Vendredi 16 octobre 2026
767 CVE
-
CVE-2026-96915 7.8 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Integer overflow or wraparound in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.
-
CVE-2026-85816 5.7 Moyenne
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Out-of-bounds read in Windows Wi-Fi Driver allows an authorized attacker to disclose information over an adjacent network.
-
CVE-2026-85817 8.8 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Reliance on untrusted inputs in a security decision in Windows PowerShell allows an unauthorized attacker to execute code over a network.
-
CVE-2026-85818 9.0 Critique
Microsoft Windows 11 Version 23H2 · Microsoft Windows 11 Version 24H2 · Microsoft Windows 11 Version 25H2 · Microsoft Windows 11 version 26H1
Improper verification of cryptographic signature in Windows Schannel allows an unauthorized attacker to perform spoofing over a network.
-
CVE-2026-85820 7.8 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
-
CVE-2026-85821 6.5 Moyenne
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally.
-
CVE-2026-85822 7.8 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate privileges locally.
-
CVE-2026-85823 7.0 Élevée
Microsoft Windows 11 Version 24H2 · Microsoft Windows 11 Version 25H2 · Microsoft Windows 11 version 26H1 · Microsoft Windows 11 Version 26H2
Use after free in Windows Composite Image File System allows an authorized attacker to elevate privileges locally.
-
CVE-2026-85824 7.0 Élevée
Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2 · Microsoft Windows 11 Version 23H2 · Microsoft Windows 11 Version 24H2
Use after free in Windows Composite Image File System allows an authorized attacker to elevate privileges locally.
-
CVE-2026-85825 7.0 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
-
CVE-2026-85826 7.0 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Out-of-bounds write in Windows Fast FAT Driver allows an authorized attacker to elevate privileges locally.
-
CVE-2026-85805 6.5 Moyenne
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Improperly implemented security check for standard in Windows PowerShell allows an unauthorized attacker to bypass a security feature over a network.
-
CVE-2026-85806 9.8 Critique
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Integer underflow (wrap or wraparound) in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.
-
CVE-2026-85807 7.8 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Integer overflow or wraparound in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.
-
CVE-2026-85808 7.5 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network.
-
CVE-2026-85809 9.8 Critique
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
-
CVE-2026-96920 7.8 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
-
CVE-2026-85810 7.0 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally.
-
CVE-2026-96921 5.5 Moyenne
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Access of resource using incompatible type ('type confusion') in Windows Message Queuing Queue Manager allows an authorized attacker to disclose information locally.
-
CVE-2026-96923 7.0 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Use after free in Windows Workstation Service allows an authorized attacker to elevate privileges locally.
-
CVE-2026-96924 9.8 Critique
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Untrusted pointer dereference in Windows OLE allows an unauthorized attacker to execute code over a network.
-
CVE-2026-85811 7.5 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over an adjacent network.
-
CVE-2026-96925 5.5 Moyenne
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Integer underflow (wrap or wraparound) in Windows NTFS allows an authorized attacker to disclose information locally.
-
CVE-2026-96927 5.5 Moyenne
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.
-
CVE-2026-85812 5.5 Moyenne
Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2 · Microsoft Windows 11 Version 23H2 · Microsoft Windows 11 Version 24H2
Files or directories accessible to external parties in Windows Bind Filter Driver allows an authorized attacker to disclose information locally.
-
CVE-2026-96928 7.8 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
-
CVE-2026-96929 7.8 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
-
CVE-2026-85814 9.8 Critique
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
-
CVE-2026-85815 5.5 Moyenne
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally.
-
CVE-2026-96939 7.0 Élevée
Microsoft Windows 11 Version 23H2 · Microsoft Windows 11 Version 24H2 · Microsoft Windows 11 Version 25H2 · Microsoft Windows 11 version 26H1
Time-of-check time-of-use (toctou) race condition in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.
-
CVE-2026-97788 7.5 Élevée
Microsoft .NET Framework 3.5 · Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 · Microsoft .NET Framework 3.5 AND 4.7.2 · Microsoft .NET Framework 3.5 AND 4.8
Observable discrepancy in Active Directory Federation Services (AD FS) allows an unauthorized attacker to disclose information over a network.
-
CVE-2026-97789 7.5 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
-
CVE-2026-96321 5.5 Moyenne
Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2 · Microsoft Windows 11 Version 23H2 · Microsoft Windows 11 Version 24H2
Out-of-bounds read in Remote Desktop Display Driver allows an authorized attacker to disclose information locally.
-
CVE-2026-96843 7.8 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.
-
CVE-2026-96844 8.0 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Integer underflow (wrap or wraparound) in Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges over an adjacent network.
-
CVE-2026-96846 5.5 Moyenne
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Out-of-bounds read in WebDAV allows an authorized attacker to disclose information locally.
-
CVE-2026-96847 7.8 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally.
-
CVE-2026-96850 5.5 Moyenne
Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2 · Microsoft Windows 11 Version 23H2
Use of uninitialized resource in Windows Modern Device Management (MDM) allows an authorized attacker to disclose information locally.
-
CVE-2026-96851 5.5 Moyenne
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Buffer over-read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.
-
CVE-2026-96852 7.0 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
-
CVE-2026-70023 7.8 Élevée
Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2 · Microsoft Windows 11 Version 23H2
Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
-
CVE-2026-108129 6.5 Moyenne
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
-
CVE-2026-108128 6.5 Moyenne
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
-
CVE-2026-108127 6.5 Moyenne
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
-
CVE-2026-70045 7.0 Élevée
Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2 · Microsoft Windows 11 Version 23H2
Use after free in Windows Work Folders allows an authorized attacker to elevate privileges locally.
-
CVE-2026-70044 5.5 Moyenne
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Out-of-bounds read in Microsoft Windows Media Foundation allows an unauthorized attacker to disclose information locally.
-
CVE-2026-70041 5.5 Moyenne
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Buffer over-read in Windows CD-ROM Driver allows an authorized attacker to disclose information locally.
-
CVE-2026-70038 8.1 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.
-
CVE-2026-70031 7.5 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to deny service over a network.
-
CVE-2026-70027 7.8 Élevée
Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2 · Microsoft Windows 11 Version 23H2 · Microsoft Windows 11 Version 24H2
Heap-based buffer overflow in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.
-
CVE-2026-70026 7.0 Élevée
Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2 · Microsoft Windows 11 Version 23H2
Use after free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
-
CVE-2026-70025 6.5 Moyenne
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Use after free in Windows Netlogon allows an authorized attacker to deny service over a network.
-
CVE-2026-70024 9.8 Critique
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Stack-based buffer overflow in Windows Internet Information Services allows an unauthorized attacker to execute code over a network.
-
CVE-2026-70017 5.5 Moyenne
Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2 · Microsoft Windows 11 Version 23H2
Access of resource using incompatible type ('type confusion') in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally.
-
CVE-2026-70015 7.8 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Use after free in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.
-
CVE-2026-70014 7.5 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Use after free in Windows Cryptographic Services allows an authorized attacker to execute code over a network.
-
CVE-2026-69959 7.8 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to execute code locally.
-
CVE-2026-69958 6.8 Moyenne
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Heap-based buffer overflow in Windows Overlay Filter allows an unauthorized attacker to execute code with a physical attack.
-
CVE-2026-69955 6.5 Moyenne
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information over a network.
-
CVE-2026-85371 8.1 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.
-
CVE-2026-69957 7.8 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Integer overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
-
CVE-2026-85365 7.0 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.
-
CVE-2026-69954 5.5 Moyenne
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information locally.
-
CVE-2026-69952 7.8 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
-
CVE-2026-69953 7.8 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
-
CVE-2026-96919 7.0 Élevée
Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2 · Microsoft Windows 11 Version 23H2
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
-
CVE-2026-96918 7.8 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Improper access control in Windows NTFS allows an authorized attacker to elevate privileges locally.
-
CVE-2026-85337 6.5 Moyenne
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.
-
CVE-2026-96917 8.8 Élevée
Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2 · Microsoft Windows 11 Version 23H2
Heap-based buffer overflow in Windows PCI Bus Driver allows an authorized attacker to elevate privileges locally.
-
CVE-2026-69950 7.8 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
-
CVE-2026-69949 7.8 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Heap-based buffer overflow in Windows Client for NFS allows an authorized attacker to elevate privileges locally.
-
CVE-2026-69947 6.8 Moyenne
Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2 · Microsoft Windows 11 Version 23H2 · Microsoft Windows 11 Version 24H2
Heap-based buffer overflow in Windows Overlay Filter allows an unauthorized attacker to execute code with a physical attack.
-
CVE-2026-69945 8.8 Élevée
Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2 · Microsoft Windows 11 Version 23H2 · Microsoft Windows 11 Version 24H2
Missing authorization in Windows AppX Deployment Extensions allows an authorized attacker to elevate privileges locally.
-
CVE-2026-96916 7.8 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
-
CVE-2026-85336 5.5 Moyenne
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally.
-
CVE-2026-69940 6.5 Moyenne
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information over a network.
-
CVE-2026-85372 7.0 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
-
CVE-2026-85373 7.8 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Heap-based buffer overflow in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.
-
CVE-2026-85374 5.5 Moyenne
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locally.
-
CVE-2026-85375 7.8 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.
-
CVE-2026-85376 7.8 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Weak authentication in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
-
CVE-2026-85377 7.8 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Access of resource using incompatible type ('type confusion') in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally.
-
CVE-2026-85791 7.0 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges locally.
-
CVE-2026-85792 9.8 Critique
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
-
CVE-2026-85793 5.5 Moyenne
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Exposure of sensitive system information to an unauthorized control sphere in Windows Sysmain Service allows an authorized attacker to disclose information locally.
-
CVE-2026-69935 7.0 Élevée
Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2 · Microsoft Windows 11 Version 23H2
Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.
-
CVE-2026-69931 7.0 Élevée
Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2 · Microsoft Windows 11 Version 23H2
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Storage allows an authorized attacker to elevate privileges locally.
-
CVE-2026-69926 7.8 Élevée
Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2 · Microsoft Windows 11 Version 23H2
Access of resource using incompatible type ('type confusion') in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
-
CVE-2026-85794 5.5 Moyenne
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to disclose information locally.
-
CVE-2026-85334 7.5 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Out-of-bounds read in Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose information over a network.
-
CVE-2026-85333 7.0 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Performance Monitor allows an authorized attacker to elevate privileges locally.
-
CVE-2026-85331 6.5 Moyenne
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information over a network.
-
CVE-2026-69918 7.8 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges locally.
-
CVE-2026-69916 7.8 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally.
-
CVE-2026-69915 7.0 Élevée
Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2 · Microsoft Windows 11 Version 23H2
Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally.
-
CVE-2026-69914 5.5 Moyenne
Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2 · Microsoft Windows 11 Version 23H2
Out-of-bounds read in Windows AppX Deployment Service allows an authorized attacker to disclose information locally.
-
CVE-2026-85795 7.8 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Use after free in Windows Text Services Framework allows an authorized attacker to elevate privileges locally.
-
CVE-2026-69913 8.1 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Use after free in Windows TCP/IP allows an unauthorized attacker to execute code over a network.
-
CVE-2026-85796 7.8 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Numeric truncation error in Windows Installer allows an authorized attacker to elevate privileges locally.
-
CVE-2026-69905 5.5 Moyenne
Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2 · Microsoft Windows 11 Version 23H2
Missing authorization in Windows AppX Deployment Service allows an authorized attacker to perform tampering locally.
-
CVE-2026-85797 7.5 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information over a network.
-
CVE-2026-85332 7.8 Élevée
Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2 · Microsoft Windows 11 Version 23H2
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
-
CVE-2026-69909 7.8 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Heap-based buffer overflow in Microsoft COM for Windows allows an authorized attacker to elevate privileges locally.
-
CVE-2026-85798 7.2 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network.
-
CVE-2026-85329 7.0 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Account allows an authorized attacker to elevate privileges locally.
-
CVE-2026-85328 7.0 Élevée
Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2 · Microsoft Windows 11 Version 23H2
Weak authentication in Windows Projected File System allows an authorized attacker to elevate privileges locally.
-
CVE-2026-85799 8.1 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.
-
CVE-2026-69902 6.7 Moyenne
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Untrusted pointer dereference in Windows NTFS allows an authorized attacker to execute code locally.
-
CVE-2026-85800 7.8 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
-
CVE-2026-85914 7.0 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Use after free in Windows Embedded Mode Service allows an authorized attacker to elevate privileges locally.
-
CVE-2026-85915 7.8 Élevée
Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2 · Microsoft Windows 11 Version 23H2
Heap-based buffer overflow in Windows PCI Bus Driver allows an authorized attacker to elevate privileges locally.
-
CVE-2026-85916 5.5 Moyenne
Microsoft Windows 11 Version 23H2 · Microsoft Windows 11 Version 24H2 · Microsoft Windows 11 Version 25H2 · Microsoft Windows 11 version 26H1
Exposure of private personal information to an unauthorized actor in Azure Active Directory allows an unauthorized attacker to disclose information locally.
-
CVE-2026-69898 7.8 Élevée
Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2 · Microsoft Windows 11 Version 23H2
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
-
CVE-2026-85918 7.0 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.
-
CVE-2026-85920 7.0 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Time-of-check time-of-use (toctou) race condition in Windows BitLocker allows an authorized attacker to elevate privileges locally.
-
CVE-2026-69886 9.8 Critique
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
-
CVE-2026-85802 7.0 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
-
CVE-2026-85803 7.0 Élevée
Microsoft Windows 11 Version 23H2 · Microsoft Windows 11 Version 24H2 · Microsoft Windows 11 Version 25H2 · Microsoft Windows 11 version 26H1
Use after free in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally.
-
CVE-2026-70021 7.0 Élevée
Microsoft Windows 11 Version 24H2 · Microsoft Windows 11 Version 25H2 · Microsoft Windows 11 version 26H1 · Microsoft Windows 11 Version 26H2
Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
-
CVE-2026-85804 7.8 Élevée
Microsoft Windows 11 Version 23H2 · Microsoft Windows 11 Version 24H2 · Microsoft Windows 11 Version 25H2 · Microsoft Windows 11 version 26H1
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
-
CVE-2026-69942 7.8 Élevée
Microsoft Windows 11 Version 23H2 · Microsoft Windows 11 Version 24H2 · Microsoft Windows 11 Version 25H2 · Microsoft Windows 11 version 26H1
Buffer over-read in Windows Overlay Filter allows an authorized attacker to execute code locally.
-
CVE-2026-69934 7.8 Élevée
Microsoft Windows 11 Version 23H2 · Microsoft Windows 11 Version 24H2 · Microsoft Windows 11 Version 25H2 · Microsoft Windows 11 version 26H1
Integer overflow or wraparound in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.
-
CVE-2026-69923 7.8 Élevée
Microsoft Windows 11 Version 24H2 · Microsoft Windows 11 Version 25H2 · Microsoft Windows 11 version 26H1 · Microsoft Windows 11 Version 26H2
Uncontrolled search path element in Windows AI allows an authorized attacker to elevate privileges locally.
-
CVE-2026-85926 8.1 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.
-
CVE-2026-69919 5.5 Moyenne
Microsoft Windows 11 Version 24H2 · Microsoft Windows 11 Version 25H2 · Microsoft Windows 11 version 26H1 · Microsoft Windows 11 Version 26H2
Out-of-bounds read in Windows Cryptographic Services allows an authorized attacker to disclose information locally.
-
CVE-2026-85327 7.8 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
-
CVE-2026-88182 7.8 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
-
CVE-2026-88188 7.8 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
-
CVE-2026-88189 7.8 Élevée
Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2 · Microsoft Windows 11 Version 23H2
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
-
CVE-2026-88191 7.8 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
-
CVE-2026-88194 7.8 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
-
CVE-2026-85322 7.5 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
-
CVE-2026-85902 7.8 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
-
CVE-2026-85904 7.0 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
-
CVE-2026-85901 7.8 Élevée
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
-
CVE-2026-85837 7.8 Élevée
Microsoft Windows 11 Version 24H2 · Microsoft Windows 11 Version 25H2 · Microsoft Windows 11 version 26H1 · Microsoft Windows 11 Version 26H2
Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally.
-
CVE-2026-85836 7.8 Élevée
Microsoft Windows 11 Version 24H2 · Microsoft Windows 11 Version 25H2 · Microsoft Windows 11 version 26H1 · Microsoft Windows 11 Version 26H2
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
-
CVE-2026-97844 6.5 Moyenne
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
-
CVE-2026-97843 6.5 Moyenne
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
-
CVE-2026-97842 6.5 Moyenne
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
-
CVE-2026-97841 6.5 Moyenne
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
-
CVE-2026-97840 6.5 Moyenne
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
-
CVE-2026-97839 6.5 Moyenne
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
-
CVE-2026-97838 6.5 Moyenne
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
-
CVE-2026-97837 6.5 Moyenne
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
-
CVE-2026-97836 6.5 Moyenne
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
-
CVE-2026-97835 6.5 Moyenne
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
-
CVE-2026-97834 6.5 Moyenne
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
-
CVE-2026-97833 6.5 Moyenne
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
-
CVE-2026-97832 6.5 Moyenne
Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.