BlackTreeCVE IntelligenceMicrosoft · KB5127648
Linked CVE review
Deploy Microsoft Windows security update KB5127648
- Linked CVEs
- 1008
- Confirmed exploited
- 1
- PoC or lab evidence
- 0
- Maximum CVSS
- 9.8
Confirmed exploitation, public exploit material, EPSS probability and CVSS severity answer different questions. “No confirmation recorded” means the checked sources do not currently confirm exploitation. It is not proof that exploitation has not occurred.
| CVE and description | Severity | Exploit reality | Forecast and access | Remediation |
|---|---|---|---|---|
CVE-2026-96951 Immediate evidence Microsoft Windows Command Injection VulnerabilityMicrosoft Windows Shell contains a command injection vulnerability that allows an unauthorized attacker to bypass a security feature over a network. | 8.8 · CVSS 3.1 · HighSource: CNA | Confirmed in the wildCISA added this CVE to its Known Exploited Vulnerabilities catalogue on 2026-10-13.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 1.51% · 73.8th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · REQUIRED user interaction | Patch nowCISA confirms exploitation in the wild and lists 2026-10-16 as the remediation due date.Patch available. An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release. |
CVE-2026-100202 Critical technical severity Windows Message Queuing Queue Manager Remote Code Execution VulnerabilityUse after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network. | 9.8 · CVSS 3.1 · CriticalSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 1.00% · 62.0th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interaction | Within 72 hoursCritical technical impact with a remotely reachable, unauthenticated path; no CISA KEV confirmation is currently recorded.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-100219 Critical technical severity Microsoft QUIC Remote Code Execution VulnerabilityUse after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network. | 9.8 · CVSS 3.1 · CriticalSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 1.00% · 62.0th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interaction | Within 72 hoursCritical technical impact with a remotely reachable, unauthenticated path; no CISA KEV confirmation is currently recorded.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83693 Critical technical severity Windows Error Reporting Remote Code Execution VulnerabilityHeap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network. | 9.8 · CVSS 3.1 · CriticalSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 1.00% · 61.9th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interaction | Within 72 hoursCritical technical impact with a remotely reachable, unauthenticated path; no CISA KEV confirmation is currently recorded.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83770 Critical technical severity Windows Text Shaping Remote Code Execution VulnerabilityHeap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network. | 9.8 · CVSS 3.1 · CriticalSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 1.00% · 61.9th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interaction | Within 72 hoursCritical technical impact with a remotely reachable, unauthenticated path; no CISA KEV confirmation is currently recorded.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-97814 Critical technical severity Windows Text Shaping Remote Code Execution VulnerabilityHeap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network. | 9.8 · CVSS 3.1 · CriticalSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.99% · 61.6th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interaction | Within 72 hoursCritical technical impact with a remotely reachable, unauthenticated path; no CISA KEV confirmation is currently recorded.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-105016 Critical technical severity Microsoft QUIC Remote Code Execution VulnerabilityHeap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a network. | 9.8 · CVSS 3.1 · CriticalSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.99% · 61.6th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interaction | Within 72 hoursCritical technical impact with a remotely reachable, unauthenticated path; no CISA KEV confirmation is currently recorded.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70147 Critical technical severity Microsoft PostScript Printer Driver Remote Code Execution VulnerabilityHeap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over a network. | 9.8 · CVSS 3.1 · CriticalSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.97% · 60.9th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interaction | Within 72 hoursCritical technical impact with a remotely reachable, unauthenticated path; no CISA KEV confirmation is currently recorded.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70153 Critical technical severity Microsoft PostScript Printer Driver Remote Code Execution VulnerabilityHeap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over a network. | 9.8 · CVSS 3.1 · CriticalSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.97% · 60.9th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interaction | Within 72 hoursCritical technical impact with a remotely reachable, unauthenticated path; no CISA KEV confirmation is currently recorded.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70096 Critical technical severity Windows Rich Text Edit Control Remote Code Execution VulnerabilityHeap-based buffer overflow in Windows Rich Text Edit Control allows an unauthorized attacker to execute code over a network. | 9.8 · CVSS 3.1 · CriticalSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.96% · 60.7th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interaction | Within 72 hoursCritical technical impact with a remotely reachable, unauthenticated path; no CISA KEV confirmation is currently recorded.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70157 Critical technical severity Windows System Information Console Remote Code Execution VulnerabilityHeap-based buffer overflow in Windows System Information Console allows an unauthorized attacker to execute code over a network. | 9.8 · CVSS 3.1 · CriticalSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.96% · 60.7th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interaction | Within 72 hoursCritical technical impact with a remotely reachable, unauthenticated path; no CISA KEV confirmation is currently recorded.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83517 Critical technical severity Microsoft Windows Media Foundation Remote Code Execution VulnerabilityHeap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. | 9.8 · CVSS 3.1 · CriticalSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.96% · 60.7th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interaction | Within 72 hoursCritical technical impact with a remotely reachable, unauthenticated path; no CISA KEV confirmation is currently recorded.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83519 Critical technical severity Windows Error Reporting Remote Code Execution VulnerabilityHeap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network. | 9.8 · CVSS 3.1 · CriticalSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.96% · 60.7th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interaction | Within 72 hoursCritical technical impact with a remotely reachable, unauthenticated path; no CISA KEV confirmation is currently recorded.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83578 Critical technical severity Microsoft PowerShell Remote Code Execution VulnerabilityInteger underflow (wrap or wraparound) in Windows PowerShell allows an unauthorized attacker to execute code over a network. | 9.8 · CVSS 3.1 · CriticalSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.96% · 60.7th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interaction | Within 72 hoursCritical technical impact with a remotely reachable, unauthenticated path; no CISA KEV confirmation is currently recorded.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83910 Critical technical severity RPC Runtime Library Remote Code Execution VulnerabilityOut-of-bounds write in RPC Runtime allows an unauthorized attacker to execute code over a network. | 9.8 · CVSS 3.1 · CriticalSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.96% · 60.7th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interaction | Within 72 hoursCritical technical impact with a remotely reachable, unauthenticated path; no CISA KEV confirmation is currently recorded.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-100222 Critical technical severity Network Policy Server (NPS) Remote Code Execution VulnerabilityHeap-based buffer overflow in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network. | 9.8 · CVSS 3.1 · CriticalSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.96% · 60.7th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interaction | Within 72 hoursCritical technical impact with a remotely reachable, unauthenticated path; no CISA KEV confirmation is currently recorded.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-97805 Critical technical severity Windows Partition Management Driver Remote Code Execution VulnerabilityOut-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute code over a network. | 9.8 · CVSS 3.1 · CriticalSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.96% · 60.6th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interaction | Within 72 hoursCritical technical impact with a remotely reachable, unauthenticated path; no CISA KEV confirmation is currently recorded.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85806 Critical technical severity Network Policy Server (NPS) Remote Code Execution VulnerabilityInteger underflow (wrap or wraparound) in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network. | 9.8 · CVSS 3.1 · CriticalSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.93% · 59.7th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interaction | Within 72 hoursCritical technical impact with a remotely reachable, unauthenticated path; no CISA KEV confirmation is currently recorded.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85809 Critical technical severity Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityRemote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine | 9.8 · CVSS 3.1 · CriticalSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.93% · 59.7th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interaction | Within 72 hoursCritical technical impact with a remotely reachable, unauthenticated path; no CISA KEV confirmation is currently recorded.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85814 Critical technical severity Microsoft Windows Media Foundation Remote Code Execution VulnerabilityHeap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. | 9.8 · CVSS 3.1 · CriticalSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.93% · 59.7th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interaction | Within 72 hoursCritical technical impact with a remotely reachable, unauthenticated path; no CISA KEV confirmation is currently recorded.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-97816 Critical technical severity Microsoft OpenSSH for Windows Remote Code Execution VulnerabilityUse after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network. | 9.8 · CVSS 3.1 · CriticalSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.91% · 59.2th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interaction | Within 72 hoursCritical technical impact with a remotely reachable, unauthenticated path; no CISA KEV confirmation is currently recorded.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83782 Critical technical severity Windows Shell Remote Code Execution VulnerabilityHeap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network. | 9.8 · CVSS 3.1 · CriticalSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.89% · 58.6th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interaction | Within 72 hoursCritical technical impact with a remotely reachable, unauthenticated path; no CISA KEV confirmation is currently recorded.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-84015 Critical technical severity Remote Access Point-to-Point Protocol (PPP) EAP-TLS Remote Code Execution VulnerabilityHeap-based buffer overflow in Remote Access Point-to-Point Protocol (PPP) EAP-TLS allows an unauthorized attacker to execute code over a network. | 9.8 · CVSS 3.1 · CriticalSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.89% · 58.6th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interaction | Within 72 hoursCritical technical impact with a remotely reachable, unauthenticated path; no CISA KEV confirmation is currently recorded.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85792 Critical technical severity Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityRemote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine | 9.8 · CVSS 3.1 · CriticalSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.89% · 58.6th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interaction | Within 72 hoursCritical technical impact with a remotely reachable, unauthenticated path; no CISA KEV confirmation is currently recorded.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-96219 Critical technical severity Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution VulnerabilityOut-of-bounds write in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to execute code over a network. | 9.8 · CVSS 3.1 · CriticalSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.89% · 58.6th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interaction | Within 72 hoursCritical technical impact with a remotely reachable, unauthenticated path; no CISA KEV confirmation is currently recorded.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-96909 Critical technical severity Windows BitLocker Remote Code Execution VulnerabilityHeap-based buffer overflow in Windows BitLocker allows an unauthorized attacker to execute code over a network. | 9.8 · CVSS 3.1 · CriticalSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.89% · 58.6th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interaction | Within 72 hoursCritical technical impact with a remotely reachable, unauthenticated path; no CISA KEV confirmation is currently recorded.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-96924 Critical technical severity Windows OLE Remote Code Execution VulnerabilityUntrusted pointer dereference in Windows OLE allows an unauthorized attacker to execute code over a network. | 9.8 · CVSS 3.1 · CriticalSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.89% · 58.6th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interaction | Within 72 hoursCritical technical impact with a remotely reachable, unauthenticated path; no CISA KEV confirmation is currently recorded.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-102210 Critical technical severity Windows Text Shaping Remote Code Execution VulnerabilityHeap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network. | 9.8 · CVSS 3.1 · CriticalSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.89% · 58.6th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interaction | Within 72 hoursCritical technical impact with a remotely reachable, unauthenticated path; no CISA KEV confirmation is currently recorded.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-105010 Critical technical severity Microsoft Windows Search Component Elevation of Privilege VulnerabilityUse after free in Microsoft Windows Search Component allows an unauthorized attacker to elevate privileges over a network. | 9.8 · CVSS 3.1 · CriticalSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.89% · 58.6th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interaction | Within 72 hoursCritical technical impact with a remotely reachable, unauthenticated path; no CISA KEV confirmation is currently recorded.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70024 Critical technical severity Windows Internet Information Services Remote Code Execution VulnerabilityStack-based buffer overflow in Windows Internet Information Services allows an unauthorized attacker to execute code over a network. | 9.8 · CVSS 3.1 · CriticalSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.80% · 55.5th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interaction | Within 72 hoursCritical technical impact with a remotely reachable, unauthenticated path; no CISA KEV confirmation is currently recorded.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-69634 Critical technical severity Windows iSCSI Remote Code Execution VulnerabilityHeap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a network. | 9.8 · CVSS 3.1 · CriticalSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.79% · 55.3th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interaction | Within 72 hoursCritical technical impact with a remotely reachable, unauthenticated path; no CISA KEV confirmation is currently recorded.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-69639 Critical technical severity Windows libarchive Remote Code Execution VulnerabilityHeap-based buffer overflow in Windows Libarchive allows an unauthorized attacker to execute code over a network. | 9.8 · CVSS 3.1 · CriticalSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.79% · 55.3th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interaction | Within 72 hoursCritical technical impact with a remotely reachable, unauthenticated path; no CISA KEV confirmation is currently recorded.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-69705 Critical technical severity Windows iSCSI Remote Code Execution VulnerabilityOut-of-bounds write in Windows iSCSI allows an unauthorized attacker to execute code over a network. | 9.8 · CVSS 3.1 · CriticalSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.79% · 55.3th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interaction | Within 72 hoursCritical technical impact with a remotely reachable, unauthenticated path; no CISA KEV confirmation is currently recorded.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-69883 Critical technical severity Windows iSCSI Remote Code Execution VulnerabilityUse after free in Windows iSCSI allows an unauthorized attacker to execute code over a network. | 9.8 · CVSS 3.1 · CriticalSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.79% · 55.3th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interaction | Within 72 hoursCritical technical impact with a remotely reachable, unauthenticated path; no CISA KEV confirmation is currently recorded.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-69886 Critical technical severity Windows Imaging Component Remote Code Execution VulnerabilityHeap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network. | 9.8 · CVSS 3.1 · CriticalSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.79% · 55.3th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interaction | Within 72 hoursCritical technical impact with a remotely reachable, unauthenticated path; no CISA KEV confirmation is currently recorded.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83748 Critical technical severity Windows Error Reporting Remote Code Execution VulnerabilityHeap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network. | 9.8 · CVSS 3.1 · CriticalSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.72% · 52.9th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interaction | Within 72 hoursCritical technical impact with a remotely reachable, unauthenticated path; no CISA KEV confirmation is currently recorded.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83935 Critical technical severity Microsoft XML Remote Code Execution VulnerabilityHeap-based buffer overflow in Microsoft XML allows an unauthorized attacker to execute code over a network. | 9.8 · CVSS 3.1 · CriticalSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.69% · 51.9th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interaction | Within 72 hoursCritical technical impact with a remotely reachable, unauthenticated path; no CISA KEV confirmation is currently recorded.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-97815 Critical technical severity Windows Error Reporting Remote Code Execution VulnerabilityHeap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network. | 9.8 · CVSS 3.1 · CriticalSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.69% · 51.6th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interaction | Within 72 hoursCritical technical impact with a remotely reachable, unauthenticated path; no CISA KEV confirmation is currently recorded.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-96096 Critical technical severity Windows Media Player Remote Code Execution VulnerabilityHeap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network. | 9.8 · CVSS 3.1 · CriticalSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.67% · 51.0th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interaction | Within 72 hoursCritical technical impact with a remotely reachable, unauthenticated path; no CISA KEV confirmation is currently recorded.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83869 Critical technical severity Windows Domain Name Service Remote Code Execution VulnerabilityInteger underflow (wrap or wraparound) in DNS Server allows an unauthorized attacker to execute code over a network. | 9.8 · CVSS 3.1 · CriticalSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.65% · 49.8th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interaction | Within 72 hoursCritical technical impact with a remotely reachable, unauthenticated path; no CISA KEV confirmation is currently recorded.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85928 Critical technical severity Windows Volume Manager Extension Driver Remote Code Execution VulnerabilityHeap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network. | 9.8 · CVSS 3.1 · CriticalSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.65% · 49.9th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interaction | Within 72 hoursCritical technical impact with a remotely reachable, unauthenticated path; no CISA KEV confirmation is currently recorded.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-105008 Critical technical severity Windows Schannel Spoofing VulnerabilityNo cwe for this issue in Windows Schannel allows an unauthorized attacker to perform spoofing over a network. | 9.0 · CVSS 3.1 · CriticalSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.60% · 47.4th percentileForecast date: 2026-10-14NETWORK · HIGH complexity · NONE privileges · NONE user interaction | Within 72 hoursCritical technical impact with a remotely reachable, unauthenticated path; no CISA KEV confirmation is currently recorded.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85818 Critical technical severity Windows Schannel Spoofing VulnerabilityImproper verification of cryptographic signature in Windows Schannel allows an unauthorized attacker to perform spoofing over a network. | 9.0 · CVSS 3.1 · CriticalSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.42% · 35.0th percentileForecast date: 2026-10-14NETWORK · HIGH complexity · NONE privileges · NONE user interaction | Within 72 hoursCritical technical impact with a remotely reachable, unauthenticated path; no CISA KEV confirmation is currently recorded.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-88091 Scheduled assessment Windows Management Instrumentation Elevation of Privilege VulnerabilityDeserialization of untrusted data in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 2.14% · 81.6th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-96186 Scheduled assessment Microsoft Windows Media Foundation Elevation of Privilege VulnerabilityDeserialization of untrusted data in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 1.65% · 76.0th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83516 Scheduled assessment Windows Local Security Authority Subsystem Service (LSASS) Denial of Service VulnerabilityOut-of-bounds read in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to deny service over a network. | 7.5 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 1.20% · 67.6th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83655 Scheduled assessment Network Policy Server (NPS) Denial of Service VulnerabilityOut-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to deny service over a network. | 7.5 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 1.20% · 67.6th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83855 Scheduled assessment Windows WLAN Service Denial of Service VulnerabilityInteger underflow (wrap or wraparound) in Windows WLAN Service allows an unauthorized attacker to deny service over a network. | 7.5 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 1.20% · 67.6th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70031 Scheduled assessment Windows iSCSI Denial of Service VulnerabilityHeap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to deny service over a network. | 7.5 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 1.15% · 66.2th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70133 Scheduled assessment Windows SMB Server Denial of Service VulnerabilityAllocation of resources without limits or throttling in Windows SMB Server allows an unauthorized attacker to deny service over a network. | 7.5 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 1.15% · 66.2th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83795 Scheduled assessment Windows Internet Key Exchange (IKE) Extension Denial of Service VulnerabilityHeap-based buffer overflow in Windows IKE Extension allows an unauthorized attacker to deny service over a network. | 7.5 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 1.15% · 66.2th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83843 Scheduled assessment Windows Internet Key Exchange (IKE) Extension Denial of Service VulnerabilityOut-of-bounds read in Windows Internet Key Exchange (IKE) Protocol allows an unauthorized attacker to deny service over a network. | 7.5 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 1.15% · 66.2th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83860 Scheduled assessment Windows GDI Denial of Service VulnerabilityStack-based buffer overflow in Windows GDI allows an unauthorized attacker to deny service over a network. | 7.5 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 1.15% · 66.2th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-84017 Scheduled assessment Windows Routing and Remote Access Service (RRAS) Denial of Service VulnerabilityNull pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network. | 7.5 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 1.15% · 66.2th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85808 Scheduled assessment Windows Routing and Remote Access Service (RRAS) Denial of Service VulnerabilityOut-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network. | 7.5 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 1.15% · 66.2th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-87716 Scheduled assessment Windows Storage Spaces Controller Denial of Service VulnerabilityHeap-based buffer overflow in Windows Storage Spaces Controller allows an unauthorized attacker to deny service over a network. | 7.5 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 1.15% · 66.2th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-105723 Scheduled assessment Windows Distributed File System (DFS) Elevation of Privilege VulnerabilityUntrusted pointer dereference in Windows Distributed File System (DFS) allows an unauthorized attacker to elevate privileges over a network. | 7.5 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 1.15% · 66.2th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Patch available. 6.2.9200.26434:Security Update:https://support.microsoft.com/help/5126835 |
CVE-2026-83647 Scheduled assessment Windows Active Directory Domain Services Denial of Service VulnerabilityOut-of-bounds read in Active Directory Domain Services allows an unauthorized attacker to deny service over a network. | 7.5 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 1.15% · 66.1th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-102217 Scheduled assessment WebDAV Elevation of Privilege VulnerabilityImproper resolution of path equivalence in WebDAV allows an authorized attacker to elevate privileges over a network. | 8.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 1.11% · 65.3th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70163 Scheduled assessment Microsoft OpenSSH for Windows Denial of Service VulnerabilityAllocation of resources without limits or throttling in OpenSSH for Windows allows an unauthorized attacker to deny service over a network. | 7.5 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 1.10% · 65.1th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85322 Scheduled assessment Windows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityUse of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network. | 7.5 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 1.05% · 63.5th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-88159 Scheduled assessment Windows Background Intelligent Transfer Service (BITS) Remote Code Execution VulnerabilityUse after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network. | 8.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 1.02% · 62.7th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85334 Scheduled assessment Windows Message Queuing Queue Manager Information Disclosure VulnerabilityOut-of-bounds read in Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose information over a network. | 7.5 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 1.00% · 62.2th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85353 Scheduled assessment Windows Print Spooler Components Information Disclosure VulnerabilityOut-of-bounds read in Windows Print Spooler Components allows an unauthorized attacker to disclose information over a network. | 7.5 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 1.00% · 62.2th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-96245 Scheduled assessment Windows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityOut-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network. | 7.5 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 1.00% · 62.2th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-96246 Scheduled assessment Network Policy Server (NPS) Information Disclosure VulnerabilityOut-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to disclose information over a network. | 7.5 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 1.00% · 62.2th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-103569 Scheduled assessment Windows IKE Extension Information Disclosure VulnerabilityOut-of-bounds read in Windows IKE Extension allows an unauthorized attacker to disclose information over a network. | 7.5 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 1.00% · 62.2th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83670 Scheduled assessment Function Discovery Service (fdwsd.dll) Information Disclosure VulnerabilityOut-of-bounds read in Function Discovery Service (fdwsd.dll) allows an unauthorized attacker to disclose information over a network. | 7.5 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.96% · 60.9th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-69718 Scheduled assessment Windows Update Elevation of Privilege VulnerabilityImproper neutralization of special elements used in a command ('command injection') in Windows Update allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.96% · 60.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83784 Scheduled assessment Windows Encrypting File System (EFS) Elevation of Privilege VulnerabilityAbsolute path traversal in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges over a network. | 8.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.95% · 60.5th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-88136 Scheduled assessment Web Distributed Authoring and Versioning (WEBDAV) Remote Code Execution VulnerabilityImproper resolution of path equivalence in WebDAV allows an authorized attacker to execute code over a network. | 8.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.95% · 60.5th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83923 Scheduled assessment Microsoft OpenSSH for Windows Remote Code Execution VulnerabilityRelative path traversal in OpenSSH for Windows allows an unauthorized attacker to execute code over a network. | 8.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.92% · 59.5th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · REQUIRED user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83889 Scheduled assessment Windows DNS Server Remote Code Execution VulnerabilityRelease of invalid pointer or reference in DNS Server allows an authorized attacker to execute code over a network. | 8.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.91% · 59.2th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85798 Scheduled assessment Windows Distributed File System (DFS) Remote Code Execution VulnerabilityHeap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network. | 7.2 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.89% · 58.4th percentileForecast date: 2026-10-14NETWORK · LOW complexity · HIGH privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-97830 Scheduled assessment Windows Internet Information Services Denial of Service VulnerabilityDouble free in Windows Internet Information Services allows an unauthorized attacker to deny service over a network. | 7.5 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.89% · 58.4th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-108467 Scheduled assessment Microsoft PostScript Printer Driver Remote Code Execution VulnerabilityHeap-based buffer overflow in Microsoft PostScript Printer Driver allows an authorized attacker to execute code over a network. | 8.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.89% · 58.4th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-103558 Scheduled assessment Windows Routing and Remote Access Service (RRAS) Denial of Service VulnerabilityDeadlock in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network. | 7.5 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.88% · 58.3th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-108463 Scheduled assessment Windows SmartScreen Security Feature Bypass VulnerabilityImproper resolution of path equivalence in Windows SmartScreen allows an unauthorized attacker to bypass a security feature over a network. | 8.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.88% · 58.2th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · REQUIRED user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83677 Scheduled assessment Windows DHCP Client Denial of Service VulnerabilityMissing release of memory after effective lifetime in Windows DHCP Client allows an unauthorized attacker to deny service over a network. | 7.5 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.87% · 58.0th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70158 Scheduled assessment Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityRemote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine | 8.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.85% · 57.3th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85931 Scheduled assessment Windows Distributed File System (DFS) Remote Code Execution VulnerabilityHeap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network. | 8.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.85% · 57.3th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-88142 Scheduled assessment Windows Background Intelligent Transfer Service (BITS) Remote Code Execution VulnerabilityUse after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network. | 8.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.85% · 57.3th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-88165 Scheduled assessment Windows Active Directory Domain Services Remote Code Execution VulnerabilityOut-of-bounds write in Active Directory Domain Services allows an authorized attacker to execute code over a network. | 8.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.85% · 57.3th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-100220 Scheduled assessment Windows Media Video Decoder Remote Code Execution VulnerabilityHeap-based buffer overflow in Windows Media Video Decoder allows an unauthorized attacker to execute code over a network. | 8.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.84% · 56.9th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · REQUIRED user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70068 Scheduled assessment Windows Client-Side Caching (CSC) Service Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an unauthorized attacker to elevate privileges over a network. | 8.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.84% · 56.8th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · REQUIRED user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70089 Scheduled assessment Windows GDI Remote Code Execution VulnerabilityHeap-based buffer overflow in Windows GDI allows an unauthorized attacker to execute code over a network. | 8.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.84% · 56.8th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · REQUIRED user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70149 Scheduled assessment Windows Client Side Caching driver (csc.sys) Elevation of Privilege VulnerabilityExposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver (csc.sys) allows an authorized attacker to disclose information locally. | 8.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.84% · 56.8th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · REQUIRED user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70210 Scheduled assessment Windows OLE DB Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to elevate privileges over a network. | 8.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.84% · 56.8th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · REQUIRED user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70258 Scheduled assessment Microsoft Windows Media Foundation Remote Code Execution VulnerabilityHeap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. | 8.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.84% · 56.8th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · REQUIRED user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70262 Scheduled assessment WebDAV Elevation of Privilege VulnerabilityHeap-based buffer overflow in WebDAV allows an unauthorized attacker to elevate privileges over a network. | 8.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.84% · 56.8th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · REQUIRED user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70275 Scheduled assessment Windows CD-ROM File System Driver Remote Code Execution VulnerabilityUntrusted pointer dereference in Windows CD-ROM Driver allows an unauthorized attacker to execute code over a network. | 8.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.84% · 56.8th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · REQUIRED user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-77496 Scheduled assessment Windows Imaging Component Remote Code Execution VulnerabilityHeap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network. | 8.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.84% · 56.8th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · REQUIRED user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83523 Scheduled assessment Windows Image Acquisition Remote Code Execution VulnerabilityHeap-based buffer overflow in Windows Image Acquisition allows an unauthorized attacker to execute code over a network. | 8.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.84% · 56.8th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · REQUIRED user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83642 Scheduled assessment Windows Domain Name Service Remote Code Execution VulnerabilityAccess of resource using incompatible type ('type confusion') in DNS Server allows an unauthorized attacker to execute code over a network. | 8.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.84% · 56.8th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · REQUIRED user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83643 Scheduled assessment Windows Error Reporting Remote Code Execution VulnerabilityStack-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network. | 8.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.84% · 56.8th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · REQUIRED user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83688 Scheduled assessment Remote Desktop Client Remote Code Execution VulnerabilityHeap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | 8.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.84% · 56.8th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · REQUIRED user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-96325 Scheduled assessment Windows SMB Server Denial of Service VulnerabilityMissing reference to active allocated resource in Windows SMB Server allows an unauthorized attacker to deny service over a network. | 7.5 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.83% · 56.7th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-97798 Scheduled assessment Windows Error Reporting Service Elevation of Privilege VulnerabilityImproper neutralization of argument delimiters in a command ('argument injection') in Windows Error Reporting allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.83% · 56.7th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83778 Scheduled assessment Microsoft Internet Messaging API Remote Code Execution VulnerabilityHeap-based buffer overflow in Microsoft Internet Messaging API allows an unauthorized attacker to execute code over a network. | 8.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.80% · 55.8th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · REQUIRED user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83934 Scheduled assessment Windows GDI+ Remote Code Execution VulnerabilityStack-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network. | 8.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.80% · 55.6th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · REQUIRED user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-96952 Scheduled assessment Microsoft Windows Media Foundation Remote Code Execution VulnerabilityHeap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. | 8.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.80% · 55.6th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · REQUIRED user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-102225 Scheduled assessment Windows Text Shaping Remote Code Execution VulnerabilityOut-of-bounds read in Windows Text Shaping allows an unauthorized attacker to execute code over a network. | 8.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.80% · 55.6th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · REQUIRED user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83789 Scheduled assessment Windows SMB Client Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows SMB Client allows an unauthorized attacker to elevate privileges over a network. | 8.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.77% · 54.5th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · REQUIRED user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83797 Scheduled assessment Windows Partition Management Driver Remote Code Execution VulnerabilityOut-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute code over a network. | 8.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.77% · 54.5th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · REQUIRED user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83874 Scheduled assessment Windows Event Tracing Remote Code Execution VulnerabilityHeap-based buffer overflow in Windows Event Tracing allows an unauthorized attacker to execute code over a network. | 8.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.77% · 54.5th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · REQUIRED user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-88219 Scheduled assessment RPC Runtime Library Remote Code Execution VulnerabilityUntrusted pointer dereference in RPC Runtime allows an unauthorized attacker to execute code over a network. | 8.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.77% · 54.5th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · REQUIRED user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-102203 Scheduled assessment RPC Runtime Remote Code Execution VulnerabilityAccess of resource using incompatible type ('type confusion') in RPC Runtime allows an unauthorized attacker to execute code over a network. | 8.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.77% · 54.5th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · REQUIRED user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-103575 Scheduled assessment Remote Desktop Client Remote Code Execution VulnerabilityUse after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | 8.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.77% · 54.5th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · REQUIRED user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-105007 Scheduled assessment Windows NDIS Elevation of Privilege VulnerabilityAn elevation of privilege vulnerability exists in the Network Driver Interface Specification (NDIS) when ndis.sys fails to check the length of a buffer prior to copying memory to it. To exploit the vulnerability, in a local attack scenario, an attacker could run a specially crafted application to elevate the attacker's privilege level. An attacker who successfully exploited this vulnerability could run processes in a | 8.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.77% · 54.5th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · REQUIRED user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-108458 Scheduled assessment Remote Desktop Client Remote Code Execution VulnerabilityUse after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | 8.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.77% · 54.5th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · REQUIRED user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85359 Scheduled assessment Windows Performance Monitor Elevation of Privilege VulnerabilityImproper control of generation of code ('code injection') in Windows Performance Monitor allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.74% · 53.7th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85864 Scheduled assessment Python Elevation of Privilege VulnerabilityImproper privilege management in Python allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.74% · 53.7th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-96220 Scheduled assessment Windows Assigned Access Elevation of Privilege VulnerabilityImproper control of generation of code ('code injection') in Windows Assigned Access allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.74% · 53.7th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-108131 Scheduled assessment Active Directory Federation Services (AD FS) Spoofing VulnerabilityNo cwe for this issue in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network. | 7.5 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.74% · 53.6th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85817 Scheduled assessment Microsoft PowerShell Remote Code Execution VulnerabilityReliance on untrusted inputs in a security decision in Windows PowerShell allows an unauthorized attacker to execute code over a network. | 8.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.74% · 53.5th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · REQUIRED user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83522 Scheduled assessment Windows IKE Extension Spoofing VulnerabilityReliance on untrusted inputs in a security decision in Windows IKE Extension allows an unauthorized attacker to perform spoofing over a network. | 8.1 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.72% · 52.9th percentileForecast date: 2026-10-14NETWORK · HIGH complexity · NONE privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83914 Scheduled assessment Microsoft XML Remote Code Execution VulnerabilityUse after free in Microsoft XML allows an unauthorized attacker to execute code over a network. | 8.1 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.72% · 52.9th percentileForecast date: 2026-10-14NETWORK · HIGH complexity · NONE privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-100218 Scheduled assessment Remote Desktop Gateway Service Remote Code Execution VulnerabilityUse after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network. | 8.1 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.72% · 52.9th percentileForecast date: 2026-10-14NETWORK · HIGH complexity · NONE privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83759 Scheduled assessment Windows Encrypting File System (EFS) Remote Code Execution VulnerabilityImproper control of generation of code ('code injection') in Windows Encrypting File System (EFS) allows an authorized attacker to execute code over a network. | 8.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.72% · 52.7th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70229 Scheduled assessment Windows Active Directory Domain Services Remote Code Execution VulnerabilityIncorrect authorization in Active Directory Domain Services allows an unauthorized attacker to execute code over a network. | 8.1 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.71% · 52.5th percentileForecast date: 2026-10-14NETWORK · HIGH complexity · NONE privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70062 Scheduled assessment Windows libarchive Remote Code Execution VulnerabilityDouble free in Windows Libarchive allows an unauthorized attacker to execute code over a network. | 8.1 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.69% · 51.9th percentileForecast date: 2026-10-14NETWORK · HIGH complexity · NONE privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-97788 Scheduled assessment Active Directory Federation Services (AD FS) Information Disclosure VulnerabilityObservable discrepancy in Active Directory Federation Services (AD FS) allows an unauthorized attacker to disclose information over a network. | 7.5 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.69% · 51.8th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-108460 Scheduled assessment Windows Message Queuing Remote Code Execution VulnerabilityUse after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network. | 8.1 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.69% · 51.6th percentileForecast date: 2026-10-14NETWORK · HIGH complexity · NONE privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70038 Scheduled assessment Windows iSCSI Remote Code Execution VulnerabilityUse after free in Windows iSCSI allows an unauthorized attacker to execute code over a network. | 8.1 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.67% · 51.0th percentileForecast date: 2026-10-14NETWORK · HIGH complexity · NONE privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70111 Scheduled assessment Windows Kernel Elevation of Privilege VulnerabilityUntrusted pointer dereference in Windows Kernel allows an unauthorized attacker to elevate privileges over a network. | 8.1 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.67% · 51.0th percentileForecast date: 2026-10-14NETWORK · HIGH complexity · NONE privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85371 Scheduled assessment Network Policy Server (NPS) Remote Code Execution VulnerabilityUse after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network. | 8.1 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.67% · 51.0th percentileForecast date: 2026-10-14NETWORK · HIGH complexity · NONE privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85799 Scheduled assessment Network Policy Server (NPS) Remote Code Execution VulnerabilityUse after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network. | 8.1 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.67% · 51.0th percentileForecast date: 2026-10-14NETWORK · HIGH complexity · NONE privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85926 Scheduled assessment Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution VulnerabilityUse after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network. | 8.1 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.67% · 51.0th percentileForecast date: 2026-10-14NETWORK · HIGH complexity · NONE privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-69985 Scheduled assessment Windows libarchive Remote Code Execution VulnerabilityHeap-based buffer overflow in Windows Libarchive allows an unauthorized attacker to execute code over a network. | 8.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.66% · 50.6th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · REQUIRED user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70014 Scheduled assessment Windows Cryptographic Services Remote Code Execution VulnerabilityUse after free in Windows Cryptographic Services allows an authorized attacker to execute code over a network. | 7.5 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.66% · 50.5th percentileForecast date: 2026-10-14NETWORK · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70207 Scheduled assessment Network Policy Server (NPS) Remote Code Execution VulnerabilityHeap-based buffer overflow in Network Policy Server (NPS) allows an authorized attacker to execute code over a network. | 7.5 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.66% · 50.5th percentileForecast date: 2026-10-14NETWORK · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-69326 Scheduled assessment Graphic Fonts Remote Code Execution VulnerabilityHeap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network. | 8.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.64% · 49.4th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · REQUIRED user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83725 Scheduled assessment Microsoft Windows Search Component Remote Code Execution VulnerabilityHeap-based buffer overflow in Microsoft Windows Search Component allows an unauthorized attacker to execute code over a network. | 8.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.61% · 47.8th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · REQUIRED user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83851 Scheduled assessment Windows Partition Management Driver Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows Partition Management Driver allows an unauthorized attacker to elevate privileges over a network. | 8.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.61% · 47.8th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · REQUIRED user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83929 Scheduled assessment Windows GDI Remote Code Execution VulnerabilityOut-of-bounds write in Windows GDI allows an unauthorized attacker to execute code over a network. | 8.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.61% · 47.8th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · REQUIRED user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83754 Scheduled assessment Microsoft OpenSSH for Windows Remote Code Execution VulnerabilityHeap-based buffer overflow in OpenSSH for Windows allows an unauthorized attacker to execute code over a network. | 7.5 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.60% · 47.3th percentileForecast date: 2026-10-14NETWORK · HIGH complexity · NONE privileges · REQUIRED user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-69452 Scheduled assessment Windows Enterprise App Management Elevation of Privilege VulnerabilityUse after free in Windows Enterprise App Management allows an authorized attacker to elevate privileges over a network. | 7.1 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.58% · 46.6th percentileForecast date: 2026-10-14NETWORK · HIGH complexity · LOW privileges · REQUIRED user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83928 Scheduled assessment Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution VulnerabilityOut-of-bounds write in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to execute code over a network. | 8.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.58% · 46.2th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70095 Scheduled assessment Windows iSCSI Remote Code Execution VulnerabilityHeap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a network. | 7.5 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.57% · 45.9th percentileForecast date: 2026-10-14NETWORK · HIGH complexity · NONE privileges · REQUIRED user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Patch available. 10.0.26300.9711:Security Update:https://support.microsoft.com/help/5127648 |
CVE-2026-69976 Scheduled assessment Remote Desktop Client Remote Code Execution VulnerabilityUse after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | 7.5 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.57% · 45.8th percentileForecast date: 2026-10-14NETWORK · HIGH complexity · NONE privileges · REQUIRED user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-69984 Scheduled assessment Remote Desktop Client Remote Code Execution VulnerabilityUse after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | 7.5 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.57% · 45.8th percentileForecast date: 2026-10-14NETWORK · HIGH complexity · NONE privileges · REQUIRED user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-69986 Scheduled assessment Remote Desktop Client Remote Code Execution VulnerabilityUse after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | 7.5 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.57% · 45.8th percentileForecast date: 2026-10-14NETWORK · HIGH complexity · NONE privileges · REQUIRED user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-69987 Scheduled assessment Remote Desktop Client Remote Code Execution VulnerabilityUse after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | 7.5 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.57% · 45.8th percentileForecast date: 2026-10-14NETWORK · HIGH complexity · NONE privileges · REQUIRED user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-69988 Scheduled assessment Remote Desktop Client Remote Code Execution VulnerabilityUse after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | 7.5 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.57% · 45.8th percentileForecast date: 2026-10-14NETWORK · HIGH complexity · NONE privileges · REQUIRED user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-69991 Scheduled assessment Remote Desktop Client Remote Code Execution VulnerabilityUse after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | 7.5 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.57% · 45.8th percentileForecast date: 2026-10-14NETWORK · HIGH complexity · NONE privileges · REQUIRED user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-69992 Scheduled assessment Remote Desktop Services Remote Code Execution VulnerabilityUse after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network. | 7.5 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.57% · 45.8th percentileForecast date: 2026-10-14NETWORK · HIGH complexity · NONE privileges · REQUIRED user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-69994 Scheduled assessment Remote Desktop Client Remote Code Execution VulnerabilityUse after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | 7.5 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.57% · 45.8th percentileForecast date: 2026-10-14NETWORK · HIGH complexity · NONE privileges · REQUIRED user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-69995 Scheduled assessment Remote Desktop Client Remote Code Execution VulnerabilityUse after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | 7.5 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.57% · 45.8th percentileForecast date: 2026-10-14NETWORK · HIGH complexity · NONE privileges · REQUIRED user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-69996 Scheduled assessment Remote Desktop Client Remote Code Execution VulnerabilityUse after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | 7.5 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.57% · 45.8th percentileForecast date: 2026-10-14NETWORK · HIGH complexity · NONE privileges · REQUIRED user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-69997 Scheduled assessment Remote Desktop Client Remote Code Execution VulnerabilityUse after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | 7.5 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.57% · 45.8th percentileForecast date: 2026-10-14NETWORK · HIGH complexity · NONE privileges · REQUIRED user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-69998 Scheduled assessment Remote Desktop Client Remote Code Execution VulnerabilityUse after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | 7.5 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.57% · 45.8th percentileForecast date: 2026-10-14NETWORK · HIGH complexity · NONE privileges · REQUIRED user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70004 Scheduled assessment Remote Desktop Client Remote Code Execution VulnerabilityUse after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | 7.5 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.57% · 45.8th percentileForecast date: 2026-10-14NETWORK · HIGH complexity · NONE privileges · REQUIRED user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70006 Scheduled assessment Remote Desktop Client Remote Code Execution VulnerabilityUse after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | 7.5 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.57% · 45.8th percentileForecast date: 2026-10-14NETWORK · HIGH complexity · NONE privileges · REQUIRED user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70012 Scheduled assessment Remote Desktop Client Remote Code Execution VulnerabilityUse after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | 7.5 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.57% · 45.8th percentileForecast date: 2026-10-14NETWORK · HIGH complexity · NONE privileges · REQUIRED user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83856 Scheduled assessment Windows Event Logging Service Remote Code Execution VulnerabilityOut-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network. | 7.5 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.57% · 45.8th percentileForecast date: 2026-10-14NETWORK · HIGH complexity · NONE privileges · REQUIRED user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-96071 Scheduled assessment Windows Media Remote Code Execution VulnerabilityHeap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network. | 7.5 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.57% · 45.8th percentileForecast date: 2026-10-14NETWORK · HIGH complexity · NONE privileges · REQUIRED user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-97789 Scheduled assessment Remote Desktop Client Remote Code Execution VulnerabilityUse after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | 7.5 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.57% · 45.8th percentileForecast date: 2026-10-14NETWORK · HIGH complexity · NONE privileges · REQUIRED user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85339 Scheduled assessment Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityRemote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine | 8.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.56% · 45.1th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · REQUIRED user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85903 Scheduled assessment Windows Domain Name Service Remote Code Execution VulnerabilityUntrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network. | 8.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.56% · 45.1th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · REQUIRED user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85936 Scheduled assessment Windows Shell Remote Code Execution VulnerabilityDouble free in Windows Shell allows an unauthorized attacker to execute code over a network. | 8.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.56% · 45.1th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · REQUIRED user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-88112 Scheduled assessment Windows Domain Name Service Remote Code Execution VulnerabilityUntrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network. | 8.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.56% · 45.1th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · REQUIRED user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-88114 Scheduled assessment Windows Domain Name Service Remote Code Execution VulnerabilityUntrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network. | 8.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.56% · 45.1th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · REQUIRED user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-88116 Scheduled assessment Windows Domain Name Service Remote Code Execution VulnerabilityUntrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network. | 8.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.56% · 45.1th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · REQUIRED user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-69913 Scheduled assessment Windows TCP/IP Remote Code Execution VulnerabilityUse after free in Windows TCP/IP allows an unauthorized attacker to execute code over a network. | 8.1 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.55% · 44.8th percentileForecast date: 2026-10-14NETWORK · HIGH complexity · NONE privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83771 Scheduled assessment Windows Camera Frame Server Monitor Elevation of Privilege VulnerabilityUse after free in Windows Camera Frame Server Monitor allows an unauthorized attacker to elevate privileges over an adjacent network. | 8.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.55% · 44.5th percentileForecast date: 2026-10-14ADJACENT · LOW complexity · NONE privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83777 Scheduled assessment Windows Bluetooth Service Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows Bluetooth Service allows an unauthorized attacker to elevate privileges over an adjacent network. | 8.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.55% · 44.5th percentileForecast date: 2026-10-14ADJACENT · LOW complexity · NONE privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-88157 Scheduled assessment Microsoft OpenSSH for Windows Remote Code Execution VulnerabilityHeap-based buffer overflow in OpenSSH for Windows allows an unauthorized attacker to execute code over a network. | 8.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.53% · 43.8th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · REQUIRED user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70013 Scheduled assessment Windows iSCSI Remote Code Execution VulnerabilityUse after free in Windows iSCSI allows an unauthorized attacker to execute code over a network. | 8.1 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.53% · 43.7th percentileForecast date: 2026-10-14NETWORK · HIGH complexity · NONE privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-103577 Scheduled assessment Microsoft QUIC Security Feature Bypass VulnerabilityInsecure default variable initialization in Microsoft QUIC allows an unauthorized attacker to bypass a security feature over a network. | 7.5 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.52% · 42.6th percentileForecast date: 2026-10-14NETWORK · HIGH complexity · NONE privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83838 Scheduled assessment Windows Bluetooth A2DP driver Elevation of Privilege VulnerabilityInteger underflow (wrap or wraparound) in Windows Bluetooth A2DP driver allows an authorized attacker to elevate privileges over an adjacent network. | 8.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.49% · 40.4th percentileForecast date: 2026-10-14ADJACENT · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-88121 Scheduled assessment Windows Background Intelligent Transfer Service (BITS) Remote Code Execution VulnerabilityUse after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network. | 8.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.49% · 40.4th percentileForecast date: 2026-10-14ADJACENT · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-100215 Scheduled assessment Microsoft Graphics Component Remote Code Execution VulnerabilityHeap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.48% · 39.7th percentileForecast date: 2026-10-14LOCAL · LOW complexity · NONE privileges · REQUIRED user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-96844 Scheduled assessment Microsoft Bluetooth Driver Elevation of Privilege VulnerabilityInteger underflow (wrap or wraparound) in Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges over an adjacent network. | 8.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.47% · 39.0th percentileForecast date: 2026-10-14ADJACENT · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70126 Scheduled assessment Windows Bluetooth Port Driver Remote Code ExecutionOut-of-bounds read in Windows Bluetooth Port Driver allows an unauthorized attacker to execute code over an adjacent network. | 7.1 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.47% · 39.0th percentileForecast date: 2026-10-14ADJACENT · HIGH complexity · NONE privileges · REQUIRED user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-69673 Scheduled assessment Windows Update Elevation of Privilege VulnerabilityImproper link resolution before file access ('link following') in Windows Update allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.46% · 38.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70131 Scheduled assessment Microsoft Windows Media Foundation Elevation of Privilege VulnerabilityHeap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.44% · 37.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · NONE privileges · REQUIRED user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83836 Scheduled assessment Windows Event Tracing Remote Code Execution VulnerabilityHeap-based buffer overflow in Windows Event Tracing allows an unauthorized attacker to execute code locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.44% · 37.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · NONE privileges · REQUIRED user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-69733 Scheduled assessment Windows Update Elevation of Privilege VulnerabilityUntrusted search path in Windows Update allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.44% · 36.6th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-69783 Scheduled assessment Windows Update Elevation of Privilege VulnerabilityExternal control of file name or path in Windows Update allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.44% · 36.6th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70092 Scheduled assessment Microsoft PostScript Printer Driver Elevation of Privilege VulnerabilityHeap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.43% · 35.4th percentileForecast date: 2026-10-14LOCAL · LOW complexity · NONE privileges · REQUIRED user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70109 Scheduled assessment Microsoft PostScript Printer Driver Elevation of Privilege VulnerabilityHeap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.43% · 35.4th percentileForecast date: 2026-10-14LOCAL · LOW complexity · NONE privileges · REQUIRED user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70110 Scheduled assessment Microsoft PostScript Printer Driver Elevation of Privilege VulnerabilityStack-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.43% · 35.4th percentileForecast date: 2026-10-14LOCAL · LOW complexity · NONE privileges · REQUIRED user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83704 Scheduled assessment Microsoft Windows Search Component Elevation of Privilege VulnerabilityImproper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.42% · 35.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83739 Scheduled assessment Windows Bluetooth Service Remote Code Execution VulnerabilityUse after free in Windows Bluetooth Service allows an unauthorized attacker to execute code over an adjacent network. | 7.5 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.42% · 35.0th percentileForecast date: 2026-10-14ADJACENT · HIGH complexity · NONE privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70054 Scheduled assessment Windows NetBIOS Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows NetBIOS allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.41% · 33.8th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-69882 Scheduled assessment Windows Update Elevation of Privilege VulnerabilityUntrusted search path in Windows Update allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.41% · 33.6th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85849 Scheduled assessment Windows AppX Deployment Service Elevation of Privilege VulnerabilityImproper link resolution before file access ('link following') in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.41% · 33.6th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-88133 Scheduled assessment Windows Portable Device Enumerator Service Elevation of Privilege VulnerabilityImproper authorization in Windows Portable Device Enumerator Service allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.41% · 33.6th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-96911 Scheduled assessment Microsoft Windows Search Component Elevation of Privilege VulnerabilityImproper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.40% · 32.8th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83927 Scheduled assessment Windows Registry Elevation of Privilege VulnerabilityImproper link resolution before file access ('link following') in Windows Registry allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.40% · 32.0th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85884 Scheduled assessment Windows Health and Optimized Experiences Service Elevation of Privilege VulnerabilityMissing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.39% · 31.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-69923 Scheduled assessment Windows AI Elevation of Privilege VulnerabilityUncontrolled search path element in Windows AI allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.38% · 30.8th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-88191 Scheduled assessment Microsoft Windows Search Component Elevation of Privilege VulnerabilityImproper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.38% · 30.6th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70060 Scheduled assessment Windows Win32k Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.38% · 30.4th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70104 Scheduled assessment Windows Win32k Elevation of Privilege VulnerabilityUntrusted pointer dereference in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.38% · 30.4th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70106 Scheduled assessment Windows Kernel Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.38% · 30.4th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70108 Scheduled assessment Windows Win32k Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.38% · 30.4th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70245 Scheduled assessment Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityAccess of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.38% · 30.4th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Patch available. 10.0.17763.9376:Security Update:https://support.microsoft.com/help/5126651 |
CVE-2026-70303 Scheduled assessment Windows Kernel Elevation of Privilege VulnerabilityOut-of-bounds write in Windows Kernel allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.38% · 30.4th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83669 Scheduled assessment Windows Error Reporting Elevation of Privilege VulnerabilityUse of uninitialized resource in Windows Error Reporting allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.38% · 30.4th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83735 Scheduled assessment Windows Kernel Elevation of Privilege VulnerabilityRelease of invalid pointer or reference in Windows Kernel allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.38% · 30.4th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83761 Scheduled assessment Windows Win32 Kernel Subsystem Elevation of Privilege VulnerabilityUse after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.38% · 30.4th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70184 Scheduled assessment Windows Backup Engine Elevation of Privilege VulnerabilityImproper resolution of path equivalence in Windows Backup Engine allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.38% · 30.2th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70222 Scheduled assessment Windows Shell Elevation of Privilege VulnerabilityRelative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.38% · 30.2th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-69880 Scheduled assessment Desktop Window Manager Elevation of Privilege VulnerabilityAccess of resource using incompatible type ('type confusion') in Desktop Window Manager allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.37% · 29.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-69926 Scheduled assessment Desktop Window Manager Elevation of Privilege VulnerabilityAccess of resource using incompatible type ('type confusion') in Desktop Window Manager allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.37% · 29.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70233 Scheduled assessment Windows Common Log File System Driver Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.37% · 29.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70286 Scheduled assessment Windows Graphics Component Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.37% · 29.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83699 Scheduled assessment Windows Client-Side Caching (CSC) Service Elevation of Privilege VulnerabilityStack-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.37% · 29.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83830 Scheduled assessment Windows COM+ Event System Service Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.37% · 29.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83848 Scheduled assessment Windows COM+ Event System Service Elevation of Privilege VulnerabilityUntrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.37% · 29.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83867 Scheduled assessment Windows Push Notifications Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows Push Notifications allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.37% · 29.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85832 Scheduled assessment Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.37% · 29.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85843 Scheduled assessment Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege VulnerabilityUse of uninitialized resource in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.37% · 29.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85848 Scheduled assessment Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.37% · 29.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85901 Scheduled assessment Windows Graphics Component Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.37% · 29.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85945 Scheduled assessment Windows Kernel Elevation of Privilege VulnerabilityUse after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.37% · 29.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-88118 Scheduled assessment Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege VulnerabilityInteger overflow or wraparound in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.37% · 29.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-96929 Scheduled assessment Windows Kernel Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.37% · 29.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83769 Scheduled assessment Microsoft OpenSSH for Windows Elevation of Privilege VulnerabilityUse after free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.37% · 28.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70142 Scheduled assessment Windows Update Service Elevation of Privilege VulnerabilityUntrusted search path in Windows Update Service allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.36% · 28.6th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-73027 Scheduled assessment Windows Setup Files Cleanup Elevation of Privilege VulnerabilityExternal control of system or configuration setting in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.36% · 28.6th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83506 Scheduled assessment Servicing Stack Updates Elevation of Privilege VulnerabilityUntrusted search path in Servicing Stack Updates allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.36% · 28.6th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85856 Scheduled assessment Internet Connection Sharing (ICS) Remote Code Execution VulnerabilityHeap-based buffer overflow in Windows Internet Connection Sharing (ICS) allows an authorized attacker to execute code over an adjacent network. | 7.1 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.36% · 28.5th percentileForecast date: 2026-10-14ADJACENT · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85811 Scheduled assessment Network Policy Server (NPS) Remote Code Execution VulnerabilityUse after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over an adjacent network. | 7.5 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.36% · 27.9th percentileForecast date: 2026-10-14ADJACENT · HIGH complexity · NONE privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-69918 Scheduled assessment Windows Core Messaging Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges locally. | 8.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.36% · 27.8th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70103 Scheduled assessment Windows Error Reporting Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.36% · 27.6th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70117 Scheduled assessment Windows Win32k Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.36% · 27.6th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70132 Scheduled assessment Windows Portable Device File System Driver Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows Portable Device File System Driver allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.36% · 27.6th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70151 Scheduled assessment Windows Direct Composition Elevation of Privilege VulnerabilityUse after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.36% · 27.6th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70255 Scheduled assessment Desktop Window Manager Elevation of Privilege VulnerabilityHeap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.36% · 27.6th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83763 Scheduled assessment Windows Input System Elevation of Privilege VulnerabilityAccess of resource using incompatible type ('type confusion') in Windows Input System allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.36% · 27.6th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83768 Scheduled assessment Windows Kernel Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.36% · 27.6th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83896 Scheduled assessment Windows Direct Composition Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.36% · 27.6th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83902 Scheduled assessment Windows Direct Composition Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.36% · 27.6th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85908 Scheduled assessment Windows Graphics Component Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.36% · 27.6th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-88152 Scheduled assessment Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege VulnerabilityUse after free in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.36% · 27.6th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83873 Scheduled assessment Windows Shell Elevation of Privilege VulnerabilityRelative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.35% · 27.3th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85343 Scheduled assessment Windows Hyper-V Elevation of Privilege VulnerabilityImproper link resolution before file access ('link following') in Windows Hyper-V allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.35% · 27.3th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-88072 Scheduled assessment Windows Host Guardian Service Elevation of Privilege VulnerabilityImproper access control in Windows Host Guardian Service allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.35% · 27.3th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-102202 Scheduled assessment Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege VulnerabilityImproper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.35% · 27.3th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-87705 Scheduled assessment Windows Hyper-V Security Feature Bypass VulnerabilityImproper verification of source of a communication channel in Windows Hyper-V allows an unauthorized attacker to bypass a security feature over an adjacent network. | 7.4 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.35% · 26.8th percentileForecast date: 2026-10-14ADJACENT · LOW complexity · NONE privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83732 Scheduled assessment Win32k Elevation of Privilege VulnerabilityUse after free in Windows Win32K allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.34% · 26.2th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85804 Scheduled assessment Windows Win32 Kernel Subsystem Elevation of Privilege VulnerabilityUse after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.34% · 26.2th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85902 Scheduled assessment Windows Direct Composition Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.34% · 26.2th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-88147 Scheduled assessment Windows Secure Socket Tunneling Protocol (SSTP) Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.34% · 26.2th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-108399 Scheduled assessment Windows Hyper-V Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally. | 7.2 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.34% · 26.2th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · HIGH privileges · REQUIRED user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-49785 Scheduled assessment UEFI Secure Boot Security Feature Bypass VulnerabilityImproper resource shutdown or release in Windows UEFI allows an authorized attacker to bypass a security feature locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.34% · 25.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-61931 Scheduled assessment Windows Perception Simulation Service Elevation of Privilege VulnerabilityUse after free in Windows Perception Simulation Service allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.34% · 25.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-68836 Scheduled assessment Windows kernel32.dll Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows kernel32.dll allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.34% · 25.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-69471 Scheduled assessment Windows Installer Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.34% · 25.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-69633 Scheduled assessment Windows Update Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows Update allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.34% · 25.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-69798 Scheduled assessment Windows Wired AutoConfig Service Elevation of Privilege VulnerabilityUse after free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.34% · 25.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-69850 Scheduled assessment Windows Certificates Elevation of Privilege VulnerabilityUntrusted pointer dereference in Windows Certificates allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.34% · 25.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-69867 Scheduled assessment SQLite Elevation of Privilege VulnerabilityOut-of-bounds read in SQLite allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.34% · 25.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-69884 Scheduled assessment Windows GDI Elevation of Privilege VulnerabilityBuffer over-read in Windows GDI allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.34% · 25.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-69898 Scheduled assessment Windows Kernel Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.34% · 25.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-69916 Scheduled assessment Windows NTFS Elevation of Privilege VulnerabilityInteger overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.34% · 25.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-69934 Scheduled assessment Windows Spaceport.sys Elevation of Privilege VulnerabilityInteger overflow or wraparound in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.34% · 25.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-69942 Scheduled assessment Windows Overlay Filter Remote Code Execution VulnerabilityBuffer over-read in Windows Overlay Filter allows an authorized attacker to execute code locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.34% · 25.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-69949 Scheduled assessment Windows Client for NFS Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows Client for NFS allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.34% · 25.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-69950 Scheduled assessment Windows Overlay Filter Elevation of Privilege VulnerabilityBuffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.34% · 25.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-69952 Scheduled assessment Windows Overlay Filter Elevation of Privilege VulnerabilityOut-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.34% · 25.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-69953 Scheduled assessment Windows Overlay Filter Elevation of Privilege VulnerabilityBuffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.34% · 25.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-69957 Scheduled assessment Windows Overlay Filter Elevation of Privilege VulnerabilityInteger overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.34% · 25.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-69959 Scheduled assessment Windows Overlay Filter Remote Code Execution VulnerabilityOut-of-bounds read in Windows Overlay Filter allows an authorized attacker to execute code locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.34% · 25.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70008 Scheduled assessment Windows IP Over USB Service Elevation of Privilege VulnerabilityInteger overflow or wraparound in Windows IP Over USB Service allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.34% · 25.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70010 Scheduled assessment Windows NTFS Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.34% · 25.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70015 Scheduled assessment Windows Local Security Authority Subsystem Service (LSASS) Elevation of Privilege VulnerabilityUse after free in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.34% · 25.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70023 Scheduled assessment Windows Hyper-V Elevation of Privilege VulnerabilityUse after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.34% · 25.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70027 Scheduled assessment Windows Subsystem for Linux Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.34% · 25.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70048 Scheduled assessment Windows Resilient File System (ReFS) Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.34% · 25.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70051 Scheduled assessment Windows SmartScreen Elevation of Privilege VulnerabilityAccess of resource using incompatible type ('type confusion') in Windows SmartScreen allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.34% · 25.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70059 Scheduled assessment Windows OLE Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.34% · 25.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70064 Scheduled assessment Windows Kerberos Elevation of Privilege VulnerabilityInteger underflow (wrap or wraparound) in Windows Kerberos allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.34% · 25.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70093 Scheduled assessment Windows Rich Text Edit Control Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows Rich Text Edit Control allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.34% · 25.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70102 Scheduled assessment Windows Spaceport.sys Elevation of Privilege VulnerabilityUse after free in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.34% · 25.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70112 Scheduled assessment Windows Spaceport.sys Remote Code Execution VulnerabilityHeap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to execute code locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.34% · 25.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70113 Scheduled assessment Windows Client for NFS Elevation of Privilege VulnerabilityInteger overflow or wraparound in Windows Client for NFS allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.34% · 25.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70114 Scheduled assessment Windows Kernel Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.34% · 25.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70121 Scheduled assessment Windows Kernel Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.34% · 25.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70138 Scheduled assessment Windows OLE Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.34% · 25.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70139 Scheduled assessment Windows Update Service Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows Update Service allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.34% · 25.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70143 Scheduled assessment Windows Network File System Remote Code Execution VulnerabilityHeap-based buffer overflow in Windows Network File System allows an authorized attacker to execute code locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.34% · 25.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70172 Scheduled assessment Windows NTFS Elevation of Privilege VulnerabilityUntrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.34% · 25.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70225 Scheduled assessment Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityAccess of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.34% · 25.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70285 Scheduled assessment Windows Win32k Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.34% · 25.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70566 Scheduled assessment Windows Schannel Elevation of Privilege VulnerabilityNull pointer dereference in Windows Schannel allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.34% · 25.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83508 Scheduled assessment Windows NTFS Elevation of Privilege VulnerabilityOut-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.34% · 25.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83513 Scheduled assessment Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege VulnerabilityUse after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.34% · 25.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83514 Scheduled assessment Windows Partition Management Driver Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.34% · 25.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83567 Scheduled assessment Windows NTFS Elevation of Privilege VulnerabilityOut-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.34% · 25.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83570 Scheduled assessment Windows Search Service Elevation of Privilege VulnerabilityUse after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.34% · 25.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83579 Scheduled assessment Windows Smart Card Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows Smart Card allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.34% · 25.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83690 Scheduled assessment Windows Kernel Elevation of Privilege VulnerabilityUse after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.34% · 25.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83876 Scheduled assessment Windows Shell Elevation of Privilege VulnerabilityUse after free in Windows Shell allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.34% · 25.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83877 Scheduled assessment Windows Devices Human Interface Elevation of Privilege VulnerabilityInteger overflow or wraparound in HID Parser Library allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.34% · 25.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83881 Scheduled assessment Windows exFAT File System Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.34% · 25.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83882 Scheduled assessment Windows Kernel Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.34% · 25.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83883 Scheduled assessment Windows Win32k Elevation of Privilege VulnerabilityUse after free in Windows Win32K allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.34% · 25.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83903 Scheduled assessment Windows Direct Composition Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.34% · 25.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83913 Scheduled assessment Windows Kernel Elevation of Privilege VulnerabilityUse after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.34% · 25.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83922 Scheduled assessment Windows Direct Composition Elevation of Privilege VulnerabilityUse after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.34% · 25.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83932 Scheduled assessment Windows Group Policy Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows Group Policy allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.34% · 25.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-97806 Scheduled assessment Windows Broadcast DVR User Service Elevation of Privilege VulnerabilityUse after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.34% · 25.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85369 Scheduled assessment Windows Hyper-V Elevation of Privilege VulnerabilityOut-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges locally. | 8.2 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.33% · 24.7th percentileForecast date: 2026-10-14LOCAL · LOW complexity · HIGH privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-96913 Scheduled assessment Windows Kernel Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. | 8.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.33% · 24.6th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-102214 Scheduled assessment Windows Hyper-V Remote Code Execution VulnerabilityUse after free in Windows Hyper-V allows an authorized attacker to execute code locally. | 8.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.33% · 24.6th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-105733 Scheduled assessment Windows Hyper-V Remote Code Execution VulnerabilityImproper access control in Windows Hyper-V allows an authorized attacker to execute code locally. | 8.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.33% · 24.6th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-88074 Scheduled assessment Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege VulnerabilityInteger overflow or wraparound in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.33% · 24.6th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-108130 Scheduled assessment Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.33% · 24.6th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83840 Scheduled assessment Windows Error Reporting Elevation of Privilege VulnerabilityWeak authentication in Windows Error Reporting allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.33% · 24.4th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85851 Scheduled assessment Windows SmartScreen Elevation of Privilege VulnerabilityUse after free in Windows SmartScreen allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.33% · 24.3th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-88070 Scheduled assessment Windows BitLocker Elevation of Privilege VulnerabilityOut-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.33% · 24.3th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70052 Scheduled assessment Microsoft PowerShell Remote Code Execution VulnerabilityInteger overflow or wraparound in Windows PowerShell allows an authorized attacker to execute code locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.33% · 24.2th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70228 Scheduled assessment Desktop Window Manager Elevation of Privilege VulnerabilityOut-of-bounds read in Desktop Window Manager allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.33% · 24.2th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-78459 Scheduled assessment Microsoft Internet Information Services Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows Internet Information Services allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.33% · 24.3th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83569 Scheduled assessment HID Parser Library Elevation of Privilege VulnerabilityHeap-based buffer overflow in HID Parser Library allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.33% · 24.2th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85338 Scheduled assessment Microsoft Graphics Component Elevation of Privilege VulnerabilityOut-of-bounds read in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.33% · 24.3th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-97804 Scheduled assessment HID Class Driver Elevation of Privilege VulnerabilityHeap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.33% · 24.3th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83716 Scheduled assessment Windows Hyper-V Remote Code Execution VulnerabilityHeap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally. | 8.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85905 Scheduled assessment Windows UI Immersive Server API Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows UI Immersive Server allows an authorized attacker to elevate privileges locally. | 8.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-96917 Scheduled assessment Windows PCI Bus Driver Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows PCI Bus Driver allows an authorized attacker to elevate privileges locally. | 8.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70177 Scheduled assessment Microsoft Windows Search Component Elevation of Privilege VulnerabilityNumeric truncation error in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70238 Scheduled assessment Windows Storage Spaces Controller Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70274 Scheduled assessment Windows Bind Filter Driver Elevation of Privilege VulnerabilityUse after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83585 Scheduled assessment Windows NTFS Elevation of Privilege VulnerabilityUse of externally-controlled format string in Windows NTFS allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83587 Scheduled assessment Windows Core Messaging Elevation of Privilege VulnerabilityUntrusted pointer dereference in Windows Core Messaging allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83588 Scheduled assessment Windows USB Driver Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83634 Scheduled assessment Windows BitLocker Elevation of Privilege VulnerabilityDouble free in Windows BitLocker allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83638 Scheduled assessment Windows USB Driver Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83639 Scheduled assessment Windows Sensor Data Service Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83640 Scheduled assessment Windows NTFS Remote Code Execution VulnerabilityHeap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83641 Scheduled assessment Windows Media Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows Media allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83650 Scheduled assessment Windows Media Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows Media allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83652 Scheduled assessment Windows NTFS Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83678 Scheduled assessment Windows TCP/IP Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83679 Scheduled assessment Windows Defender Firewall Service Elevation of Privilege VulnerabilityUse after free in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83691 Scheduled assessment Windows DHCP Server Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows DHCP Server allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83692 Scheduled assessment Windows Bind Filter Driver Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83698 Scheduled assessment Windows Client-Side Caching (CSC) Service Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83700 Scheduled assessment Windows Now Playing Session Manager Elevation of Privilege VulnerabilityUse after free in Windows Now Playing Session Manager allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83709 Scheduled assessment Windows NTLM Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows NTLM allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83712 Scheduled assessment Windows NTFS Remote Code Execution VulnerabilityOut-of-bounds write in Windows NTFS allows an authorized attacker to execute code locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83721 Scheduled assessment Win32k Elevation of Privilege VulnerabilityUse after free in Windows Win32K allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83726 Scheduled assessment Windows DWM Core Library Elevation of Privilege VulnerabilityUse after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83727 Scheduled assessment Windows Overlay Filter Elevation of Privilege VulnerabilityBuffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83753 Scheduled assessment Windows Camera Frame Server Monitor Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83757 Scheduled assessment Win32k Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83758 Scheduled assessment Windows Error Reporting Remote Code Execution VulnerabilityHeap-based buffer overflow in Windows Error Reporting allows an authorized attacker to execute code locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83762 Scheduled assessment Win32k Elevation of Privilege VulnerabilityUse after free in Windows Win32K allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83779 Scheduled assessment Windows Installer Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83781 Scheduled assessment Windows Program Compatibility Assistant Service Elevation of Privilege VulnerabilityImproper null termination in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83783 Scheduled assessment Windows Management Instrumentation Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83796 Scheduled assessment Windows Kernel Elevation of Privilege VulnerabilityUse after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83826 Scheduled assessment Windows Error Reporting Elevation of Privilege VulnerabilityUntrusted pointer dereference in Windows Error Reporting allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83828 Scheduled assessment Windows MIDI Service Module Elevation of Privileges VulnerabilityHeap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83829 Scheduled assessment Microsoft Windows Search Component Elevation of Privilege VulnerabilityHeap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83832 Scheduled assessment Windows Spaceport.sys Elevation of Privilege VulnerabilityOut-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83833 Scheduled assessment Windows Kernel Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83850 Scheduled assessment Microsoft Windows Search Component Elevation of Privilege VulnerabilityHeap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83857 Scheduled assessment Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege VulnerabilityUse after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83859 Scheduled assessment Windows NTFS Elevation of Privilege VulnerabilityUse after free in Windows NTFS allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83861 Scheduled assessment Windows Remote Desktop Protocol Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows Remote Desktop Protocol allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83863 Scheduled assessment Servicing Stack Updates Elevation of Privilege VulnerabilityHeap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83872 Scheduled assessment Windows TCP/IP Local Elevation of Privilege VulnerabilityIncorrect conversion between numeric types in Windows TCP/IP allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-84013 Scheduled assessment Windows Telephony Server Elevation of Privilege VulnerabilityUse after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-84016 Scheduled assessment Windows EAPHost Service Elevation of Privilege VulnerabilityOut-of-bounds write in Windows EAPHost Service allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85318 Scheduled assessment Servicing Stack Updates Elevation of Privilege VulnerabilityHeap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85327 Scheduled assessment Windows Print Spooler Components Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85332 Scheduled assessment Windows Device Association Service Elevation of Privilege VulnerabilityUse after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85341 Scheduled assessment Windows USB Video Driver Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85356 Scheduled assessment Windows Volume Manager Extension Driver Elevation of Privilege VulnerabilityOut-of-bounds read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85358 Scheduled assessment Windows Installer Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85366 Scheduled assessment Windows Installer Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85368 Scheduled assessment Windows TCP/IP Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85373 Scheduled assessment Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85375 Scheduled assessment Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege VulnerabilityUse after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85377 Scheduled assessment Windows CD-ROM Driver Elevation of Privilege VulnerabilityAccess of resource using incompatible type ('type confusion') in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85795 Scheduled assessment Windows Text Services Framework Elevation of Privilege VulnerabilityUse after free in Windows Text Services Framework allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85796 Scheduled assessment Windows Installer Elevation of Privilege VulnerabilityNumeric truncation error in Windows Installer allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85800 Scheduled assessment Windows Error Reporting Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85807 Scheduled assessment Windows USB Video Driver Elevation of Privilege VulnerabilityInteger overflow or wraparound in Windows USB Video Driver allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85820 Scheduled assessment Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege VulnerabilityUse after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85822 Scheduled assessment Windows exFAT File System Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85829 Scheduled assessment Windows Wired AutoConfig Service Elevation of Privilege VulnerabilityDouble free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85833 Scheduled assessment Windows Modern Device Management (MDM) Elevation of Privilege VulnerabilityUse after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85836 Scheduled assessment Windows Kernel Elevation of Privilege VulnerabilityUse after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85837 Scheduled assessment Windows Kernel Elevation of Privilege VulnerabilityOut-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85842 Scheduled assessment Windows Image Acquisition Elevation of Privilege VulnerabilityUse of externally-controlled format string in Windows Image Acquisition allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85869 Scheduled assessment Microsoft Windows Search Component Elevation of Privilege VulnerabilityHeap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85871 Scheduled assessment Windows Kernel-Mode Drivers Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85874 Scheduled assessment Windows Message Queuing Queue Manager Remote Code Execution VulnerabilityUse after free in Windows Message Queuing Queue Manager allows an authorized attacker to execute code locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85911 Scheduled assessment Windows StateRepository API Elevation of Privilege VulnerabilityUse after free in Windows StateRepository API allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85915 Scheduled assessment Windows PCI Bus Driver Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows PCI Bus Driver allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85927 Scheduled assessment Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-87694 Scheduled assessment Windows Installer Elevation of Privilege VulnerabilityUse after free in Windows Installer allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-87699 Scheduled assessment Winlogon Elevation of Privilege VulnerabilityHeap-based buffer overflow in Winlogon allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-87702 Scheduled assessment Windows Resource Management (MRM) Elevation of Privilege VulnerabilityInteger overflow or wraparound in Windows Resource Management (MRM) allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-88071 Scheduled assessment Windows Hyper-V Elevation of Privilege VulnerabilityDouble free in Windows Hyper-V allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-88100 Scheduled assessment Windows Storage Spaces Controller Elevation of Privilege VulnerabilityUse after free in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-88126 Scheduled assessment WebDAV Elevation of Privilege VulnerabilityUntrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-88128 Scheduled assessment Windows DWM Core Library Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-88134 Scheduled assessment Windows Kernel Elevation of Privilege VulnerabilityUse after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-88168 Scheduled assessment Windows Bind Filter Driver Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-88179 Scheduled assessment Windows DWM Core Library Elevation of Privilege VulnerabilityOut-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-88181 Scheduled assessment Windows DWM Core Library Elevation of Privilege VulnerabilityOut-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-88182 Scheduled assessment Microsoft Windows Search Component Elevation of Privilege VulnerabilityUse after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-88188 Scheduled assessment Windows DWM Core Library Elevation of Privilege VulnerabilityOut-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-88194 Scheduled assessment Windows DWM Core Library Elevation of Privilege VulnerabilityOut-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-96118 Scheduled assessment Windows Graphics Kernel Elevation of Privilege VulnerabilityOut-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-96217 Scheduled assessment Windows NTFS Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-96223 Scheduled assessment Windows Hyper-V Elevation of Privilege VulnerabilityUse after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-96244 Scheduled assessment Windows Internal System User Profile Elevation of Privilege VulnerabilityUse after free in Windows Internal System User Profile allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-96249 Scheduled assessment Windows Win32 Kernel Subsystem Elevation of Privilege VulnerabilityUse after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-96308 Scheduled assessment Windows Installer Elevation of Privilege VulnerabilityUse after free in Windows Installer allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-96309 Scheduled assessment Windows Subsystem for Linux Elevation of Privilege VulnerabilityUse after free in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-96312 Scheduled assessment Windows Kernel Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-96318 Scheduled assessment Windows Resume Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows Resume allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-96324 Scheduled assessment Microsoft Windows Search Component Elevation of Privilege VulnerabilityUse after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-96843 Scheduled assessment WebDAV Elevation of Privilege VulnerabilityHeap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-96847 Scheduled assessment WebDAV Elevation of Privilege VulnerabilityUntrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-96856 Scheduled assessment Windows Management Instrumentation Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-96862 Scheduled assessment Windows Spaceport.sys Elevation of Privilege VulnerabilityOut-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-96867 Scheduled assessment Windows NTFS Remote Code Execution VulnerabilityOut-of-bounds read in Windows NTFS allows an authorized attacker to execute code locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-96912 Scheduled assessment Windows Client License Service Elevation of Privilege VulnerabilityUse after free in Windows Client License Service allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-96916 Scheduled assessment Windows NTFS Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-96920 Scheduled assessment Windows Program Compatibility Assistant Service Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-96928 Scheduled assessment Windows NTFS Elevation of Privilege VulnerabilityOut-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-96931 Scheduled assessment Windows NTFS Elevation of Privilege VulnerabilityUntrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-96933 Scheduled assessment Windows COM+ Event System Service Elevation of Privilege VulnerabilityUntrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-96946 Scheduled assessment Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege VulnerabilityUse after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-96947 Scheduled assessment Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege VulnerabilityUse after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-96950 Scheduled assessment Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege VulnerabilityUse after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-97794 Scheduled assessment Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-102196 Scheduled assessment Windows Broadcast DVR User Service Elevation of Privilege VulnerabilityUse after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-102201 Scheduled assessment Microsoft Windows Media Foundation Elevation of Privilege VulnerabilityUse after free in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-102205 Scheduled assessment Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-102215 Scheduled assessment Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-102216 Scheduled assessment Windows StateRepository API Elevation of Privilege VulnerabilityAccess of resource using incompatible type ('type confusion') in Windows StateRepository API allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-102218 Scheduled assessment Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-102220 Scheduled assessment Windows VHD miniport driver Elevation of Privilege VulnerabilityUse after free in Windows VHD miniport driver allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-102227 Scheduled assessment Windows Resilient File System (ReFS) Remote Code Execution VulnerabilityHeap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-103553 Scheduled assessment Windows Partition Management Driver Elevation of Privilege VulnerabilityOut-of-bounds read in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-105004 Scheduled assessment Windows Overlay Filter Elevation of Privilege VulnerabilityOut-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-108136 Scheduled assessment Microsoft Windows Search Component Elevation of Privilege VulnerabilityUse after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70218 Scheduled assessment Windows StateRepository API Elevation of Privilege VulnerabilityInsufficient granularity of access control in Windows StateRepository API allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.0th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-69909 Scheduled assessment Microsoft COM for Windows Elevation of Privilege VulnerabilityHeap-based buffer overflow in Microsoft COM for Windows allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.31% · 21.8th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-69963 Scheduled assessment Kernel Streaming Service Driver Elevation of Privilege VulnerabilityHeap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.31% · 21.8th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-69966 Scheduled assessment Kernel Streaming Service Driver Elevation of Privilege VulnerabilityInteger overflow or wraparound in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.31% · 21.8th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70123 Scheduled assessment Microsoft Graphics Component Elevation of Privilege VulnerabilityNumeric truncation error in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.31% · 21.8th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70247 Scheduled assessment HTTP.sys Remote Code Execution VulnerabilityOut-of-bounds read in Windows HTTP.sys allows an authorized attacker to execute code locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.31% · 21.8th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83847 Scheduled assessment Microsoft Account Elevation of Privilege VulnerabilityHeap-based buffer overflow in Microsoft Account allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.31% · 21.8th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-88193 Scheduled assessment Microsoft Scripting Engine Elevation of Privilege VulnerabilityHeap-based buffer overflow in Microsoft Scripting Engine allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.31% · 21.8th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-96108 Scheduled assessment Desktop Window Manager Elevation of Privilege VulnerabilityUse after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.31% · 21.8th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-105003 Scheduled assessment HID Class Driver Elevation of Privilege VulnerabilityHeap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.31% · 21.8th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70580 Scheduled assessment Windows Credential Guard Spoofing VulnerabilityMissing authentication for critical function in Windows Credential Guard allows an authorized attacker to perform spoofing locally. | 8.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.30% · 21.6th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83568 Scheduled assessment Windows Kernel-Mode Drivers Elevation of Privilege VulnerabilityImproper access control in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.30% · 21.6th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83583 Scheduled assessment Windows Geotag Broker Elevation of Privilege VulnerabilityImproper access control in Windows Geotag Broker allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.30% · 21.6th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-97792 Scheduled assessment Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege VulnerabilityImproper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.30% · 21.6th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-97799 Scheduled assessment Windows Audio Service Elevation of Privilege VulnerabilityImproper verification of cryptographic signature in Windows Audio Service allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.30% · 21.3th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70076 Scheduled assessment Windows Win32k Elevation of Privilege VulnerabilityUse after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.30% · 20.7th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70144 Scheduled assessment Windows Win32k Elevation of Privilege VulnerabilityUse after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.30% · 20.7th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70176 Scheduled assessment Windows Win32k Elevation of Privilege VulnerabilityUse after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.30% · 20.7th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70249 Scheduled assessment Windows Win32k Elevation of Privilege VulnerabilityUse after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.30% · 20.7th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70253 Scheduled assessment Windows Win32k Elevation of Privilege VulnerabilityUse after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.30% · 20.7th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70271 Scheduled assessment Windows Win32k Elevation of Privilege VulnerabilityUse after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.30% · 20.7th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83886 Scheduled assessment Windows Update Orchestrator Service Elevation of Privilege VulnerabilityUse after free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.30% · 20.7th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83509 Scheduled assessment Windows Setup Files Cleanup Elevation of Privilege VulnerabilityUntrusted search path in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.29% · 20.6th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83845 Scheduled assessment Windows Internet (wininet.dll) Spoofing VulnerabilityImproper privilege management in Windows Internet (wininet.dll) allows an authorized attacker to perform spoofing locally. | 8.4 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.29% · 19.8th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83715 Scheduled assessment Windows Error Reporting Tampering VulnerabilityMissing authentication for critical function in Windows Error Reporting allows an authorized attacker to perform tampering locally. | 7.1 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.29% · 19.8th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70237 Scheduled assessment Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityUse after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.29% · 19.7th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83580 Scheduled assessment Windows Client-Side Caching (CSC) Service Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.29% · 19.7th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83785 Scheduled assessment Windows COM+ Event System Service Elevation of Privilege VulnerabilityUse after free in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.29% · 19.7th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83793 Scheduled assessment Windows Update Orchestrator Service Elevation of Privilege VulnerabilityImproper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.29% · 19.8th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85355 Scheduled assessment Windows Common Log File System Driver Elevation of Privilege VulnerabilityInclusion of functionality from untrusted control sphere in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.29% · 19.7th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85791 Scheduled assessment Windows Encrypting File System (EFS) Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.29% · 19.7th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85855 Scheduled assessment Windows DWM Core Library Elevation of Privilege VulnerabilityUse after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.29% · 19.7th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85870 Scheduled assessment Windows Common Log File System Driver Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.29% · 19.7th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Patch available. 10.0.17763.9376:Security Update:https://support.microsoft.com/help/5126651 |
CVE-2026-69945 Scheduled assessment Windows AppX Deployment Extensions Elevation of Privilege VulnerabilityMissing authorization in Windows AppX Deployment Extensions allows an authorized attacker to elevate privileges locally. | 8.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.28% · 19.4th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83586 Scheduled assessment Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege VulnerabilityWeak authentication in Windows Resilient File System (ReFS) Deduplication Service allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.28% · 19.4th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83654 Scheduled assessment Windows Modern Device Management (MDM) Elevation of Privilege VulnerabilityMissing authentication for critical function in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.28% · 19.4th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83791 Scheduled assessment Windows Virtual Input Elevation of Privilege VulnerabilityImproper authorization in Windows Virtual Input allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.28% · 19.4th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83792 Scheduled assessment Windows Device Install Service Elevation of Privilege VulnerabilityIncorrect authorization in Windows Device Install Service allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.28% · 19.4th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85376 Scheduled assessment Windows Print Spooler Components Elevation of Privilege VulnerabilityWeak authentication in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.28% · 19.4th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-88135 Scheduled assessment WebDAV Elevation of Privilege VulnerabilityImproper access control in WebDAV allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.28% · 19.4th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-96918 Scheduled assessment Windows NTFS Elevation of Privilege VulnerabilityImproper access control in Windows NTFS allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.28% · 19.4th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-100217 Scheduled assessment Windows Group Policy Elevation of Privilege VulnerabilityImproper privilege management in Windows Group Policy allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.28% · 19.4th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-87713 Scheduled assessment Windows Bluetooth Port Driver Remote Code ExecutionUse after free in Windows Bluetooth Port Driver allows an unauthorized attacker to elevate privileges over an adjacent network. | 7.5 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.28% · 19.2th percentileForecast date: 2026-10-14ADJACENT · HIGH complexity · NONE privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83659 Scheduled assessment Windows User Profile Service Elevation of Privilege VulnerabilityImproper link resolution before file access ('link following') in Windows User Profile Service allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.28% · 18.8th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-96243 Scheduled assessment Windows WalletService Elevation of Privilege VulnerabilityImproper link resolution before file access ('link following') in Windows WalletService allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.28% · 18.8th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85906 Scheduled assessment Windows Direct Composition Elevation of Privilege VulnerabilityUse after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.28% · 18.6th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70223 Scheduled assessment Windows Console Driver Elevation of Privilege VulnerabilityUse after free in Windows Console Driver allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.28% · 18.7th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70236 Scheduled assessment Windows Win32k Elevation of Privilege VulnerabilityUse after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.28% · 18.7th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70273 Scheduled assessment Windows Win32k Elevation of Privilege VulnerabilityUse after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.28% · 18.7th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-72955 Scheduled assessment Windows Application Compatibility Cache Elevation of Privilege VulnerabilityUse after free in Windows Application Compatibility Cache allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.28% · 18.7th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83921 Scheduled assessment Windows Search Service Elevation of Privilege VulnerabilityHeap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.28% · 18.7th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70185 Scheduled assessment Microsoft PowerShell Security Feature Bypass VulnerabilityProtection mechanism failure in Windows PowerShell allows an authorized attacker to bypass a security feature locally. | 8.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.27% · 18.3th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70278 Scheduled assessment Microsoft Windows Media Foundation Elevation of Privilege VulnerabilityHeap-based buffer overflow in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.27% · 17.9th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83931 Scheduled assessment Windows Hyper-V Remote Code Execution VulnerabilityHeap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.27% · 17.9th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-69387 Scheduled assessment Windows Error Reporting Elevation of Privilege VulnerabilityUse after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.27% · 17.9th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-69596 Scheduled assessment Windows Program Compatibility Assistant Service Elevation of Privilege VulnerabilityUse after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.27% · 17.9th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-69743 Scheduled assessment Windows Program Compatibility Assistant Service Elevation of Privilege VulnerabilityUse after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.27% · 17.9th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-69795 Scheduled assessment Windows Clipboard Server Elevation of Privilege VulnerabilityNull pointer dereference in Windows Clipboard Server allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.27% · 17.9th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-69915 Scheduled assessment Windows NTFS Elevation of Privilege VulnerabilityUse after free in Windows NTFS allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.27% · 17.9th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-69977 Scheduled assessment Quality Windows Audio/Video Experience (QWAVE) service Elevation of Privilege VulnerabilityUse after free in Quality Windows Audio/Video Experience (QWAVE) service allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.27% · 17.9th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70021 Scheduled assessment Windows Direct Composition Elevation of Privilege VulnerabilityUse after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.27% · 17.9th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70026 Scheduled assessment Windows Secure Kernel Mode Elevation of Privilege VulnerabilityUse after free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.27% · 17.9th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70045 Scheduled assessment Windows Work Folders Elevation of Privilege VulnerabilityUse after free in Windows Work Folders allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.27% · 17.9th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70056 Scheduled assessment Windows Update Service Elevation of Privilege VulnerabilityUse after free in Windows Update Service allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.27% · 17.9th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70118 Scheduled assessment Windows Audio Service Elevation of Privilege VulnerabilityUse after free in Windows Audio Service allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.27% · 17.9th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70134 Scheduled assessment Windows Event Tracing Elevation of Privilege VulnerabilityUse after free in Windows Event Tracing allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.27% · 17.9th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70140 Scheduled assessment Windows Audio Service Elevation of Privilege VulnerabilityUse after free in Windows Audio Service allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.27% · 17.9th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70160 Scheduled assessment Windows Kernel Elevation of Privilege VulnerabilityUse after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.27% · 17.9th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70164 Scheduled assessment Windows TCP/IP Elevation of Privilege VulnerabilityUse after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.27% · 17.9th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70168 Scheduled assessment Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityUse after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.27% · 17.9th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70198 Scheduled assessment Windows Push Notifications Elevation of Privilege VulnerabilityUse after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.27% · 17.9th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70205 Scheduled assessment Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityAccess of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.27% · 17.9th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70209 Scheduled assessment Windows Win32k Elevation of Privilege VulnerabilityUse after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.27% · 17.9th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70230 Scheduled assessment Windows Audio Service Elevation of Privilege VulnerabilityUse after free in Windows Audio Service allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.27% · 17.9th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-72934 Scheduled assessment Windows Program Compatibility Assistant Service Elevation of Privilege VulnerabilityUse after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.27% · 17.9th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-72968 Scheduled assessment Windows Program Compatibility Assistant Service Elevation of Privilege VulnerabilityUse after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.27% · 17.9th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-72969 Scheduled assessment Windows Program Compatibility Assistant Service Elevation of Privilege VulnerabilityUse after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.27% · 17.9th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83564 Scheduled assessment Windows Search Service Elevation of Privilege VulnerabilityUse after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.27% · 17.9th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83566 Scheduled assessment Windows Win32k Elevation of Privilege VulnerabilityUse after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.27% · 17.9th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83574 Scheduled assessment Windows Search Service Elevation of Privilege VulnerabilityUse after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.27% · 17.9th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83575 Scheduled assessment Windows Search Service Elevation of Privilege VulnerabilityUse after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.27% · 17.9th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83675 Scheduled assessment Windows Kernel Elevation of Privilege VulnerabilityUse after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.27% · 17.9th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83900 Scheduled assessment Windows Bind Filter Driver Elevation of Privilege VulnerabilityUse after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.27% · 17.9th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83901 Scheduled assessment Windows Win32 Kernel Subsystem Elevation of Privilege VulnerabilityUse after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.27% · 17.9th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83908 Scheduled assessment RPC Runtime Elevation of Privilege VulnerabilityRelease of invalid pointer or reference in RPC Runtime allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.27% · 17.9th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83911 Scheduled assessment Windows Storage Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.27% · 17.9th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83915 Scheduled assessment Windows Diagnostic Policy Service Elevation of Privilege VulnerabilityUse after free in Windows Diagnostic Policy Service allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.27% · 17.9th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83916 Scheduled assessment Windows Error Reporting Remote Code Execution VulnerabilityDouble free in Windows Error Reporting allows an authorized attacker to execute code locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.27% · 17.9th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83924 Scheduled assessment Windows Kernel Elevation of Privilege VulnerabilityUse after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.27% · 17.9th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-97808 Scheduled assessment Windows Broadcast DVR User Service Elevation of Privilege VulnerabilityUse after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.27% · 17.9th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-97810 Scheduled assessment Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.27% · 17.9th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-97812 Scheduled assessment Windows Update Orchestrator Service Elevation of Privilege VulnerabilityDouble free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.27% · 17.9th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-100200 Scheduled assessment Windows Update Service Elevation of Privilege VulnerabilityUse after free in Windows Update Service allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.27% · 17.9th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-100201 Scheduled assessment Windows Client License Service Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows Client License Service allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.27% · 17.9th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-100203 Scheduled assessment Windows Update Service Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows Update Service allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.27% · 17.9th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-108135 Scheduled assessment Windows Backup Engine Elevation of Privilege VulnerabilityImproper link resolution before file access ('link following') in Windows Backup Engine allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.27% · 17.9th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70156 Scheduled assessment Microsoft Windows Search Component Elevation of Privilege VulnerabilityUse after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.27% · 17.6th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70241 Scheduled assessment Windows Kerberos Elevation of Privilege VulnerabilityUse after free in Windows Kerberos allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.27% · 17.6th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83717 Scheduled assessment Windows Installer Elevation of Privilege VulnerabilityUse after free in Windows Installer allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.27% · 17.6th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83842 Scheduled assessment Windows TCP/IP Elevation of Privilege VulnerabilityDouble free in Windows TCP/IP allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.27% · 17.6th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85802 Scheduled assessment Windows Win32 Kernel Subsystem Elevation of Privilege VulnerabilityUse after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.27% · 17.6th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-88073 Scheduled assessment Windows Graphics Kernel Elevation of Privilege VulnerabilityUse after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. | 8.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.27% · 17.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-96914 Scheduled assessment Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege VulnerabilityInteger overflow or wraparound in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally. | 8.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.27% · 17.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-88093 Scheduled assessment Desktop Window Manager Elevation of Privilege VulnerabilityHeap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.27% · 17.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83756 Scheduled assessment Windows Win32 Kernel Subsystem Elevation of Privilege VulnerabilityUse after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.26% · 16.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83912 Scheduled assessment Windows Direct Composition Elevation of Privilege VulnerabilityUse after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.26% · 16.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83918 Scheduled assessment Windows Kernel Elevation of Privilege VulnerabilityInteger overflow or wraparound in Windows Kernel allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.26% · 16.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83920 Scheduled assessment Windows Search Service Elevation of Privilege VulnerabilityHeap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.26% · 16.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-97807 Scheduled assessment Windows Broadcast DVR User Service Elevation of Privilege VulnerabilityUse after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.26% · 16.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-97809 Scheduled assessment Windows Broadcast DVR User Service Elevation of Privilege VulnerabilityUse after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.26% · 16.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83919 Scheduled assessment Microsoft Internet Messaging API Remote Code Execution VulnerabilityHeap-based buffer overflow in Microsoft Internet Messaging API allows an authorized attacker to execute code locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.25% · 15.7th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85858 Scheduled assessment Windows Win32 Kernel Subsystem Elevation of Privilege VulnerabilityOut-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85872 Scheduled assessment Windows Storage VSP Driver Elevation of Privilege VulnerabilityUse after free in Windows Storage VSP Driver allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-96317 Scheduled assessment Windows Kernel Elevation of Privilege VulnerabilityUse after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70086 Scheduled assessment Microsoft Windows Search Component Elevation of Privilege VulnerabilityUse after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70115 Scheduled assessment Microsoft Windows Search Component Elevation of Privilege VulnerabilityUse after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70136 Scheduled assessment Microsoft Windows Search Component Elevation of Privilege VulnerabilityUse after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70150 Scheduled assessment Microsoft Windows Search Component Elevation of Privilege VulnerabilityUse after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70252 Scheduled assessment Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege VulernabilityUse after free in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70272 Scheduled assessment Windows Installer Elevation of Privilege VulnerabilityUse after free in Windows Installer allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83584 Scheduled assessment Windows Smart Card Elevation of Privilege VulnerabilityUse after free in Windows Smart Card allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83644 Scheduled assessment Windows Audio Service Elevation of Privilege VulnerabilityUse after free in Windows Audio Service allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83676 Scheduled assessment Windows Installer Elevation of Privilege VulnerabilityInteger underflow (wrap or wraparound) in Windows Installer allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83682 Scheduled assessment Windows TCP/IP Elevation of Privilege VulnerabilityUse after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83687 Scheduled assessment Windows Connected User Experiences and Telemetry Elevation of Privilege VulnerabilityUse after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83689 Scheduled assessment Windows Error Reporting Elevation of Privilege VulnerabilityUse after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83694 Scheduled assessment Windows Volume Manager Extension Driver Elevation of Privilege VulnerabilityOut-of-bounds read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83696 Scheduled assessment Windows Cloud Files Mini Filter Driver Elevation of Privilege VulnerabilityUse after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83701 Scheduled assessment Windows Now Playing Session Manager Elevation of Privilege VulnerabilityUse after free in Windows Now Playing Session Manager allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83702 Scheduled assessment Windows Installer Elevation of Privilege VulnerabilityUse after free in Windows Installer allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83707 Scheduled assessment Windows Event Tracing Elevation of Privilege VulnerabilityUse after free in Windows Event Tracing allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83708 Scheduled assessment Windows Installer Elevation of Privilege VulnerabilityStack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83710 Scheduled assessment Windows Device Association Service Elevation of Privilege VulnerabilityUse after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83718 Scheduled assessment Windows Installer Elevation of Privilege VulnerabilityUse after free in Windows Installer allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83740 Scheduled assessment Windows Hello Elevation of Privilege VulnerabilityUse after free in Windows Hello allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83751 Scheduled assessment Windows MIDI Service Module Elevation of Privileges VulnerabilityUse after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83790 Scheduled assessment Windows Hello Elevation of Privilege VulnerabilityUse after free in Windows Hello allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83827 Scheduled assessment Windows Bluetooth Port Driver Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows Bluetooth Port Driver allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83853 Scheduled assessment Windows Hello Elevation of Privilege VulnerabilityUse after free in Windows Hello allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83866 Scheduled assessment Windows Win32k Elevation of Privilege VulnerabilityUse after free in Windows Win32K allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-84020 Scheduled assessment Windows Routing and Remote Access Service (RRAS) Elevation of Privilege VulnerabilityUse after free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85342 Scheduled assessment Windows Device Association Service Elevation of Privilege VulnerabilityUse after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85352 Scheduled assessment Windows Device Association Service Elevation of Privilege VulnerabilityUse after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85354 Scheduled assessment Windows Error Reporting Elevation of Privilege VulnerabilityUse after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85361 Scheduled assessment Windows Installer Elevation of Privilege VulnerabilityUse after free in Windows Installer allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85362 Scheduled assessment Windows Management Instrumentation Elevation of Privilege VulnerabilityRelease of invalid pointer or reference in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85364 Scheduled assessment Windows Installer Elevation of Privilege VulnerabilityUse after free in Windows Installer allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85367 Scheduled assessment Windows Cash Drawer Protocol Provider Elevation of Privilege VulnerabilityUse after free in Windows Cash Drawer Protocol Provider allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85370 Scheduled assessment WebDAV Elevation of Privilege VulnerabilityUse after free in WebDAV allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85372 Scheduled assessment Windows Kernel Elevation of Privilege VulnerabilityUse after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85803 Scheduled assessment Windows Camera Frame Server Monitor Elevation of Privilege VulnerabilityUse after free in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85810 Scheduled assessment Windows Telephony Server Elevation of Privilege VulnerabilityUse after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85823 Scheduled assessment Windows Composite Image File System Elevation of Privilege VulnerabilityUse after free in Windows Composite Image File System allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85826 Scheduled assessment Windows Fast FAT Driver Elevation of Privilege VulnerabilityOut-of-bounds write in Windows Fast FAT Driver allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85828 Scheduled assessment WebDAV Elevation of Privilege VulnerabilityHeap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85834 Scheduled assessment Windows TCP/IP Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85853 Scheduled assessment Windows DWM Core Library Elevation of Privilege VulnerabilityOut-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85854 Scheduled assessment Windows DWM Core Library Elevation of Privilege VulnerabilityUse after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85868 Scheduled assessment Windows Common Log File System Driver Elevation of Privilege VulnerabilityUse after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Patch available. 10.0.17763.9376:Security Update:https://support.microsoft.com/help/5126651 |
CVE-2026-85918 Scheduled assessment Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege VulnerabilityUse after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85934 Scheduled assessment Windows AppX Deployment Service Elevation of Privilege VulnerabilityUse after free in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-87708 Scheduled assessment Windows Installer Elevation of Privilege VulnerabilityUse after free in Windows Installer allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-88076 Scheduled assessment Windows Installer Elevation of Privilege VulnerabilityNull pointer dereference in Windows Installer allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-88079 Scheduled assessment Windows MIDI Service Module Elevation of Privileges VulnerabilityNull pointer dereference in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-88110 Scheduled assessment Windows Graphics Kernel Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-88124 Scheduled assessment Windows Installer Elevation of Privilege VulnerabilityUse after free in Windows Installer allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-88127 Scheduled assessment Windows SMB Server Elevation of Privilege VulnerabilityUse after free in Windows SMB Server allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-88141 Scheduled assessment Windows Kernel Elevation of Privilege VulnerabilityUse after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-88161 Scheduled assessment Windows Local Security Authority (LSA) Elevation of Privilege VulnerabilityUse after free in Windows Local Security Authority (LSA) allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-96209 Scheduled assessment Windows Network File System Elevation of Privilege VulnerabilityOut-of-bounds read in Windows Network File System allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-96216 Scheduled assessment Windows Kernel Elevation of Privilege VulnerabilityUse after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-96250 Scheduled assessment Windows USB Print Driver Elevation of Privilege VulnerabilityUse after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-96253 Scheduled assessment Windows USB Print Driver Elevation of Privilege VulnerabilityUse after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-96254 Scheduled assessment Windows USB Print Driver Elevation of Privilege VulnerabilityUse after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-96301 Scheduled assessment Windows USB Print Driver Elevation of Privilege VulnerabilityUse after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-96302 Scheduled assessment Windows Installer Elevation of Privilege VulnerabilityUse after free in Windows Installer allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-96304 Scheduled assessment Windows USB Print Driver Elevation of Privilege VulnerabilityUse after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-96305 Scheduled assessment Windows Installer Elevation of Privilege VulnerabilityUse after free in Windows Installer allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-96310 Scheduled assessment Windows USB Print Driver Elevation of Privilege VulnerabilityUse after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-96319 Scheduled assessment Windows USB Print Driver Elevation of Privilege VulnerabilityUse after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-96323 Scheduled assessment Windows Update Elevation of Privilege VulnerabilityUse after free in Windows Update allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-96852 Scheduled assessment Windows TCP/IP Elevation of Privilege VulnerabilityUse after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-96868 Scheduled assessment Windows Kernel Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-96923 Scheduled assessment Windows Workstation Service Elevation of Privilege VulnerabilityUse after free in Windows Workstation Service allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-100216 Scheduled assessment Windows Storage Elevation of Privilege VulnerabilityStack-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-100225 Scheduled assessment Windows Storage Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-102189 Scheduled assessment Windows Storage Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-102191 Scheduled assessment Windows Storage Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-102193 Scheduled assessment Windows Broadcast DVR User Service Elevation of Privilege VulnerabilityUse after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-102194 Scheduled assessment Windows Graphics Kernel Elevation of Privilege VulnerabilityUse after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-102195 Scheduled assessment Windows Broadcast DVR User Service Elevation of Privilege VulnerabilityUse after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-102197 Scheduled assessment Windows Broadcast DVR User Service Elevation of Privilege VulnerabilityUse after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-103554 Scheduled assessment Windows Broadcast DVR User Service Elevation of Privilege VulnerabilityUse after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-103555 Scheduled assessment Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege VulnerabilityHeap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-103565 Scheduled assessment Windows Broadcast DVR User Service Elevation of Privilege VulnerabilityUse after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-105722 Scheduled assessment Windows Broadcast DVR User Service Elevation of Privilege VulnerabilityUse after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-108134 Scheduled assessment Windows Autopilot Elevation of Privilege VulnerabilityUse after free in Windows Autopilot allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-108461 Scheduled assessment Windows Broadcast DVR User Service Elevation of Privilege VulnerabilityUse after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-108464 Scheduled assessment Software Protection Platform (SPP) Elevation of Privilege VulnerabilityUse after free in Software Protection Platform (SPP) allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-108465 Scheduled assessment Windows Update Delivery Optimization Elevation of Privilege VulnerabilityUse after free in Windows Update Delivery Optimization allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-108468 Scheduled assessment Windows Installer Elevation of Privilege VulnerabilityUse after free in Windows Installer allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-109453 Scheduled assessment Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege VulnerabilityHeap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.25% · 15.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-97800 Scheduled assessment Windows Mobile Broadband Elevation of Privilege VulnerabilityIncorrect permission assignment for critical resource in Windows Mobile Broadband allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.25% · 14.7th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83728 Scheduled assessment Windows Hyper-V Spoofing VulnerabilityImproper validation of syntactic correctness of input in Windows Hyper-V allows an authorized attacker to perform spoofing locally. | 8.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.24% · 14.7th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83767 Scheduled assessment Windows Installer Elevation of Privilege VulnerabilityStack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.24% · 14.7th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85860 Scheduled assessment Windows Message Queuing Queue Manager Elevation of Privilege VulnerabilityUse after free in Windows Message Queuing Queue Manager allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.24% · 14.7th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85867 Scheduled assessment Windows Remote Access Connection Manager Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.24% · 14.7th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85933 Scheduled assessment Windows Print Spooler Components Elevation of Privilege VulnerabilityUse after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.24% · 14.7th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-87691 Scheduled assessment Windows Management Services Elevation of Privilege VulnerabilityUse after free in Windows Management Services allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.24% · 14.7th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-87700 Scheduled assessment Windows Installer Elevation of Privilege VulnerabilityUse after free in Windows Installer allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.24% · 14.7th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-87711 Scheduled assessment Windows Installer Elevation of Privilege VulnerabilityStack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.24% · 14.7th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-87712 Scheduled assessment Microsoft Windows QoS Scheduler Driver Elevation of Privilege VulnerabilityUse after free in Windows Quality of Service (QoS) Packet Scheduler allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.24% · 14.7th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-88080 Scheduled assessment Windows Installer Elevation of Privilege VulnerabilityUse after free in Windows Installer allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.24% · 14.7th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-88105 Scheduled assessment Windows Broadcast DVR User Service Elevation of Privilege VulnerabilityUse after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.24% · 14.7th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-88177 Scheduled assessment Windows DWM Core Library Elevation of Privilege VulnerabilityOut-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.24% · 14.7th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-88180 Scheduled assessment Windows DWM Core Library Elevation of Privilege VulnerabilityOut-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.24% · 14.7th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-88189 Scheduled assessment Windows DWM Core Library Elevation of Privilege VulnerabilityOut-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.24% · 14.7th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-96306 Scheduled assessment Windows Sysmain Service Elevation of Privilege VulnerabilityOut-of-bounds read in Windows Sysmain Service allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.24% · 14.7th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-96915 Scheduled assessment Windows Kernel-Mode Drivers Elevation of Privilege VulnerabilityInteger overflow or wraparound in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.24% · 14.7th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-96953 Scheduled assessment Windows Universal Disk Format File System Driver (UDFS) Remote Code Execution VulnerabilityNull pointer dereference in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to execute code locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.24% · 14.7th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83741 Scheduled assessment Internet Explorer Elevation of Privilege VulnerabilityUse after free in Internet Explorer allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.24% · 14.3th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85861 Scheduled assessment Clipboard User Service Elevation of Privilege VulnerabilityUse after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.24% · 14.3th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85863 Scheduled assessment Clipboard User Service Elevation of Privilege VulnerabilityUse after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.24% · 14.3th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-69964 Scheduled assessment Kernel Streaming Service Driver Elevation of Privilege VulnerabilityUse after free in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.24% · 14.3th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-69970 Scheduled assessment Kernel Streaming Service Driver Elevation of Privilege VulnerabilityHeap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.24% · 14.3th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83846 Scheduled assessment Connected Devices Platform Service (Cdpsvc) Elevation of Privilege VulnerabilityUse after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.24% · 14.3th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-95943 Scheduled assessment Connected Devices Platform Service (Cdpsvc) Elevation of Privilege VulnerabilityDouble free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.24% · 14.3th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70212 Scheduled assessment Windows Security Center Elevation of Privilege VulnerabilityImproper restriction of communication channel to intended endpoints in Windows Security Center allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.24% · 14.1th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-97793 Scheduled assessment Windows Setup and Deployment Elevation of Privilege VulnerabilityMissing authentication for critical function in Windows Setup and Deployment allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.24% · 14.1th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-97811 Scheduled assessment Microsoft OpenSSH for Windows Elevation of Privilege VulnerabilityDouble free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.24% · 13.5th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-69650 Scheduled assessment Windows Key Distribution Center Elevation of Privilege VulnerabilityImproper verification of cryptographic signature in Windows Key Distribution Center allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.23% · 12.5th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83505 Scheduled assessment Windows Setup Files Cleanup Elevation of Privilege VulnerabilityTime-of-check time-of-use (toctou) race condition in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.23% · 12.4th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83724 Scheduled assessment Windows Management Instrumentation Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.22% · 12.2th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85328 Scheduled assessment Windows Projected File System Elevation of Privilege VulnerabilityWeak authentication in Windows Projected File System allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.22% · 12.2th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-96313 Scheduled assessment Windows Push Notifications Elevation of Privilege VulnerabilityMissing authentication for critical function in Windows Push Notifications allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.22% · 12.2th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83917 Scheduled assessment Windows ALPC Elevation of Privilege VulnerabilityUse after free in Windows ALPC allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.22% · 12.0th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83738 Scheduled assessment Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityUse after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.22% · 11.6th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-84014 Scheduled assessment Windows Device Association Service Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.22% · 11.6th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-69840 Scheduled assessment Windows Certificates Elevation of Privilege VulnerabilityUse after free in Windows Certificates allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.22% · 11.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83930 Scheduled assessment Windows Update Orchestrator Service Elevation of Privilege VulnerabilityUse after free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.22% · 11.5th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-81971 Scheduled assessment Windows NTFS Elevation of Privilege VulnerabilityConcurrent execution using shared resource with improper synchronization ('race condition') in Windows NTFS allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.21% · 10.7th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83510 Scheduled assessment Windows Setup Files Cleanup Elevation of Privilege VulnerabilityTime-of-check time-of-use (toctou) race condition in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.21% · 10.7th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83899 Scheduled assessment Windows Installer Elevation of Privilege VulnerabilityImproper privilege management in Windows Installer allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.21% · 10.7th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-88101 Scheduled assessment Microsoft Input Method Editor (IME) Elevation of Privilege VulnerabilityWeak authentication in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.21% · 10.6th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-69736 Scheduled assessment Windows Credential Manager Elevation of Privilege VulnerabilityConcurrent execution using shared resource with improper synchronization ('race condition') in Windows Credential Manager allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.21% · 10.1th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-69763 Scheduled assessment Windows Storage Elevation of Privilege VulnerabilityUse after free in Windows Storage allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.21% · 10.1th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-69766 Scheduled assessment Windows Storage Elevation of Privilege VulnerabilityUse after free in Windows Storage allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.21% · 10.1th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-69856 Scheduled assessment Windows Storage Elevation of Privilege VulnerabilityUse after free in Windows Storage allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.21% · 10.1th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-69931 Scheduled assessment Windows Storage Elevation of Privilege VulnerabilityConcurrent execution using shared resource with improper synchronization ('race condition') in Windows Storage allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.21% · 10.1th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-69935 Scheduled assessment Windows Storage Elevation of Privilege VulnerabilityUse after free in Windows Storage allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.21% · 10.1th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83775 Scheduled assessment Windows Installer Elevation of Privilege VulnerabilityConcurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.21% · 10.1th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83879 Scheduled assessment Windows Overlay Filter Elevation of Privilege VulnerabilityConcurrent execution using shared resource with improper synchronization ('race condition') in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.21% · 10.1th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-97787 Scheduled assessment Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege VulnerabilityConcurrent execution using shared resource with improper synchronization ('race condition') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.21% · 10.1th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83750 Scheduled assessment Windows Error Reporting Elevation of Privilege VulnerabilityTime-of-check time-of-use (toctou) race condition in Windows Error Reporting allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.21% · 9.8th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83834 Scheduled assessment Windows Kernel-Mode Drivers Elevation of Privilege VulnerabilityUse after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.21% · 9.8th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85941 Scheduled assessment Windows Installer Elevation of Privilege VulnerabilityConcurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.21% · 9.8th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-96939 Scheduled assessment Servicing Stack Updates Elevation of Privilege VulnerabilityTime-of-check time-of-use (toctou) race condition in Servicing Stack Updates allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.21% · 9.8th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83680 Scheduled assessment Windows Installer Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.20% · 9.7th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83749 Scheduled assessment Windows Overlay Filter Elevation of Privilege VulnerabilityUse after free in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.20% · 9.7th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83752 Scheduled assessment Windows Installer Elevation of Privilege VulnerabilityUse after free in Windows Installer allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.20% · 9.7th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83852 Scheduled assessment Windows Bind Filter Driver Elevation of Privilege VulnerabilityUse after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.20% · 9.7th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-84019 Scheduled assessment Windows Advanced Rasterization Platform Elevation of Privilege VulnerabilityUse after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.20% · 9.7th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Patch available. 10.0.17763.9376:Security Update:https://support.microsoft.com/help/5126651 |
CVE-2026-85365 Scheduled assessment Servicing Stack Updates Elevation of Privilege VulnerabilityHeap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.20% · 9.7th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85827 Scheduled assessment WebDAV Elevation of Privilege VulnerabilityHeap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.20% · 9.7th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85846 Scheduled assessment Web Account Manager Elevation of Privilege VulnerabilityUse after free in Windows Web Account Manager allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.20% · 9.7th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85914 Scheduled assessment Windows Embedded Mode Service Elevation of Privilege VulnerabilityUse after free in Windows Embedded Mode Service allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.20% · 9.7th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85930 Scheduled assessment Windows Image Acquisition Elevation of Privilege VulnerabilityUse after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.20% · 9.7th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-87693 Scheduled assessment Windows Installer Elevation of Privilege VulnerabilityUse after free in Windows Installer allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.20% · 9.7th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-87704 Scheduled assessment Windows Installer Elevation of Privilege VulnerabilityUse after free in Windows Installer allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.20% · 9.7th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-87715 Scheduled assessment Windows Installer Elevation of Privilege VulnerabilityUse after free in Windows Installer allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.20% · 9.7th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-88098 Scheduled assessment Windows Security Support Provider Interface Elevation of Privilege VulnerabilityUntrusted pointer dereference in Windows Security Support Provider Interface allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.20% · 9.7th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-88103 Scheduled assessment Windows Broadcast DVR User Service Elevation of Privilege VulnerabilityUse after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.20% · 9.7th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-88106 Scheduled assessment Windows Cloud Files Mini Filter Driver Elevation of Privilege VulnerabilityUse after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.20% · 9.7th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-88113 Scheduled assessment Windows Broadcast DVR User Service Elevation of Privilege VulnerabilityUse after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.20% · 9.7th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-88139 Scheduled assessment Windows Kernel Elevation of Privilege VulnerabilityUse after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.20% · 9.7th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-88149 Scheduled assessment Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityDouble free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.20% · 9.7th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-96307 Scheduled assessment Windows Installer Elevation of Privilege VulnerabilityUse after free in Windows Installer allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.20% · 9.7th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-96322 Scheduled assessment Windows Remote Desktop Protocol Elevation of Privilege VulnerabilityUse after free in Windows Remote Desktop Protocol allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.20% · 9.7th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-96937 Scheduled assessment Microsoft Windows Search Component Elevation of Privilege VulnerabilityUse after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.20% · 9.7th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83722 Scheduled assessment Microsoft Local Security Authority (LSA) Server Elevation of Privilege VulnerabilityUse after free in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.20% · 9.1th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83871 Scheduled assessment Microsoft OpenSSH for Windows Elevation of Privilege VulnerabilityHeap-based buffer overflow in OpenSSH for Windows allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.20% · 9.1th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85329 Scheduled assessment Microsoft Account Elevation of Privilege VulnerabilityConcurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Account allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.20% · 9.1th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-102211 Scheduled assessment Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege VulnerabilityUse after free in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.20% · 8.8th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-103568 Scheduled assessment Windows Credential Providers Elevation of Privilege VulnerabilityConcurrent execution using shared resource with improper synchronization ('race condition') in Windows Credential Providers allows an authorized attacker to elevate privileges locally. | 7.8 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.19% · 8.4th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70169 Scheduled assessment Windows Connected Devices Platform Service Elevation of Privilege VulnerabilityConcurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.19% · 8.4th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83839 Scheduled assessment Windows Hyper-V Elevation of Privilege VulnerabilityTime-of-check time-of-use (toctou) race condition in Windows Hyper-V allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.19% · 8.4th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83841 Scheduled assessment Windows Win32k Elevation of Privilege VulnerabilityConcurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.19% · 8.4th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-84018 Scheduled assessment Windows Print Spooler Components Elevation of Privilege VulnerabilityUse after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.19% · 8.4th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85357 Scheduled assessment Windows Phone Service Elevation of Privilege VulnerabilityConcurrent execution using shared resource with improper synchronization ('race condition') in Windows Phone Service allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.19% · 8.4th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85824 Scheduled assessment Windows Composite Image File System Elevation of Privilege VulnerabilityUse after free in Windows Composite Image File System allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.19% · 8.4th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85825 Scheduled assessment Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege VulnerabilityUse after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.19% · 8.4th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85943 Scheduled assessment Reliable Multicast Transport Driver (RMCAST) Elevation of Privilege VulnerabilityTime-of-check time-of-use (toctou) race condition in Reliable Multicast Transport Driver (RMCAST) allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.19% · 8.4th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-88146 Scheduled assessment Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege VulnerabilityConcurrent execution using shared resource with improper synchronization ('race condition') in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.19% · 8.4th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-96215 Scheduled assessment Windows Autopilot Elevation of Privilege VulnerabilityConcurrent execution using shared resource with improper synchronization ('race condition') in Windows Autopilot allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.19% · 8.4th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-96932 Scheduled assessment Windows Embedded Mode Service Elevation of Privilege VulnerabilityConcurrent execution using shared resource with improper synchronization ('race condition') in Windows Embedded Mode Service allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.19% · 8.4th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-96949 Scheduled assessment Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege VulnerabilityUse after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.19% · 8.4th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-102207 Scheduled assessment Windows Kernel Elevation of Privilege VulnerabilityConcurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.19% · 8.4th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-108396 Scheduled assessment Windows Modern Device Management (MDM) Elevation of Privilege VulnerabilityTime-of-check time-of-use (toctou) race condition in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.19% · 8.4th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85920 Scheduled assessment Windows BitLocker Elevation of Privilege VulnerabilityTime-of-check time-of-use (toctou) race condition in Windows BitLocker allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.16% · 4.9th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83868 Scheduled assessment Microsoft Bluetooth Driver Elevation of Privilege VulnerabilityConcurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.16% · 4.9th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85904 Scheduled assessment Windows Device Association Service Elevation of Privilege VulnerabilityConcurrent execution using shared resource with improper synchronization ('race condition') in Windows Device Association Service allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.16% · 4.3th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-88096 Scheduled assessment Windows DCOM Server Elevation of Privilege VulnerabilityConcurrent execution using shared resource with improper synchronization ('race condition') in Windows DCOM Server allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.16% · 4.3th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-88107 Scheduled assessment Windows Cloud Files Mini Filter Driver Elevation of Privilege VulnerabilityUse after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.16% · 4.3th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-88160 Scheduled assessment Microsoft Windows Search Component Elevation of Privilege VulnerabilityConcurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.16% · 4.3th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-96919 Scheduled assessment Windows Broadcast DVR User Service Elevation of Privilege VulnerabilityUse after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.16% · 4.3th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85912 Scheduled assessment Clipboard User Service Elevation of Privilege VulnerabilityConcurrent execution using shared resource with improper synchronization ('race condition') in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.15% · 3.8th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-87710 Scheduled assessment Microsoft Local Security Authority (LSA) Server Elevation of Privilege VulnerabilityImproper access control in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally. | 7.0 · CVSS 3.1 · HighSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.15% · 3.8th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | Within 7 daysHigh technical severity; prioritise exposed affected systems while verifying vendor guidance.Mitigation available. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83685 Scheduled assessment Windows Internet Key Exchange (IKE) Extension Denial of Service VulnerabilityBuffer over-read in Windows IKE Extension allows an authorized attacker to deny service over a network. | 6.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 1.14% · 65.9th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83683 Scheduled assessment Windows Encrypting File System (EFS) Information Disclosure VulnerabilityAbsolute path traversal in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information over a network. | 6.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 1.13% · 65.8th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70072 Scheduled assessment Windows Netlogon Denial of Service VulnerabilityAllocation of resources without limits or throttling in Windows Netlogon allows an authorized attacker to deny service over a network. | 6.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 1.09% · 64.7th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70170 Scheduled assessment Windows Kernel Denial of Service VulnerabilityUntrusted pointer dereference in Windows Kernel allows an authorized attacker to deny service over a network. | 6.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 1.09% · 64.7th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83649 Scheduled assessment Windows Local Security Authority Subsystem Service (LSASS) Denial of Service VulnerabilityOut-of-bounds read in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to deny service over a network. | 6.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 1.09% · 64.7th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83648 Scheduled assessment Windows Active Directory Domain Services Denial of Service VulnerabilityNull pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network. | 6.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 1.09% · 64.6th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83667 Scheduled assessment Windows Active Directory Domain Services Denial of Service VulnerabilityOut-of-bounds read in Active Directory Domain Services allows an authorized attacker to deny service over a network. | 6.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 1.09% · 64.6th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83521 Scheduled assessment Windows IKE Extension Information Disclosure VulnerabilityOut-of-bounds read in Windows IKE Extension allows an authorized attacker to disclose information over a network. | 6.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.99% · 61.9th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85331 Scheduled assessment Windows Device Association Service Information Disclosure VulnerabilityOut-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information over a network. | 6.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.95% · 60.5th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85821 Scheduled assessment Windows Universal Disk Format File System Driver (UDFS) Information Disclosure VulnerabilityOut-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally. | 6.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.95% · 60.5th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85840 Scheduled assessment Windows Event Viewer Information Disclosure VulnerabilityFiles or directories accessible to external parties in Windows Event Viewer allows an authorized attacker to disclose information over a network. | 6.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.95% · 60.5th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-88137 Scheduled assessment WebDAV Information Disclosure VulnerabilityFiles or directories accessible to external parties in WebDAV allows an authorized attacker to disclose information over a network. | 6.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.95% · 60.5th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-97813 Scheduled assessment Windows Hyper-V Information Disclosure VulnerabilityHeap-based buffer overflow in Windows Hyper-V allows an authorized attacker to disclose information over a network. | 6.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.95% · 60.5th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-97817 Scheduled assessment Role: DNS Server Information Disclosure VulnerabilityHeap-based buffer overflow in DNS Server allows an authorized attacker to disclose information over a network. | 6.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.95% · 60.5th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-97819 Scheduled assessment Role: DNS Server Information Disclosure VulnerabilityOut-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | 6.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.95% · 60.5th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-108127 Scheduled assessment Role: DNS Server Information Disclosure VulnerabilityOut-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | 6.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.95% · 60.5th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-108128 Scheduled assessment Role: DNS Server Information Disclosure VulnerabilityOut-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | 6.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.95% · 60.5th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-108129 Scheduled assessment Role: DNS Server Information Disclosure VulnerabilityOut-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | 6.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.95% · 60.5th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-69940 Scheduled assessment Windows Client for NFS Information Disclosure VulnerabilityOut-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information over a network. | 6.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.94% · 60.2th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · REQUIRED user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70244 Scheduled assessment Windows DNS Server Information Disclosure VulnerabilityOut-of-bounds read in DNS Server allows an unauthorized attacker to disclose information over a network. | 6.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.94% · 60.2th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · REQUIRED user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83515 Scheduled assessment RPC Runtime Information Disclosure VulnerabilityUse of uninitialized resource in RPC Runtime allows an unauthorized attacker to disclose information over a network. | 6.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.94% · 60.2th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · REQUIRED user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83651 Scheduled assessment Windows GDI Information Disclosure VulnerabilityOut-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information over a network. | 6.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.94% · 60.2th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · REQUIRED user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85797 Scheduled assessment Windows GDI Information Disclosure VulnerabilityOut-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information over a network. | 6.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.93% · 59.8th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · REQUIRED user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83906 Scheduled assessment Windows Shell Spoofing VulnerabilityIncorrect implementation of authentication algorithm in Windows Shell allows an unauthorized attacker to perform spoofing over a network. | 6.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.89% · 58.6th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · REQUIRED user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-69955 Scheduled assessment Windows Client for NFS Information Disclosure VulnerabilityOut-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information over a network. | 6.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.89% · 58.4th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · REQUIRED user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83888 Scheduled assessment Windows CD-ROM Driver Elevation of Privilege VulnerabilityBuffer over-read in Windows CD-ROM Driver allows an unauthorized attacker to elevate privileges over a network. | 6.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.89% · 58.4th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · REQUIRED user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85337 Scheduled assessment Windows Remote Desktop Client Information Disclosure VulnerabilityOut-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network. | 6.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.89% · 58.4th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · REQUIRED user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-102199 Scheduled assessment Microsoft Windows Codecs Library Denial of Service VulnerabilityStack-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to deny service over a network. | 6.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.85% · 57.3th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · REQUIRED user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-96300 Scheduled assessment RPC Endpoint Mapper Service Denial of Service VulnerabilityUncontrolled resource consumption in RPC Endpoint Mapper Service allows an unauthorized attacker to deny service over a network. | 5.9 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.84% · 56.8th percentileForecast date: 2026-10-14NETWORK · HIGH complexity · NONE privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70025 Scheduled assessment Windows Netlogon Denial of Service VulnerabilityUse after free in Windows Netlogon allows an authorized attacker to deny service over a network. | 5.3 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.83% · 56.6th percentileForecast date: 2026-10-14NETWORK · HIGH complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85859 Scheduled assessment Windows Message Queuing Queue Manager Denial of Service VulnerabilityNull pointer dereference in Windows Message Queuing Queue Manager allows an authorized attacker to deny service over a network. | 6.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.79% · 55.3th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-69968 Scheduled assessment Windows libarchive Tampering VulnerabilityRelative path traversal in Windows Libarchive allows an unauthorized attacker to perform tampering over a network. | 6.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.77% · 54.7th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · REQUIRED user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-97823 Scheduled assessment Role: DNS Server Information Disclosure VulnerabilityOut-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | 6.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.77% · 54.6th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-97824 Scheduled assessment Role: DNS Server Information Disclosure VulnerabilityOut-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | 6.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.77% · 54.6th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-97825 Scheduled assessment Role: DNS Server Information Disclosure VulnerabilityOut-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | 6.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.77% · 54.6th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-97826 Scheduled assessment Role: DNS Server Information Disclosure VulnerabilityOut-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | 6.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.77% · 54.6th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-97827 Scheduled assessment Role: DNS Server Information Disclosure VulnerabilityOut-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | 6.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.77% · 54.6th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-97828 Scheduled assessment Role: DNS Server Information Disclosure VulnerabilityBuffer over-read in DNS Server allows an authorized attacker to disclose information over a network. | 6.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.77% · 54.6th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-97829 Scheduled assessment Role: DNS Server Information Disclosure VulnerabilityOut-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | 6.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.77% · 54.6th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-97820 Scheduled assessment Role: DNS Server Information Disclosure VulnerabilityOut-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | 6.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.74% · 53.4th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-97821 Scheduled assessment Role: DNS Server Information Disclosure VulnerabilityOut-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | 6.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.74% · 53.4th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-97822 Scheduled assessment Role: DNS Server Information Disclosure VulnerabilityOut-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | 6.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.74% · 53.4th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-97831 Scheduled assessment Role: DNS Server Information Disclosure VulnerabilityOut-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | 6.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.73% · 53.4th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-97835 Scheduled assessment Role: DNS Server Information Disclosure VulnerabilityOut-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | 6.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.73% · 53.3th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-97836 Scheduled assessment Role: DNS Server Information Disclosure VulnerabilityOut-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | 6.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.73% · 53.4th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-97837 Scheduled assessment Role: DNS Server Information Disclosure VulnerabilityOut-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | 6.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.73% · 53.4th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-97838 Scheduled assessment Role: DNS Server Information Disclosure VulnerabilityOut-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | 6.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.73% · 53.4th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-97839 Scheduled assessment Role: DNS Server Information Disclosure VulnerabilityOut-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | 6.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.73% · 53.3th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-97840 Scheduled assessment Role: DNS Server Information Disclosure VulnerabilityOut-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | 6.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.73% · 53.4th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-97841 Scheduled assessment Role: DNS Server Information Disclosure VulnerabilityOut-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | 6.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.73% · 53.4th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-97843 Scheduled assessment Role: DNS Server Information Disclosure VulnerabilityOut-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | 6.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.73% · 53.4th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-97844 Scheduled assessment Role: DNS Server Information Disclosure VulnerabilityOut-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | 6.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.73% · 53.4th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-69973 Scheduled assessment Windows libarchive Tampering VulnerabilityImproper limitation of a pathname to a restricted directory ('path traversal') in Windows Libarchive allows an unauthorized attacker to perform tampering over a network. | 6.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.71% · 52.4th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · REQUIRED user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85790 Scheduled assessment Microsoft QUIC Information Disclosure VulnerabilityUse after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network. | 5.9 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.70% · 52.3th percentileForecast date: 2026-10-14NETWORK · HIGH complexity · NONE privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-102198 Scheduled assessment Windows Remote Desktop Protocol Information Disclosure VulnerabilityOut-of-bounds read in Windows Remote Desktop Protocol allows an authorized attacker to disclose information over a network. | 5.3 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.69% · 51.9th percentileForecast date: 2026-10-14NETWORK · HIGH complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85847 Scheduled assessment Windows Print Spooler Components Information Disclosure VulnerabilityOut-of-bounds read in Windows Print Spooler Components allows an unauthorized attacker to disclose information over a network. | 6.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.67% · 50.7th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · REQUIRED user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-108466 Scheduled assessment Windows Kernel Denial of Service VulnerabilityOut-of-bounds read in Windows Kernel allows an unauthorized attacker to deny service over a network. | 5.3 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.63% · 49.1th percentileForecast date: 2026-10-14NETWORK · HIGH complexity · NONE privileges · REQUIRED user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-69640 Scheduled assessment Windows Key Distribution Center Security Feature Bypass VulnerabilityIncorrect authorization in Windows Key Distribution Center allows an authorized attacker to bypass a security feature over a network. | 5.3 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.63% · 48.8th percentileForecast date: 2026-10-14NETWORK · HIGH complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85805 Scheduled assessment Microsoft PowerShell Security Feature Bypass VulnerabilityImproperly implemented security check for standard in Windows PowerShell allows an unauthorized attacker to bypass a security feature over a network. | 6.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.61% · 47.8th percentileForecast date: 2026-10-14NETWORK · LOW complexity · NONE privileges · REQUIRED user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83703 Scheduled assessment Windows Wi-Fi Driver Denial of Service VulnerabilityOut-of-bounds read in Windows Wi-Fi Driver allows an unauthorized attacker to deny service over an adjacent network. | 6.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.59% · 47.1th percentileForecast date: 2026-10-14ADJACENT · LOW complexity · NONE privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-96218 Scheduled assessment Windows Update Stack Tampering VulnerabilityImproper access control in Windows Update Stack allows an authorized attacker to perform tampering locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.57% · 45.6th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70277 Scheduled assessment Windows Fast FAT File System Driver Information Disclosure VulnerabilityOut-of-bounds read in Windows Fast FAT Driver allows an unauthorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.55% · 44.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · NONE privileges · REQUIRED user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-97832 Scheduled assessment Role: DNS Server Information Disclosure VulnerabilityOut-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | 6.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.55% · 44.7th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-97833 Scheduled assessment Role: DNS Server Information Disclosure VulnerabilityOut-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | 6.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.55% · 44.7th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-97834 Scheduled assessment Role: DNS Server Information Disclosure VulnerabilityOut-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | 6.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.55% · 44.7th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-97842 Scheduled assessment Role: DNS Server Information Disclosure VulnerabilityOut-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | 6.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.55% · 44.7th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70044 Scheduled assessment Microsoft Windows Media Foundation Information Disclosure VulnerabilityOut-of-bounds read in Microsoft Windows Media Foundation allows an unauthorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.53% · 43.4th percentileForecast date: 2026-10-14LOCAL · LOW complexity · NONE privileges · REQUIRED user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85816 Scheduled assessment Windows Wi-Fi Driver Information Disclosure VulnerabilityOut-of-bounds read in Windows Wi-Fi Driver allows an authorized attacker to disclose information over an adjacent network. | 5.7 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.52% · 42.7th percentileForecast date: 2026-10-14ADJACENT · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-69644 Scheduled assessment Windows iSCSI Information Disclosure VulnerabilityExposure of sensitive system information to an unauthorized control sphere in Windows iSCSI allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.49% · 40.6th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70055 Scheduled assessment Windows Cryptographic Services Information Disclosure VulnerabilityExposure of sensitive system information to an unauthorized control sphere in Windows Cryptographic Services allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.49% · 40.6th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70199 Scheduled assessment Windows Kernel Information Disclosure VulnerabilityExposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.49% · 40.6th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70232 Scheduled assessment Windows Kernel Information Disclosure VulnerabilityExposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.49% · 40.6th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70260 Scheduled assessment Microsoft Trace Data Helper Information Disclosure VulnerabilityExposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.49% · 40.6th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70261 Scheduled assessment Microsoft Trace Data Helper Information Disclosure VulnerabilityExposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.49% · 40.6th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83713 Scheduled assessment Windows Universal Disk Format File System Driver (UDFS) Information Disclosure VulnerabilityOut-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.49% · 40.6th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83773 Scheduled assessment Windows MIDI Service Module Information Disclosure VulnerabilityExposure of sensitive system information to an unauthorized control sphere in Windows MIDI Service Module allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.49% · 40.6th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83893 Scheduled assessment Windows Clipboard User Service Information Disclosure VulnerabilityExposure of sensitive system information to an unauthorized control sphere in Windows Clipboard User Service allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.49% · 40.6th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83907 Scheduled assessment Windows Hello Information Disclosure VulnerabilityExposure of sensitive system information to an unauthorized control sphere in Windows Hello allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.49% · 40.6th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83705 Scheduled assessment HTTP.sys Information Disclosure VulnerabilityExposure of sensitive system information to an unauthorized control sphere in Windows HTTP.sys allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.47% · 39.2th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83835 Scheduled assessment Windows Common Log File System Driver Information Disclosure VulnerabilityBuffer over-read in Windows Common Log File System Driver allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.47% · 39.0th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85793 Scheduled assessment Windows Sysmain Service Information Disclosure VulnerabilityExposure of sensitive system information to an unauthorized control sphere in Windows Sysmain Service allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.47% · 39.0th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85857 Scheduled assessment Windows Kernel-Mode Drivers Information Disclosure VulnerabilityInsertion of sensitive information into log file in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.47% · 39.0th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-96944 Scheduled assessment Windows Storage Information Disclosure VulnerabilityInsertion of sensitive information into externally-accessible file or directory in Windows Storage allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.47% · 39.0th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-96948 Scheduled assessment Windows Client Side Caching driver (csc.sys) Information Disclosure VulnerabilityExposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver (csc.sys) allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.47% · 39.0th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-108462 Scheduled assessment Windows Kernel Information Disclosure VulnerabilityExposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.47% · 39.0th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-87714 Scheduled assessment WebDAV Security Feature Bypass VulnerabilityMissing authorization in WebDAV allows an authorized attacker to bypass a security feature over a network. | 6.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.46% · 38.3th percentileForecast date: 2026-10-14NETWORK · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83788 Scheduled assessment Windows rndismp6.sys Information Disclosure VulnerabilityBuffer over-read in Windows RNDIS allows an unauthorized attacker to disclose information with a physical attack. | 4.6 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.46% · 38.2th percentileForecast date: 2026-10-14PHYSICAL · LOW complexity · NONE privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-88226 Scheduled assessment Windows Storage Port Driver Information Disclosure VulnerabilityOut-of-bounds read in Windows Storage Port Driver allows an unauthorized attacker to disclose information with a physical attack. | 4.6 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.46% · 38.2th percentileForecast date: 2026-10-14PHYSICAL · LOW complexity · NONE privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85916 Scheduled assessment Azure Active Directory Information Disclosure VulnerabilityExposure of private personal information to an unauthorized actor in Azure Active Directory allows an unauthorized attacker to disclose information locally. | 6.2 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.46% · 37.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · NONE privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-69947 Scheduled assessment Windows Overlay Filter Remote Code Execution VulnerabilityHeap-based buffer overflow in Windows Overlay Filter allows an unauthorized attacker to execute code with a physical attack. | 6.8 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.45% · 37.3th percentileForecast date: 2026-10-14PHYSICAL · LOW complexity · NONE privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-69958 Scheduled assessment Windows Overlay Filter Remote Code Execution VulnerabilityHeap-based buffer overflow in Windows Overlay Filter allows an unauthorized attacker to execute code with a physical attack. | 6.8 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.45% · 37.3th percentileForecast date: 2026-10-14PHYSICAL · LOW complexity · NONE privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83573 Scheduled assessment Windows Kernel-Mode Driver Elevation of Privilege VulnerabilityInteger overflow or wraparound in Windows Kernel Mode Driver allows an unauthorized attacker to elevate privileges with a physical attack. | 6.8 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.45% · 37.3th percentileForecast date: 2026-10-14PHYSICAL · LOW complexity · NONE privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83776 Scheduled assessment Windows Bluetooth Driver Elevation of Privilege VulnerabilityOut-of-bounds read in Microsoft Bluetooth Driver allows an unauthorized attacker to elevate privileges with a physical attack. | 6.8 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.45% · 37.3th percentileForecast date: 2026-10-14PHYSICAL · LOW complexity · NONE privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83895 Scheduled assessment Windows Win32 Kernel Subsystem Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows Win32 Kernel Subsystem allows an unauthorized attacker to elevate privileges with a physical attack. | 6.8 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.45% · 37.3th percentileForecast date: 2026-10-14PHYSICAL · LOW complexity · NONE privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-62687 Scheduled assessment Windows Backup Engine Information Disclosure VulnerabilityImproper link resolution before file access ('link following') in Windows Backup Engine allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.45% · 37.2th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70084 Scheduled assessment Windows Projected File System Information Disclosure VulnerabilityImproper access control in Windows Projected File System allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.45% · 37.2th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83507 Scheduled assessment Windows Update Orchestrator Service Information Disclosure VulnerabilityImproper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.45% · 37.2th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83933 Scheduled assessment Windows Update Orchestrator Service Information Disclosure VulnerabilityImproper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.43% · 35.3th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-102188 Scheduled assessment Windows Storage Port Driver Elevation of Privilege VulnerabilityUntrusted pointer dereference in Windows Storage Port Driver allows an unauthorized attacker to elevate privileges with a physical attack. | 6.8 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.42% · 34.4th percentileForecast date: 2026-10-14PHYSICAL · LOW complexity · NONE privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Patch available. 6.2.9200.26434:Security Update:https://support.microsoft.com/help/5126835 |
CVE-2026-102206 Scheduled assessment Windows Portable Device MTP Driver Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows Portable Device MTP Driver allows an unauthorized attacker to elevate privileges with a physical attack. | 6.8 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.42% · 34.4th percentileForecast date: 2026-10-14PHYSICAL · LOW complexity · NONE privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83671 Scheduled assessment Windows Hyper-V Information Disclosure VulnerabilityOut-of-bounds read in Windows Hyper-V allows an authorized attacker to disclose information locally. | 6.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.41% · 34.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-69721 Scheduled assessment Windows iSCSI Information Disclosure VulnerabilityOut-of-bounds read in Windows iSCSI allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.41% · 34.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-69914 Scheduled assessment Windows AppX Deployment Service Information Disclosure VulnerabilityOut-of-bounds read in Windows AppX Deployment Service allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.41% · 34.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-69919 Scheduled assessment Windows Cryptographic Services Information Disclosure VulnerabilityOut-of-bounds read in Windows Cryptographic Services allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.41% · 34.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-69954 Scheduled assessment Windows Overlay Filter Information Disclosure VulnerabilityBuffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.41% · 34.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-69967 Scheduled assessment Windows Overlay Filter Information Disclosure VulnerabilityOut-of-bounds read in Windows Overlay Filter allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.41% · 34.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-69999 Scheduled assessment Windows Update Information Disclosure VulnerabilityOut-of-bounds read in Windows Update allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.41% · 34.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70011 Scheduled assessment Windows IP Over USB Service Information Disclosure VulnerabilityOut-of-bounds read in Windows IP Over USB Service allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.41% · 34.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70017 Scheduled assessment Windows Secure Kernel Mode Information Disclosure VulnerabilityAccess of resource using incompatible type ('type confusion') in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.41% · 34.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70041 Scheduled assessment Windows CD-ROM Driver Information Disclosure VulnerabilityBuffer over-read in Windows CD-ROM Driver allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.41% · 34.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70090 Scheduled assessment Windows Netlogon Information Disclosure VulnerabilityUse of uninitialized resource in Windows Netlogon allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.41% · 34.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70135 Scheduled assessment Windows Remote POS Driver Information Disclosure VulnerabilityOut-of-bounds read in Windows Remote POS Driver allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.41% · 34.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70211 Scheduled assessment Win32k Information Disclosure VulnerabilityOut-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.41% · 34.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70227 Scheduled assessment Windows Device Association Service Information Disclosure VulnerabilityOut-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.41% · 34.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70284 Scheduled assessment Win32k Information Disclosure VulnerabilityUse of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.41% · 34.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70292 Scheduled assessment Win32k Information Disclosure VulnerabilityOut-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.41% · 34.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70293 Scheduled assessment Win32k Information Disclosure VulnerabilityUse of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.41% · 34.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70294 Scheduled assessment Win32k Information Disclosure VulnerabilityOut-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.41% · 34.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70295 Scheduled assessment Win32k Information Disclosure VulnerabilityOut-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.41% · 34.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83565 Scheduled assessment Windows Encrypting File System (EFS) Information Disclosure VulnerabilityBuffer over-read in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.41% · 34.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83571 Scheduled assessment Windows Audio Service Information Disclosure VulnerabilityNull pointer dereference in Windows Audio Service allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.41% · 34.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83686 Scheduled assessment Microsoft Windows Search Component Information Disclosure VulnerabilityOut-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.41% · 34.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83695 Scheduled assessment Windows Event Logging Service Information Disclosure VulnerabilityUse of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.41% · 34.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83723 Scheduled assessment Windows Event Logging Service Information Disclosure VulnerabilityUse of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.41% · 34.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83733 Scheduled assessment Windows Print Spooler Components Information Disclosure VulnerabilityOut-of-bounds read in Windows Print Spooler Components allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.41% · 34.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83737 Scheduled assessment Windows NTFS Information Disclosure VulnerabilityOut-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.41% · 34.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83747 Scheduled assessment Windows Error Reporting Information Disclosure VulnerabilityOut-of-bounds read in Windows Error Reporting allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.41% · 34.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83755 Scheduled assessment Win32k Information Disclosure VulnerabilityUse of uninitialized resource in Windows Win32K allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.41% · 34.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-69635 Scheduled assessment Windows Installer Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges with a physical attack. | 6.6 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.41% · 33.6th percentileForecast date: 2026-10-14PHYSICAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83736 Scheduled assessment Windows Kernel Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.41% · 33.5th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83500 Scheduled assessment Windows BitLocker Security Feature Bypass VulnerabilityUrl redirection to untrusted site ('open redirect') in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack. | 6.1 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.40% · 33.1th percentileForecast date: 2026-10-14PHYSICAL · LOW complexity · NONE privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70208 Scheduled assessment HTTP.sys Information Disclosure VulnerabilityOut-of-bounds read in Windows HTTP.sys allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.40% · 32.3th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83714 Scheduled assessment HTTP.sys Information Disclosure VulnerabilityUse of uninitialized resource in Windows HTTP.sys allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.40% · 32.3th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70141 Scheduled assessment Microsoft Windows Search Component Information Disclosure VulnerabilityOut-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.40% · 32.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70173 Scheduled assessment Microsoft Windows Search Component Information Disclosure VulnerabilityOut-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.40% · 32.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70270 Scheduled assessment Windows Container Isolation FS Filter Driver Elevation of Privilege VulnerabilityUntrusted pointer dereference in Windows Container Isolation FS Filter Driver allows an authorized attacker to elevate privileges locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.40% · 32.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83794 Scheduled assessment Windows Portable Device MTP Driver Information Disclosure VulnerabilityOut-of-bounds read in Windows Portable Device MTP Driver allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.40% · 32.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83849 Scheduled assessment Windows Hello Information Disclosure VulnerabilityOut-of-bounds read in Windows Hello allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.40% · 32.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83870 Scheduled assessment Windows Aggregated Data Platform Service Information Disclosure VulnerabilityOut-of-bounds read in Windows Aggregated Data Platform Service allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.40% · 32.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85336 Scheduled assessment Windows Device Association Service Information Disclosure VulnerabilityOut-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.40% · 32.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85374 Scheduled assessment Windows Installer Information Disclosure VulnerabilityOut-of-bounds read in Windows Installer allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.40% · 32.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85794 Scheduled assessment Windows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityOut-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.40% · 32.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85815 Scheduled assessment Windows Device Association Service Information Disclosure VulnerabilityOut-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.40% · 32.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85830 Scheduled assessment Windows Installer Information Disclosure VulnerabilityOut-of-bounds read in Windows Installer allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.40% · 32.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85831 Scheduled assessment Windows Biometric Service Information Disclosure VulnerabilityHeap-based buffer overflow in Windows Biometric Service allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.40% · 32.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85835 Scheduled assessment Servicing Stack Updates Information Disclosure VulnerabilityBuffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.40% · 32.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85852 Scheduled assessment Windows Management Instrumentation Information Disclosure VulnerabilityOut-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.40% · 32.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85909 Scheduled assessment Windows Universal Disk Format File System Driver (UDFS) Information Disclosure VulnerabilityOut-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.40% · 32.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85910 Scheduled assessment Windows StateRepository API Information Disclosure VulnerabilityBuffer over-read in Windows StateRepository API allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.40% · 32.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85935 Scheduled assessment Windows USB Driver Information Disclosure VulnerabilityBuffer over-read in Windows USB Driver allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.40% · 32.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-88140 Scheduled assessment Windows Key Storage Provider Information Disclosure VulnerabilityOut-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.40% · 32.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-96247 Scheduled assessment Windows Kernel-Mode Drivers Information Disclosure VulnerabilityUse of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.40% · 32.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-96314 Scheduled assessment Windows Audio Service Information Disclosure VulnerabilityOut-of-bounds read in Windows Audio Service allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.40% · 32.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-96321 Scheduled assessment Remote Desktop Display Driver Information Disclosure VulnerabilityOut-of-bounds read in Remote Desktop Display Driver allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.40% · 32.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-96850 Scheduled assessment Windows Modern Device Management (MDM) Information Disclosure VulnerabilityUse of uninitialized resource in Windows Modern Device Management (MDM) allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.40% · 32.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-96851 Scheduled assessment Windows Management Instrumentation Information Disclosure VulnerabilityBuffer over-read in Windows Management Instrumentation allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.40% · 32.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-96859 Scheduled assessment Windows Imaging Component Information Disclosure VulnerabilityOut-of-bounds read in Windows Imaging Component allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.40% · 32.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-96860 Scheduled assessment Windows USB Print Driver Information Disclosure VulnerabilityOut-of-bounds read in Windows USB Print Driver allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.40% · 32.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-96910 Scheduled assessment Microsoft Windows Search Component Information Disclosure VulnerabilityUntrusted pointer dereference in Microsoft Windows Search Component allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.40% · 32.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-96921 Scheduled assessment Windows Message Queuing Queue Manager Information Disclosure VulnerabilityAccess of resource using incompatible type ('type confusion') in Windows Message Queuing Queue Manager allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.40% · 32.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-96925 Scheduled assessment Windows NTFS Information Disclosure VulnerabilityInteger underflow (wrap or wraparound) in Windows NTFS allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.40% · 32.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-96930 Scheduled assessment Windows Universal Disk Format File System Driver (UDFS) Information Disclosure VulnerabilityOut-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.40% · 32.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-102187 Scheduled assessment Windows Kernel Information Disclosure VulnerabilityUse of uninitialized resource in Windows Kernel allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.40% · 32.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-103567 Scheduled assessment Windows Broadcast DVR User Service Information Disclosure VulnerabilityBuffer over-read in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.40% · 32.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83926 Scheduled assessment Windows Hello Security Feature Bypass VulnerabilityImproper certificate validation in Windows Hello allows an authorized attacker to bypass a security feature locally. | 4.4 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.40% · 32.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · HIGH privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83884 Scheduled assessment Windows Human Interface Device Information Disclosure VulnerabilityOut-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.40% · 32.0th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83892 Scheduled assessment Windows Human Interface Device Information Disclosure VulnerabilityOut-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.40% · 32.0th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70248 Scheduled assessment Windows Hyper-V Denial of Service VulnerabilityNull pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally. | 6.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.39% · 31.5th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83636 Scheduled assessment Windows Hyper-V Denial of Service VulnerabilityNull pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally. | 6.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.39% · 31.5th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85812 Scheduled assessment Windows Bind Filter Driver Information Disclosure VulnerabilityFiles or directories accessible to external parties in Windows Bind Filter Driver allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.39% · 31.3th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-96857 Scheduled assessment Windows Projected File System Information Disclosure VulnerabilityFiles or directories accessible to external parties in Windows Projected File System allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.39% · 31.3th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70128 Scheduled assessment HID Parser Library Information Disclosure VulnerabilityOut-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.38% · 30.3th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70234 Scheduled assessment Desktop Window Manager Information Disclosure VulnerabilityBuffer over-read in Desktop Window Manager allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.38% · 30.3th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83887 Scheduled assessment HID Parser Library Information Disclosure VulnerabilityOut-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.38% · 30.3th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83898 Scheduled assessment HID Parser Library Information Disclosure VulnerabilityOut-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.38% · 30.3th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83904 Scheduled assessment HID Parser Library Information Disclosure VulnerabilityOut-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.38% · 30.3th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70280 Scheduled assessment Windows Hello Security Feature Bypass VulnerabilityIncorrect authorization in Windows Hello allows an authorized attacker to bypass a security feature locally. | 4.4 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.38% · 30.2th percentileForecast date: 2026-10-14LOCAL · LOW complexity · HIGH privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85939 Scheduled assessment Windows Kernel Security Feature Bypass VulnerabilityWeak authentication in Windows Kernel allows an authorized attacker to bypass a security feature over a network. | 5.3 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.38% · 30.0th percentileForecast date: 2026-10-14NETWORK · HIGH complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83672 Scheduled assessment Windows Installer Information Disclosure VulnerabilityExposure of sensitive system information to an unauthorized control sphere in Windows Installer allows an authorized attacker to disclose information locally. | 4.7 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.38% · 30.0th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83774 Scheduled assessment Windows Win32 Kernel Subsystem Information Disclosure VulnerabilityExposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. | 4.7 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.38% · 30.0th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83905 Scheduled assessment Windows Shell Information Disclosure VulnerabilityExposure of sensitive system information to an unauthorized control sphere in Windows Shell allows an authorized attacker to disclose information locally. | 4.7 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.38% · 30.0th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83909 Scheduled assessment Windows Win32 Kernel Subsystem Information Disclosure VulnerabilityExposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. | 4.7 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.38% · 30.0th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83925 Scheduled assessment Windows Kernel Information Disclosure VulnerabilityUse of uninitialized resource in Windows Kernel allows an authorized attacker to disclose information locally. | 4.7 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.38% · 30.0th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-97790 Scheduled assessment Windows Container Isolation FS Filter Driver (unionfs.sys) Tampering VulnerabilityImproper link resolution before file access ('link following') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to perform tampering locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.37% · 29.5th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-96935 Scheduled assessment Windows NTFS Information Disclosure VulnerabilityExposure of sensitive system information to an unauthorized control sphere in Windows NTFS allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.36% · 28.4th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-96865 Scheduled assessment Windows Secure Kernel Mode Information Disclosure VulnerabilityExposure of sensitive system information to an unauthorized control sphere in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally. | 5.6 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.36% · 28.2th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83786 Scheduled assessment Windows NTFS Information Disclosure VulnerabilityGeneration of error message containing sensitive information in Windows NTFS allows an authorized attacker to disclose information locally. | 4.7 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.36% · 28.2th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83897 Scheduled assessment Windows Win32 Kernel Subsystem Information Disclosure VulnerabilityExposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. | 4.7 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.36% · 28.2th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83766 Scheduled assessment Windows Hyper-V Security Feature Bypass VulnerabilityIncorrect authorization in Windows Hyper-V allows an authorized attacker to bypass a security feature over an adjacent network. | 4.2 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.36% · 27.9th percentileForecast date: 2026-10-14ADJACENT · HIGH complexity · HIGH privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70148 Scheduled assessment Windows Broadcast DVR User Service Information Disclosure VulnerabilityImproper authorization in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally. | 6.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.36% · 27.8th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-69971 Scheduled assessment Windows Kernel-Mode Drivers Information Disclosure VulnerabilityIncorrect authorization in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.36% · 27.8th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70137 Scheduled assessment Windows Remote Access Connection Manager Information Disclosure VulnerabilityImproper access control in Windows Remote Access Connection Manager allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.36% · 27.8th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-69902 Scheduled assessment Windows NTFS Remote Code Execution VulnerabilityUntrusted pointer dereference in Windows NTFS allows an authorized attacker to execute code locally. | 6.7 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.36% · 27.6th percentileForecast date: 2026-10-14LOCAL · LOW complexity · HIGH privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-96858 Scheduled assessment Windows Security Account Manager Tampering VulnerabilityMissing authentication for critical function in Windows Security Account Manager allows an authorized attacker to perform tampering locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.35% · 27.2th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-69979 Scheduled assessment Windows AppX Deployment Service Security Feature Bypass VulnerabilityImproper protection of alternate path in Windows AppX Deployment Service allows an authorized attacker to bypass a security feature locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.35% · 26.4th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83864 Scheduled assessment Windows NTFS Information Disclosure VulnerabilityImproper access control in Windows NTFS allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.34% · 26.0th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85938 Scheduled assessment Windows Broadcast DVR User Service Information Disclosure VulnerabilityImproper access control in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.34% · 26.0th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-96183 Scheduled assessment Windows Health and Optimized Experiences Service Information Disclosure VulnerabilityMissing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.34% · 26.0th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-96938 Scheduled assessment Windows Distributed File System (DFS) Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to elevate privileges locally. | 6.7 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.33% · 24.7th percentileForecast date: 2026-10-14LOCAL · LOW complexity · HIGH privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-69969 Scheduled assessment Windows AppX Deployment Service Information Disclosure VulnerabilityImproper link resolution before file access ('link following') in Windows AppX Deployment Service allows an authorized attacker to disclose information locally. | 4.7 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.33% · 24.6th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-69978 Scheduled assessment Microsoft Windows VMSwitch Denial of Service VulnerabilityNull pointer dereference in Windows VMSwitch allows an authorized attacker to deny service locally. | 5.6 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.8th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70116 Scheduled assessment Windows Resilient File System (ReFS) Security Feature Bypass VulnerabilityStack-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker to bypass a security feature with a physical attack. | 4.2 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.7th percentileForecast date: 2026-10-14PHYSICAL · HIGH complexity · NONE privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83664 Scheduled assessment Windows Portable Device File System Driver Information Disclosure VulnerabilityAccess of resource using incompatible type ('type confusion') in Windows Portable Device File System Driver allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.2th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83668 Scheduled assessment Windows WLAN Service Information Disclosure VulnerabilityOut-of-bounds read in Windows WLAN Service allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.2th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83719 Scheduled assessment Servicing Stack Updates Information Disclosure VulnerabilityBuffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.2th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83765 Scheduled assessment Windows DWM Core Library Information Disclosure VulnerabilityOut-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.2th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-102221 Scheduled assessment Secure Boot Security Feature Bypass VulnerabilityNo cwe for this issue in Windows Secure Boot allows an authorized attacker to bypass a security feature locally. | 4.4 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.2th percentileForecast date: 2026-10-14LOCAL · LOW complexity · HIGH privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-69506 Scheduled assessment Windows Key Storage Provider Information Disclosure VulnerabilityOut-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally. | 4.7 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.2th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70063 Scheduled assessment Windows Kernel Information Disclosure VulnerabilityOut-of-bounds read in Windows Kernel allows an authorized attacker to disclose information locally. | 4.7 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70077 Scheduled assessment Windows Kernel Information Disclosure VulnerabilityUse after free in Windows Kernel allows an authorized attacker to disclose information locally. | 4.7 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.2th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83582 Scheduled assessment Windows Graphics Kernel Information Disclosure VulnerabilityUse after free in Windows Graphics Kernel allows an authorized attacker to disclose information locally. | 4.7 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-102186 Scheduled assessment Windows Network File System Information Disclosure VulnerabilityUntrusted pointer dereference in Windows Network File System allows an authorized attacker to disclose information locally. | 4.7 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.1th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70288 Scheduled assessment Win32k Information Disclosure VulnerabilityTime-of-check time-of-use (toctou) race condition in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.32% · 23.0th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-96863 Scheduled assessment Windows Storage Port Driver Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows Storage Port Driver allows an unauthorized attacker to elevate privileges with a physical attack. | 6.8 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.31% · 22.3th percentileForecast date: 2026-10-14PHYSICAL · LOW complexity · NONE privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-105006 Scheduled assessment HID Class Driver Elevation of Privilege VulnerabilityUse after free in HID class driver allows an unauthorized attacker to elevate privileges with a physical attack. | 6.4 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.31% · 22.3th percentileForecast date: 2026-10-14PHYSICAL · HIGH complexity · NONE privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-62879 Scheduled assessment Windows SmartScreen Tampering VulnerabilityMissing authentication for critical function in Windows SmartScreen allows an authorized attacker to perform tampering locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.31% · 22.0th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-69905 Scheduled assessment Windows AppX Deployment Service Tampering VulnerabilityMissing authorization in Windows AppX Deployment Service allows an authorized attacker to perform tampering locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.31% · 22.0th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70216 Scheduled assessment Windows Mobile Device Management Tampering VulnerabilityInsufficient granularity of access control in Windows Mobile Device Management allows an authorized attacker to perform tampering locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.31% · 22.0th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-81964 Scheduled assessment Windows Update Orchestrator Service Security Feature Bypass VulnerabilityUse of hard-coded credentials in Windows Update Orchestrator Service allows an authorized attacker to bypass a security feature locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.31% · 22.0th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83760 Scheduled assessment Microsoft Bluetooth Driver Information Disclosure VulnerabilityOut-of-bounds read in Microsoft Bluetooth Driver allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.31% · 21.9th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85320 Scheduled assessment Windows Print Spooler Components Information Disclosure VulnerabilityUse of uninitialized resource in Windows Print Spooler Components allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.31% · 21.7th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-87698 Scheduled assessment Windows Remote Access Service Infrastructure Information Disclosure VulnerabilityOut-of-bounds read in Windows Remote Access Service Infrastructure allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.31% · 21.7th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-95904 Scheduled assessment Windows Event Logging Service Information Disclosure VulnerabilityBuffer over-read in Windows Event Logging Service allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.31% · 21.7th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-96846 Scheduled assessment WebDAV Information Disclosure VulnerabilityOut-of-bounds read in WebDAV allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.31% · 21.7th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-96854 Scheduled assessment Windows Device Association Service Information Disclosure VulnerabilityAccess of resource using incompatible type ('type confusion') in Windows Device Association Service allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.31% · 21.7th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-96927 Scheduled assessment Windows NTFS Information Disclosure VulnerabilityOut-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.31% · 21.7th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-88158 Scheduled assessment Microsoft Digest Authentication Information Disclosure VulnerabilityOut-of-bounds read in Microsoft Digest Authentication allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.29% · 20.5th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-69974 Scheduled assessment Desktop Window Manager Information Disclosure VulnerabilityOut-of-bounds read in Desktop Window Manager allows an authorized attacker to disclose information locally. | 4.7 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.29% · 20.3th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83875 Scheduled assessment Windows Human Interface Device Information Disclosure VulnerabilityOut-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.29% · 20.3th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85866 Scheduled assessment Windows ALPC Information Disclosure VulnerabilityExposure of sensitive system information to an unauthorized control sphere in Windows ALPC allows an authorized attacker to disclose information locally. | 4.7 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.29% · 20.3th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70057 Scheduled assessment Windows Routing and Remote Access Service (RRAS) Security Feature Bypass VulnerabilityIncorrect authorization in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to bypass a security feature locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.29% · 19.8th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70235 Scheduled assessment Windows Event Tracing Spoofing VulnerabilityImproper authentication in Windows Event Tracing allows an authorized attacker to perform spoofing locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.29% · 19.8th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-84011 Scheduled assessment Windows SMB Client Security Feature Bypass VulnerabilityIncorrect authorization in Windows SMB Client allows an authorized attacker to bypass a security feature locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.29% · 19.8th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-88162 Scheduled assessment Windows Encrypting File System (EFS) Tampering VulnerabilityImproper authorization in Windows Encrypting File System (EFS) allows an authorized attacker to perform tampering locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.29% · 19.8th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-96311 Scheduled assessment Windows Network List Service Tampering VulnerabilityImproper authorization in Windows Network List Service allows an authorized attacker to perform tampering locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.29% · 19.8th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-96315 Scheduled assessment Windows Overlay Filter Tampering VulnerabilityMissing authorization in Windows Overlay Filter allows an authorized attacker to perform tampering locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.29% · 19.8th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-96316 Scheduled assessment Windows Routing and Remote Access Service (RRAS) Tampering VulnerabilityImproper access control in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to perform tampering locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.29% · 19.8th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-96855 Scheduled assessment Windows Modern Device Management (MDM) Tampering VulnerabilityImproper access control in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.29% · 19.8th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70075 Scheduled assessment Windows Virtualization-Based Security (VBS) Enclave Security Feature Bypass VulnerabilityTime-of-check time-of-use (toctou) race condition in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to bypass a security feature locally. | 4.4 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.28% · 18.7th percentileForecast date: 2026-10-14LOCAL · LOW complexity · HIGH privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83658 Scheduled assessment Windows Error Reporting Information Disclosure VulnerabilityImproper access control in Windows Error Reporting allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.28% · 18.6th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83764 Scheduled assessment Windows Clipboard User Service Information Disclosure VulnerabilityIncorrect authorization in Windows Clipboard User Service allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.28% · 18.6th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83865 Scheduled assessment Windows Internet (wininet.dll) Tampering VulnerabilityRelative path traversal in Windows Internet (wininet.dll) allows an authorized attacker to perform tampering locally. | 4.7 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.27% · 18.4th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70122 Scheduled assessment Windows Broadcast DVR User Service Elevation of Privilege VulnerabilityTime-of-check time-of-use (toctou) race condition in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. | 6.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.27% · 17.2th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83854 Scheduled assessment Windows Notification Information Disclosure VulnerabilityImproper access control in Windows Notification allows an authorized attacker to disclose information locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.26% · 17.0th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-88143 Scheduled assessment Windows Storage Spaces Controller Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally. | 6.7 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.26% · 16.0th percentileForecast date: 2026-10-14LOCAL · LOW complexity · HIGH privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-87709 Scheduled assessment Windows Host Guardian Service Tampering VulnerabilityImproper access control in Windows Host Guardian Service allows an authorized attacker to perform tampering locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.25% · 15.0th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-85333 Scheduled assessment Windows Performance Monitor Elevation of Privilege VulnerabilityConcurrent execution using shared resource with improper synchronization ('race condition') in Windows Performance Monitor allows an authorized attacker to elevate privileges locally. | 6.7 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.25% · 14.9th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · REQUIRED user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83656 Scheduled assessment Windows Modern Device Management (MDM) Tampering VulnerabilityMissing authentication for critical function in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally. | 4.7 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.24% · 13.3th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70195 Scheduled assessment Windows Ancillary Function Driver for WinSock Information Disclosure VulnerabilityUse after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to disclose information locally. | 4.7 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.23% · 13.2th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83798 Scheduled assessment Windows Update Stack Spoofing VulnerabilityImproper verification of cryptographic signature in Windows Update Stack allows an authorized attacker to perform spoofing locally. | 5.5 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.21% · 11.1th percentileForecast date: 2026-10-14LOCAL · LOW complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-70097 Scheduled assessment Windows Virtualization-Based Security (VBS) Enclave Spoofing VulnerabilityConcurrent execution using shared resource with improper synchronization ('race condition') in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to perform spoofing locally. | 5.6 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.20% · 9.4th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83697 Scheduled assessment Windows Modern Device Management (MDM) Tampering VulnerabilityTime-of-check time-of-use (toctou) race condition in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally. | 4.7 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.20% · 9.4th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-84009 Scheduled assessment Windows Projected File System Tampering VulnerabilityTime-of-check time-of-use (toctou) race condition in Windows Projected File System allows an authorized attacker to perform tampering locally. | 4.7 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.20% · 9.4th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-83885 Scheduled assessment Windows Virtualization-Based Security (VBS) Enclave Spoofing VulnerabilityInadequate encryption strength in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to perform spoofing locally. | 5.6 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.19% · 8.1th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |
CVE-2026-96853 Scheduled assessment Windows Win32 Kernel Subsystem Information Disclosure VulnerabilityTime-of-check time-of-use (toctou) race condition in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. | 4.7 · CVSS 3.1 · MediumSource: CNA | No confirmation recordedNo CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.None recordedNo exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds. | EPSS: 0.19% · 8.0th percentileForecast date: 2026-10-14LOCAL · HIGH complexity · LOW privileges · NONE user interaction | ScheduledMedium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.Awaiting fix. No fixed version is explicitly recorded in the structured CVE data. |