Improper authorization in Windows Portable Device Enumerator Service allows an authorized attacker to elevate privileges locally.
EPSS 0.01 CVE-2026-88133 US
Use after free in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-88152 US
Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-88121 US
Heap-based buffer overflow in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-88147 US
Integer overflow or wraparound in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-88118 US
Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-88128 US
Out-of-bounds read in Windows Server for NFS allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-88115 US
Improper access control in WebDAV allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-88135 US
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-88113 US
Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-88110 US
Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-88126 US
Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-88109 Microsoft US
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-88134 US
Use after free in Windows SMB Server allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-88127 US
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-88105 US
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-88103 US
Null pointer dereference in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-88079 US
Integer overflow or wraparound in Windows Resource Management (MRM) allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-87702 US
Improper access control in Windows Host Guardian Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-88072 US
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-87715 US
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-87700 US
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-87704 US
Out-of-bounds read in Windows Remote Access Service Infrastructure allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-87698 US
Improper access control in Windows Host Guardian Service allows an authorized attacker to perform tampering locally.
EPSS < 0.01 CVE-2026-87709 US
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-87694 US
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-87693 US
Improper verification of source of a communication channel in Windows Hyper-V allows an unauthorized attacker to bypass a security feature over an adjacent network.
EPSS < 0.01 CVE-2026-87705 US
Null pointer dereference in Windows Installer allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-88076 US
Heap-based buffer overflow in Winlogon allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-87699 US
Time-of-check time-of-use (toctou) race condition in Reliable Multicast Transport Driver (RMCAST) allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-85943 US
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-85941 US
Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-85884 US
Use after free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-69798 US
Heap-based buffer overflow in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over an adjacent network.
EPSS < 0.01 CVE-2026-69789 US
Time-of-check time-of-use (toctou) race condition in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-85879 US
Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to execute code locally.
EPSS < 0.01 CVE-2026-85874 US
Time-of-check time-of-use (toctou) race condition in Linux Kernel allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-62840 Linux US
Heap-based buffer overflow in Microsoft XML allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-83935 Microsoft US
Stack-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-83934 US
Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-83933 US
Use after free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83930 US
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.
EPSS < 0.01 CVE-2026-83931 US
Use of uninitialized resource in Windows Kernel allows an authorized attacker to disclose information locally.
EPSS 0.01 CVE-2026-83925 US
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83924 US
Relative path traversal in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-83923 Microsoft US
Integer overflow or wraparound in Windows Kernel allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83918 US
Use after free in Windows Diagnostic Policy Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83915 US
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-85912 US
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83913 US
Use after free in Windows StateRepository API allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-85911 US
Buffer over-read in Windows StateRepository API allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-85910 US
Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-85909 US
Out-of-bounds write in RPC Runtime allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-83910 US
Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-85908 US
Release of invalid pointer or reference in RPC Runtime allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83908 US
Exposure of sensitive system information to an unauthorized control sphere in Windows Hello allows an authorized attacker to disclose information locally.
EPSS 0.01 CVE-2026-83907 US
Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-85906 US
Heap-based buffer overflow in Windows UI Immersive Server allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-85905 US
Exposure of sensitive system information to an unauthorized control sphere in Windows Shell allows an authorized attacker to disclose information locally.
EPSS 0.01 CVE-2026-83905 US
Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-83904 US