Common Vulnerabilities and Exposures (CVE)

CVE-2026-88105

Oct 16, 2026 17:36:05 UTC

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

CVE-2026-88103

Oct 16, 2026 17:36:04 UTC

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

CVE-2026-88079

Oct 16, 2026 17:36:04 UTC

Null pointer dereference in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.

CVE-2026-87702

Oct 16, 2026 17:36:03 UTC

Integer overflow or wraparound in Windows Resource Management (MRM) allows an authorized attacker to elevate privileges locally.

CVE-2026-88072

Oct 16, 2026 17:36:03 UTC

Improper access control in Windows Host Guardian Service allows an authorized attacker to elevate privileges locally.

CVE-2026-87715

Oct 16, 2026 17:36:02 UTC

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-87700

Oct 16, 2026 17:36:02 UTC

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-87704

Oct 16, 2026 17:36:01 UTC

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-87698

Oct 16, 2026 17:36:01 UTC

Out-of-bounds read in Windows Remote Access Service Infrastructure allows an authorized attacker to disclose information locally.

CVE-2026-87709

Oct 16, 2026 17:36:00 UTC

Improper access control in Windows Host Guardian Service allows an authorized attacker to perform tampering locally.

CVE-2026-87694

Oct 16, 2026 17:36:00 UTC

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-87693

Oct 16, 2026 17:35:59 UTC

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-87705

Oct 16, 2026 17:35:58 UTC

Improper verification of source of a communication channel in Windows Hyper-V allows an unauthorized attacker to bypass a security feature over an adjacent network.

CVE-2026-88076

Oct 16, 2026 17:35:58 UTC

Null pointer dereference in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-87699

Oct 16, 2026 17:35:57 UTC

Heap-based buffer overflow in Winlogon allows an authorized attacker to elevate privileges locally.