Common Vulnerabilities and Exposures (CVE)

CVE-2026-85906

Oct 16, 2026 23:23:15 UTC

Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.

CVE-2026-85905

Oct 16, 2026 23:23:14 UTC

Heap-based buffer overflow in Windows UI Immersive Server allows an authorized attacker to elevate privileges locally.

CVE-2026-83905

Oct 16, 2026 23:23:14 UTC

Exposure of sensitive system information to an unauthorized control sphere in Windows Shell allows an authorized attacker to disclose information locally.

CVE-2026-83904

Oct 16, 2026 23:23:13 UTC

Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.

CVE-2026-85903

Oct 16, 2026 23:23:13 UTC

Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.

CVE-2026-85902

Oct 16, 2026 23:23:12 UTC

Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally.

CVE-2026-85901

Oct 16, 2026 23:23:12 UTC

Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.

CVE-2026-85872

Oct 16, 2026 23:23:11 UTC

Use after free in Windows Storage VSP Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-83903

Oct 16, 2026 23:23:11 UTC

Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally.

CVE-2026-83900

Oct 16, 2026 23:23:10 UTC

Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-83899

Oct 16, 2026 23:23:10 UTC

Improper privilege management in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-83897

Oct 16, 2026 23:23:09 UTC

Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

CVE-2026-83889

Oct 16, 2026 23:23:08 UTC

Release of invalid pointer or reference in DNS Server allows an authorized attacker to execute code over a network.

CVE-2026-83877

Oct 16, 2026 23:23:07 UTC

Integer overflow or wraparound in HID Parser Library allows an authorized attacker to elevate privileges locally.

CVE-2026-83895

Oct 16, 2026 23:23:07 UTC

Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an unauthorized attacker to elevate privileges with a physical attack.

Page: 37