CVE-2026-85820 is a heap-based buffer overflow vulnerability in the Windows Universal Disk Format File System Driver (UDFS) affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows an authorized local attacker to elevate privileges by exploiting a use-after-free condition. The vulnerability has a high severity rating with a CVSS score of 7.8. Microsoft has released official fixes for all affected versions.
CVE-2026-85814 is a critical heap-based buffer overflow vulnerability in Microsoft Windows Media Foundation affecting multiple Windows 10 versions including Version 1607. This flaw allows an unauthorized attacker to execute arbitrary code remotely over a network. The vulnerability has a CVSS score of 9.8, indicating high impact on confidentiality, integrity, and availability. Microsoft has released official fixes for all affected versions.
CVE-2026-85809 is a critical heap-based buffer overflow vulnerability in Microsoft Windows 10 Version 1607's Routing and Remote Access Service (RRAS). This flaw allows remote attackers to execute arbitrary code on affected systems without requiring user interaction or privileges. The vulnerability affects multiple Windows 10 builds prior to specific fixed versions. Microsoft has released official patches to address this issue.
CVE-2026-85800 is a heap-based buffer overflow vulnerability in Windows Error Reporting affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has a high severity score of 7.8 and has been officially fixed in various Windows 10 builds. No known exploits are reported in the wild.
CVE-2026-85798 is a heap-based buffer overflow vulnerability in the Windows Distributed File System (DFS) component of Microsoft Windows 10 Version 1607 and related builds. This flaw allows an authorized attacker with network access to execute arbitrary code remotely. The vulnerability affects multiple Windows 10 builds prior to specific patched versions. A high-severity fix has been officially released by Microsoft.
CVE-2026-85791 is a heap-based buffer overflow vulnerability in the Windows Encrypting File System (EFS) affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity rating with a CVSS score of 7. A fix is available from Microsoft in specific updated versions.
CVE-2026-85373 is a heap-based buffer overflow vulnerability in the Windows Universal Plug and Play (UPnP) Device Host component affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has a high severity rating with a CVSS score of 7.8. Microsoft has released official fixes for all affected versions.
CVE-2026-85368 is a heap-based buffer overflow vulnerability in the Windows TCP/IP stack affecting multiple versions of Microsoft Windows 10, including Version 1607 and later builds. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has a high severity rating with a CVSS score of 7.8. Microsoft has released official fixes for all affected versions.
CVE-2026-85366 is a heap-based buffer overflow vulnerability in Windows Installer on Microsoft Windows 10 Version 1607 and related builds. It allows an authorized local attacker to elevate privileges. The vulnerability affects multiple Windows 10 versions prior to specific fixed releases. An official fix is available from Microsoft.
CVE-2026-85365 is a heap-based buffer overflow vulnerability in the Servicing Stack Updates component of Microsoft Windows 10 Version 1607 and related builds. This flaw allows an authorized local attacker with limited privileges to elevate their privileges on the affected system. The vulnerability has a high severity rating and affects multiple Windows 10 versions prior to their respective fixed releases. An official fix is available from Microsoft.
CVE-2026-85358 is a heap-based buffer overflow vulnerability in the Windows Installer component of Microsoft Windows 10 Version 1607 and related builds. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has been assigned a high severity rating with a CVSS score of 7.8. Microsoft has released official fixes for multiple affected Windows 10 builds to address this issue.
CVE-2026-85341 is a heap-based buffer overflow vulnerability in the Windows USB Video Driver affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has been assigned a high severity rating with a CVSS score of 7.8. Official patches have been released to address this issue in the affected Windows versions.
CVE-2026-85339 is a high-severity vulnerability in Microsoft Windows 10 Version 1607 and related builds involving an integer underflow in the Routing and Remote Access Service (RRAS). This flaw allows remote attackers to execute code on affected systems, potentially gaining unauthorized access. Multiple Windows 10 versions prior to specific fixed builds are impacted. An official fix is available from Microsoft.
CVE-2026-85327 is a heap-based buffer overflow vulnerability in the Windows Print Spooler components affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity rating with a CVSS score of 7.8. Official patches have been released to address this issue in the affected Windows versions.
CVE-2026-85318 is a heap-based buffer overflow vulnerability in the Servicing Stack Updates component of Microsoft Windows 10 Version 1607 and related builds. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has been assigned a high severity with a CVSS score of 7.8. Official fixes have been released by Microsoft for multiple affected versions.
CVE-2026-84015 is a critical heap-based buffer overflow vulnerability in the Remote Access Point-to-Point Protocol (PPP) EAP-TLS implementation on Microsoft Windows 10 Version 1607 and related builds. This flaw allows an unauthorized attacker to execute arbitrary code remotely over a network without user interaction. The vulnerability affects multiple Windows 10 builds prior to specific fixed versions. Microsoft has released official fixes for all affected versions.
CVE-2026-84014 is a heap-based buffer overflow vulnerability in the Windows Device Association Service affecting multiple builds of Windows 10 Version 1607 and related versions. An authorized local attacker can exploit this flaw to elevate privileges. The vulnerability has a high severity score and has been officially fixed in specific Windows builds.
CVE-2026-69886 is a critical heap-based buffer overflow vulnerability in the Windows Imaging Component of Microsoft Windows 10 Version 1607 and related builds. It allows an unauthorized attacker to execute code remotely over a network without user interaction. The vulnerability affects multiple Windows 10 versions prior to their respective fixed releases. Microsoft has issued official fixes for all affected versions.
CVE-2026-83932 is a heap-based buffer overflow vulnerability in Windows Group Policy affecting multiple versions of Microsoft Windows 10, including Version 1607 and later builds. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has been assigned a high severity score of 7.8 and has been officially fixed in specific Windows 10 builds.
CVE-2026-83920 is a heap-based buffer overflow vulnerability in the Microsoft Windows Search Component affecting Windows 10 Version 1607 and other specified versions. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has a high severity score of 7.8 and has been officially fixed in multiple Windows 10 builds. No known exploits are reported in the wild.