Servicing Stack Updates
by Microsoft
CVEs (7)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-85318 | Hig | 0.51 | 7.8 | — | Oct 13, 2026 | Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-83863 | Hig | 0.51 | 7.8 | — | Oct 13, 2026 | Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-83506 | Hig | 0.51 | 7.8 | — | Oct 13, 2026 | Untrusted search path in Servicing Stack Updates allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-96939 | Hig | 0.45 | 7.0 | — | Oct 13, 2026 | Time-of-check time-of-use (toctou) race condition in Servicing Stack Updates allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-85365 | Hig | 0.45 | 7.0 | — | Oct 13, 2026 | Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-85835 | Med | 0.36 | 5.5 | — | Oct 13, 2026 | Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information locally. | ||
| CVE-2026-83719 | Med | 0.36 | 5.5 | — | Oct 13, 2026 | Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information locally. |
- risk 0.51cvss 7.8epss —
Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss —
Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss —
Untrusted search path in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.
- risk 0.45cvss 7.0epss —
Time-of-check time-of-use (toctou) race condition in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.
- risk 0.45cvss 7.0epss —
Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.
- risk 0.36cvss 5.5epss —
Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information locally.
- risk 0.36cvss 5.5epss —
Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information locally.