Inclusion of functionality from untrusted control sphere in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-87695 Microsoft US
Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.
EPSS 0.02 CVE-2026-87692 Microsoft US
Improper authorization in Skype for Business and Microsoft Lync allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-85873 Microsoft US
Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-83746 Microsoft US
Incorrect authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-77910 Microsoft US
Stack-based buffer overflow in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-70571 Microsoft US
Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-70297 Microsoft US
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.
EPSS 0.01 CVE-2026-70279 Microsoft US
Improper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-70264 Microsoft US
Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an authorized attacker to disclose information locally.
EPSS 0.01 CVE-2026-70261 Microsoft US
Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an authorized attacker to disclose information locally.
EPSS 0.01 CVE-2026-70260 Microsoft US
Use after free in Windows DHCP Client allows an unauthorized attacker to execute code over an adjacent network.
EPSS < 0.01 CVE-2026-70250 US
Incorrect authorization in Active Directory Domain Services allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-70229 US
Out-of-bounds read in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-70228 US
Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-70227 US
Improper resolution of path equivalence in Windows Backup Engine allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-70184 US
Untrusted pointer dereference in Windows Kernel allows an unauthorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-70111 US
Improper restriction of communication channel to intended endpoints in Azure Key Vault allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-85925 US
Weak authentication in Azure Key Vault allows an unauthorized attacker to bypass a security feature over a network.
EPSS 0.01 CVE-2026-85922 US
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-70160 US
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
EPSS 0.01 CVE-2026-70158 US
Improper authorization in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-70148 US
Heap-based buffer overflow in Windows Network File System allows an authorized attacker to execute code locally.
EPSS < 0.01 CVE-2026-70143 US
Time-of-check time-of-use (toctou) race condition in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-70122 US
Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to execute code locally.
EPSS < 0.01 CVE-2026-70112 US
Improper access control in Windows Projected File System allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-70084 US
Heap-based buffer overflow in Windows NetBIOS allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-70054 US
Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-69915 US
Untrusted pointer dereference in Windows NTFS allows an authorized attacker to execute code locally.
EPSS < 0.01 CVE-2026-69902 US
Buffer over-read in Windows GDI allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-69884 US
Heap-based buffer overflow in Microsoft Scripting Engine allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-88193 Microsoft US
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-88188 US
Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-88191 Microsoft US
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-88189 US
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-88194 US
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-88181 US
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-88182 Microsoft US
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-88180 US
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-88179 US
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-88177 US
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Deployment Services allows an unauthorized attacker to execute code over a network.
EPSS < 0.01 CVE-2026-88174 US
Double free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-88171 US
Double free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-88149 US
Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-88142 US
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-88141 US
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-88139 US
Improper authorization in Windows Portable Device Enumerator Service allows an authorized attacker to elevate privileges locally.
EPSS 0.01 CVE-2026-88133 US
Use after free in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-88152 US
Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-88121 US
Heap-based buffer overflow in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-88147 US
Integer overflow or wraparound in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-88118 US
Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-88128 US
Out-of-bounds read in Windows Server for NFS allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-88115 US
Improper access control in WebDAV allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-88135 US
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-88113 US
Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-88110 US
Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-88126 US
Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-88109 Microsoft US
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-88134 US
Use after free in Windows SMB Server allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-88127 US