CVE-2026-88093 is a heap-based buffer overflow vulnerability in the Desktop Window Manager component of Microsoft Windows 10 Version 1809 and related builds. It allows an authorized local attacker to elevate privileges. The vulnerability has a high severity score of 7.8 and affects multiple Windows 10 versions prior to specific fixed releases. An official fix is available from Microsoft.
CVE-2026-70143 is a heap-based buffer overflow vulnerability in the Windows Network File System component affecting multiple versions of Microsoft Windows 10, including version 1607. This flaw allows an authorized local attacker to execute arbitrary code with elevated privileges. The vulnerability has a high severity score of 7.8 and has been officially fixed by Microsoft in several updates.
CVE-2026-70112 is a heap-based buffer overflow vulnerability in the Windows Spaceport.sys driver affecting multiple builds of Windows 10 Version 1809 and related versions. This flaw allows an authorized local attacker to execute arbitrary code with elevated privileges. The vulnerability has a high severity score of 7.8 and has been officially fixed in specific Windows 10 builds.
CVE-2026-70054 is a heap-based buffer overflow vulnerability in the Windows NetBIOS component affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has a high severity score of 7.8 and has been officially fixed in several Windows 10 builds.
CVE-2026-88193 is a heap-based buffer overflow vulnerability in the Microsoft Scripting Engine affecting Windows 10 Version 1607 and related builds. It allows an authorized local attacker to elevate privileges. The vulnerability has a high severity score of 7.8 and has been officially fixed in multiple Windows 10 builds.
CVE-2026-88142 is a heap-based buffer overflow vulnerability in the Windows Background Intelligent Transfer Service (BITS) affecting multiple versions of Microsoft Windows 10, including version 1607 and later builds. This use-after-free flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability has a high severity rating with a CVSS score of 8.8. Official patches have been released by Microsoft to address this issue.
CVE-2026-88147 is a heap-based buffer overflow vulnerability in the Windows Secure Socket Tunneling Protocol (SSTP) component affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity rating with a CVSS score of 7.8. Official patches have been released by Microsoft to address this issue.
CVE-2026-88118 is an integer overflow or wraparound vulnerability in the Windows Background Intelligent Transfer Service (BITS) affecting multiple versions of Microsoft Windows 10. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has a high severity score of 7.8 and has been officially fixed in various Windows 10 builds.
CVE-2026-88128 is a heap-based buffer overflow vulnerability in the Windows DWM Core Library affecting Windows 10 Version 1809 and later builds. This flaw allows an authorized local attacker to elevate privileges on the affected system. Microsoft has released official fixes for all impacted versions. The vulnerability has a high severity rating with a CVSS score of 7.8. There are no known exploits in the wild at this time.
CVE-2026-88110 is a heap-based buffer overflow vulnerability in the Windows Graphics Kernel of Microsoft Windows 11 Version 24H2. This flaw allows an authorized local attacker to elevate privileges. The vulnerability affects specific builds prior to fixed versions released by Microsoft. A high-severity CVSS score of 7.0 has been assigned. Official patches are available and should be applied to mitigate the risk.
CVE-2026-87699 is a heap-based buffer overflow vulnerability in the Winlogon component of Microsoft Windows 10 Version 1607 and other related versions. This flaw allows an authorized local attacker to elevate their privileges. The vulnerability has been assigned a high severity score of 7.8 and affects multiple Windows 10 builds prior to specific fixed versions. Microsoft has released official fixes for all affected versions.
CVE-2026-85943 is a time-of-check time-of-use (TOCTOU) race condition vulnerability in the Reliable Multicast Transport Driver (RMCAST) component of Microsoft Windows 10 Version 1607 and related versions. It allows an authorized local attacker to elevate privileges. The vulnerability has a high severity rating with a CVSS score of 7.0. Official patches have been released to address this issue.
CVE-2026-69789 is a heap-based buffer overflow vulnerability in the Reliable Multicast Transport Driver (RMCAST) component of Microsoft Windows 10 Version 1607 and related builds. This flaw allows an unauthorized attacker to execute code remotely over an adjacent network. The vulnerability has a high severity score of 7.5 and affects multiple Windows 10 versions prior to their respective fixed releases. An official patch is available from Microsoft to remediate this issue.
CVE-2026-83935 is a critical heap-based buffer overflow vulnerability in Microsoft XML on Windows 10 Version 1607 and related builds. It allows an unauthorized attacker to execute arbitrary code remotely over a network. The vulnerability affects multiple Windows 10 builds prior to specific fixed versions. An official fix is available from Microsoft.
CVE-2026-83931 is a heap-based buffer overflow vulnerability in Windows Hyper-V on Microsoft Windows 11 version 23H2. It allows an authorized local attacker with low privileges to execute code with elevated impact. The vulnerability affects multiple builds of Windows 11 23H2 prior to their respective fixed versions. An official fix is available from Microsoft.
CVE-2026-85908 is a heap-based buffer overflow vulnerability affecting Microsoft Office 365 for Mac. It allows an authorized local attacker to elevate privileges by exploiting a flaw in the Windows Win32K graphics subsystem. The vulnerability has a high severity score of 7.8 and impacts confidentiality, integrity, and availability. Official patches have been released to address this issue.
CVE-2026-85905 is a heap-based buffer overflow vulnerability in the Windows UI Immersive Server component of Microsoft Windows 10 Version 1607 and related builds. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has a high severity score of 8.8 and affects multiple Windows 10 versions prior to specific fixed builds. Microsoft has released official patches to address this issue.
CVE-2026-85902 is a heap-based buffer overflow vulnerability in Windows Direct Composition affecting multiple builds of Windows 10 Version 1607 and later. An authorized local attacker can exploit this flaw to elevate privileges. Microsoft has released official fixes for all affected versions.
CVE-2026-85901 is a heap-based buffer overflow vulnerability in the Windows Win32K graphics component affecting Windows 10 Version 1607 and related builds. An authorized local attacker can exploit this flaw to elevate privileges. The vulnerability has been assigned a high severity score of 7.8 and has official patches available from Microsoft.
CVE-2026-83903 is a heap-based buffer overflow vulnerability in Windows Direct Composition on Microsoft Windows 11 Version 24H2. It allows a local authorized attacker to elevate privileges. The vulnerability affects specific builds prior to fixed versions. An official patch is available to address this issue.