CVE Vulnerability Database

Complete database of CVE vulnerabilities. Track critical security threats, exploits and patches. Updated daily from NVD NIST.

CVE-2026-85848

7.8

Heap-based buffer overflow in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.

Microsoft
Details

CVE-2026-85847

6.5

Out-of-bounds read in Windows Print Spooler Components allows an unauthorized attacker to disclose information over a network.

Microsoft
Details

CVE-2026-85846

7.0

Use after free in Windows Web Account Manager allows an authorized attacker to elevate privileges locally.

Microsoft
Details

CVE-2026-85843

7.8

Use of uninitialized resource in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.

Microsoft
Details

CVE-2026-85842

7.8

Use of externally-controlled format string in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.

Microsoft
Details

CVE-2026-85841

6.6

Use after free in Windows DHCP Server allows an authorized attacker to execute code over a network.

Microsoft
Details

CVE-2026-85840

6.5

Files or directories accessible to external parties in Windows Event Viewer allows an authorized attacker to disclose information over a network.

Microsoft
Details

CVE-2026-85837

7.8

Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally.

Microsoft
Details

CVE-2026-85836

7.8

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

Microsoft
Details

CVE-2026-85835

5.5

Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information locally.

Details
← 1005/12253 →