Vendor CVEs
Microsoft
All CVEs
18,148 total · sorted by risk| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-85362 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Release of invalid pointer or reference in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-85361 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-85355 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Inclusion of functionality from untrusted control sphere in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-85354 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-85352 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-85342 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-85329 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Account allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-85328 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Weak authentication in Windows Projected File System allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-84020 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-84019 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-84018 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-84014 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-83930 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-83924 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-83921 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-83917 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Windows ALPC allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-83916 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Double free in Windows Error Reporting allows an authorized attacker to execute code locally. | ||
| CVE-2026-83915 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Windows Diagnostic Policy Service allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-83911 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-83908 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Release of invalid pointer or reference in RPC Runtime allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-83901 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-83900 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-83899 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Improper privilege management in Windows Installer allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-83886 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-83879 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-83871 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Heap-based buffer overflow in OpenSSH for Windows allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-83868 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-83866 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-83853 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Windows Hello allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-83846 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-83842 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Double free in Windows TCP/IP allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-83841 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-83839 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Time-of-check time-of-use (toctou) race condition in Windows Hyper-V allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-83834 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-83827 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Heap-based buffer overflow in Windows Bluetooth Port Driver allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-83793 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-83790 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Windows Hello allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-83785 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-83775 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-83752 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-83750 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Time-of-check time-of-use (toctou) race condition in Windows Error Reporting allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-83749 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-83740 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Windows Hello allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-83738 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-83724 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-83722 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-83718 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-83717 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-83715 | Hig | 0.46 | 7.1 | 0.00 | Oct 13, 2026 | Missing authentication for critical function in Windows Error Reporting allows an authorized attacker to perform tampering locally. | ||
| CVE-2026-83710 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally. |
- risk 0.46cvss 7.0epss 0.00
Release of invalid pointer or reference in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Inclusion of functionality from untrusted control sphere in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Account allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Weak authentication in Windows Projected File System allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows ALPC allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Double free in Windows Error Reporting allows an authorized attacker to execute code locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows Diagnostic Policy Service allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Release of invalid pointer or reference in RPC Runtime allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Improper privilege management in Windows Installer allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Heap-based buffer overflow in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Double free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Time-of-check time-of-use (toctou) race condition in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Heap-based buffer overflow in Windows Bluetooth Port Driver allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Time-of-check time-of-use (toctou) race condition in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.1epss 0.00
Missing authentication for critical function in Windows Error Reporting allows an authorized attacker to perform tampering locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
Page 171 of 363