CVE Vulnerability Database

Complete database of CVE vulnerabilities. Track critical security threats, exploits and patches. Updated daily from NVD NIST.

CVE-2026-85930

7.0

Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.

Microsoft
Details

CVE-2026-85928

9.8

Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network.

Microsoft
Details

CVE-2026-85927

7.8

Heap-based buffer overflow in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.

Microsoft
Details

CVE-2026-85926

8.1

Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.

Microsoft
Details

CVE-2026-85925

8.2

Improper restriction of communication channel to intended endpoints in Azure Key Vault allows an authorized attacker to elevate privileges over a network.

Microsoft
Details

CVE-2026-85922

7.4

Weak authentication in Azure Key Vault allows an unauthorized attacker to bypass a security feature over a network.

Microsoft
Details

CVE-2026-85920

7.0

Time-of-check time-of-use (toctou) race condition in Windows BitLocker allows an authorized attacker to elevate privileges locally.

Microsoft
Details

CVE-2026-85918

7.0

Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.

Microsoft
Details

CVE-2026-85916

5.5

Exposure of private personal information to an unauthorized actor in Azure Active Directory allows an unauthorized attacker to disclose information locally.

Microsoft
Details

CVE-2026-85915

7.8

Heap-based buffer overflow in Windows PCI Bus Driver allows an authorized attacker to elevate privileges locally.

Microsoft
Details
← 1007/12260 →