CVE-2026-70262 is a heap-based buffer overflow vulnerability in the WebDAV component of Microsoft Windows 10 Version 1607 and related builds. This flaw allows an unauthorized attacker to elevate privileges over a network. The vulnerability has a high severity with a CVSS score of 8.8. Official patches have been released to address this issue in multiple Windows 10 builds.
CVE-2026-70238 is a heap-based buffer overflow vulnerability in the Windows Storage Spaces Controller affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has a high severity score of 7.8 and has been officially fixed in specific Windows updates.
CVE-2026-70210 is a heap-based buffer overflow vulnerability in Windows OLE DB affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows an unauthorized attacker to elevate privileges over a network. The vulnerability has a high severity score of 8.8 and has been officially fixed in several Windows updates.
CVE-2026-70052 is an integer overflow or wraparound vulnerability in Windows PowerShell on Microsoft Windows 11 version 23H2. This flaw allows an authorized attacker with local access to execute code on the affected system. The vulnerability affects multiple builds of Windows 11 23H2 prior to specific fixed versions. A high-severity CVSS score of 7.8 reflects the potential for complete confidentiality, integrity, and availability compromise. Microsoft has released official fixes for all affected versions.
CVE-2026-70048 is a heap-based buffer overflow vulnerability in the Windows Resilient File System (ReFS) component of Microsoft Windows 10 Version 1607 and later updates. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has a high severity score of 7.8 and has been officially fixed in multiple Windows 10 updates.
CVE-2026-88168 is a heap-based buffer overflow vulnerability in the Windows Bind Filter Driver on Microsoft Windows 10 Version 1809 and related builds. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has a high severity score of 7.8 and has been officially fixed in multiple Windows 10 versions.
CVE-2026-88157 is a heap-based buffer overflow vulnerability in OpenSSH for Windows on Microsoft Windows 10 Version 1809 and related builds. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability has a high severity with a CVSS score of 8.8. Microsoft has released official fixes for multiple affected Windows 10 versions.
CVE-2026-85927 is a heap-based buffer overflow vulnerability in the Windows Universal Plug and Play (UPnP) Device Host component of Microsoft Windows 10 Version 1607 and related builds. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity rating with a CVSS score of 7.8. Microsoft has released official fixes for affected versions.
CVE-2026-85915 is a heap-based buffer overflow vulnerability in the Windows PCI Bus Driver affecting Windows 10 Version 1809 and later builds up to specified patched versions. It allows an authorized local attacker to elevate privileges. The vulnerability has a high severity score of 7.8 and has been officially fixed by Microsoft in multiple Windows 10 builds.
CVE-2026-85871 is a heap-based buffer overflow vulnerability in Microsoft Windows 10 Kernel-Mode Drivers. It allows an authorized local attacker to elevate privileges by exploiting the flaw. The vulnerability affects multiple Windows 10 versions, including Version 1607 and later builds prior to specific fixed releases. A patch is available from Microsoft to address this issue.
CVE-2026-85869 is a heap-based buffer overflow vulnerability in the Microsoft Windows Search Component affecting Windows 10 Version 1607 and related builds. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has been assigned a high severity score of 7.8 and has been officially fixed in multiple Windows 10 updates.
CVE-2026-85870 is a heap-based buffer overflow vulnerability in the Windows Common Log File System Driver affecting multiple builds of Microsoft Windows 10, including Version 1607. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has a high severity rating and has been officially fixed in specific Windows 10 builds.
CVE-2026-85856 is a heap-based buffer overflow vulnerability in Windows Internet Connection Sharing (ICS) affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows an authorized attacker on an adjacent network to execute arbitrary code. The vulnerability has a high severity score and has been officially fixed in specific Windows 10 builds.
CVE-2026-85848 is a heap-based buffer overflow vulnerability in the Windows Background Intelligent Transfer Service (BITS) affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity rating with a CVSS score of 7.8. Official fixes have been released by Microsoft for all affected versions.
CVE-2026-85834 is a heap-based buffer overflow vulnerability in the Windows TCP/IP stack affecting Windows 10 Version 1607 and related builds. It allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity score of 7.0 and has been officially fixed in multiple Windows 10 builds.
CVE-2026-85832 is a heap-based buffer overflow vulnerability in the Windows Background Intelligent Transfer Service (BITS) affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has been assigned a high severity rating with a CVSS score of 7.8. Official patches have been released by Microsoft to address this issue.
CVE-2026-85831 is a heap-based buffer overflow vulnerability in the Windows Biometric Service on Microsoft Windows 10 Version 1809 and related builds. This flaw allows an authorized local attacker to disclose sensitive information. The vulnerability has a medium severity rating with a CVSS score of 5.5. Official patches have been released to address this issue in multiple Windows 10 versions.
CVE-2026-85828 is a heap-based buffer overflow vulnerability in the WebDAV component of Microsoft Windows 10 Version 1607 and related builds. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has been assigned a high severity rating with a CVSS score of 7. A patch is available and has been officially released by Microsoft to address this issue.
CVE-2026-85827 is a heap-based buffer overflow vulnerability in the WebDAV component of Microsoft Windows 10 Version 1607 and related builds. It allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity score and has official patches available from Microsoft.
CVE-2026-85822 is a heap-based buffer overflow vulnerability in the exFAT file system component of Microsoft Windows 10 Version 1607 and related builds. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has a high severity rating with a CVSS score of 7.8. Microsoft has released official fixes for multiple affected Windows 10 versions.