| Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. CVE-2026-85360 | Severity high |
| Out-of-bounds read in Windows Key Distribution Center allows an unauthorized attacker to deny service over a network. CVE-2026-84001 | Severity high |
| Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to execute code locally. CVE-2026-84000 | Severity high |
| Improper link resolution before file access ('link following') in Windows Resilient File System (ReFS) Deduplication Service allows an… CVE-2026-83999 | Severity high |
| Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network. CVE-2026-83998 | Severity high |
| Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network. CVE-2026-83997 | Severity high |
| Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally. CVE-2026-83996 | Severity high |
| Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally. CVE-2026-83995 | Severity high |
| Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network. CVE-2026-83992 | Severity high |
| Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally. CVE-2026-83990 | Severity high |
| Out-of-bounds read in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to deny service over a network. CVE-2026-83989 | Severity high |
| Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. CVE-2026-83988 | Severity high |
| Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. CVE-2026-83987 | Severity high |
| Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. CVE-2026-83985 | Severity high |
| Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. CVE-2026-83983 | Severity high |
| Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. CVE-2026-83982 | Severity high |
| Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. CVE-2026-83981 | Severity high |
| Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. CVE-2026-83980 | Severity high |
| Use after free in Windows Biometric Service allows an authorized attacker to elevate privileges locally. CVE-2026-83979 | Severity high |
| Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. CVE-2026-83978 | Severity high |
| Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. CVE-2026-83977 | Severity high |
| Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. CVE-2026-83976 | Severity high |
| Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. CVE-2026-83974 | Severity high |
| Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. CVE-2026-83973 | Severity high |
| Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. CVE-2026-83972 | Severity high |
| Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. CVE-2026-83971 | Severity high |
| Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. CVE-2026-83970 | Severity high |
| Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. CVE-2026-83969 | Severity high |
| Use after free in Windows Biometric Service allows an authorized attacker to elevate privileges locally. CVE-2026-83968 | Severity high |
| Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. CVE-2026-83967 | Severity high |
| Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. CVE-2026-83955 | Severity high |
| Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. CVE-2026-83954 | Severity high |
| Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally. CVE-2026-83952 | Severity high |
| Missing authorization in Windows Kernel allows an authorized attacker to elevate privileges locally. CVE-2026-83942 | Severity high |
| Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally. CVE-2026-83940 | Severity high |
| Out-of-bounds read in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to disclose information locally. CVE-2026-83501 | Severity medium |
| Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges… CVE-2026-83498 | Severity high |
| Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to execute code locally. CVE-2026-81355 | Severity high |
| Out-of-bounds read in Windows Remote Desktop Services allows an authorized attacker to elevate privileges over a network. CVE-2026-80096 | Severity high |
| Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. CVE-2026-80093 | Severity high |
| Untrusted pointer dereference in Windows Hyper-V allows an authorized attacker to execute code locally. CVE-2026-80083 | Severity high |
| Use after free in Windows DNS allows an unauthorized attacker to deny service over a network. CVE-2026-78523 | Severity high |
| Insertion of sensitive information into externally-accessible file or directory in Windows Storage allows an authorized attacker to… CVE-2026-78516 | Severity medium |
| Out-of-bounds read in Windows CD-ROM Driver allows an unauthorized attacker to disclose information with a physical attack. CVE-2026-78508 | Severity medium |
| Use after free in Windows Security Health Service allows an authorized attacker to elevate privileges locally. CVE-2026-78457 | Severity high |
| Integer underflow (wrap or wraparound) in Microsoft Windows SCSI Class System File allows an unauthorized attacker to disclose information… CVE-2026-78453 | Severity medium |
| Out-of-bounds read in Microsoft Windows SCSI Class System File allows an unauthorized attacker to disclose information with a physical… CVE-2026-78452 | Severity medium |
| Untrusted pointer dereference in Microsoft Windows SCSI Class System File allows an unauthorized attacker to elevate privileges with a… CVE-2026-78451 | Severity medium |
| Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over a network. CVE-2026-78450 | Severity high |
| Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over a network. CVE-2026-78449 | Severity high |
| Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. CVE-2026-78448 | Severity high |
| Use after free in Windows Distributed File System (DFS) allows an authorized attacker to deny service over a network. CVE-2026-78446 | Severity medium |
| Use after free in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to execute code over a network. CVE-2026-78445 | Severity critical |
| Untrusted pointer dereference in Windows Failover Cluster allows an unauthorized attacker to execute code over a network. CVE-2026-78444 | Severity high |
| Use after free in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally. CVE-2026-77905 | Severity high |
| Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally. CVE-2026-77904 | Severity high |
| Integer overflow or wraparound in Remote Desktop Client allows an unauthorized attacker to deny service over a network. CVE-2026-77896 | Severity high |
| Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network. CVE-2026-77895 | Severity high |
| Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized… CVE-2026-77894 | Severity high |
| Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network. CVE-2026-77893 | Severity high |
| No cwe for this issue in Windows Boot Manager allows an unauthorized attacker to elevate privileges with a physical attack. CVE-2026-77892 | Severity medium |
| Out-of-bounds read in Windows DHCP Server allows an authorized attacker to execute code locally. CVE-2026-77891 | Severity medium |
| Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a… CVE-2026-77890 | Severity high |
| Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a… CVE-2026-77889 | Severity high |
| Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a… CVE-2026-77888 | Severity high |
| Out-of-bounds read in Windows DHCP Server allows an authorized attacker to execute code locally. CVE-2026-77887 | Severity medium |
| Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network. CVE-2026-77886 | Severity high |
| Use after free in DNS Server allows an unauthorized attacker to execute code over a network. CVE-2026-77505 | Severity high |
| Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network. CVE-2026-77504 | Severity high |
| Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally. CVE-2026-77503 | Severity high |
| Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network. CVE-2026-77502 | Severity high |
| Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network. CVE-2026-77501 | Severity high |
| Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a… CVE-2026-77499 | Severity high |
| Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network. CVE-2026-77498 | Severity high |
| Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network. CVE-2026-77495 | Severity high |
| Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a… CVE-2026-77494 | Severity high |
| Double free in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network. CVE-2026-77493 | Severity critical |
| Out-of-bounds read in Storage Port Driver allows an authorized attacker to disclose information locally. CVE-2026-77492 | Severity medium |
| Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information locally. CVE-2026-77491 | Severity medium |
| Null pointer dereference in Windows Biometric Service allows an authorized attacker to elevate privileges locally. CVE-2026-77489 | Severity high |
| Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. CVE-2026-73026 | Severity high |
| Weak authentication in Windows iSCSI allows an unauthorized attacker to bypass a security feature over a network. CVE-2026-73025 | Severity critical |
| Heap-based buffer overflow in Windows Services for NFS ONCRPC XDR Driver allows an authorized attacker to elevate privileges locally. CVE-2026-73024 | Severity high |
| Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network. CVE-2026-73023 | Severity high |
| Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally. CVE-2026-73022 | Severity high |
| Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. CVE-2026-73021 | Severity high |
| Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. CVE-2026-73020 | Severity high |
| Improper resolution of path equivalence in Windows URL Moniker allows an unauthorized attacker to bypass a security feature over a network. CVE-2026-73019 | Severity medium |
| Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network. CVE-2026-73018 | Severity high |
| Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to execute code locally. CVE-2026-73017 | Severity high |
| Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network. CVE-2026-73016 | Severity high |
| Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. CVE-2026-73015 | Severity high |
| Missing authorization in Data Sharing Service Client allows an authorized attacker to elevate privileges locally. CVE-2026-73014 | Severity high |
| Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network. CVE-2026-73013 | Severity high |
| Heap-based buffer overflow in Windows Management Services allows an authorized attacker to elevate privileges over a network. CVE-2026-73012 | Severity high |
| Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. CVE-2026-73011 | Severity high |
| Use after free in Windows Failover Cluster allows an unauthorized attacker to execute code over a network. CVE-2026-73010 | Severity critical |
| Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network. CVE-2026-73009 | Severity critical |
| Exposure of private personal information to an unauthorized actor in Windows Biometric Service allows an authorized attacker to disclose… CVE-2026-73008 | Severity medium |
| Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. CVE-2026-73007 | Severity high |
Zetlyn