Common Vulnerabilities and Exposures (CVE)
CVE-2026-85903
Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.
CVE-2026-85902
Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
CVE-2026-85901
Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
CVE-2026-85872
Use after free in Windows Storage VSP Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-83903
Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
CVE-2026-83900
Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-83899
Improper privilege management in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-83897
Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
CVE-2026-83889
Release of invalid pointer or reference in DNS Server allows an authorized attacker to execute code over a network.
CVE-2026-83873
Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally.
CVE-2026-83877
Integer overflow or wraparound in HID Parser Library allows an authorized attacker to elevate privileges locally.
CVE-2026-83895
Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an unauthorized attacker to elevate privileges with a physical attack.
CVE-2026-83870
Out-of-bounds read in Windows Aggregated Data Platform Service allows an authorized attacker to disclose information locally.
CVE-2026-83898
Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.
CVE-2026-83884
Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.