Vendor CVEs
Microsoft
All CVEs
18,138 total · sorted by risk| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-85884 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-85874 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to execute code locally. | ||
| CVE-2026-85872 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Use after free in Windows Storage VSP Driver allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-85871 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Heap-based buffer overflow in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-85869 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-85867 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-85864 | Hig | 0.51 | 7.8 | 0.01 | Oct 13, 2026 | Improper privilege management in Python allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-85863 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-85861 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-85860 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-85858 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-85851 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Use after free in Windows SmartScreen allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-85850 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Release of invalid pointer or reference in Windows Kernel allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-85849 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Improper link resolution before file access ('link following') in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-85848 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Heap-based buffer overflow in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-85843 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Use of uninitialized resource in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-85842 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Use of externally-controlled format string in Windows Image Acquisition allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-85837 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-85836 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-85833 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-85832 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Heap-based buffer overflow in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-85829 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Double free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-85822 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-85820 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-85807 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Integer overflow or wraparound in Windows USB Video Driver allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-85804 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-85800 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-85796 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Numeric truncation error in Windows Installer allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-85795 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Use after free in Windows Text Services Framework allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-85377 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Access of resource using incompatible type ('type confusion') in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-85376 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Weak authentication in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-85375 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-85373 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Heap-based buffer overflow in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-85368 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-85366 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-85359 | Hig | 0.51 | 7.8 | 0.01 | Oct 13, 2026 | Improper control of generation of code ('code injection') in Windows Performance Monitor allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-85358 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-85356 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Out-of-bounds read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-85343 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Improper link resolution before file access ('link following') in Windows Hyper-V allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-85341 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-85340 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-85338 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Out-of-bounds read in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-85332 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-85327 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-85318 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-84016 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Out-of-bounds write in Windows EAPHost Service allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-84013 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-83932 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Heap-based buffer overflow in Windows Group Policy allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-83931 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally. | ||
| CVE-2026-83927 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Improper link resolution before file access ('link following') in Windows Registry allows an authorized attacker to elevate privileges locally. |
- risk 0.51cvss 7.8epss 0.00
Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to execute code locally.
- risk 0.51cvss 7.8epss 0.00
Use after free in Windows Storage VSP Driver allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.01
Improper privilege management in Python allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Use after free in Windows SmartScreen allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Release of invalid pointer or reference in Windows Kernel allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Improper link resolution before file access ('link following') in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Use of uninitialized resource in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Use of externally-controlled format string in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Double free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Integer overflow or wraparound in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Numeric truncation error in Windows Installer allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Use after free in Windows Text Services Framework allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Access of resource using incompatible type ('type confusion') in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Weak authentication in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.01
Improper control of generation of code ('code injection') in Windows Performance Monitor allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Out-of-bounds read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Improper link resolution before file access ('link following') in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Out-of-bounds read in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Out-of-bounds write in Windows EAPHost Service allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Windows Group Policy allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.
- risk 0.51cvss 7.8epss 0.00
Improper link resolution before file access ('link following') in Windows Registry allows an authorized attacker to elevate privileges locally.
Page 76 of 363