CVE Vulnerability Database

Complete database of CVE vulnerabilities. Track critical security threats, exploits and patches. Updated daily from NVD NIST.

CVE-2026-85943

7.0

Time-of-check time-of-use (toctou) race condition in Reliable Multicast Transport Driver (RMCAST) allows an authorized attacker to elevate privileges locally.

Microsoft
Details

CVE-2026-85941

7.0

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally.

Microsoft
Details

CVE-2026-85939

5.3

Weak authentication in Windows Kernel allows an authorized attacker to bypass a security feature over a network.

Microsoft
Details

CVE-2026-85938

5.5

Improper access control in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally.

Microsoft
Details

CVE-2026-85936

8.8

Double free in Windows Shell allows an unauthorized attacker to execute code over a network.

Microsoft
Details

CVE-2026-85935

5.5

Buffer over-read in Windows USB Driver allows an authorized attacker to disclose information locally.

Microsoft
Details

CVE-2026-85934

7.0

Use after free in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally.

Microsoft
Details

CVE-2026-85933

7.8

Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.

Microsoft
Details

CVE-2026-85932

6.5

Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.

Microsoft
Details

CVE-2026-85931

8.8

Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network.

Microsoft
Details
← 1006/12260 →