Home / CVEs
CVE Database
Published vulnerabilities with severity, known exploitation and official sources.
CVE-2026-85934
High · 7.0
CWE-416 Oct 13, 2026
Windows AppX Deployment Service Elevation of Privilege Vulnerability
Use after free in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally.
CVE-2026-85933
High · 7.8
CWE-416 Oct 13, 2026
Windows Print Spooler Components Elevation of Privilege Vulnerability
Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
CVE-2026-85930
High · 7.0
CWE-416 Oct 13, 2026
Windows Image Acquisition Elevation of Privilege Vulnerability
Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.
CVE-2026-85926
High · 8.1
CWE-416 Oct 13, 2026
Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.
CVE-2026-85918
High · 7.0
CWE-416 Oct 13, 2026
Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability
Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.
CVE-2026-85914
High · 7.0
CWE-416 Oct 13, 2026
Windows Embedded Mode Service Elevation of Privilege Vulnerability
Use after free in Windows Embedded Mode Service allows an authorized attacker to elevate privileges locally.
CVE-2026-85911
High · 7.8
CWE-416 Oct 13, 2026
Windows StateRepository API Elevation of Privilege Vulnerability
Use after free in Windows StateRepository API allows an authorized attacker to elevate privileges locally.
CVE-2026-85906
High · 7.8
CWE-416 Oct 13, 2026
Windows Direct Composition Elevation of Privilege Vulnerability
Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
CVE-2026-85874
High · 7.8
CWE-416 Oct 13, 2026
Windows Message Queuing Queue Manager Remote Code Execution Vulnerability
Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to execute code locally.
CVE-2026-85872
High · 7.8
CWE-416 Oct 13, 2026
Windows Storage VSP Driver Elevation of Privilege Vulnerability
Use after free in Windows Storage VSP Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-85868
High · 7.0
CWE-416 Oct 13, 2026
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-85863
High · 7.8
CWE-416 Oct 13, 2026
Clipboard User Service Elevation of Privilege Vulnerability
Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.
CVE-2026-85861
High · 7.8
CWE-416 Oct 13, 2026
Clipboard User Service Elevation of Privilege Vulnerability
Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.
CVE-2026-85860
High · 7.8
CWE-416 Oct 13, 2026
Windows Message Queuing Queue Manager Elevation of Privilege Vulnerability
Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to elevate privileges locally.
CVE-2026-85855
High · 7.0
CWE-416 Oct 13, 2026
Windows DWM Core Library Elevation of Privilege Vulnerability
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
CVE-2026-85854
High · 7.0
CWE-416 Oct 13, 2026
Windows DWM Core Library Elevation of Privilege Vulnerability
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
CVE-2026-85851
High · 7.8
CWE-416 Oct 13, 2026
Windows SmartScreen Elevation of Privilege Vulnerability
Use after free in Windows SmartScreen allows an authorized attacker to elevate privileges locally.
CVE-2026-85846
High · 7.0
CWE-416 Oct 13, 2026
Web Account Manager Elevation of Privilege Vulnerability
Use after free in Windows Web Account Manager allows an authorized attacker to elevate privileges locally.
CVE-2026-85841
Medium · 6.6
CWE-416 Oct 13, 2026
Windows DHCP Server Remote Code Execution Vulnerability
Use after free in Windows DHCP Server allows an authorized attacker to execute code over a network.
CVE-2026-85836
High · 7.8
CWE-416 Oct 13, 2026
Windows Kernel Elevation of Privilege Vulnerability
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-85833
High · 7.8
CWE-416 Oct 13, 2026
Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability
Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.
CVE-2026-85823
High · 7.0
CWE-416 Oct 13, 2026
Windows Composite Image File System Elevation of Privilege Vulnerability
Use after free in Windows Composite Image File System allows an authorized attacker to elevate privileges locally.
CVE-2026-85811
High · 7.5
CWE-416 Oct 13, 2026
Network Policy Server (NPS) Remote Code Execution Vulnerability
Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over an adjacent network.
CVE-2026-85810
High · 7.0
CWE-416 Oct 13, 2026
Windows Telephony Server Elevation of Privilege Vulnerability
Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally.
CVE-2026-85804
High · 7.8
CWE-416 Oct 13, 2026
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.