October 2026 Patch TuesdayKB5126836Out-of-band action

Microsoft · KB5126836

Linked CVE review

Deploy Microsoft ESU security update KB5126836

Linked CVEs
649
Confirmed exploited
1
PoC or lab evidence
0
Maximum CVSS
9.8
Evidence is kept separate

Confirmed exploitation, public exploit material, EPSS probability and CVSS severity answer different questions. “No confirmation recorded” means the checked sources do not currently confirm exploitation. It is not proof that exploitation has not occurred.

Reset
649 of 649 linked CVEs shown
Confirmed exploitedCVSS above 9.0
CVE and descriptionSeverityExploit realityForecast and accessRemediation
CVE-2026-96951 Immediate evidence
Microsoft Windows Command Injection Vulnerability

Microsoft Windows Shell contains a command injection vulnerability that allows an unauthorized attacker to bypass a security feature over a network.

8.8 · CVSS 3.1 · HighSource: CNAConfirmed in the wildCISA added this CVE to its Known Exploited Vulnerabilities catalogue on 2026-10-13.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 1.51% · 73.8th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · REQUIRED user interactionPatch nowCISA confirms exploitation in the wild and lists 2026-10-16 as the remediation due date.Patch available. An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.
CVE-2026-100202 Critical technical severity
Windows Message Queuing Queue Manager Remote Code Execution Vulnerability

Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network.

9.8 · CVSS 3.1 · CriticalSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 1.00% · 62.0th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interactionWithin 72 hoursCritical technical impact with a remotely reachable, unauthenticated path; no CISA KEV confirmation is currently recorded.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83693 Critical technical severity
Windows Error Reporting Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.

9.8 · CVSS 3.1 · CriticalSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 1.00% · 61.9th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interactionWithin 72 hoursCritical technical impact with a remotely reachable, unauthenticated path; no CISA KEV confirmation is currently recorded.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83770 Critical technical severity
Windows Text Shaping Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.

9.8 · CVSS 3.1 · CriticalSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 1.00% · 61.9th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interactionWithin 72 hoursCritical technical impact with a remotely reachable, unauthenticated path; no CISA KEV confirmation is currently recorded.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-97814 Critical technical severity
Windows Text Shaping Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.

9.8 · CVSS 3.1 · CriticalSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.99% · 61.6th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interactionWithin 72 hoursCritical technical impact with a remotely reachable, unauthenticated path; no CISA KEV confirmation is currently recorded.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70147 Critical technical severity
Microsoft PostScript Printer Driver Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over a network.

9.8 · CVSS 3.1 · CriticalSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.97% · 60.9th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interactionWithin 72 hoursCritical technical impact with a remotely reachable, unauthenticated path; no CISA KEV confirmation is currently recorded.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70153 Critical technical severity
Microsoft PostScript Printer Driver Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over a network.

9.8 · CVSS 3.1 · CriticalSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.97% · 60.9th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interactionWithin 72 hoursCritical technical impact with a remotely reachable, unauthenticated path; no CISA KEV confirmation is currently recorded.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70096 Critical technical severity
Windows Rich Text Edit Control Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Rich Text Edit Control allows an unauthorized attacker to execute code over a network.

9.8 · CVSS 3.1 · CriticalSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.96% · 60.7th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interactionWithin 72 hoursCritical technical impact with a remotely reachable, unauthenticated path; no CISA KEV confirmation is currently recorded.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70157 Critical technical severity
Windows System Information Console Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows System Information Console allows an unauthorized attacker to execute code over a network.

9.8 · CVSS 3.1 · CriticalSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.96% · 60.7th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interactionWithin 72 hoursCritical technical impact with a remotely reachable, unauthenticated path; no CISA KEV confirmation is currently recorded.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83517 Critical technical severity
Microsoft Windows Media Foundation Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.

9.8 · CVSS 3.1 · CriticalSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.96% · 60.7th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interactionWithin 72 hoursCritical technical impact with a remotely reachable, unauthenticated path; no CISA KEV confirmation is currently recorded.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83519 Critical technical severity
Windows Error Reporting Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.

9.8 · CVSS 3.1 · CriticalSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.96% · 60.7th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interactionWithin 72 hoursCritical technical impact with a remotely reachable, unauthenticated path; no CISA KEV confirmation is currently recorded.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83578 Critical technical severity
Microsoft PowerShell Remote Code Execution Vulnerability

Integer underflow (wrap or wraparound) in Windows PowerShell allows an unauthorized attacker to execute code over a network.

9.8 · CVSS 3.1 · CriticalSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.96% · 60.7th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interactionWithin 72 hoursCritical technical impact with a remotely reachable, unauthenticated path; no CISA KEV confirmation is currently recorded.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83910 Critical technical severity
RPC Runtime Library Remote Code Execution Vulnerability

Out-of-bounds write in RPC Runtime allows an unauthorized attacker to execute code over a network.

9.8 · CVSS 3.1 · CriticalSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.96% · 60.7th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interactionWithin 72 hoursCritical technical impact with a remotely reachable, unauthenticated path; no CISA KEV confirmation is currently recorded.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-100222 Critical technical severity
Network Policy Server (NPS) Remote Code Execution Vulnerability

Heap-based buffer overflow in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.

9.8 · CVSS 3.1 · CriticalSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.96% · 60.7th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interactionWithin 72 hoursCritical technical impact with a remotely reachable, unauthenticated path; no CISA KEV confirmation is currently recorded.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-97805 Critical technical severity
Windows Partition Management Driver Remote Code Execution Vulnerability

Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute code over a network.

9.8 · CVSS 3.1 · CriticalSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.96% · 60.6th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interactionWithin 72 hoursCritical technical impact with a remotely reachable, unauthenticated path; no CISA KEV confirmation is currently recorded.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-85806 Critical technical severity
Network Policy Server (NPS) Remote Code Execution Vulnerability

Integer underflow (wrap or wraparound) in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.

9.8 · CVSS 3.1 · CriticalSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.93% · 59.7th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interactionWithin 72 hoursCritical technical impact with a remotely reachable, unauthenticated path; no CISA KEV confirmation is currently recorded.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-85809 Critical technical severity
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine

9.8 · CVSS 3.1 · CriticalSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.93% · 59.7th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interactionWithin 72 hoursCritical technical impact with a remotely reachable, unauthenticated path; no CISA KEV confirmation is currently recorded.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-85814 Critical technical severity
Microsoft Windows Media Foundation Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.

9.8 · CVSS 3.1 · CriticalSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.93% · 59.7th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interactionWithin 72 hoursCritical technical impact with a remotely reachable, unauthenticated path; no CISA KEV confirmation is currently recorded.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-96320 Critical technical severity
Windows DHCP Server Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

9.8 · CVSS 3.1 · CriticalSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.93% · 59.7th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interactionWithin 72 hoursCritical technical impact with a remotely reachable, unauthenticated path; no CISA KEV confirmation is currently recorded.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83782 Critical technical severity
Windows Shell Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network.

9.8 · CVSS 3.1 · CriticalSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.89% · 58.6th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interactionWithin 72 hoursCritical technical impact with a remotely reachable, unauthenticated path; no CISA KEV confirmation is currently recorded.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-84015 Critical technical severity
Remote Access Point-to-Point Protocol (PPP) EAP-TLS Remote Code Execution Vulnerability

Heap-based buffer overflow in Remote Access Point-to-Point Protocol (PPP) EAP-TLS allows an unauthorized attacker to execute code over a network.

9.8 · CVSS 3.1 · CriticalSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.89% · 58.6th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interactionWithin 72 hoursCritical technical impact with a remotely reachable, unauthenticated path; no CISA KEV confirmation is currently recorded.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-85792 Critical technical severity
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine

9.8 · CVSS 3.1 · CriticalSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.89% · 58.6th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interactionWithin 72 hoursCritical technical impact with a remotely reachable, unauthenticated path; no CISA KEV confirmation is currently recorded.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-96924 Critical technical severity
Windows OLE Remote Code Execution Vulnerability

Untrusted pointer dereference in Windows OLE allows an unauthorized attacker to execute code over a network.

9.8 · CVSS 3.1 · CriticalSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.89% · 58.6th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interactionWithin 72 hoursCritical technical impact with a remotely reachable, unauthenticated path; no CISA KEV confirmation is currently recorded.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-105010 Critical technical severity
Microsoft Windows Search Component Elevation of Privilege Vulnerability

Use after free in Microsoft Windows Search Component allows an unauthorized attacker to elevate privileges over a network.

9.8 · CVSS 3.1 · CriticalSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.89% · 58.6th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interactionWithin 72 hoursCritical technical impact with a remotely reachable, unauthenticated path; no CISA KEV confirmation is currently recorded.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70024 Critical technical severity
Windows Internet Information Services Remote Code Execution Vulnerability

Stack-based buffer overflow in Windows Internet Information Services allows an unauthorized attacker to execute code over a network.

9.8 · CVSS 3.1 · CriticalSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.80% · 55.5th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interactionWithin 72 hoursCritical technical impact with a remotely reachable, unauthenticated path; no CISA KEV confirmation is currently recorded.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-69634 Critical technical severity
Windows iSCSI Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a network.

9.8 · CVSS 3.1 · CriticalSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.79% · 55.3th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interactionWithin 72 hoursCritical technical impact with a remotely reachable, unauthenticated path; no CISA KEV confirmation is currently recorded.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-69705 Critical technical severity
Windows iSCSI Remote Code Execution Vulnerability

Out-of-bounds write in Windows iSCSI allows an unauthorized attacker to execute code over a network.

9.8 · CVSS 3.1 · CriticalSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.79% · 55.3th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interactionWithin 72 hoursCritical technical impact with a remotely reachable, unauthenticated path; no CISA KEV confirmation is currently recorded.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-69883 Critical technical severity
Windows iSCSI Remote Code Execution Vulnerability

Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.

9.8 · CVSS 3.1 · CriticalSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.79% · 55.3th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interactionWithin 72 hoursCritical technical impact with a remotely reachable, unauthenticated path; no CISA KEV confirmation is currently recorded.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-69886 Critical technical severity
Windows Imaging Component Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.

9.8 · CVSS 3.1 · CriticalSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.79% · 55.3th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interactionWithin 72 hoursCritical technical impact with a remotely reachable, unauthenticated path; no CISA KEV confirmation is currently recorded.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-96934 Critical technical severity
Windows DHCP Server Remote Code Execution Vulnerability

Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

9.8 · CVSS 3.1 · CriticalSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.73% · 53.1th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interactionWithin 72 hoursCritical technical impact with a remotely reachable, unauthenticated path; no CISA KEV confirmation is currently recorded.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83748 Critical technical severity
Windows Error Reporting Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.

9.8 · CVSS 3.1 · CriticalSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.72% · 52.9th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interactionWithin 72 hoursCritical technical impact with a remotely reachable, unauthenticated path; no CISA KEV confirmation is currently recorded.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83935 Critical technical severity
Microsoft XML Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft XML allows an unauthorized attacker to execute code over a network.

9.8 · CVSS 3.1 · CriticalSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.69% · 51.9th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interactionWithin 72 hoursCritical technical impact with a remotely reachable, unauthenticated path; no CISA KEV confirmation is currently recorded.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-97815 Critical technical severity
Windows Error Reporting Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.

9.8 · CVSS 3.1 · CriticalSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.69% · 51.6th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interactionWithin 72 hoursCritical technical impact with a remotely reachable, unauthenticated path; no CISA KEV confirmation is currently recorded.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-96096 Critical technical severity
Windows Media Player Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network.

9.8 · CVSS 3.1 · CriticalSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.67% · 51.0th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interactionWithin 72 hoursCritical technical impact with a remotely reachable, unauthenticated path; no CISA KEV confirmation is currently recorded.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-96113 Critical technical severity
Windows Domain Name Service Remote Code Execution Vulnerability

Heap-based buffer overflow in DNS Server allows an unauthorized attacker to execute code over a network.

9.8 · CVSS 3.1 · CriticalSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.67% · 51.0th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interactionWithin 72 hoursCritical technical impact with a remotely reachable, unauthenticated path; no CISA KEV confirmation is currently recorded.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83862 Critical technical severity
Windows Network Load Balancing Remote Code Execution Vulnerability

Use after free in Windows Network Load Balancing allows an unauthorized attacker to execute code over a network.

9.8 · CVSS 3.1 · CriticalSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.65% · 49.9th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interactionWithin 72 hoursCritical technical impact with a remotely reachable, unauthenticated path; no CISA KEV confirmation is currently recorded.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83869 Critical technical severity
Windows Domain Name Service Remote Code Execution Vulnerability

Integer underflow (wrap or wraparound) in DNS Server allows an unauthorized attacker to execute code over a network.

9.8 · CVSS 3.1 · CriticalSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.65% · 49.8th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interactionWithin 72 hoursCritical technical impact with a remotely reachable, unauthenticated path; no CISA KEV confirmation is currently recorded.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-85928 Critical technical severity
Windows Volume Manager Extension Driver Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network.

9.8 · CVSS 3.1 · CriticalSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.65% · 49.9th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interactionWithin 72 hoursCritical technical impact with a remotely reachable, unauthenticated path; no CISA KEV confirmation is currently recorded.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-96864 Critical technical severity
Microsoft Failover Cluster Virtual Driver Remote Code Execution Vulnerability

Double free in Microsoft Failover Cluster Virtual Driver allows an unauthorized attacker to execute code over a network.

9.8 · CVSS 3.1 · CriticalSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.65% · 49.8th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interactionWithin 72 hoursCritical technical impact with a remotely reachable, unauthenticated path; no CISA KEV confirmation is currently recorded.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-105008 Critical technical severity
Windows Schannel Spoofing Vulnerability

No cwe for this issue in Windows Schannel allows an unauthorized attacker to perform spoofing over a network.

9.0 · CVSS 3.1 · CriticalSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.60% · 47.4th percentileForecast date: 2026-10-14NETWORK · HIGH complexity · NONE privileges · NONE user interactionWithin 72 hoursCritical technical impact with a remotely reachable, unauthenticated path; no CISA KEV confirmation is currently recorded.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-96252 Critical technical severity
Active Directory Federation Services (AD FS) Spoofing Vulnerability

Improper verification of cryptographic signature in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.

9.1 · CVSS 3.1 · CriticalSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.48% · 39.9th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interactionWithin 72 hoursCritical technical impact with a remotely reachable, unauthenticated path; no CISA KEV confirmation is currently recorded.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-88091 Scheduled assessment
Windows Management Instrumentation Elevation of Privilege Vulnerability

Deserialization of untrusted data in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 2.14% · 81.6th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-96186 Scheduled assessment
Microsoft Windows Media Foundation Elevation of Privilege Vulnerability

Deserialization of untrusted data in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 1.65% · 76.0th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70058 Scheduled assessment
Windows DHCP Server Remote Code Execution Vulnerability

Out-of-bounds write in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

7.5 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 1.20% · 67.6th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70082 Scheduled assessment
Windows DNS Denial of Service Vulnerability

Uncaught exception in Windows DNS allows an unauthorized attacker to deny service over a network.

7.5 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 1.20% · 67.6th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70155 Scheduled assessment
Windows DNS Denial of Service Vulnerability

Missing release of memory after effective lifetime in Windows DNS allows an unauthorized attacker to deny service over a network.

7.5 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 1.20% · 67.6th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83635 Scheduled assessment
Role: DNS Server Denial of Service Vulnerability

Out-of-bounds read in DNS Server allows an unauthorized attacker to deny service over a network.

7.5 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 1.20% · 67.6th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83655 Scheduled assessment
Network Policy Server (NPS) Denial of Service Vulnerability

Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to deny service over a network.

7.5 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 1.20% · 67.6th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83665 Scheduled assessment
Windows DHCP Server Denial of Service Vulnerability

Null pointer dereference in Windows DHCP Server allows an unauthorized attacker to deny service over a network.

7.5 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 1.20% · 67.6th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70031 Scheduled assessment
Windows iSCSI Denial of Service Vulnerability

Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to deny service over a network.

7.5 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 1.15% · 66.2th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70033 Scheduled assessment
Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability

Missing release of memory after effective lifetime in Remote Desktop Gateway Service allows an unauthorized attacker to deny service over a network.

7.5 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 1.15% · 66.2th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70079 Scheduled assessment
Windows DNS Denial of Service Vulnerability

Improper enforcement of behavioral workflow in Windows DNS allows an unauthorized attacker to deny service over a network.

7.5 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 1.15% · 66.2th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70133 Scheduled assessment
Windows SMB Server Denial of Service Vulnerability

Allocation of resources without limits or throttling in Windows SMB Server allows an unauthorized attacker to deny service over a network.

7.5 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 1.15% · 66.2th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83795 Scheduled assessment
Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability

Heap-based buffer overflow in Windows IKE Extension allows an unauthorized attacker to deny service over a network.

7.5 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 1.15% · 66.2th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83843 Scheduled assessment
Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability

Out-of-bounds read in Windows Internet Key Exchange (IKE) Protocol allows an unauthorized attacker to deny service over a network.

7.5 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 1.15% · 66.2th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83860 Scheduled assessment
Windows GDI Denial of Service Vulnerability

Stack-based buffer overflow in Windows GDI allows an unauthorized attacker to deny service over a network.

7.5 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 1.15% · 66.2th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-84017 Scheduled assessment
Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability

Null pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network.

7.5 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 1.15% · 66.2th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-85808 Scheduled assessment
Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability

Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network.

7.5 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 1.15% · 66.2th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-96861 Scheduled assessment
Network Device Enrollment Service (NDES) Denial of Service Vulnerability

Out-of-bounds read in Network Device Enrollment Service (NDES) allows an unauthorized attacker to deny service over a network.

7.5 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 1.15% · 66.2th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-96866 Scheduled assessment
Network Device Enrollment Service (NDES) Denial of Service Vulnerability

Out-of-bounds read in Network Device Enrollment Service (NDES) allows an unauthorized attacker to deny service over a network.

7.5 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 1.15% · 66.2th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-105723 Scheduled assessment
Windows Distributed File System (DFS) Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows Distributed File System (DFS) allows an unauthorized attacker to elevate privileges over a network.

7.5 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 1.15% · 66.2th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Patch available. 6.2.9200.26434:Security Update:https://support.microsoft.com/help/5126835
CVE-2026-83647 Scheduled assessment
Windows Active Directory Domain Services Denial of Service Vulnerability

Out-of-bounds read in Active Directory Domain Services allows an unauthorized attacker to deny service over a network.

7.5 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 1.15% · 66.1th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-102217 Scheduled assessment
WebDAV Elevation of Privilege Vulnerability

Improper resolution of path equivalence in WebDAV allows an authorized attacker to elevate privileges over a network.

8.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 1.11% · 65.3th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83645 Scheduled assessment
Active Directory Federation Services (AD FS) Denial of Service Vulnerability

Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.

7.5 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 1.10% · 65.0th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-85319 Scheduled assessment
Active Directory Federation Services (AD FS) Denial of Service Vulnerability

Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.

7.5 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 1.10% · 65.0th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-85321 Scheduled assessment
Active Directory Federation Services (AD FS) Denial of Service Vulnerability

Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.

7.5 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 1.06% · 63.7th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-85322 Scheduled assessment
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.

7.5 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 1.05% · 63.5th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-88159 Scheduled assessment
Windows Background Intelligent Transfer Service (BITS) Remote Code Execution Vulnerability

Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.

8.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 1.02% · 62.7th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-85334 Scheduled assessment
Windows Message Queuing Queue Manager Information Disclosure Vulnerability

Out-of-bounds read in Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose information over a network.

7.5 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 1.00% · 62.2th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-85353 Scheduled assessment
Windows Print Spooler Components Information Disclosure Vulnerability

Out-of-bounds read in Windows Print Spooler Components allows an unauthorized attacker to disclose information over a network.

7.5 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 1.00% · 62.2th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-96245 Scheduled assessment
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.

7.5 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 1.00% · 62.2th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-96246 Scheduled assessment
Network Policy Server (NPS) Information Disclosure Vulnerability

Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to disclose information over a network.

7.5 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 1.00% · 62.2th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-103569 Scheduled assessment
Windows IKE Extension Information Disclosure Vulnerability

Out-of-bounds read in Windows IKE Extension allows an unauthorized attacker to disclose information over a network.

7.5 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 1.00% · 62.2th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83670 Scheduled assessment
Function Discovery Service (fdwsd.dll) Information Disclosure Vulnerability

Out-of-bounds read in Function Discovery Service (fdwsd.dll) allows an unauthorized attacker to disclose information over a network.

7.5 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.96% · 60.9th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83784 Scheduled assessment
Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability

Absolute path traversal in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges over a network.

8.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.95% · 60.5th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-88136 Scheduled assessment
Web Distributed Authoring and Versioning (WEBDAV) Remote Code Execution Vulnerability

Improper resolution of path equivalence in WebDAV allows an authorized attacker to execute code over a network.

8.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.95% · 60.5th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70069 Scheduled assessment
Windows DHCP Server Remote Code Execution Vulnerability

Stack-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over a network.

8.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.91% · 59.2th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83889 Scheduled assessment
Windows DNS Server Remote Code Execution Vulnerability

Release of invalid pointer or reference in DNS Server allows an authorized attacker to execute code over a network.

8.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.91% · 59.2th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-85798 Scheduled assessment
Windows Distributed File System (DFS) Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network.

7.2 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.89% · 58.4th percentileForecast date: 2026-10-14NETWORK · LOW complexity · HIGH privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-108467 Scheduled assessment
Microsoft PostScript Printer Driver Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an authorized attacker to execute code over a network.

8.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.89% · 58.4th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-103558 Scheduled assessment
Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability

Deadlock in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network.

7.5 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.88% · 58.3th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70158 Scheduled assessment
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine

8.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.85% · 57.3th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-85931 Scheduled assessment
Windows Distributed File System (DFS) Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network.

8.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.85% · 57.3th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-88142 Scheduled assessment
Windows Background Intelligent Transfer Service (BITS) Remote Code Execution Vulnerability

Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.

8.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.85% · 57.3th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-88165 Scheduled assessment
Windows Active Directory Domain Services Remote Code Execution Vulnerability

Out-of-bounds write in Active Directory Domain Services allows an authorized attacker to execute code over a network.

8.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.85% · 57.3th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-100220 Scheduled assessment
Windows Media Video Decoder Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Media Video Decoder allows an unauthorized attacker to execute code over a network.

8.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.84% · 56.9th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · REQUIRED user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70068 Scheduled assessment
Windows Client-Side Caching (CSC) Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an unauthorized attacker to elevate privileges over a network.

8.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.84% · 56.8th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · REQUIRED user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70089 Scheduled assessment
Windows GDI Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows GDI allows an unauthorized attacker to execute code over a network.

8.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.84% · 56.8th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · REQUIRED user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70149 Scheduled assessment
Windows Client Side Caching driver (csc.sys) Elevation of Privilege Vulnerability

Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver (csc.sys) allows an authorized attacker to disclose information locally.

8.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.84% · 56.8th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · REQUIRED user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70210 Scheduled assessment
Windows OLE DB Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to elevate privileges over a network.

8.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.84% · 56.8th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · REQUIRED user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70258 Scheduled assessment
Microsoft Windows Media Foundation Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.

8.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.84% · 56.8th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · REQUIRED user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70262 Scheduled assessment
WebDAV Elevation of Privilege Vulnerability

Heap-based buffer overflow in WebDAV allows an unauthorized attacker to elevate privileges over a network.

8.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.84% · 56.8th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · REQUIRED user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70275 Scheduled assessment
Windows CD-ROM File System Driver Remote Code Execution Vulnerability

Untrusted pointer dereference in Windows CD-ROM Driver allows an unauthorized attacker to execute code over a network.

8.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.84% · 56.8th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · REQUIRED user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-77496 Scheduled assessment
Windows Imaging Component Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.

8.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.84% · 56.8th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · REQUIRED user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83642 Scheduled assessment
Windows Domain Name Service Remote Code Execution Vulnerability

Access of resource using incompatible type ('type confusion') in DNS Server allows an unauthorized attacker to execute code over a network.

8.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.84% · 56.8th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · REQUIRED user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83643 Scheduled assessment
Windows Error Reporting Remote Code Execution Vulnerability

Stack-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.

8.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.84% · 56.8th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · REQUIRED user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83688 Scheduled assessment
Remote Desktop Client Remote Code Execution Vulnerability

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

8.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.84% · 56.8th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · REQUIRED user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-96325 Scheduled assessment
Windows SMB Server Denial of Service Vulnerability

Missing reference to active allocated resource in Windows SMB Server allows an unauthorized attacker to deny service over a network.

7.5 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.83% · 56.7th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83778 Scheduled assessment
Microsoft Internet Messaging API Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Internet Messaging API allows an unauthorized attacker to execute code over a network.

8.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.80% · 55.8th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · REQUIRED user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83934 Scheduled assessment
Windows GDI+ Remote Code Execution Vulnerability

Stack-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network.

8.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.80% · 55.6th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · REQUIRED user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-102225 Scheduled assessment
Windows Text Shaping Remote Code Execution Vulnerability

Out-of-bounds read in Windows Text Shaping allows an unauthorized attacker to execute code over a network.

8.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.80% · 55.6th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · REQUIRED user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83789 Scheduled assessment
Windows SMB Client Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows SMB Client allows an unauthorized attacker to elevate privileges over a network.

8.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.77% · 54.5th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · REQUIRED user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83874 Scheduled assessment
Windows Event Tracing Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Event Tracing allows an unauthorized attacker to execute code over a network.

8.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.77% · 54.5th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · REQUIRED user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-88219 Scheduled assessment
RPC Runtime Library Remote Code Execution Vulnerability

Untrusted pointer dereference in RPC Runtime allows an unauthorized attacker to execute code over a network.

8.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.77% · 54.5th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · REQUIRED user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-102203 Scheduled assessment
RPC Runtime Remote Code Execution Vulnerability

Access of resource using incompatible type ('type confusion') in RPC Runtime allows an unauthorized attacker to execute code over a network.

8.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.77% · 54.5th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · REQUIRED user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-103575 Scheduled assessment
Remote Desktop Client Remote Code Execution Vulnerability

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

8.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.77% · 54.5th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · REQUIRED user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-105007 Scheduled assessment
Windows NDIS Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in the Network Driver Interface Specification (NDIS) when ndis.sys fails to check the length of a buffer prior to copying memory to it. To exploit the vulnerability, in a local attack scenario, an attacker could run a specially crafted application to elevate the attacker's privilege level. An attacker who successfully exploited this vulnerability could run processes in a

8.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.77% · 54.5th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · REQUIRED user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-108458 Scheduled assessment
Remote Desktop Client Remote Code Execution Vulnerability

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

8.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.77% · 54.5th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · REQUIRED user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-85324 Scheduled assessment
Active Directory Federation Services (AD FS) Denial of Service Vulnerability

Memory allocation with excessive size value in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.

7.5 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.77% · 54.5th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-85359 Scheduled assessment
Windows Performance Monitor Elevation of Privilege Vulnerability

Improper control of generation of code ('code injection') in Windows Performance Monitor allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.74% · 53.7th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-85864 Scheduled assessment
Python Elevation of Privilege Vulnerability

Improper privilege management in Python allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.74% · 53.7th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-108131 Scheduled assessment
Active Directory Federation Services (AD FS) Spoofing Vulnerability

No cwe for this issue in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.

7.5 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.74% · 53.6th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-85817 Scheduled assessment
Microsoft PowerShell Remote Code Execution Vulnerability

Reliance on untrusted inputs in a security decision in Windows PowerShell allows an unauthorized attacker to execute code over a network.

8.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.74% · 53.5th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · REQUIRED user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70127 Scheduled assessment
Windows Domain Name Service Remote Code Execution Vulnerability

Use after free in DNS Server allows an unauthorized attacker to execute code over a network.

8.1 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.72% · 52.9th percentileForecast date: 2026-10-14NETWORK · HIGH complexity · NONE privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83522 Scheduled assessment
Windows IKE Extension Spoofing Vulnerability

Reliance on untrusted inputs in a security decision in Windows IKE Extension allows an unauthorized attacker to perform spoofing over a network.

8.1 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.72% · 52.9th percentileForecast date: 2026-10-14NETWORK · HIGH complexity · NONE privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83914 Scheduled assessment
Microsoft XML Remote Code Execution Vulnerability

Use after free in Microsoft XML allows an unauthorized attacker to execute code over a network.

8.1 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.72% · 52.9th percentileForecast date: 2026-10-14NETWORK · HIGH complexity · NONE privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-100218 Scheduled assessment
Remote Desktop Gateway Service Remote Code Execution Vulnerability

Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.

8.1 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.72% · 52.9th percentileForecast date: 2026-10-14NETWORK · HIGH complexity · NONE privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70229 Scheduled assessment
Windows Active Directory Domain Services Remote Code Execution Vulnerability

Incorrect authorization in Active Directory Domain Services allows an unauthorized attacker to execute code over a network.

8.1 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.71% · 52.5th percentileForecast date: 2026-10-14NETWORK · HIGH complexity · NONE privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-97788 Scheduled assessment
Active Directory Federation Services (AD FS) Information Disclosure Vulnerability

Observable discrepancy in Active Directory Federation Services (AD FS) allows an unauthorized attacker to disclose information over a network.

7.5 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.69% · 51.8th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70187 Scheduled assessment
Windows Remote Desktop Services Remote Code Execution Vulnerability

Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.

8.1 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.69% · 51.6th percentileForecast date: 2026-10-14NETWORK · HIGH complexity · NONE privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-88119 Scheduled assessment
Windows DHCP Server Remote Code Execution Vulnerability

Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

8.1 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.69% · 51.6th percentileForecast date: 2026-10-14NETWORK · HIGH complexity · NONE privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-88120 Scheduled assessment
Windows DHCP Server Remote Code Execution Vulnerability

Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

8.1 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.69% · 51.6th percentileForecast date: 2026-10-14NETWORK · HIGH complexity · NONE privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-88171 Scheduled assessment
Windows DHCP Server Remote Code Execution Vulnerability

Double free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

8.1 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.69% · 51.6th percentileForecast date: 2026-10-14NETWORK · HIGH complexity · NONE privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-108460 Scheduled assessment
Windows Message Queuing Remote Code Execution Vulnerability

Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.

8.1 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.69% · 51.6th percentileForecast date: 2026-10-14NETWORK · HIGH complexity · NONE privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70038 Scheduled assessment
Windows iSCSI Remote Code Execution Vulnerability

Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.

8.1 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.67% · 51.0th percentileForecast date: 2026-10-14NETWORK · HIGH complexity · NONE privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70111 Scheduled assessment
Windows Kernel Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows Kernel allows an unauthorized attacker to elevate privileges over a network.

8.1 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.67% · 51.0th percentileForecast date: 2026-10-14NETWORK · HIGH complexity · NONE privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-84012 Scheduled assessment
Windows Remote Desktop Services Remote Code Execution Vulnerability

Double free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.

8.1 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.67% · 51.0th percentileForecast date: 2026-10-14NETWORK · HIGH complexity · NONE privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-85371 Scheduled assessment
Network Policy Server (NPS) Remote Code Execution Vulnerability

Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.

8.1 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.67% · 51.0th percentileForecast date: 2026-10-14NETWORK · HIGH complexity · NONE privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-85799 Scheduled assessment
Network Policy Server (NPS) Remote Code Execution Vulnerability

Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.

8.1 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.67% · 51.0th percentileForecast date: 2026-10-14NETWORK · HIGH complexity · NONE privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-85926 Scheduled assessment
Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.

8.1 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.67% · 51.0th percentileForecast date: 2026-10-14NETWORK · HIGH complexity · NONE privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70014 Scheduled assessment
Windows Cryptographic Services Remote Code Execution Vulnerability

Use after free in Windows Cryptographic Services allows an authorized attacker to execute code over a network.

7.5 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.66% · 50.5th percentileForecast date: 2026-10-14NETWORK · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70207 Scheduled assessment
Network Policy Server (NPS) Remote Code Execution Vulnerability

Heap-based buffer overflow in Network Policy Server (NPS) allows an authorized attacker to execute code over a network.

7.5 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.66% · 50.5th percentileForecast date: 2026-10-14NETWORK · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-69326 Scheduled assessment
Graphic Fonts Remote Code Execution Vulnerability

Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.

8.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.64% · 49.4th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · REQUIRED user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83725 Scheduled assessment
Microsoft Windows Search Component Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Windows Search Component allows an unauthorized attacker to execute code over a network.

8.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.61% · 47.8th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · REQUIRED user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83929 Scheduled assessment
Windows GDI Remote Code Execution Vulnerability

Out-of-bounds write in Windows GDI allows an unauthorized attacker to execute code over a network.

8.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.61% · 47.8th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · REQUIRED user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83511 Scheduled assessment
Active Directory Federation Services (AD FS) Spoofing Vulnerability

Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.

7.4 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.59% · 46.9th percentileForecast date: 2026-10-14NETWORK · HIGH complexity · NONE privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-96222 Scheduled assessment
Active Directory Federation Services (AD FS) Spoofing Vulnerability

Improper certificate validation in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.

7.4 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.58% · 46.6th percentileForecast date: 2026-10-14NETWORK · HIGH complexity · NONE privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-69452 Scheduled assessment
Windows Enterprise App Management Elevation of Privilege Vulnerability

Use after free in Windows Enterprise App Management allows an authorized attacker to elevate privileges over a network.

7.1 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.58% · 46.6th percentileForecast date: 2026-10-14NETWORK · HIGH complexity · LOW privileges · REQUIRED user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83928 Scheduled assessment
Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability

Out-of-bounds write in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to execute code over a network.

8.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.58% · 46.2th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70095 Scheduled assessment
Windows iSCSI Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a network.

7.5 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.57% · 45.9th percentileForecast date: 2026-10-14NETWORK · HIGH complexity · NONE privileges · REQUIRED user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Patch available. 10.0.26300.9711:Security Update:https://support.microsoft.com/help/5127648
CVE-2026-69976 Scheduled assessment
Remote Desktop Client Remote Code Execution Vulnerability

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

7.5 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.57% · 45.8th percentileForecast date: 2026-10-14NETWORK · HIGH complexity · NONE privileges · REQUIRED user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-69984 Scheduled assessment
Remote Desktop Client Remote Code Execution Vulnerability

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

7.5 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.57% · 45.8th percentileForecast date: 2026-10-14NETWORK · HIGH complexity · NONE privileges · REQUIRED user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-69986 Scheduled assessment
Remote Desktop Client Remote Code Execution Vulnerability

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

7.5 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.57% · 45.8th percentileForecast date: 2026-10-14NETWORK · HIGH complexity · NONE privileges · REQUIRED user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-69987 Scheduled assessment
Remote Desktop Client Remote Code Execution Vulnerability

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

7.5 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.57% · 45.8th percentileForecast date: 2026-10-14NETWORK · HIGH complexity · NONE privileges · REQUIRED user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-69988 Scheduled assessment
Remote Desktop Client Remote Code Execution Vulnerability

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

7.5 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.57% · 45.8th percentileForecast date: 2026-10-14NETWORK · HIGH complexity · NONE privileges · REQUIRED user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-69991 Scheduled assessment
Remote Desktop Client Remote Code Execution Vulnerability

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

7.5 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.57% · 45.8th percentileForecast date: 2026-10-14NETWORK · HIGH complexity · NONE privileges · REQUIRED user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-69992 Scheduled assessment
Remote Desktop Services Remote Code Execution Vulnerability

Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.

7.5 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.57% · 45.8th percentileForecast date: 2026-10-14NETWORK · HIGH complexity · NONE privileges · REQUIRED user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-69994 Scheduled assessment
Remote Desktop Client Remote Code Execution Vulnerability

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

7.5 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.57% · 45.8th percentileForecast date: 2026-10-14NETWORK · HIGH complexity · NONE privileges · REQUIRED user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-69995 Scheduled assessment
Remote Desktop Client Remote Code Execution Vulnerability

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

7.5 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.57% · 45.8th percentileForecast date: 2026-10-14NETWORK · HIGH complexity · NONE privileges · REQUIRED user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-69996 Scheduled assessment
Remote Desktop Client Remote Code Execution Vulnerability

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

7.5 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.57% · 45.8th percentileForecast date: 2026-10-14NETWORK · HIGH complexity · NONE privileges · REQUIRED user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-69997 Scheduled assessment
Remote Desktop Client Remote Code Execution Vulnerability

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

7.5 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.57% · 45.8th percentileForecast date: 2026-10-14NETWORK · HIGH complexity · NONE privileges · REQUIRED user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-69998 Scheduled assessment
Remote Desktop Client Remote Code Execution Vulnerability

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

7.5 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.57% · 45.8th percentileForecast date: 2026-10-14NETWORK · HIGH complexity · NONE privileges · REQUIRED user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70004 Scheduled assessment
Remote Desktop Client Remote Code Execution Vulnerability

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

7.5 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.57% · 45.8th percentileForecast date: 2026-10-14NETWORK · HIGH complexity · NONE privileges · REQUIRED user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70006 Scheduled assessment
Remote Desktop Client Remote Code Execution Vulnerability

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

7.5 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.57% · 45.8th percentileForecast date: 2026-10-14NETWORK · HIGH complexity · NONE privileges · REQUIRED user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70012 Scheduled assessment
Remote Desktop Client Remote Code Execution Vulnerability

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

7.5 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.57% · 45.8th percentileForecast date: 2026-10-14NETWORK · HIGH complexity · NONE privileges · REQUIRED user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-96071 Scheduled assessment
Windows Media Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network.

7.5 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.57% · 45.8th percentileForecast date: 2026-10-14NETWORK · HIGH complexity · NONE privileges · REQUIRED user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-97789 Scheduled assessment
Remote Desktop Client Remote Code Execution Vulnerability

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

7.5 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.57% · 45.8th percentileForecast date: 2026-10-14NETWORK · HIGH complexity · NONE privileges · REQUIRED user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-85339 Scheduled assessment
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine

8.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.56% · 45.1th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · REQUIRED user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-85903 Scheduled assessment
Windows Domain Name Service Remote Code Execution Vulnerability

Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.

8.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.56% · 45.1th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · REQUIRED user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-85936 Scheduled assessment
Windows Shell Remote Code Execution Vulnerability

Double free in Windows Shell allows an unauthorized attacker to execute code over a network.

8.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.56% · 45.1th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · REQUIRED user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-88112 Scheduled assessment
Windows Domain Name Service Remote Code Execution Vulnerability

Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.

8.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.56% · 45.1th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · REQUIRED user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-88115 Scheduled assessment
Windows Server for NFS Remote Code Execution Vulnerability

Out-of-bounds read in Windows Server for NFS allows an unauthorized attacker to execute code over a network.

8.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.56% · 45.1th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · REQUIRED user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-69913 Scheduled assessment
Windows TCP/IP Remote Code Execution Vulnerability

Use after free in Windows TCP/IP allows an unauthorized attacker to execute code over a network.

8.1 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.55% · 44.8th percentileForecast date: 2026-10-14NETWORK · HIGH complexity · NONE privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-88117 Scheduled assessment
Windows DHCP Server Remote Code Execution Vulnerability

Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

8.1 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.55% · 44.7th percentileForecast date: 2026-10-14NETWORK · HIGH complexity · NONE privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70013 Scheduled assessment
Windows iSCSI Remote Code Execution Vulnerability

Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.

8.1 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.53% · 43.7th percentileForecast date: 2026-10-14NETWORK · HIGH complexity · NONE privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-69802 Scheduled assessment
Network Device Enrollment Service (NDES) Remote Code Execution Vulnerability

Weak authentication in Network Device Enrollment Service (NDES) allows an unauthorized attacker to execute code over a network.

8.1 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.52% · 42.9th percentileForecast date: 2026-10-14NETWORK · HIGH complexity · NONE privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-88173 Scheduled assessment
Windows Background Intelligent Transfer Service (BITS) Remote Code Execution Vulnerability

Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.

8.1 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.52% · 42.5th percentileForecast date: 2026-10-14NETWORK · HIGH complexity · NONE privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-88121 Scheduled assessment
Windows Background Intelligent Transfer Service (BITS) Remote Code Execution Vulnerability

Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.

8.0 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.49% · 40.4th percentileForecast date: 2026-10-14ADJACENT · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-100215 Scheduled assessment
Microsoft Graphics Component Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.48% · 39.7th percentileForecast date: 2026-10-14LOCAL · LOW complexity · NONE privileges · REQUIRED user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-96844 Scheduled assessment
Microsoft Bluetooth Driver Elevation of Privilege Vulnerability

Integer underflow (wrap or wraparound) in Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges over an adjacent network.

8.0 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.47% · 39.0th percentileForecast date: 2026-10-14ADJACENT · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70126 Scheduled assessment
Windows Bluetooth Port Driver Remote Code Execution

Out-of-bounds read in Windows Bluetooth Port Driver allows an unauthorized attacker to execute code over an adjacent network.

7.1 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.47% · 39.0th percentileForecast date: 2026-10-14ADJACENT · HIGH complexity · NONE privileges · REQUIRED user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70131 Scheduled assessment
Microsoft Windows Media Foundation Elevation of Privilege Vulnerability

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.44% · 37.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · NONE privileges · REQUIRED user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83836 Scheduled assessment
Windows Event Tracing Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Event Tracing allows an unauthorized attacker to execute code locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.44% · 37.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · NONE privileges · REQUIRED user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70092 Scheduled assessment
Microsoft PostScript Printer Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.43% · 35.4th percentileForecast date: 2026-10-14LOCAL · LOW complexity · NONE privileges · REQUIRED user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70109 Scheduled assessment
Microsoft PostScript Printer Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.43% · 35.4th percentileForecast date: 2026-10-14LOCAL · LOW complexity · NONE privileges · REQUIRED user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70110 Scheduled assessment
Microsoft PostScript Printer Driver Elevation of Privilege Vulnerability

Stack-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.43% · 35.4th percentileForecast date: 2026-10-14LOCAL · LOW complexity · NONE privileges · REQUIRED user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83704 Scheduled assessment
Microsoft Windows Search Component Elevation of Privilege Vulnerability

Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.42% · 35.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-88174 Scheduled assessment
Windows Deployment Services Remote Code Execution Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Deployment Services allows an unauthorized attacker to execute code over a network.

8.1 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.42% · 34.9th percentileForecast date: 2026-10-14NETWORK · HIGH complexity · NONE privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70250 Scheduled assessment
Windows DHCP Client Remote Code Execution Vulnerability

Use after free in Windows DHCP Client allows an unauthorized attacker to execute code over an adjacent network.

8.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.42% · 34.7th percentileForecast date: 2026-10-14ADJACENT · LOW complexity · NONE privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70054 Scheduled assessment
Windows NetBIOS Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows NetBIOS allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.41% · 33.8th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-88133 Scheduled assessment
Windows Portable Device Enumerator Service Elevation of Privilege Vulnerability

Improper authorization in Windows Portable Device Enumerator Service allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.41% · 33.6th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-96911 Scheduled assessment
Microsoft Windows Search Component Elevation of Privilege Vulnerability

Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.40% · 32.8th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-88191 Scheduled assessment
Microsoft Windows Search Component Elevation of Privilege Vulnerability

Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.38% · 30.6th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70060 Scheduled assessment
Windows Win32k Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.38% · 30.4th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70106 Scheduled assessment
Windows Kernel Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.38% · 30.4th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70108 Scheduled assessment
Windows Win32k Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.38% · 30.4th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70245 Scheduled assessment
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.38% · 30.4th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Patch available. 10.0.17763.9376:Security Update:https://support.microsoft.com/help/5126651
CVE-2026-70303 Scheduled assessment
Windows Kernel Elevation of Privilege Vulnerability

Out-of-bounds write in Windows Kernel allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.38% · 30.4th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70222 Scheduled assessment
Windows Shell Elevation of Privilege Vulnerability

Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.38% · 30.2th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70233 Scheduled assessment
Windows Common Log File System Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.37% · 29.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70286 Scheduled assessment
Windows Graphics Component Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.37% · 29.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83699 Scheduled assessment
Windows Client-Side Caching (CSC) Service Elevation of Privilege Vulnerability

Stack-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.37% · 29.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83830 Scheduled assessment
Windows COM+ Event System Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.37% · 29.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83848 Scheduled assessment
Windows COM+ Event System Service Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.37% · 29.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-85832 Scheduled assessment
Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.37% · 29.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-85843 Scheduled assessment
Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability

Use of uninitialized resource in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.37% · 29.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-85848 Scheduled assessment
Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.37% · 29.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-85901 Scheduled assessment
Windows Graphics Component Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.37% · 29.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-85945 Scheduled assessment
Windows Kernel Elevation of Privilege Vulnerability

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.37% · 29.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-88118 Scheduled assessment
Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability

Integer overflow or wraparound in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.37% · 29.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-96929 Scheduled assessment
Windows Kernel Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.37% · 29.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-73027 Scheduled assessment
Windows Setup Files Cleanup Elevation of Privilege Vulnerability

External control of system or configuration setting in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.36% · 28.6th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83506 Scheduled assessment
Servicing Stack Updates Elevation of Privilege Vulnerability

Untrusted search path in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.36% · 28.6th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-85856 Scheduled assessment
Internet Connection Sharing (ICS) Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Internet Connection Sharing (ICS) allows an authorized attacker to execute code over an adjacent network.

7.1 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.36% · 28.5th percentileForecast date: 2026-10-14ADJACENT · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-85811 Scheduled assessment
Network Policy Server (NPS) Remote Code Execution Vulnerability

Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over an adjacent network.

7.5 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.36% · 27.9th percentileForecast date: 2026-10-14ADJACENT · HIGH complexity · NONE privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70132 Scheduled assessment
Windows Portable Device File System Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Portable Device File System Driver allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.36% · 27.6th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-85908 Scheduled assessment
Windows Graphics Component Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.36% · 27.6th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-88152 Scheduled assessment
Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability

Use after free in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.36% · 27.6th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83873 Scheduled assessment
Windows Shell Elevation of Privilege Vulnerability

Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.35% · 27.3th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-85343 Scheduled assessment
Windows Hyper-V Elevation of Privilege Vulnerability

Improper link resolution before file access ('link following') in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.35% · 27.3th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-69830 Scheduled assessment
Windows DHCP Server Remote Code Execution Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

8.1 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.35% · 26.9th percentileForecast date: 2026-10-14NETWORK · HIGH complexity · NONE privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-87705 Scheduled assessment
Windows Hyper-V Security Feature Bypass Vulnerability

Improper verification of source of a communication channel in Windows Hyper-V allows an unauthorized attacker to bypass a security feature over an adjacent network.

7.4 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.35% · 26.8th percentileForecast date: 2026-10-14ADJACENT · LOW complexity · NONE privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-88147 Scheduled assessment
Windows Secure Socket Tunneling Protocol (SSTP) Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.34% · 26.2th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-108399 Scheduled assessment
Windows Hyper-V Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

7.2 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.34% · 26.2th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · HIGH privileges · REQUIRED user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-49785 Scheduled assessment
UEFI Secure Boot Security Feature Bypass Vulnerability

Improper resource shutdown or release in Windows UEFI allows an authorized attacker to bypass a security feature locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.34% · 25.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-68836 Scheduled assessment
Windows kernel32.dll Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows kernel32.dll allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.34% · 25.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-69471 Scheduled assessment
Windows Installer Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.34% · 25.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-69798 Scheduled assessment
Windows Wired AutoConfig Service Elevation of Privilege Vulnerability

Use after free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.34% · 25.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-69850 Scheduled assessment
Windows Certificates Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows Certificates allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.34% · 25.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-69884 Scheduled assessment
Windows GDI Elevation of Privilege Vulnerability

Buffer over-read in Windows GDI allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.34% · 25.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-69916 Scheduled assessment
Windows NTFS Elevation of Privilege Vulnerability

Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.34% · 25.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-69949 Scheduled assessment
Windows Client for NFS Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Client for NFS allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.34% · 25.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-69950 Scheduled assessment
Windows Overlay Filter Elevation of Privilege Vulnerability

Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.34% · 25.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-69952 Scheduled assessment
Windows Overlay Filter Elevation of Privilege Vulnerability

Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.34% · 25.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-69953 Scheduled assessment
Windows Overlay Filter Elevation of Privilege Vulnerability

Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.34% · 25.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-69957 Scheduled assessment
Windows Overlay Filter Elevation of Privilege Vulnerability

Integer overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.34% · 25.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-69959 Scheduled assessment
Windows Overlay Filter Remote Code Execution Vulnerability

Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to execute code locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.34% · 25.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70059 Scheduled assessment
Windows OLE Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.34% · 25.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70064 Scheduled assessment
Windows Kerberos Elevation of Privilege Vulnerability

Integer underflow (wrap or wraparound) in Windows Kerberos allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.34% · 25.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70093 Scheduled assessment
Windows Rich Text Edit Control Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Rich Text Edit Control allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.34% · 25.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70113 Scheduled assessment
Windows Client for NFS Elevation of Privilege Vulnerability

Integer overflow or wraparound in Windows Client for NFS allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.34% · 25.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70138 Scheduled assessment
Windows OLE Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.34% · 25.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70139 Scheduled assessment
Windows Update Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Update Service allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.34% · 25.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70143 Scheduled assessment
Windows Network File System Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Network File System allows an authorized attacker to execute code locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.34% · 25.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70172 Scheduled assessment
Windows NTFS Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.34% · 25.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70225 Scheduled assessment
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.34% · 25.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70566 Scheduled assessment
Windows Schannel Elevation of Privilege Vulnerability

Null pointer dereference in Windows Schannel allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.34% · 25.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83508 Scheduled assessment
Windows NTFS Elevation of Privilege Vulnerability

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.34% · 25.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83513 Scheduled assessment
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.34% · 25.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83514 Scheduled assessment
Windows Partition Management Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.34% · 25.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83567 Scheduled assessment
Windows NTFS Elevation of Privilege Vulnerability

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.34% · 25.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83570 Scheduled assessment
Windows Search Service Elevation of Privilege Vulnerability

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.34% · 25.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83579 Scheduled assessment
Windows Smart Card Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Smart Card allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.34% · 25.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83637 Scheduled assessment
Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability

Out-of-bounds read in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.34% · 25.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83876 Scheduled assessment
Windows Shell Elevation of Privilege Vulnerability

Use after free in Windows Shell allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.34% · 25.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83881 Scheduled assessment
Windows exFAT File System Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.34% · 25.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83883 Scheduled assessment
Windows Win32k Elevation of Privilege Vulnerability

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.34% · 25.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83932 Scheduled assessment
Windows Group Policy Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Group Policy allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.34% · 25.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-88070 Scheduled assessment
Windows BitLocker Elevation of Privilege Vulnerability

Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.33% · 24.3th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-78459 Scheduled assessment
Microsoft Internet Information Services Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Internet Information Services allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.33% · 24.3th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-85905 Scheduled assessment
Windows UI Immersive Server API Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows UI Immersive Server allows an authorized attacker to elevate privileges locally.

8.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70177 Scheduled assessment
Microsoft Windows Search Component Elevation of Privilege Vulnerability

Numeric truncation error in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70238 Scheduled assessment
Windows Storage Spaces Controller Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83585 Scheduled assessment
Windows NTFS Elevation of Privilege Vulnerability

Use of externally-controlled format string in Windows NTFS allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83588 Scheduled assessment
Windows USB Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83638 Scheduled assessment
Windows USB Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83640 Scheduled assessment
Windows NTFS Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83641 Scheduled assessment
Windows Media Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Media allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83650 Scheduled assessment
Windows Media Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Media allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83652 Scheduled assessment
Windows NTFS Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83678 Scheduled assessment
Windows TCP/IP Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83691 Scheduled assessment
Windows DHCP Server Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83698 Scheduled assessment
Windows Client-Side Caching (CSC) Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83727 Scheduled assessment
Windows Overlay Filter Elevation of Privilege Vulnerability

Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83758 Scheduled assessment
Windows Error Reporting Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to execute code locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83779 Scheduled assessment
Windows Installer Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83783 Scheduled assessment
Windows Management Instrumentation Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83829 Scheduled assessment
Microsoft Windows Search Component Elevation of Privilege Vulnerability

Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83833 Scheduled assessment
Windows Kernel Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83850 Scheduled assessment
Microsoft Windows Search Component Elevation of Privilege Vulnerability

Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83857 Scheduled assessment
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83859 Scheduled assessment
Windows NTFS Elevation of Privilege Vulnerability

Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83861 Scheduled assessment
Windows Remote Desktop Protocol Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Remote Desktop Protocol allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83863 Scheduled assessment
Servicing Stack Updates Elevation of Privilege Vulnerability

Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83872 Scheduled assessment
Windows TCP/IP Local Elevation of Privilege Vulnerability

Incorrect conversion between numeric types in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-84013 Scheduled assessment
Windows Telephony Server Elevation of Privilege Vulnerability

Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-84016 Scheduled assessment
Windows EAPHost Service Elevation of Privilege Vulnerability

Out-of-bounds write in Windows EAPHost Service allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-85318 Scheduled assessment
Servicing Stack Updates Elevation of Privilege Vulnerability

Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-85327 Scheduled assessment
Windows Print Spooler Components Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-85341 Scheduled assessment
Windows USB Video Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-85356 Scheduled assessment
Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability

Out-of-bounds read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-85358 Scheduled assessment
Windows Installer Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-85366 Scheduled assessment
Windows Installer Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-85368 Scheduled assessment
Windows TCP/IP Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-85373 Scheduled assessment
Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-85375 Scheduled assessment
Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability

Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-85377 Scheduled assessment
Windows CD-ROM Driver Elevation of Privilege Vulnerability

Access of resource using incompatible type ('type confusion') in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-85795 Scheduled assessment
Windows Text Services Framework Elevation of Privilege Vulnerability

Use after free in Windows Text Services Framework allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-85796 Scheduled assessment
Windows Installer Elevation of Privilege Vulnerability

Numeric truncation error in Windows Installer allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-85800 Scheduled assessment
Windows Error Reporting Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-85820 Scheduled assessment
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-85822 Scheduled assessment
Windows exFAT File System Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-85829 Scheduled assessment
Windows Wired AutoConfig Service Elevation of Privilege Vulnerability

Double free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-85833 Scheduled assessment
Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability

Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-85869 Scheduled assessment
Microsoft Windows Search Component Elevation of Privilege Vulnerability

Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-85871 Scheduled assessment
Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-85874 Scheduled assessment
Windows Message Queuing Queue Manager Remote Code Execution Vulnerability

Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to execute code locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-85927 Scheduled assessment
Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-87694 Scheduled assessment
Windows Installer Elevation of Privilege Vulnerability

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-87699 Scheduled assessment
Winlogon Elevation of Privilege Vulnerability

Heap-based buffer overflow in Winlogon allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-87702 Scheduled assessment
Windows Resource Management (MRM) Elevation of Privilege Vulnerability

Integer overflow or wraparound in Windows Resource Management (MRM) allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-88126 Scheduled assessment
WebDAV Elevation of Privilege Vulnerability

Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-88134 Scheduled assessment
Windows Kernel Elevation of Privilege Vulnerability

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-88182 Scheduled assessment
Microsoft Windows Search Component Elevation of Privilege Vulnerability

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-96118 Scheduled assessment
Windows Graphics Kernel Elevation of Privilege Vulnerability

Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-96217 Scheduled assessment
Windows NTFS Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-96308 Scheduled assessment
Windows Installer Elevation of Privilege Vulnerability

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-96312 Scheduled assessment
Windows Kernel Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-96318 Scheduled assessment
Windows Resume Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Resume allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-96324 Scheduled assessment
Microsoft Windows Search Component Elevation of Privilege Vulnerability

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-96843 Scheduled assessment
WebDAV Elevation of Privilege Vulnerability

Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-96847 Scheduled assessment
WebDAV Elevation of Privilege Vulnerability

Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-96856 Scheduled assessment
Windows Management Instrumentation Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-96862 Scheduled assessment
Windows Spaceport.sys Elevation of Privilege Vulnerability

Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-96867 Scheduled assessment
Windows NTFS Remote Code Execution Vulnerability

Out-of-bounds read in Windows NTFS allows an authorized attacker to execute code locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-96916 Scheduled assessment
Windows NTFS Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-96928 Scheduled assessment
Windows NTFS Elevation of Privilege Vulnerability

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-96931 Scheduled assessment
Windows NTFS Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-96933 Scheduled assessment
Windows COM+ Event System Service Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-96946 Scheduled assessment
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-96947 Scheduled assessment
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-96950 Scheduled assessment
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-102205 Scheduled assessment
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-102215 Scheduled assessment
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-102216 Scheduled assessment
Windows StateRepository API Elevation of Privilege Vulnerability

Access of resource using incompatible type ('type confusion') in Windows StateRepository API allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-102218 Scheduled assessment
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-102220 Scheduled assessment
Windows VHD miniport driver Elevation of Privilege Vulnerability

Use after free in Windows VHD miniport driver allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-103553 Scheduled assessment
Windows Partition Management Driver Elevation of Privilege Vulnerability

Out-of-bounds read in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-105004 Scheduled assessment
Windows Overlay Filter Elevation of Privilege Vulnerability

Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-108136 Scheduled assessment
Microsoft Windows Search Component Elevation of Privilege Vulnerability

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-69909 Scheduled assessment
Microsoft COM for Windows Elevation of Privilege Vulnerability

Heap-based buffer overflow in Microsoft COM for Windows allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.31% · 21.8th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-69963 Scheduled assessment
Kernel Streaming Service Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.31% · 21.8th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-69966 Scheduled assessment
Kernel Streaming Service Driver Elevation of Privilege Vulnerability

Integer overflow or wraparound in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.31% · 21.8th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70123 Scheduled assessment
Microsoft Graphics Component Elevation of Privilege Vulnerability

Numeric truncation error in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.31% · 21.8th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70247 Scheduled assessment
HTTP.sys Remote Code Execution Vulnerability

Out-of-bounds read in Windows HTTP.sys allows an authorized attacker to execute code locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.31% · 21.8th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83847 Scheduled assessment
Microsoft Account Elevation of Privilege Vulnerability

Heap-based buffer overflow in Microsoft Account allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.31% · 21.8th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-88193 Scheduled assessment
Microsoft Scripting Engine Elevation of Privilege Vulnerability

Heap-based buffer overflow in Microsoft Scripting Engine allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.31% · 21.8th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-105003 Scheduled assessment
HID Class Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.31% · 21.8th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-81969 Scheduled assessment
Windows Server Update Service Elevation of Privilege Vulnerability

Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.30% · 21.6th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83499 Scheduled assessment
Windows Server Update Service Elevation of Privilege Vulnerability

Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.30% · 21.6th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70271 Scheduled assessment
Windows Win32k Elevation of Privilege Vulnerability

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

7.0 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.30% · 20.7th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83509 Scheduled assessment
Windows Setup Files Cleanup Elevation of Privilege Vulnerability

Untrusted search path in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.

7.0 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.29% · 20.6th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-105009 Scheduled assessment
Windows Server Update Service Elevation of Privilege Vulnerability

Incorrect default permissions in Windows Server Update Service allows an authorized attacker to elevate privileges locally.

7.5 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.29% · 19.8th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · REQUIRED user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83715 Scheduled assessment
Windows Error Reporting Tampering Vulnerability

Missing authentication for critical function in Windows Error Reporting allows an authorized attacker to perform tampering locally.

7.1 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.29% · 19.8th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70237 Scheduled assessment
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

7.0 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.29% · 19.7th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83580 Scheduled assessment
Windows Client-Side Caching (CSC) Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.

7.0 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.29% · 19.7th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83785 Scheduled assessment
Windows COM+ Event System Service Elevation of Privilege Vulnerability

Use after free in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.

7.0 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.29% · 19.7th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-85355 Scheduled assessment
Windows Common Log File System Driver Elevation of Privilege Vulnerability

Inclusion of functionality from untrusted control sphere in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

7.0 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.29% · 19.7th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-85791 Scheduled assessment
Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges locally.

7.0 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.29% · 19.7th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-85870 Scheduled assessment
Windows Common Log File System Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

7.0 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.29% · 19.7th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Patch available. 10.0.17763.9376:Security Update:https://support.microsoft.com/help/5126651
CVE-2026-83837 Scheduled assessment
Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability

Improper access control in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.28% · 19.4th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-85376 Scheduled assessment
Windows Print Spooler Components Elevation of Privilege Vulnerability

Weak authentication in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.28% · 19.4th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-88135 Scheduled assessment
WebDAV Elevation of Privilege Vulnerability

Improper access control in WebDAV allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.28% · 19.4th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-100217 Scheduled assessment
Windows Group Policy Elevation of Privilege Vulnerability

Improper privilege management in Windows Group Policy allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.28% · 19.4th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83659 Scheduled assessment
Windows User Profile Service Elevation of Privilege Vulnerability

Improper link resolution before file access ('link following') in Windows User Profile Service allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.28% · 18.8th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70223 Scheduled assessment
Windows Console Driver Elevation of Privilege Vulnerability

Use after free in Windows Console Driver allows an authorized attacker to elevate privileges locally.

7.0 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.28% · 18.7th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70236 Scheduled assessment
Windows Win32k Elevation of Privilege Vulnerability

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

7.0 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.28% · 18.7th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83921 Scheduled assessment
Windows Search Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

7.0 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.28% · 18.7th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70185 Scheduled assessment
Microsoft PowerShell Security Feature Bypass Vulnerability

Protection mechanism failure in Windows PowerShell allows an authorized attacker to bypass a security feature locally.

8.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.27% · 18.3th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70278 Scheduled assessment
Microsoft Windows Media Foundation Elevation of Privilege Vulnerability

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.27% · 17.9th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-69387 Scheduled assessment
Windows Error Reporting Elevation of Privilege Vulnerability

Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

7.0 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.27% · 17.9th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-69977 Scheduled assessment
Quality Windows Audio/Video Experience (QWAVE) service Elevation of Privilege Vulnerability

Use after free in Quality Windows Audio/Video Experience (QWAVE) service allows an authorized attacker to elevate privileges locally.

7.0 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.27% · 17.9th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70066 Scheduled assessment
Windows DHCP Server Elevation of Privilege Vulnerability

Use after free in Windows DHCP Server allows an authorized attacker to elevate privileges locally.

7.0 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.27% · 17.9th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70160 Scheduled assessment
Windows Kernel Elevation of Privilege Vulnerability

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

7.0 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.27% · 17.9th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70164 Scheduled assessment
Windows TCP/IP Elevation of Privilege Vulnerability

Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

7.0 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.27% · 17.9th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70168 Scheduled assessment
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

7.0 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.27% · 17.9th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70205 Scheduled assessment
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

7.0 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.27% · 17.9th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70209 Scheduled assessment
Windows Win32k Elevation of Privilege Vulnerability

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

7.0 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.27% · 17.9th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83564 Scheduled assessment
Windows Search Service Elevation of Privilege Vulnerability

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

7.0 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.27% · 17.9th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83574 Scheduled assessment
Windows Search Service Elevation of Privilege Vulnerability

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

7.0 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.27% · 17.9th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83575 Scheduled assessment
Windows Search Service Elevation of Privilege Vulnerability

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

7.0 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.27% · 17.9th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83908 Scheduled assessment
RPC Runtime Elevation of Privilege Vulnerability

Release of invalid pointer or reference in RPC Runtime allows an authorized attacker to elevate privileges locally.

7.0 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.27% · 17.9th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83911 Scheduled assessment
Windows Storage Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.

7.0 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.27% · 17.9th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83916 Scheduled assessment
Windows Error Reporting Remote Code Execution Vulnerability

Double free in Windows Error Reporting allows an authorized attacker to execute code locally.

7.0 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.27% · 17.9th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83924 Scheduled assessment
Windows Kernel Elevation of Privilege Vulnerability

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

7.0 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.27% · 17.9th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70156 Scheduled assessment
Microsoft Windows Search Component Elevation of Privilege Vulnerability

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

7.0 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.27% · 17.6th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70241 Scheduled assessment
Windows Kerberos Elevation of Privilege Vulnerability

Use after free in Windows Kerberos allows an authorized attacker to elevate privileges locally.

7.0 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.27% · 17.6th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83717 Scheduled assessment
Windows Installer Elevation of Privilege Vulnerability

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

7.0 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.27% · 17.6th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-85802 Scheduled assessment
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

7.0 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.27% · 17.6th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83912 Scheduled assessment
Windows Direct Composition Elevation of Privilege Vulnerability

Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.26% · 16.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83918 Scheduled assessment
Windows Kernel Elevation of Privilege Vulnerability

Integer overflow or wraparound in Windows Kernel allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.26% · 16.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83920 Scheduled assessment
Windows Search Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.26% · 16.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83919 Scheduled assessment
Microsoft Internet Messaging API Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Internet Messaging API allows an authorized attacker to execute code locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.25% · 15.7th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70136 Scheduled assessment
Microsoft Windows Search Component Elevation of Privilege Vulnerability

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

7.0 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70150 Scheduled assessment
Microsoft Windows Search Component Elevation of Privilege Vulnerability

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

7.0 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70252 Scheduled assessment
Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability

Use after free in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.

7.0 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70272 Scheduled assessment
Windows Installer Elevation of Privilege Vulnerability

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

7.0 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83584 Scheduled assessment
Windows Smart Card Elevation of Privilege Vulnerability

Use after free in Windows Smart Card allows an authorized attacker to elevate privileges locally.

7.0 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83682 Scheduled assessment
Windows TCP/IP Elevation of Privilege Vulnerability

Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

7.0 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83689 Scheduled assessment
Windows Error Reporting Elevation of Privilege Vulnerability

Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

7.0 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83694 Scheduled assessment
Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability

Out-of-bounds read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.

7.0 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83702 Scheduled assessment
Windows Installer Elevation of Privilege Vulnerability

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

7.0 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83708 Scheduled assessment
Windows Installer Elevation of Privilege Vulnerability

Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

7.0 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83718 Scheduled assessment
Windows Installer Elevation of Privilege Vulnerability

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

7.0 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-85342 Scheduled assessment
Windows Device Association Service Elevation of Privilege Vulnerability

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.

7.0 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-85352 Scheduled assessment
Windows Device Association Service Elevation of Privilege Vulnerability

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.

7.0 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-85354 Scheduled assessment
Windows Error Reporting Elevation of Privilege Vulnerability

Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

7.0 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-85361 Scheduled assessment
Windows Installer Elevation of Privilege Vulnerability

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

7.0 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-85362 Scheduled assessment
Windows Management Instrumentation Elevation of Privilege Vulnerability

Release of invalid pointer or reference in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.

7.0 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-85364 Scheduled assessment
Windows Installer Elevation of Privilege Vulnerability

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

7.0 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-85370 Scheduled assessment
WebDAV Elevation of Privilege Vulnerability

Use after free in WebDAV allows an authorized attacker to elevate privileges locally.

7.0 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-85372 Scheduled assessment
Windows Kernel Elevation of Privilege Vulnerability

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

7.0 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-85810 Scheduled assessment
Windows Telephony Server Elevation of Privilege Vulnerability

Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally.

7.0 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-85826 Scheduled assessment
Windows Fast FAT Driver Elevation of Privilege Vulnerability

Out-of-bounds write in Windows Fast FAT Driver allows an authorized attacker to elevate privileges locally.

7.0 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-85828 Scheduled assessment
WebDAV Elevation of Privilege Vulnerability

Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.

7.0 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-85834 Scheduled assessment
Windows TCP/IP Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

7.0 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-85868 Scheduled assessment
Windows Common Log File System Driver Elevation of Privilege Vulnerability

Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

7.0 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Patch available. 10.0.17763.9376:Security Update:https://support.microsoft.com/help/5126651
CVE-2026-85918 Scheduled assessment
Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability

Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.

7.0 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-87708 Scheduled assessment
Windows Installer Elevation of Privilege Vulnerability

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

7.0 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-88076 Scheduled assessment
Windows Installer Elevation of Privilege Vulnerability

Null pointer dereference in Windows Installer allows an authorized attacker to elevate privileges locally.

7.0 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-88124 Scheduled assessment
Windows Installer Elevation of Privilege Vulnerability

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

7.0 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-88161 Scheduled assessment
Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability

Use after free in Windows Local Security Authority (LSA) allows an authorized attacker to elevate privileges locally.

7.0 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-96209 Scheduled assessment
Windows Network File System Elevation of Privilege Vulnerability

Out-of-bounds read in Windows Network File System allows an authorized attacker to elevate privileges locally.

7.0 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-96302 Scheduled assessment
Windows Installer Elevation of Privilege Vulnerability

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

7.0 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-96305 Scheduled assessment
Windows Installer Elevation of Privilege Vulnerability

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

7.0 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-96852 Scheduled assessment
Windows TCP/IP Elevation of Privilege Vulnerability

Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

7.0 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-96923 Scheduled assessment
Windows Workstation Service Elevation of Privilege Vulnerability

Use after free in Windows Workstation Service allows an authorized attacker to elevate privileges locally.

7.0 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-100225 Scheduled assessment
Windows Storage Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.

7.0 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-102194 Scheduled assessment
Windows Graphics Kernel Elevation of Privilege Vulnerability

Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

7.0 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-102208 Scheduled assessment
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

7.0 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-103555 Scheduled assessment
Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.

7.0 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-108468 Scheduled assessment
Windows Installer Elevation of Privilege Vulnerability

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

7.0 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-109453 Scheduled assessment
Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.

7.0 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83728 Scheduled assessment
Windows Hyper-V Spoofing Vulnerability

Improper validation of syntactic correctness of input in Windows Hyper-V allows an authorized attacker to perform spoofing locally.

8.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.24% · 14.7th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83767 Scheduled assessment
Windows Installer Elevation of Privilege Vulnerability

Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.24% · 14.7th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-85860 Scheduled assessment
Windows Message Queuing Queue Manager Elevation of Privilege Vulnerability

Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.24% · 14.7th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-85867 Scheduled assessment
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.24% · 14.7th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-85933 Scheduled assessment
Windows Print Spooler Components Elevation of Privilege Vulnerability

Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.24% · 14.7th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-87700 Scheduled assessment
Windows Installer Elevation of Privilege Vulnerability

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.24% · 14.7th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-87711 Scheduled assessment
Windows Installer Elevation of Privilege Vulnerability

Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.24% · 14.7th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-87712 Scheduled assessment
Microsoft Windows QoS Scheduler Driver Elevation of Privilege Vulnerability

Use after free in Windows Quality of Service (QoS) Packet Scheduler allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.24% · 14.7th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-88080 Scheduled assessment
Windows Installer Elevation of Privilege Vulnerability

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.24% · 14.7th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-96915 Scheduled assessment
Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability

Integer overflow or wraparound in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.24% · 14.7th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-96953 Scheduled assessment
Windows Universal Disk Format File System Driver (UDFS) Remote Code Execution Vulnerability

Null pointer dereference in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to execute code locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.24% · 14.7th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-69964 Scheduled assessment
Kernel Streaming Service Driver Elevation of Privilege Vulnerability

Use after free in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.

7.0 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.24% · 14.3th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-69650 Scheduled assessment
Windows Key Distribution Center Elevation of Privilege Vulnerability

Improper verification of cryptographic signature in Windows Key Distribution Center allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.23% · 12.5th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83724 Scheduled assessment
Windows Management Instrumentation Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.

7.0 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.22% · 12.2th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83738 Scheduled assessment
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

7.0 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.22% · 11.6th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-84014 Scheduled assessment
Windows Device Association Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally.

7.0 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.22% · 11.6th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-81971 Scheduled assessment
Windows NTFS Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows NTFS allows an authorized attacker to elevate privileges locally.

7.0 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.21% · 10.7th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83510 Scheduled assessment
Windows Setup Files Cleanup Elevation of Privilege Vulnerability

Time-of-check time-of-use (toctou) race condition in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.

7.0 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.21% · 10.7th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83899 Scheduled assessment
Windows Installer Elevation of Privilege Vulnerability

Improper privilege management in Windows Installer allows an authorized attacker to elevate privileges locally.

7.0 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.21% · 10.7th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-88101 Scheduled assessment
Microsoft Input Method Editor (IME) Elevation of Privilege Vulnerability

Weak authentication in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.21% · 10.6th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-69736 Scheduled assessment
Windows Credential Manager Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Credential Manager allows an authorized attacker to elevate privileges locally.

7.0 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.21% · 10.1th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83775 Scheduled assessment
Windows Installer Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally.

7.0 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.21% · 10.1th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83879 Scheduled assessment
Windows Overlay Filter Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

7.0 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.21% · 10.1th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83750 Scheduled assessment
Windows Error Reporting Elevation of Privilege Vulnerability

Time-of-check time-of-use (toctou) race condition in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

7.0 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.21% · 9.8th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-85941 Scheduled assessment
Windows Installer Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally.

7.0 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.21% · 9.8th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83680 Scheduled assessment
Windows Installer Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

7.0 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.20% · 9.7th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83752 Scheduled assessment
Windows Installer Elevation of Privilege Vulnerability

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

7.0 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.20% · 9.7th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-85365 Scheduled assessment
Servicing Stack Updates Elevation of Privilege Vulnerability

Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.

7.0 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.20% · 9.7th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-85827 Scheduled assessment
WebDAV Elevation of Privilege Vulnerability

Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.

7.0 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.20% · 9.7th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-87693 Scheduled assessment
Windows Installer Elevation of Privilege Vulnerability

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

7.0 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.20% · 9.7th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-87704 Scheduled assessment
Windows Installer Elevation of Privilege Vulnerability

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

7.0 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.20% · 9.7th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-87715 Scheduled assessment
Windows Installer Elevation of Privilege Vulnerability

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

7.0 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.20% · 9.7th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-88098 Scheduled assessment
Windows Security Support Provider Interface Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows Security Support Provider Interface allows an authorized attacker to elevate privileges locally.

7.0 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.20% · 9.7th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-88149 Scheduled assessment
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Double free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

7.0 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.20% · 9.7th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-96307 Scheduled assessment
Windows Installer Elevation of Privilege Vulnerability

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

7.0 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.20% · 9.7th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-96322 Scheduled assessment
Windows Remote Desktop Protocol Elevation of Privilege Vulnerability

Use after free in Windows Remote Desktop Protocol allows an authorized attacker to elevate privileges locally.

7.0 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.20% · 9.7th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83666 Scheduled assessment
Active Directory Certificate Services (AD CS) Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges locally.

7.0 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.20% · 9.1th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83722 Scheduled assessment
Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability

Use after free in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally.

7.0 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.20% · 9.1th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-85329 Scheduled assessment
Microsoft Account Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Account allows an authorized attacker to elevate privileges locally.

7.0 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.20% · 9.1th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-103568 Scheduled assessment
Windows Credential Providers Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Credential Providers allows an authorized attacker to elevate privileges locally.

7.8 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.19% · 8.4th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-84018 Scheduled assessment
Windows Print Spooler Components Elevation of Privilege Vulnerability

Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.

7.0 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.19% · 8.4th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-85825 Scheduled assessment
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.

7.0 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.19% · 8.4th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-85943 Scheduled assessment
Reliable Multicast Transport Driver (RMCAST) Elevation of Privilege Vulnerability

Time-of-check time-of-use (toctou) race condition in Reliable Multicast Transport Driver (RMCAST) allows an authorized attacker to elevate privileges locally.

7.0 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.19% · 8.4th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-96949 Scheduled assessment
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.

7.0 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.19% · 8.4th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-85920 Scheduled assessment
Windows BitLocker Elevation of Privilege Vulnerability

Time-of-check time-of-use (toctou) race condition in Windows BitLocker allows an authorized attacker to elevate privileges locally.

7.0 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.16% · 4.9th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-85904 Scheduled assessment
Windows Device Association Service Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Device Association Service allows an authorized attacker to elevate privileges locally.

7.0 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.16% · 4.3th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-88096 Scheduled assessment
Windows DCOM Server Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DCOM Server allows an authorized attacker to elevate privileges locally.

7.0 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.16% · 4.3th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-88160 Scheduled assessment
Microsoft Windows Search Component Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

7.0 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.16% · 4.3th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-87710 Scheduled assessment
Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability

Improper access control in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally.

7.0 · CVSS 3.1 · HighSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.15% · 3.8th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionWithin 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70166 Scheduled assessment
Windows DNS Denial of Service Vulnerability

Out-of-bounds read in Windows DNS allows an authorized attacker to deny service over a network.

6.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 1.14% · 65.9th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83685 Scheduled assessment
Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability

Buffer over-read in Windows IKE Extension allows an authorized attacker to deny service over a network.

6.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 1.14% · 65.9th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83683 Scheduled assessment
Windows Encrypting File System (EFS) Information Disclosure Vulnerability

Absolute path traversal in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information over a network.

6.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 1.13% · 65.8th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70072 Scheduled assessment
Windows Netlogon Denial of Service Vulnerability

Allocation of resources without limits or throttling in Windows Netlogon allows an authorized attacker to deny service over a network.

6.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 1.09% · 64.7th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70170 Scheduled assessment
Windows Kernel Denial of Service Vulnerability

Untrusted pointer dereference in Windows Kernel allows an authorized attacker to deny service over a network.

6.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 1.09% · 64.7th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-88123 Scheduled assessment
Role: DNS Server Denial of Service Vulnerability

Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.

6.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 1.09% · 64.7th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-88125 Scheduled assessment
Role: DNS Server Denial of Service Vulnerability

Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.

6.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 1.09% · 64.7th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-88129 Scheduled assessment
Role: DNS Server Denial of Service Vulnerability

Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.

6.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 1.09% · 64.7th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-88130 Scheduled assessment
Role: DNS Server Denial of Service Vulnerability

Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.

6.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 1.09% · 64.7th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83667 Scheduled assessment
Windows Active Directory Domain Services Denial of Service Vulnerability

Out-of-bounds read in Active Directory Domain Services allows an authorized attacker to deny service over a network.

6.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 1.09% · 64.6th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83521 Scheduled assessment
Windows IKE Extension Information Disclosure Vulnerability

Out-of-bounds read in Windows IKE Extension allows an authorized attacker to disclose information over a network.

6.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.99% · 61.9th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-84007 Scheduled assessment
Remote Desktop Gateway Service Information Disclosure Vulnerability

Out-of-bounds read in Remote Desktop Gateway Service allows an authorized attacker to disclose information over a network.

6.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.99% · 61.9th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-85331 Scheduled assessment
Windows Device Association Service Information Disclosure Vulnerability

Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information over a network.

6.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.95% · 60.5th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-85821 Scheduled assessment
Windows Universal Disk Format File System Driver (UDFS) Information Disclosure Vulnerability

Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally.

6.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.95% · 60.5th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-85840 Scheduled assessment
Windows Event Viewer Information Disclosure Vulnerability

Files or directories accessible to external parties in Windows Event Viewer allows an authorized attacker to disclose information over a network.

6.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.95% · 60.5th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-88137 Scheduled assessment
WebDAV Information Disclosure Vulnerability

Files or directories accessible to external parties in WebDAV allows an authorized attacker to disclose information over a network.

6.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.95% · 60.5th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-97817 Scheduled assessment
Role: DNS Server Information Disclosure Vulnerability

Heap-based buffer overflow in DNS Server allows an authorized attacker to disclose information over a network.

6.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.95% · 60.5th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-97819 Scheduled assessment
Role: DNS Server Information Disclosure Vulnerability

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

6.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.95% · 60.5th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-108127 Scheduled assessment
Role: DNS Server Information Disclosure Vulnerability

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

6.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.95% · 60.5th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-108128 Scheduled assessment
Role: DNS Server Information Disclosure Vulnerability

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

6.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.95% · 60.5th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-108129 Scheduled assessment
Role: DNS Server Information Disclosure Vulnerability

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

6.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.95% · 60.5th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-69940 Scheduled assessment
Windows Client for NFS Information Disclosure Vulnerability

Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information over a network.

6.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.94% · 60.2th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · REQUIRED user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70244 Scheduled assessment
Windows DNS Server Information Disclosure Vulnerability

Out-of-bounds read in DNS Server allows an unauthorized attacker to disclose information over a network.

6.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.94% · 60.2th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · REQUIRED user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83515 Scheduled assessment
RPC Runtime Information Disclosure Vulnerability

Use of uninitialized resource in RPC Runtime allows an unauthorized attacker to disclose information over a network.

6.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.94% · 60.2th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · REQUIRED user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83651 Scheduled assessment
Windows GDI Information Disclosure Vulnerability

Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information over a network.

6.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.94% · 60.2th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · REQUIRED user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-85797 Scheduled assessment
Windows GDI Information Disclosure Vulnerability

Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information over a network.

6.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.93% · 59.8th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · REQUIRED user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-69955 Scheduled assessment
Windows Client for NFS Information Disclosure Vulnerability

Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information over a network.

6.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.89% · 58.4th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · REQUIRED user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83888 Scheduled assessment
Windows CD-ROM Driver Elevation of Privilege Vulnerability

Buffer over-read in Windows CD-ROM Driver allows an unauthorized attacker to elevate privileges over a network.

6.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.89% · 58.4th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · REQUIRED user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-85337 Scheduled assessment
Windows Remote Desktop Client Information Disclosure Vulnerability

Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.

6.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.89% · 58.4th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · REQUIRED user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-102199 Scheduled assessment
Microsoft Windows Codecs Library Denial of Service Vulnerability

Stack-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to deny service over a network.

6.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.85% · 57.3th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · REQUIRED user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-96300 Scheduled assessment
RPC Endpoint Mapper Service Denial of Service Vulnerability

Uncontrolled resource consumption in RPC Endpoint Mapper Service allows an unauthorized attacker to deny service over a network.

5.9 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.84% · 56.8th percentileForecast date: 2026-10-14NETWORK · HIGH complexity · NONE privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70025 Scheduled assessment
Windows Netlogon Denial of Service Vulnerability

Use after free in Windows Netlogon allows an authorized attacker to deny service over a network.

5.3 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.83% · 56.6th percentileForecast date: 2026-10-14NETWORK · HIGH complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-85859 Scheduled assessment
Windows Message Queuing Queue Manager Denial of Service Vulnerability

Null pointer dereference in Windows Message Queuing Queue Manager allows an authorized attacker to deny service over a network.

6.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.79% · 55.3th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-88122 Scheduled assessment
Role: DNS Server Denial of Service Vulnerability

Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.

6.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.79% · 55.3th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-97823 Scheduled assessment
Role: DNS Server Information Disclosure Vulnerability

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

6.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.77% · 54.6th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-97824 Scheduled assessment
Role: DNS Server Information Disclosure Vulnerability

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

6.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.77% · 54.6th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-97826 Scheduled assessment
Role: DNS Server Information Disclosure Vulnerability

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

6.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.77% · 54.6th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-97827 Scheduled assessment
Role: DNS Server Information Disclosure Vulnerability

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

6.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.77% · 54.6th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-97828 Scheduled assessment
Role: DNS Server Information Disclosure Vulnerability

Buffer over-read in DNS Server allows an authorized attacker to disclose information over a network.

6.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.77% · 54.6th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-97829 Scheduled assessment
Role: DNS Server Information Disclosure Vulnerability

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

6.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.77% · 54.6th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-97820 Scheduled assessment
Role: DNS Server Information Disclosure Vulnerability

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

6.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.74% · 53.4th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-97821 Scheduled assessment
Role: DNS Server Information Disclosure Vulnerability

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

6.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.74% · 53.4th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-97822 Scheduled assessment
Role: DNS Server Information Disclosure Vulnerability

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

6.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.74% · 53.4th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-97831 Scheduled assessment
Role: DNS Server Information Disclosure Vulnerability

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

6.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.73% · 53.4th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-97835 Scheduled assessment
Role: DNS Server Information Disclosure Vulnerability

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

6.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.73% · 53.3th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-97836 Scheduled assessment
Role: DNS Server Information Disclosure Vulnerability

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

6.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.73% · 53.4th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-97837 Scheduled assessment
Role: DNS Server Information Disclosure Vulnerability

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

6.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.73% · 53.4th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-97838 Scheduled assessment
Role: DNS Server Information Disclosure Vulnerability

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

6.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.73% · 53.4th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-97839 Scheduled assessment
Role: DNS Server Information Disclosure Vulnerability

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

6.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.73% · 53.3th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-97840 Scheduled assessment
Role: DNS Server Information Disclosure Vulnerability

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

6.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.73% · 53.4th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-97841 Scheduled assessment
Role: DNS Server Information Disclosure Vulnerability

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

6.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.73% · 53.4th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-97843 Scheduled assessment
Role: DNS Server Information Disclosure Vulnerability

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

6.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.73% · 53.4th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-97844 Scheduled assessment
Role: DNS Server Information Disclosure Vulnerability

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

6.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.73% · 53.4th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-102198 Scheduled assessment
Windows Remote Desktop Protocol Information Disclosure Vulnerability

Out-of-bounds read in Windows Remote Desktop Protocol allows an authorized attacker to disclose information over a network.

5.3 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.69% · 51.9th percentileForecast date: 2026-10-14NETWORK · HIGH complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-85847 Scheduled assessment
Windows Print Spooler Components Information Disclosure Vulnerability

Out-of-bounds read in Windows Print Spooler Components allows an unauthorized attacker to disclose information over a network.

6.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.67% · 50.7th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · REQUIRED user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-85841 Scheduled assessment
Windows DHCP Server Remote Code Execution Vulnerability

Use after free in Windows DHCP Server allows an authorized attacker to execute code over a network.

6.6 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.65% · 49.7th percentileForecast date: 2026-10-14NETWORK · HIGH complexity · HIGH privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-108466 Scheduled assessment
Windows Kernel Denial of Service Vulnerability

Out-of-bounds read in Windows Kernel allows an unauthorized attacker to deny service over a network.

5.3 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.63% · 49.1th percentileForecast date: 2026-10-14NETWORK · HIGH complexity · NONE privileges · REQUIRED user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-69640 Scheduled assessment
Windows Key Distribution Center Security Feature Bypass Vulnerability

Incorrect authorization in Windows Key Distribution Center allows an authorized attacker to bypass a security feature over a network.

5.3 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.63% · 48.8th percentileForecast date: 2026-10-14NETWORK · HIGH complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-85805 Scheduled assessment
Microsoft PowerShell Security Feature Bypass Vulnerability

Improperly implemented security check for standard in Windows PowerShell allows an unauthorized attacker to bypass a security feature over a network.

6.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.61% · 47.8th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · REQUIRED user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83703 Scheduled assessment
Windows Wi-Fi Driver Denial of Service Vulnerability

Out-of-bounds read in Windows Wi-Fi Driver allows an unauthorized attacker to deny service over an adjacent network.

6.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.59% · 47.1th percentileForecast date: 2026-10-14ADJACENT · LOW complexity · NONE privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-69982 Scheduled assessment
Active Directory Federation Services (AD FS) Security Feature Bypass Vulnerability

Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to bypass a security feature over a network.

5.9 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.57% · 45.7th percentileForecast date: 2026-10-14NETWORK · HIGH complexity · NONE privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70277 Scheduled assessment
Windows Fast FAT File System Driver Information Disclosure Vulnerability

Out-of-bounds read in Windows Fast FAT Driver allows an unauthorized attacker to disclose information locally.

5.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.55% · 44.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · NONE privileges · REQUIRED user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-97832 Scheduled assessment
Role: DNS Server Information Disclosure Vulnerability

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

6.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.55% · 44.7th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-97833 Scheduled assessment
Role: DNS Server Information Disclosure Vulnerability

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

6.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.55% · 44.7th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-97834 Scheduled assessment
Role: DNS Server Information Disclosure Vulnerability

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

6.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.55% · 44.7th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-97842 Scheduled assessment
Role: DNS Server Information Disclosure Vulnerability

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

6.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.55% · 44.7th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70044 Scheduled assessment
Microsoft Windows Media Foundation Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Windows Media Foundation allows an unauthorized attacker to disclose information locally.

5.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.53% · 43.4th percentileForecast date: 2026-10-14LOCAL · LOW complexity · NONE privileges · REQUIRED user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-85323 Scheduled assessment
Network Device Enrollment Service (NDES) Spoofing Vulnerability

Weak authentication in Network Device Enrollment Service (NDES) allows an authorized attacker to perform spoofing over a network.

6.8 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.49% · 40.8th percentileForecast date: 2026-10-14NETWORK · HIGH complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-69644 Scheduled assessment
Windows iSCSI Information Disclosure Vulnerability

Exposure of sensitive system information to an unauthorized control sphere in Windows iSCSI allows an authorized attacker to disclose information locally.

5.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.49% · 40.6th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70055 Scheduled assessment
Windows Cryptographic Services Information Disclosure Vulnerability

Exposure of sensitive system information to an unauthorized control sphere in Windows Cryptographic Services allows an authorized attacker to disclose information locally.

5.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.49% · 40.6th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70199 Scheduled assessment
Windows Kernel Information Disclosure Vulnerability

Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally.

5.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.49% · 40.6th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70232 Scheduled assessment
Windows Kernel Information Disclosure Vulnerability

Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally.

5.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.49% · 40.6th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70260 Scheduled assessment
Microsoft Trace Data Helper Information Disclosure Vulnerability

Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an authorized attacker to disclose information locally.

5.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.49% · 40.6th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70261 Scheduled assessment
Microsoft Trace Data Helper Information Disclosure Vulnerability

Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an authorized attacker to disclose information locally.

5.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.49% · 40.6th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83713 Scheduled assessment
Windows Universal Disk Format File System Driver (UDFS) Information Disclosure Vulnerability

Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally.

5.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.49% · 40.6th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83705 Scheduled assessment
HTTP.sys Information Disclosure Vulnerability

Exposure of sensitive system information to an unauthorized control sphere in Windows HTTP.sys allows an authorized attacker to disclose information locally.

5.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.47% · 39.2th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83835 Scheduled assessment
Windows Common Log File System Driver Information Disclosure Vulnerability

Buffer over-read in Windows Common Log File System Driver allows an authorized attacker to disclose information locally.

5.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.47% · 39.0th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-85857 Scheduled assessment
Windows Kernel-Mode Drivers Information Disclosure Vulnerability

Insertion of sensitive information into log file in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.

5.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.47% · 39.0th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-96948 Scheduled assessment
Windows Client Side Caching driver (csc.sys) Information Disclosure Vulnerability

Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver (csc.sys) allows an authorized attacker to disclose information locally.

5.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.47% · 39.0th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-108462 Scheduled assessment
Windows Kernel Information Disclosure Vulnerability

Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally.

5.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.47% · 39.0th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-87714 Scheduled assessment
WebDAV Security Feature Bypass Vulnerability

Missing authorization in WebDAV allows an authorized attacker to bypass a security feature over a network.

6.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.46% · 38.3th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83788 Scheduled assessment
Windows rndismp6.sys Information Disclosure Vulnerability

Buffer over-read in Windows RNDIS allows an unauthorized attacker to disclose information with a physical attack.

4.6 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.46% · 38.2th percentileForecast date: 2026-10-14PHYSICAL · LOW complexity · NONE privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-88226 Scheduled assessment
Windows Storage Port Driver Information Disclosure Vulnerability

Out-of-bounds read in Windows Storage Port Driver allows an unauthorized attacker to disclose information with a physical attack.

4.6 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.46% · 38.2th percentileForecast date: 2026-10-14PHYSICAL · LOW complexity · NONE privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-69958 Scheduled assessment
Windows Overlay Filter Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Overlay Filter allows an unauthorized attacker to execute code with a physical attack.

6.8 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.45% · 37.3th percentileForecast date: 2026-10-14PHYSICAL · LOW complexity · NONE privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83573 Scheduled assessment
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

Integer overflow or wraparound in Windows Kernel Mode Driver allows an unauthorized attacker to elevate privileges with a physical attack.

6.8 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.45% · 37.3th percentileForecast date: 2026-10-14PHYSICAL · LOW complexity · NONE privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-102188 Scheduled assessment
Windows Storage Port Driver Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows Storage Port Driver allows an unauthorized attacker to elevate privileges with a physical attack.

6.8 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.42% · 34.4th percentileForecast date: 2026-10-14PHYSICAL · LOW complexity · NONE privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Patch available. 6.2.9200.26434:Security Update:https://support.microsoft.com/help/5126835
CVE-2026-102206 Scheduled assessment
Windows Portable Device MTP Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Portable Device MTP Driver allows an unauthorized attacker to elevate privileges with a physical attack.

6.8 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.42% · 34.4th percentileForecast date: 2026-10-14PHYSICAL · LOW complexity · NONE privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-69675 Scheduled assessment
Windows Network File System Information Disclosure Vulnerability

Out-of-bounds read in Windows Network File System allows an authorized attacker to disclose information locally.

5.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.41% · 34.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-69721 Scheduled assessment
Windows iSCSI Information Disclosure Vulnerability

Out-of-bounds read in Windows iSCSI allows an authorized attacker to disclose information locally.

5.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.41% · 34.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-69954 Scheduled assessment
Windows Overlay Filter Information Disclosure Vulnerability

Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information locally.

5.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.41% · 34.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-69967 Scheduled assessment
Windows Overlay Filter Information Disclosure Vulnerability

Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to disclose information locally.

5.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.41% · 34.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70041 Scheduled assessment
Windows CD-ROM Driver Information Disclosure Vulnerability

Buffer over-read in Windows CD-ROM Driver allows an authorized attacker to disclose information locally.

5.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.41% · 34.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70074 Scheduled assessment
Windows DNS Information Disclosure Vulnerability

Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information locally.

5.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.41% · 34.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70090 Scheduled assessment
Windows Netlogon Information Disclosure Vulnerability

Use of uninitialized resource in Windows Netlogon allows an authorized attacker to disclose information locally.

5.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.41% · 34.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70211 Scheduled assessment
Win32k Information Disclosure Vulnerability

Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

5.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.41% · 34.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70284 Scheduled assessment
Win32k Information Disclosure Vulnerability

Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

5.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.41% · 34.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70292 Scheduled assessment
Win32k Information Disclosure Vulnerability

Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

5.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.41% · 34.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70293 Scheduled assessment
Win32k Information Disclosure Vulnerability

Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

5.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.41% · 34.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70294 Scheduled assessment
Win32k Information Disclosure Vulnerability

Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

5.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.41% · 34.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70295 Scheduled assessment
Win32k Information Disclosure Vulnerability

Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

5.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.41% · 34.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83571 Scheduled assessment
Windows Audio Service Information Disclosure Vulnerability

Null pointer dereference in Windows Audio Service allows an authorized attacker to disclose information locally.

5.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.41% · 34.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83686 Scheduled assessment
Microsoft Windows Search Component Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.

5.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.41% · 34.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83695 Scheduled assessment
Windows Event Logging Service Information Disclosure Vulnerability

Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose information locally.

5.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.41% · 34.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83723 Scheduled assessment
Windows Event Logging Service Information Disclosure Vulnerability

Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose information locally.

5.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.41% · 34.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83733 Scheduled assessment
Windows Print Spooler Components Information Disclosure Vulnerability

Out-of-bounds read in Windows Print Spooler Components allows an authorized attacker to disclose information locally.

5.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.41% · 34.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83737 Scheduled assessment
Windows NTFS Information Disclosure Vulnerability

Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.

5.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.41% · 34.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83747 Scheduled assessment
Windows Error Reporting Information Disclosure Vulnerability

Out-of-bounds read in Windows Error Reporting allows an authorized attacker to disclose information locally.

5.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.41% · 34.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83755 Scheduled assessment
Win32k Information Disclosure Vulnerability

Use of uninitialized resource in Windows Win32K allows an authorized attacker to disclose information locally.

5.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.41% · 34.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-69635 Scheduled assessment
Windows Installer Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges with a physical attack.

6.6 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.41% · 33.6th percentileForecast date: 2026-10-14PHYSICAL · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70201 Scheduled assessment
Windows DHCP Server Denial of Service Vulnerability

Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service locally.

5.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.41% · 33.5th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70208 Scheduled assessment
HTTP.sys Information Disclosure Vulnerability

Out-of-bounds read in Windows HTTP.sys allows an authorized attacker to disclose information locally.

5.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.40% · 32.3th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83714 Scheduled assessment
HTTP.sys Information Disclosure Vulnerability

Use of uninitialized resource in Windows HTTP.sys allows an authorized attacker to disclose information locally.

5.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.40% · 32.3th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70141 Scheduled assessment
Microsoft Windows Search Component Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.

5.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.40% · 32.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70173 Scheduled assessment
Microsoft Windows Search Component Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.

5.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.40% · 32.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83794 Scheduled assessment
Windows Portable Device MTP Driver Information Disclosure Vulnerability

Out-of-bounds read in Windows Portable Device MTP Driver allows an authorized attacker to disclose information locally.

5.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.40% · 32.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-85336 Scheduled assessment
Windows Device Association Service Information Disclosure Vulnerability

Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally.

5.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.40% · 32.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-85374 Scheduled assessment
Windows Installer Information Disclosure Vulnerability

Out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locally.

5.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.40% · 32.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-85794 Scheduled assessment
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to disclose information locally.

5.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.40% · 32.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-85815 Scheduled assessment
Windows Device Association Service Information Disclosure Vulnerability

Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally.

5.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.40% · 32.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-85830 Scheduled assessment
Windows Installer Information Disclosure Vulnerability

Out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locally.

5.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.40% · 32.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-85852 Scheduled assessment
Windows Management Instrumentation Information Disclosure Vulnerability

Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.

5.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.40% · 32.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-85909 Scheduled assessment
Windows Universal Disk Format File System Driver (UDFS) Information Disclosure Vulnerability

Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally.

5.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.40% · 32.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-85935 Scheduled assessment
Windows USB Driver Information Disclosure Vulnerability

Buffer over-read in Windows USB Driver allows an authorized attacker to disclose information locally.

5.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.40% · 32.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-96247 Scheduled assessment
Windows Kernel-Mode Drivers Information Disclosure Vulnerability

Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.

5.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.40% · 32.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-96314 Scheduled assessment
Windows Audio Service Information Disclosure Vulnerability

Out-of-bounds read in Windows Audio Service allows an authorized attacker to disclose information locally.

5.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.40% · 32.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-96851 Scheduled assessment
Windows Management Instrumentation Information Disclosure Vulnerability

Buffer over-read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.

5.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.40% · 32.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-96859 Scheduled assessment
Windows Imaging Component Information Disclosure Vulnerability

Out-of-bounds read in Windows Imaging Component allows an authorized attacker to disclose information locally.

5.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.40% · 32.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-96860 Scheduled assessment
Windows USB Print Driver Information Disclosure Vulnerability

Out-of-bounds read in Windows USB Print Driver allows an authorized attacker to disclose information locally.

5.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.40% · 32.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-96910 Scheduled assessment
Microsoft Windows Search Component Information Disclosure Vulnerability

Untrusted pointer dereference in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.

5.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.40% · 32.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-96921 Scheduled assessment
Windows Message Queuing Queue Manager Information Disclosure Vulnerability

Access of resource using incompatible type ('type confusion') in Windows Message Queuing Queue Manager allows an authorized attacker to disclose information locally.

5.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.40% · 32.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-96925 Scheduled assessment
Windows NTFS Information Disclosure Vulnerability

Integer underflow (wrap or wraparound) in Windows NTFS allows an authorized attacker to disclose information locally.

5.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.40% · 32.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-96930 Scheduled assessment
Windows Universal Disk Format File System Driver (UDFS) Information Disclosure Vulnerability

Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally.

5.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.40% · 32.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-102187 Scheduled assessment
Windows Kernel Information Disclosure Vulnerability

Use of uninitialized resource in Windows Kernel allows an authorized attacker to disclose information locally.

5.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.40% · 32.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83672 Scheduled assessment
Windows Installer Information Disclosure Vulnerability

Exposure of sensitive system information to an unauthorized control sphere in Windows Installer allows an authorized attacker to disclose information locally.

4.7 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.38% · 30.0th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83774 Scheduled assessment
Windows Win32 Kernel Subsystem Information Disclosure Vulnerability

Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

4.7 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.38% · 30.0th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83905 Scheduled assessment
Windows Shell Information Disclosure Vulnerability

Exposure of sensitive system information to an unauthorized control sphere in Windows Shell allows an authorized attacker to disclose information locally.

4.7 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.38% · 30.0th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83909 Scheduled assessment
Windows Win32 Kernel Subsystem Information Disclosure Vulnerability

Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

4.7 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.38% · 30.0th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83925 Scheduled assessment
Windows Kernel Information Disclosure Vulnerability

Use of uninitialized resource in Windows Kernel allows an authorized attacker to disclose information locally.

4.7 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.38% · 30.0th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-96935 Scheduled assessment
Windows NTFS Information Disclosure Vulnerability

Exposure of sensitive system information to an unauthorized control sphere in Windows NTFS allows an authorized attacker to disclose information locally.

5.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.36% · 28.4th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83786 Scheduled assessment
Windows NTFS Information Disclosure Vulnerability

Generation of error message containing sensitive information in Windows NTFS allows an authorized attacker to disclose information locally.

4.7 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.36% · 28.2th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83897 Scheduled assessment
Windows Win32 Kernel Subsystem Information Disclosure Vulnerability

Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

4.7 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.36% · 28.2th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70137 Scheduled assessment
Windows Remote Access Connection Manager Information Disclosure Vulnerability

Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to disclose information locally.

5.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.36% · 27.8th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-69902 Scheduled assessment
Windows NTFS Remote Code Execution Vulnerability

Untrusted pointer dereference in Windows NTFS allows an authorized attacker to execute code locally.

6.7 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.36% · 27.6th percentileForecast date: 2026-10-14LOCAL · LOW complexity · HIGH privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-96938 Scheduled assessment
Windows Distributed File System (DFS) Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to elevate privileges locally.

6.7 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.33% · 24.7th percentileForecast date: 2026-10-14LOCAL · LOW complexity · HIGH privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83664 Scheduled assessment
Windows Portable Device File System Driver Information Disclosure Vulnerability

Access of resource using incompatible type ('type confusion') in Windows Portable Device File System Driver allows an authorized attacker to disclose information locally.

5.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.32% · 23.2th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83668 Scheduled assessment
Windows WLAN Service Information Disclosure Vulnerability

Out-of-bounds read in Windows WLAN Service allows an authorized attacker to disclose information locally.

5.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.32% · 23.2th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83765 Scheduled assessment
Windows DWM Core Library Information Disclosure Vulnerability

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.

5.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.32% · 23.2th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-69506 Scheduled assessment
Windows Key Storage Provider Information Disclosure Vulnerability

Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally.

4.7 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.32% · 23.2th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70063 Scheduled assessment
Windows Kernel Information Disclosure Vulnerability

Out-of-bounds read in Windows Kernel allows an authorized attacker to disclose information locally.

4.7 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70077 Scheduled assessment
Windows Kernel Information Disclosure Vulnerability

Use after free in Windows Kernel allows an authorized attacker to disclose information locally.

4.7 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.32% · 23.2th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83582 Scheduled assessment
Windows Graphics Kernel Information Disclosure Vulnerability

Use after free in Windows Graphics Kernel allows an authorized attacker to disclose information locally.

4.7 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-102186 Scheduled assessment
Windows Network File System Information Disclosure Vulnerability

Untrusted pointer dereference in Windows Network File System allows an authorized attacker to disclose information locally.

4.7 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70288 Scheduled assessment
Win32k Information Disclosure Vulnerability

Time-of-check time-of-use (toctou) race condition in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

5.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.32% · 23.0th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-105006 Scheduled assessment
HID Class Driver Elevation of Privilege Vulnerability

Use after free in HID class driver allows an unauthorized attacker to elevate privileges with a physical attack.

6.4 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.31% · 22.3th percentileForecast date: 2026-10-14PHYSICAL · HIGH complexity · NONE privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-85320 Scheduled assessment
Windows Print Spooler Components Information Disclosure Vulnerability

Use of uninitialized resource in Windows Print Spooler Components allows an authorized attacker to disclose information locally.

5.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.31% · 21.7th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-87698 Scheduled assessment
Windows Remote Access Service Infrastructure Information Disclosure Vulnerability

Out-of-bounds read in Windows Remote Access Service Infrastructure allows an authorized attacker to disclose information locally.

5.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.31% · 21.7th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-95904 Scheduled assessment
Windows Event Logging Service Information Disclosure Vulnerability

Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclose information locally.

5.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.31% · 21.7th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-96846 Scheduled assessment
WebDAV Information Disclosure Vulnerability

Out-of-bounds read in WebDAV allows an authorized attacker to disclose information locally.

5.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.31% · 21.7th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-96854 Scheduled assessment
Windows Device Association Service Information Disclosure Vulnerability

Access of resource using incompatible type ('type confusion') in Windows Device Association Service allows an authorized attacker to disclose information locally.

5.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.31% · 21.7th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-96927 Scheduled assessment
Windows NTFS Information Disclosure Vulnerability

Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.

5.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.31% · 21.7th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-88158 Scheduled assessment
Microsoft Digest Authentication Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Digest Authentication allows an authorized attacker to disclose information locally.

5.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.29% · 20.5th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70057 Scheduled assessment
Windows Routing and Remote Access Service (RRAS) Security Feature Bypass Vulnerability

Incorrect authorization in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to bypass a security feature locally.

5.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.29% · 19.8th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70083 Scheduled assessment
Role: DNS Server Tampering Vulnerability

Incorrect authorization in DNS Server allows an authorized attacker to perform tampering locally.

5.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.29% · 19.8th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70085 Scheduled assessment
Role: DNS Server Tampering Vulnerability

Missing authorization in DNS Server allows an authorized attacker to perform tampering locally.

5.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.29% · 19.8th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70087 Scheduled assessment
Role: DNS Server Security Feature Bypass Vulnerability

Incorrect authorization in DNS Server allows an authorized attacker to bypass a security feature locally.

5.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.29% · 19.8th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83787 Scheduled assessment
Windows DHCP Server Security Feature Bypass Vulnerability

Insufficient verification of data authenticity in Windows DHCP Server allows an authorized attacker to bypass a security feature locally.

5.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.29% · 19.8th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-85865 Scheduled assessment
Windows DHCP Server Security Feature Bypass Vulnerability

Improper authentication in Windows DHCP Server allows an authorized attacker to bypass a security feature locally.

5.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.29% · 19.8th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-96311 Scheduled assessment
Windows Network List Service Tampering Vulnerability

Improper authorization in Windows Network List Service allows an authorized attacker to perform tampering locally.

5.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.29% · 19.8th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-96316 Scheduled assessment
Windows Routing and Remote Access Service (RRAS) Tampering Vulnerability

Improper access control in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to perform tampering locally.

5.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.29% · 19.8th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-96926 Scheduled assessment
Role: DNS Server Tampering Vulnerability

Missing authorization in DNS Server allows an authorized attacker to perform tampering locally.

5.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.29% · 19.8th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-103560 Scheduled assessment
Role: DNS Server Tampering Vulnerability

Improper authorization in DNS Server allows an authorized attacker to perform tampering locally.

5.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.29% · 19.8th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83865 Scheduled assessment
Windows Internet (wininet.dll) Tampering Vulnerability

Relative path traversal in Windows Internet (wininet.dll) allows an authorized attacker to perform tampering locally.

4.7 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.27% · 18.4th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-85333 Scheduled assessment
Windows Performance Monitor Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Performance Monitor allows an authorized attacker to elevate privileges locally.

6.7 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.25% · 14.9th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · REQUIRED user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70195 Scheduled assessment
Windows Ancillary Function Driver for WinSock Information Disclosure Vulnerability

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to disclose information locally.

4.7 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.23% · 13.2th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-70071 Scheduled assessment
Role: DNS Server Tampering Vulnerability

Improper verification of cryptographic signature in DNS Server allows an authorized attacker to perform tampering locally.

5.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.23% · 12.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-83798 Scheduled assessment
Windows Update Stack Spoofing Vulnerability

Improper verification of cryptographic signature in Windows Update Stack allows an authorized attacker to perform spoofing locally.

5.5 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.21% · 11.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.
CVE-2026-96853 Scheduled assessment
Windows Win32 Kernel Subsystem Information Disclosure Vulnerability

Time-of-check time-of-use (toctou) race condition in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

4.7 · CVSS 3.1 · MediumSource: CNANo confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.EPSS: 0.19% · 8.0th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interactionScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data.