CVE-2026-88129 - Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.

CVE-2026-88128 - Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate priv

CVE-2026-88127 - Use after free in Windows SMB Server allows an authorized attacker to elevate privileges locally.

CVE-2026-88126 - Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally.

CVE-2026-88125 - Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.

CVE-2026-88124 - Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-88123 - Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.

CVE-2026-88122 - Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.

CVE-2026-88121 - Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized atta

CVE-2026-88120 - Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network

CVE-2026-88119 - Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network

CVE-2026-88118 - Integer overflow or wraparound in Windows Background Intelligent Transfer Service (BITS) allows an a

CVE-2026-88117 - Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network

CVE-2026-88116 - Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a n

CVE-2026-88115 - Out-of-bounds read in Windows Server for NFS allows an unauthorized attacker to execute code over a

CVE-2026-88114 - Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a n

CVE-2026-88113 - Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privil

CVE-2026-88112 - Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a n

CVE-2026-88110 - Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privi

CVE-2026-88109 - Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges

CVE-2026-88107 - Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate pr

CVE-2026-88106 - Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate pr

CVE-2026-88105 - Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privil

CVE-2026-88103 - Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privil

CVE-2026-88102 - Use after free in Windows Failover Cluster allows an unauthorized attacker to execute code over a ne

CVE-2026-88101 - Weak authentication in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate

CVE-2026-88100 - Use after free in Windows Storage Spaces Controller allows an authorized attacker to elevate privile

CVE-2026-88099 - Uncaught exception in Windows Failover Cluster allows an unauthorized attacker to deny service over

CVE-2026-88098 - Untrusted pointer dereference in Windows Security Support Provider Interface allows an authorized at

CVE-2026-88096 - Concurrent execution using shared resource with improper synchronization ('race condition') in Windo

CVE-2026-88094 - Improper neutralization of special elements in output used by a downstream component ('injection') i

CVE-2026-88093 - Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privil

CVE-2026-88092 - Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core all

CVE-2026-88091 - Deserialization of untrusted data in Windows Management Instrumentation allows an authorized attacke

CVE-2026-88080 - Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-88079 - Null pointer dereference in Windows MIDI Service Module allows an authorized attacker to elevate pri

CVE-2026-88076 - Null pointer dereference in Windows Installer allows an authorized attacker to elevate privileges lo

CVE-2026-88075 - Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Co

CVE-2026-88074 - Integer overflow or wraparound in Windows Virtualization-Based Security (VBS) Enclave allows an auth

CVE-2026-88073 - Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locall

CVE-2026-88072 - Improper access control in Windows Host Guardian Service allows an authorized attacker to elevate pr

CVE-2026-88071 - Double free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

CVE-2026-88070 - Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privileges locally.

CVE-2026-87716 - Heap-based buffer overflow in Windows Storage Spaces Controller allows an unauthorized attacker to d

CVE-2026-87715 - Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-87714 - Missing authorization in WebDAV allows an authorized attacker to bypass a security feature over a ne

CVE-2026-87713 - Use after free in Windows Bluetooth Port Driver allows an unauthorized attacker to elevate privilege

CVE-2026-87712 - Use after free in Windows Quality of Service (QoS) Packet Scheduler allows an authorized attacker to

CVE-2026-87711 - Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges

CVE-2026-87710 - Improper access control in Microsoft Local Security Authority Server (lsasrv) allows an authorized a

CVE-2026-87709 - Improper access control in Windows Host Guardian Service allows an authorized attacker to perform ta

CVE-2026-87708 - Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-87707 - Heap-based buffer overflow in Windows Fax and Scan Service allows an authorized attacker to elevate

CVE-2026-87706 - Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to ele

CVE-2026-87705 - Improper verification of source of a communication channel in Windows Hyper-V allows an unauthorized

CVE-2026-87704 - Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-87702 - Integer overflow or wraparound in Windows Resource Management (MRM) allows an authorized attacker to

CVE-2026-87700 - Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-87699 - Heap-based buffer overflow in Winlogon allows an authorized attacker to elevate privileges locally.

CVE-2026-87698 - Out-of-bounds read in Windows Remote Access Service Infrastructure allows an authorized attacker to

CVE-2026-87697 - Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a net

CVE-2026-87696 - Improper verification of cryptographic signature in Microsoft Exchange Server allows an authorized a

CVE-2026-87695 - Inclusion of functionality from untrusted control sphere in Microsoft Exchange Server allows an auth

CVE-2026-87694 - Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-87693 - Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-87692 - Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to elev

CVE-2026-87691 - Use after free in Windows Management Services allows an authorized attacker to elevate privileges lo

CVE-2026-86063 - Claude Code is an agentic coding tool. Prior to 2.1.179, the Claude Code and Claude Desktop plugin i

CVE-2026-85945 - Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-85943 - Time-of-check time-of-use (toctou) race condition in Reliable Multicast Transport Driver (RMCAST) al

CVE-2026-85941 - Concurrent execution using shared resource with improper synchronization ('race condition') in Windo

CVE-2026-85939 - Weak authentication in Windows Kernel allows an authorized attacker to bypass a security feature ove

CVE-2026-85938 - Improper access control in Windows Broadcast DVR User Service allows an authorized attacker to discl

CVE-2026-85936 - Double free in Windows Shell allows an unauthorized attacker to execute code over a network.

CVE-2026-85935 - Buffer over-read in Windows USB Driver allows an authorized attacker to disclose information locally

CVE-2026-85934 - Use after free in Windows AppX Deployment Service allows an authorized attacker to elevate privilege

CVE-2026-85933 - Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileg

CVE-2026-85932 - Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office S

CVE-2026-85931 - Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to

CVE-2026-85930 - Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges loca

CVE-2026-85928 - Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacke

CVE-2026-85927 - Heap-based buffer overflow in Windows Universal Plug and Play (UPnP) Device Host allows an authorize

CVE-2026-85926 - Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to

CVE-2026-85925 - Improper restriction of communication channel to intended endpoints in Azure Key Vault allows an aut

CVE-2026-85922 - Weak authentication in Azure Key Vault allows an unauthorized attacker to bypass a security feature

CVE-2026-85920 - Time-of-check time-of-use (toctou) race condition in Windows BitLocker allows an authorized attacker

CVE-2026-85918 - Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker t

CVE-2026-85916 - Exposure of private personal information to an unauthorized actor in Azure Active Directory allows a

CVE-2026-85915 - Heap-based buffer overflow in Windows PCI Bus Driver allows an authorized attacker to elevate privil

CVE-2026-85914 - Use after free in Windows Embedded Mode Service allows an authorized attacker to elevate privileges

CVE-2026-85912 - Concurrent execution using shared resource with improper synchronization ('race condition') in Windo

CVE-2026-85911 - Use after free in Windows StateRepository API allows an authorized attacker to elevate privileges lo

CVE-2026-85910 - Buffer over-read in Windows StateRepository API allows an authorized attacker to disclose informatio

CVE-2026-85909 - Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized a

CVE-2026-85908 - Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privile

CVE-2026-85906 - Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges loc

CVE-2026-85905 - Heap-based buffer overflow in Windows UI Immersive Server allows an authorized attacker to elevate p

CVE-2026-85904 - Concurrent execution using shared resource with improper synchronization ('race condition') in Windo

CVE-2026-85903 - Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a n

CVE-2026-85902 - Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate pr

CVE-2026-85901 - Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privile

CVE-2026-85900 - Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to ex

CVE-2026-85891 - Exposure of sensitive information to an unauthorized actor in Azure HDInsight allows an unauthorized

CVE-2026-85884 - Missing authentication for critical function in Windows Health and Optimized Experiences Service all

CVE-2026-85881 - Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate

CVE-2026-85879 - Time-of-check time-of-use (toctou) race condition in Windows Subsystem for Linux allows an authorize

CVE-2026-85874 - Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to execute cod

CVE-2026-85873 - Improper authorization in Skype for Business and Microsoft Lync allows an authorized attacker to ele

CVE-2026-85872 - Use after free in Windows Storage VSP Driver allows an authorized attacker to elevate privileges loc

CVE-2026-85871 - Heap-based buffer overflow in Windows Kernel-Mode Drivers allows an authorized attacker to elevate p

CVE-2026-85870 - Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to

CVE-2026-85869 - Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to el

CVE-2026-85868 - Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate pri

CVE-2026-85867 - Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker

CVE-2026-85866 - Exposure of sensitive system information to an unauthorized control sphere in Windows ALPC allows an

CVE-2026-85865 - Improper authentication in Windows DHCP Server allows an authorized attacker to bypass a security fe

CVE-2026-85864 - Improper privilege management in Python allows an authorized attacker to elevate privileges locally.

CVE-2026-85863 - Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges

CVE-2026-85861 - Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges

CVE-2026-85860 - Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to elevate pri

CVE-2026-85859 - Null pointer dereference in Windows Message Queuing Queue Manager allows an authorized attacker to d

CVE-2026-85858 - Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privil

CVE-2026-85857 - Insertion of sensitive information into log file in Windows Kernel-Mode Drivers allows an authorized

CVE-2026-85856 - Heap-based buffer overflow in Windows Internet Connection Sharing (ICS) allows an authorized attacke

CVE-2026-85855 - Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges local

CVE-2026-85854 - Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges local

CVE-2026-85853 - Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges l

CVE-2026-85852 - Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose i

CVE-2026-85851 - Use after free in Windows SmartScreen allows an authorized attacker to elevate privileges locally.

CVE-2026-85850 - Release of invalid pointer or reference in Windows Kernel allows an authorized attacker to elevate p

CVE-2026-85849 - Improper link resolution before file access ('link following') in Windows AppX Deployment Service al

CVE-2026-85848 - Heap-based buffer overflow in Windows Background Intelligent Transfer Service (BITS) allows an autho

CVE-2026-85847 - Out-of-bounds read in Windows Print Spooler Components allows an unauthorized attacker to disclose i

CVE-2026-85846 - Use after free in Windows Web Account Manager allows an authorized attacker to elevate privileges lo

CVE-2026-85843 - Use of uninitialized resource in Windows Background Intelligent Transfer Service (BITS) allows an au

CVE-2026-85842 - Use of externally-controlled format string in Windows Image Acquisition allows an authorized attacke

CVE-2026-85841 - Use after free in Windows DHCP Server allows an authorized attacker to execute code over a network.

CVE-2026-85840 - Files or directories accessible to external parties in Windows Event Viewer allows an authorized att

CVE-2026-85837 - Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-85836 - Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-85835 - Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information lo

CVE-2026-85834 - Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges loc

CVE-2026-85833 - Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate pr

CVE-2026-85832 - Heap-based buffer overflow in Windows Background Intelligent Transfer Service (BITS) allows an autho

CVE-2026-85831 - Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to disclose in

CVE-2026-85830 - Out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locall

CVE-2026-85829 - Double free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges

CVE-2026-85828 - Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.

CVE-2026-85827 - Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.

CVE-2026-85826 - Out-of-bounds write in Windows Fast FAT Driver allows an authorized attacker to elevate privileges l

CVE-2026-85825 - Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attac

CVE-2026-85824 - Use after free in Windows Composite Image File System allows an authorized attacker to elevate privi

CVE-2026-85823 - Use after free in Windows Composite Image File System allows an authorized attacker to elevate privi

CVE-2026-85822 - Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate pri

CVE-2026-85821 - Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized a

CVE-2026-85820 - Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attac

CVE-2026-85818 - Improper verification of cryptographic signature in Windows Schannel allows an unauthorized attacker

CVE-2026-85817 - Reliance on untrusted inputs in a security decision in Windows PowerShell allows an unauthorized att

CVE-2026-85816 - Out-of-bounds read in Windows Wi-Fi Driver allows an authorized attacker to disclose information ove

CVE-2026-85815 - Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose i

CVE-2026-85814 - Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to

CVE-2026-85812 - Files or directories accessible to external parties in Windows Bind Filter Driver allows an authoriz

CVE-2026-85811 - Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a

CVE-2026-85810 - Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges local

CVE-2026-85809 - Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an

CVE-2026-85808 - Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attack

CVE-2026-85807 - Integer overflow or wraparound in Windows USB Video Driver allows an authorized attacker to elevate

CVE-2026-85806 - Integer underflow (wrap or wraparound) in Network Policy Server (NPS) allows an unauthorized attacke

CVE-2026-85805 - Improperly implemented security check for standard in Windows PowerShell allows an unauthorized atta

CVE-2026-85804 - Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges

CVE-2026-85803 - Use after free in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privi

CVE-2026-85802 - Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges

CVE-2026-85800 - Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privi

CVE-2026-85799 - Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a

CVE-2026-85798 - Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to

CVE-2026-85797 - Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information over a net

CVE-2026-85796 - Numeric truncation error in Windows Installer allows an authorized attacker to elevate privileges lo

CVE-2026-85795 - Use after free in Windows Text Services Framework allows an authorized attacker to elevate privilege

CVE-2026-85794 - Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker

CVE-2026-85793 - Exposure of sensitive system information to an unauthorized control sphere in Windows Sysmain Servic

CVE-2026-85792 - Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an

CVE-2026-85791 - Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized attacker to

CVE-2026-85790 - Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a netw

CVE-2026-85747 - Distribution is a toolkit to pack, ship, store, and deliver container content. Prior to 3.1.2, regis

CVE-2026-85377 - Access of resource using incompatible type ('type confusion') in Windows CD-ROM Driver allows an aut

CVE-2026-85376 - Weak authentication in Windows Print Spooler Components allows an authorized attacker to elevate pri

CVE-2026-85375 - Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker t

CVE-2026-85374 - Out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locall

CVE-2026-85373 - Heap-based buffer overflow in Windows Universal Plug and Play (UPnP) Device Host allows an authorize

CVE-2026-85372 - Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-85371 - Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a

CVE-2026-85370 - Use after free in WebDAV allows an authorized attacker to elevate privileges locally.

CVE-2026-85369 - Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

CVE-2026-85368 - Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges loc

CVE-2026-85367 - Use after free in Windows Cash Drawer Protocol Provider allows an authorized attacker to elevate pri

CVE-2026-85366 - Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges

CVE-2026-85365 - Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privi

CVE-2026-85364 - Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-85363 - Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to elevate privileg

CVE-2026-85362 - Release of invalid pointer or reference in Windows Management Instrumentation allows an authorized a

CVE-2026-85361 - Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-85359 - Improper control of generation of code ('code injection') in Windows Performance Monitor allows an a

CVE-2026-85358 - Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges

CVE-2026-85357 - Concurrent execution using shared resource with improper synchronization ('race condition') in Windo

CVE-2026-85356 - Out-of-bounds read in Windows Volume Manager Extension Driver allows an authorized attacker to eleva

CVE-2026-85355 - Inclusion of functionality from untrusted control sphere in Windows Common Log File System Driver al

CVE-2026-85354 - Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locall

CVE-2026-85353 - Out-of-bounds read in Windows Print Spooler Components allows an unauthorized attacker to disclose i

CVE-2026-85352 - Use after free in Windows Device Association Service allows an authorized attacker to elevate privil

CVE-2026-85343 - Improper link resolution before file access ('link following') in Windows Hyper-V allows an authoriz

CVE-2026-85342 - Use after free in Windows Device Association Service allows an authorized attacker to elevate privil

CVE-2026-85341 - Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate priv

CVE-2026-85340 - Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges

CVE-2026-85339 - Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an

CVE-2026-85338 - Out-of-bounds read in Microsoft Graphics Component allows an authorized attacker to elevate privileg

CVE-2026-85337 - Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information

CVE-2026-85336 - Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose i

CVE-2026-85334 - Out-of-bounds read in Windows Message Queuing Queue Manager allows an unauthorized attacker to discl

CVE-2026-85333 - Concurrent execution using shared resource with improper synchronization ('race condition') in Windo

CVE-2026-85332 - Use after free in Windows Device Association Service allows an authorized attacker to elevate privil

CVE-2026-85331 - Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose i

CVE-2026-85329 - Concurrent execution using shared resource with improper synchronization ('race condition') in Micro

CVE-2026-85328 - Weak authentication in Windows Projected File System allows an authorized attacker to elevate privil

CVE-2026-85327 - Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elev

CVE-2026-85324 - Memory allocation with excessive size value in Active Directory Federation Services (AD FS) allows a

CVE-2026-85323 - Weak authentication in Network Device Enrollment Service (NDES) allows an authorized attacker to per

CVE-2026-85322 - Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an unauthor

CVE-2026-85321 - Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS)

CVE-2026-85320 - Use of uninitialized resource in Windows Print Spooler Components allows an authorized attacker to d

CVE-2026-85319 - Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS)

CVE-2026-85318 - Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privi

CVE-2026-84994 - Qwik is a performance-focused JavaScript framework. Prior to @builder.io/qwik 1.20.0 and @qwik.dev/c

CVE-2026-84020 - Use after free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to

CVE-2026-84019 - Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate p

CVE-2026-84018 - Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileg

CVE-2026-84017 - Null pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an unauthorized

CVE-2026-84016 - Out-of-bounds write in Windows EAPHost Service allows an authorized attacker to elevate privileges l

CVE-2026-84015 - Heap-based buffer overflow in Remote Access Point-to-Point Protocol (PPP) EAP-TLS allows an unauthor

CVE-2026-84014 - Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to el

CVE-2026-84013 - Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges local

CVE-2026-84012 - Double free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a

CVE-2026-84011 - Incorrect authorization in Windows SMB Client allows an authorized attacker to bypass a security fea

CVE-2026-84009 - Time-of-check time-of-use (toctou) race condition in Windows Projected File System allows an authori

CVE-2026-84008 - Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a ne

CVE-2026-84007 - Out-of-bounds read in Remote Desktop Gateway Service allows an authorized attacker to disclose infor

CVE-2026-83935 - Heap-based buffer overflow in Microsoft XML allows an unauthorized attacker to execute code over a n

CVE-2026-83934 - Stack-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a n

CVE-2026-83933 - Improper link resolution before file access ('link following') in Windows Update Orchestrator Servic

CVE-2026-83932 - Heap-based buffer overflow in Windows Group Policy allows an authorized attacker to elevate privileg

CVE-2026-83931 - Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.