Common Vulnerabilities and Exposures (CVE)

CVE-2026-88115

Oct 23, 2026 17:52:25 UTC

Out-of-bounds read in Windows Server for NFS allows an unauthorized attacker to execute code over a network.

CVE-2026-88135

Oct 23, 2026 17:52:25 UTC

Improper access control in WebDAV allows an authorized attacker to elevate privileges locally.

CVE-2026-88113

Oct 23, 2026 17:52:24 UTC

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

CVE-2026-88110

Oct 23, 2026 17:52:23 UTC

Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-88126

Oct 23, 2026 17:52:23 UTC

Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally.

CVE-2026-88109

Oct 23, 2026 17:52:22 UTC

Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.

CVE-2026-88134

Oct 23, 2026 17:52:21 UTC

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-88127

Oct 23, 2026 17:52:21 UTC

Use after free in Windows SMB Server allows an authorized attacker to elevate privileges locally.

CVE-2026-88105

Oct 23, 2026 17:52:20 UTC

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

CVE-2026-88103

Oct 23, 2026 17:52:19 UTC

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

CVE-2026-88079

Oct 23, 2026 17:52:18 UTC

Null pointer dereference in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.

CVE-2026-87702

Oct 23, 2026 17:52:17 UTC

Integer overflow or wraparound in Windows Resource Management (MRM) allows an authorized attacker to elevate privileges locally.

CVE-2026-88072

Oct 23, 2026 17:52:17 UTC

Improper access control in Windows Host Guardian Service allows an authorized attacker to elevate privileges locally.

CVE-2026-87715

Oct 23, 2026 17:52:16 UTC

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-87700

Oct 23, 2026 17:52:16 UTC

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.