CVE-2026-108432, CVE-2026-108433, CVE-2026-108437, CVE-2026-108439, CVE-2026-108440, CVE-2026-108441, CVE-2026-108443, CVE-2026-108445, CVE-2026-108447, CVE-2026-108449, CVE-2026-108450, CVE-2026-108451.

CVE-2026-108430

CVE-2026-108430 is a heap-based buffer overflow vulnerability in Microsoft Office Word that enables an unauthenticated attacker to achieve remote code execution over a network. The vulnerability requires processing of a maliciously crafted file, typically delivered via network-based vectors.

Affected products:

  • Office Word

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-108430

Related in this roundup: CVE-2026-70300, CVE-2026-105715, CVE-2026-70268, CVE-2026-70220, CVE-2026-70206, CVE-2026-70269, CVE-2026-70263, CVE-2026-70287, CVE-2026-70302, CVE-2026-70301, CVE-2026-83891, CVE-2026-88167, CVE-2026-88169, CVE-2026-88202, CVE-2026-96995, CVE-2026-97001, CVE-2026-88185, CVE-2026-88186, CVE-2026-108426, CVE-2026-108427, CVE-2026-108428, CVE-2026-108429, CVE-2026-108431, CVE-2026-108432, CVE-2026-108433, CVE-2026-108437, CVE-2026-108439, CVE-2026-108440, CVE-2026-108441, CVE-2026-108443, CVE-2026-108445, CVE-2026-108447, CVE-2026-108449, CVE-2026-108450, CVE-2026-108451.

CVE-2026-108431

A stack-based buffer overflow vulnerability in Microsoft Office Word allows a remote, unauthorized attacker to achieve arbitrary code execution via a specially crafted document or network-based vector.

Affected products:

  • Office Word

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-108431

Related in this roundup: CVE-2026-70300, CVE-2026-105715, CVE-2026-70268, CVE-2026-70220, CVE-2026-70206, CVE-2026-70269, CVE-2026-70263, CVE-2026-70287, CVE-2026-70302, CVE-2026-70301, CVE-2026-83891, CVE-2026-88167, CVE-2026-88169, CVE-2026-88202, CVE-2026-96995, CVE-2026-97001, CVE-2026-88185, CVE-2026-88186, CVE-2026-108426, CVE-2026-108427, CVE-2026-108428, CVE-2026-108429, CVE-2026-108430, CVE-2026-108432, CVE-2026-108433, CVE-2026-108437, CVE-2026-108439, CVE-2026-108440, CVE-2026-108441, CVE-2026-108443, CVE-2026-108445, CVE-2026-108447, CVE-2026-108449, CVE-2026-108450, CVE-2026-108451.

CVE-2026-108432

CVE-2026-108432 is a heap-based buffer overflow vulnerability in Microsoft Office Word that enables a remote, unauthorized attacker to achieve arbitrary code execution via a specially crafted document.

Affected products:

  • Office Word

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-108432

Related in this roundup: CVE-2026-70300, CVE-2026-105715, CVE-2026-70268, CVE-2026-70220, CVE-2026-70206, CVE-2026-70269, CVE-2026-70263, CVE-2026-70287, CVE-2026-70302, CVE-2026-70301, CVE-2026-83891, CVE-2026-88167, CVE-2026-88169, CVE-2026-88202, CVE-2026-96995, CVE-2026-97001, CVE-2026-88185, CVE-2026-88186, CVE-2026-108426, CVE-2026-108427, CVE-2026-108428, CVE-2026-108429, CVE-2026-108430, CVE-2026-108431, CVE-2026-108433, CVE-2026-108437, CVE-2026-108439, CVE-2026-108440, CVE-2026-108441, CVE-2026-108443, CVE-2026-108445, CVE-2026-108447, CVE-2026-108449, CVE-2026-108450, CVE-2026-108451.

CVE-2026-108433

CVE-2026-108433 is a security feature bypass vulnerability in Microsoft Office Word caused by reliance on untrusted inputs during security decision-making processes. An unauthorized local attacker can exploit this flaw to bypass established security features, potentially facilitating further malicious activities or execution of arbitrary code depending on the attacker's subsequent actions.

Affected products:

  • Office Word

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-108433

Related in this roundup: CVE-2026-70300, CVE-2026-105715, CVE-2026-70268, CVE-2026-70220, CVE-2026-70206, CVE-2026-70269, CVE-2026-70263, CVE-2026-70287, CVE-2026-70302, CVE-2026-70301, CVE-2026-83891, CVE-2026-88167, CVE-2026-88169, CVE-2026-88202, CVE-2026-96995, CVE-2026-97001, CVE-2026-88185, CVE-2026-88186, CVE-2026-108426, CVE-2026-108427, CVE-2026-108428, CVE-2026-108429, CVE-2026-108430, CVE-2026-108431, CVE-2026-108432, CVE-2026-108437, CVE-2026-108439, CVE-2026-108440, CVE-2026-108441, CVE-2026-108443, CVE-2026-108445, CVE-2026-108447, CVE-2026-108449, CVE-2026-108450, CVE-2026-108451.

CVE-2026-108437

A heap-based buffer overflow vulnerability exists in Microsoft Office Word that enables an unauthorized remote attacker to execute arbitrary code via a specially crafted document, leading to a high CVSS score of 8.8.

Affected products:

  • Office Word

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-108437

Related in this roundup: CVE-2026-70300, CVE-2026-105715, CVE-2026-70268, CVE-2026-70220, CVE-2026-70206, CVE-2026-70269, CVE-2026-70263, CVE-2026-70287, CVE-2026-70302, CVE-2026-70301, CVE-2026-83891, CVE-2026-88167, CVE-2026-88169, CVE-2026-88202, CVE-2026-96995, CVE-2026-97001, CVE-2026-88185, CVE-2026-88186, CVE-2026-108426, CVE-2026-108427, CVE-2026-108428, CVE-2026-108429, CVE-2026-108430, CVE-2026-108431, CVE-2026-108432, CVE-2026-108433, CVE-2026-108439, CVE-2026-108440, CVE-2026-108441, CVE-2026-108443, CVE-2026-108445, CVE-2026-108447, CVE-2026-108449, CVE-2026-108450, CVE-2026-108451.

CVE-2026-108439

CVE-2026-108439 is a heap-based buffer overflow vulnerability in Microsoft Office Word that enables an unauthorized remote attacker to achieve code execution via network-based exploitation. Detection engineering should focus on monitoring for anomalous process spawning or unexpected memory usage patterns associated with the Microsoft Word process.

Affected products:

  • Office Word

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-108439

Related in this roundup: CVE-2026-70300, CVE-2026-105715, CVE-2026-70268, CVE-2026-70220, CVE-2026-70206, CVE-2026-70269, CVE-2026-70263, CVE-2026-70287, CVE-2026-70302, CVE-2026-70301, CVE-2026-83891, CVE-2026-88167, CVE-2026-88169, CVE-2026-88202, CVE-2026-96995, CVE-2026-97001, CVE-2026-88185, CVE-2026-88186, CVE-2026-108426, CVE-2026-108427, CVE-2026-108428, CVE-2026-108429, CVE-2026-108430, CVE-2026-108431, CVE-2026-108432, CVE-2026-108433, CVE-2026-108437, CVE-2026-108440, CVE-2026-108441, CVE-2026-108443, CVE-2026-108445, CVE-2026-108447, CVE-2026-108449, CVE-2026-108450, CVE-2026-108451.

CVE-2026-108440

CVE-2026-108440 describes a stack-based buffer overflow vulnerability in Microsoft Office Word that enables a remote, unauthorized attacker to achieve arbitrary code execution via a network-based attack vector.

Affected products:

  • Office Word

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-108440

Related in this roundup: CVE-2026-70300, CVE-2026-105715, CVE-2026-70268, CVE-2026-70220, CVE-2026-70206, CVE-2026-70269, CVE-2026-70263, CVE-2026-70287, CVE-2026-70302, CVE-2026-70301, CVE-2026-83891, CVE-2026-88167, CVE-2026-88169, CVE-2026-88202, CVE-2026-96995, CVE-2026-97001, CVE-2026-88185, CVE-2026-88186, CVE-2026-108426, CVE-2026-108427, CVE-2026-108428, CVE-2026-108429, CVE-2026-108430, CVE-2026-108431, CVE-2026-108432, CVE-2026-108433, CVE-2026-108437, CVE-2026-108439, CVE-2026-108441, CVE-2026-108443, CVE-2026-108445, CVE-2026-108447, CVE-2026-108449, CVE-2026-108450, CVE-2026-108451.

CVE-2026-108441

CVE-2026-108441 is a heap-based buffer overflow vulnerability in Microsoft Office Word that enables an unauthorized, remote attacker to achieve arbitrary code execution. The vulnerability carries a high severity CVSS score, necessitating prioritized patching to prevent remote exploitation.

Affected products:

  • Office Word

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-108441

Related in this roundup: CVE-2026-70300, CVE-2026-105715, CVE-2026-70268, CVE-2026-70220, CVE-2026-70206, CVE-2026-70269, CVE-2026-70263, CVE-2026-70287, CVE-2026-70302, CVE-2026-70301, CVE-2026-83891, CVE-2026-88167, CVE-2026-88169, CVE-2026-88202, CVE-2026-96995, CVE-2026-97001, CVE-2026-88185, CVE-2026-88186, CVE-2026-108426, CVE-2026-108427, CVE-2026-108428, CVE-2026-108429, CVE-2026-108430, CVE-2026-108431, CVE-2026-108432, CVE-2026-108433, CVE-2026-108437, CVE-2026-108439, CVE-2026-108440, CVE-2026-108443, CVE-2026-108445, CVE-2026-108447, CVE-2026-108449, CVE-2026-108450, CVE-2026-108451.

CVE-2026-108442

CVE-2026-108442 describes a use-after-free vulnerability in Microsoft Office Word that enables remote code execution by an unauthorized attacker over a network. The vulnerability carries a CVSS v3.1 base score of 8.8, indicating high severity.

Affected products:

  • Office

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-108442

Related in this roundup: CVE-2026-102867, CVE-2026-88150, CVE-2026-88145, CVE-2026-88197, CVE-2026-88196, CVE-2026-96996, CVE-2026-97754, CVE-2026-69922.

CVE-2026-108443

An off-by-one error in Microsoft Office Word allows a remote, unauthorized attacker to execute arbitrary code over a network. The vulnerability is characterized as an out-of-bounds issue that potentially leads to remote code execution.

Affected products:

  • Office Word

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-108443

Related in this roundup: CVE-2026-70300, CVE-2026-105715, CVE-2026-70268, CVE-2026-70220, CVE-2026-70206, CVE-2026-70269, CVE-2026-70263, CVE-2026-70287, CVE-2026-70302, CVE-2026-70301, CVE-2026-83891, CVE-2026-88167, CVE-2026-88169, CVE-2026-88202, CVE-2026-96995, CVE-2026-97001, CVE-2026-88185, CVE-2026-88186, CVE-2026-108426, CVE-2026-108427, CVE-2026-108428, CVE-2026-108429, CVE-2026-108430, CVE-2026-108431, CVE-2026-108432, CVE-2026-108433, CVE-2026-108437, CVE-2026-108439, CVE-2026-108440, CVE-2026-108441, CVE-2026-108445, CVE-2026-108447, CVE-2026-108449, CVE-2026-108450, CVE-2026-108451.

CVE-2026-108445

CVE-2026-108445 is a stack-based buffer overflow vulnerability in Microsoft Office Word that enables a remote, unauthorized attacker to achieve arbitrary code execution over a network. Detection efforts should focus on monitoring for abnormal process behavior or crashes originating from the Word application suite.

Affected products:

  • Office Word

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-108445

Related in this roundup: CVE-2026-70300, CVE-2026-105715, CVE-2026-70268, CVE-2026-70220, CVE-2026-70206, CVE-2026-70269, CVE-2026-70263, CVE-2026-70287, CVE-2026-70302, CVE-2026-70301, CVE-2026-83891, CVE-2026-88167, CVE-2026-88169, CVE-2026-88202, CVE-2026-96995, CVE-2026-97001, CVE-2026-88185, CVE-2026-88186, CVE-2026-108426, CVE-2026-108427, CVE-2026-108428, CVE-2026-108429, CVE-2026-108430, CVE-2026-108431, CVE-2026-108432, CVE-2026-108433, CVE-2026-108437, CVE-2026-108439, CVE-2026-108440, CVE-2026-108441, CVE-2026-108443, CVE-2026-108447, CVE-2026-108449, CVE-2026-108450, CVE-2026-108451.

CVE-2026-108446

A use-after-free vulnerability exists in Microsoft Excel that allows an unauthorized remote attacker to achieve arbitrary code execution via network-based exploitation.

Affected products:

  • Excel

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-108446

Related in this roundup: CVE-2026-105718, CVE-2026-88153, CVE-2026-88175, CVE-2026-97009, CVE-2026-97753, CVE-2026-97017, CVE-2026-97740, CVE-2026-97766, CVE-2026-97003, CVE-2026-97751, CVE-2026-97776, CVE-2026-97752, CVE-2026-97758, CVE-2026-97761, CVE-2026-97747, CVE-2026-97780, CVE-2026-97770, CVE-2026-97771, CVE-2026-97755, CVE-2026-97765, CVE-2026-97739, CVE-2026-97778, CVE-2026-97759, CVE-2026-77902, CVE-2026-88154, CVE-2026-88172, CVE-2026-88184, CVE-2026-88192, CVE-2026-88195, CVE-2026-97007, CVE-2026-97779, CVE-2026-97756, CVE-2026-97008, CVE-2026-97773, CVE-2026-97010, CVE-2026-97743, CVE-2026-97777, CVE-2026-97762, CVE-2026-97011, CVE-2026-97757, CVE-2026-97738, CVE-2026-97742, CVE-2026-97746, CVE-2026-97763, CVE-2026-97775, CVE-2026-97768, CVE-2026-97745, CVE-2026-100211, CVE-2026-100210.

CVE-2026-108447

A heap-based buffer overflow vulnerability in Microsoft Office Word allows a remote, unauthorized attacker to achieve arbitrary code execution over a network. This flaw represents a critical risk for systems processing untrusted Word documents.

Affected products:

  • Office Word

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-108447

Related in this roundup: CVE-2026-70300, CVE-2026-105715, CVE-2026-70268, CVE-2026-70220, CVE-2026-70206, CVE-2026-70269, CVE-2026-70263, CVE-2026-70287, CVE-2026-70302, CVE-2026-70301, CVE-2026-83891, CVE-2026-88167, CVE-2026-88169, CVE-2026-88202, CVE-2026-96995, CVE-2026-97001, CVE-2026-88185, CVE-2026-88186, CVE-2026-108426, CVE-2026-108427, CVE-2026-108428, CVE-2026-108429, CVE-2026-108430, CVE-2026-108431, CVE-2026-108432, CVE-2026-108433, CVE-2026-108437, CVE-2026-108439, CVE-2026-108440, CVE-2026-108441, CVE-2026-108443, CVE-2026-108445, CVE-2026-108449, CVE-2026-108450, CVE-2026-108451.

CVE-2026-108449

CVE-2026-108449 is a heap-based buffer overflow vulnerability in Microsoft Office Word that enables an unauthorized remote attacker to achieve arbitrary code execution. This vulnerability is triggered when the application improperly handles memory during the processing of malicious documents over the network.

Affected products:

  • Office Word

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-108449

Related in this roundup: CVE-2026-70300, CVE-2026-105715, CVE-2026-70268, CVE-2026-70220, CVE-2026-70206, CVE-2026-70269, CVE-2026-70263, CVE-2026-70287, CVE-2026-70302, CVE-2026-70301, CVE-2026-83891, CVE-2026-88167, CVE-2026-88169, CVE-2026-88202, CVE-2026-96995, CVE-2026-97001, CVE-2026-88185, CVE-2026-88186, CVE-2026-108426, CVE-2026-108427, CVE-2026-108428, CVE-2026-108429, CVE-2026-108430, CVE-2026-108431, CVE-2026-108432, CVE-2026-108433, CVE-2026-108437, CVE-2026-108439, CVE-2026-108440, CVE-2026-108441, CVE-2026-108443, CVE-2026-108445, CVE-2026-108447, CVE-2026-108450, CVE-2026-108451.

CVE-2026-108450

CVE-2026-108450 is a heap-based buffer overflow vulnerability in Microsoft Office Word that allows a remote, unauthorized attacker to execute arbitrary code over the network. This vulnerability poses a high security risk, as successful exploitation could lead to full system compromise.

Affected products:

  • Office Word

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-108450

Related in this roundup: CVE-2026-70300, CVE-2026-105715, CVE-2026-70268, CVE-2026-70220, CVE-2026-70206, CVE-2026-70269, CVE-2026-70263, CVE-2026-70287, CVE-2026-70302, CVE-2026-70301, CVE-2026-83891, CVE-2026-88167, CVE-2026-88169, CVE-2026-88202, CVE-2026-96995, CVE-2026-97001, CVE-2026-88185, CVE-2026-88186, CVE-2026-108426, CVE-2026-108427, CVE-2026-108428, CVE-2026-108429, CVE-2026-108430, CVE-2026-108431, CVE-2026-108432, CVE-2026-108433, CVE-2026-108437, CVE-2026-108439, CVE-2026-108440, CVE-2026-108441, CVE-2026-108443, CVE-2026-108445, CVE-2026-108447, CVE-2026-108449, CVE-2026-108451.

CVE-2026-108451

CVE-2026-108451 is a numeric truncation vulnerability in Microsoft Office Word that enables a remote, unauthorized attacker to achieve arbitrary code execution over a network. The vulnerability carries a high CVSS score of 8.8, indicating significant risk to affected systems.

Affected products:

  • Office Word

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-108451

Related in this roundup: CVE-2026-70300, CVE-2026-105715, CVE-2026-70268, CVE-2026-70220, CVE-2026-70206, CVE-2026-70269, CVE-2026-70263, CVE-2026-70287, CVE-2026-70302, CVE-2026-70301, CVE-2026-83891, CVE-2026-88167, CVE-2026-88169, CVE-2026-88202, CVE-2026-96995, CVE-2026-97001, CVE-2026-88185, CVE-2026-88186, CVE-2026-108426, CVE-2026-108427, CVE-2026-108428, CVE-2026-108429, CVE-2026-108430, CVE-2026-108431, CVE-2026-108432, CVE-2026-108433, CVE-2026-108437, CVE-2026-108439, CVE-2026-108440, CVE-2026-108441, CVE-2026-108443, CVE-2026-108445, CVE-2026-108447, CVE-2026-108449, CVE-2026-108450.

]]>highthreatroundup