THE LATEST / SECURITY & VULNERABILITIES
Threat News
Recent vulnerabilities and security advisories, straight from the source.
Every cached source, newest first. All entries link to the original publisher.
For severity filtering, choose All CVEs above. Scores are available for NVD entries when supplied by an assessor. A severity filter excludes unscored entries; choose “Unscored / not supplied” to see them. Severity describes technical impact, not exploitation or risk.
17,048 stories · Past 30 days · Newest first
Subscribe to this view · RSSSource updates
- NVDUp to date · Checked
- CISA · Known ExploitedUp to date · Checked
- CISA · IndustrialUp to date · Checked
- CERT-EUUp to date · Checked
Sources refresh hourly; NVD every two hours. Available stories remain readable while a source recovers.
- NVD
CVE-2026-85836 — Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
High · CVSS 3.1 7.8 · Assessor: [email protected]
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-85836Read original ↗ (opens in a new tab) - NVD
CVE-2026-85835 — Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information locally.
Medium · CVSS 3.1 5.5 · Assessor: [email protected]
Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information locally.
CVE-2026-85835Read original ↗ (opens in a new tab) - NVD
CVE-2026-85834 — Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
High · CVSS 3.1 7.0 · Assessor: [email protected]
Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
CVE-2026-85834Read original ↗ (opens in a new tab) - NVD
CVE-2026-85833 — Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.
High · CVSS 3.1 7.8 · Assessor: [email protected]
Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.
CVE-2026-85833Read original ↗ (opens in a new tab) - NVD
CVE-2026-85832 — Heap-based buffer overflow in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevat…
High · CVSS 3.1 7.8 · Assessor: [email protected]
Heap-based buffer overflow in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.
CVE-2026-85832Read original ↗ (opens in a new tab) - NVD
CVE-2026-85831 — Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to disclose information locally.
Medium · CVSS 3.1 5.5 · Assessor: [email protected]
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to disclose information locally.
CVE-2026-85831Read original ↗ (opens in a new tab) - NVD
CVE-2026-85830 — Out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locally.
Medium · CVSS 3.1 5.5 · Assessor: [email protected]
Out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locally.
CVE-2026-85830Read original ↗ (opens in a new tab) - NVD
CVE-2026-85829 — Double free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally.
High · CVSS 3.1 7.8 · Assessor: [email protected]
Double free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally.
CVE-2026-85829Read original ↗ (opens in a new tab) - NVD
CVE-2026-85828 — Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.
High · CVSS 3.1 7.0 · Assessor: [email protected]
Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.
CVE-2026-85828Read original ↗ (opens in a new tab) - NVD
CVE-2026-85827 — Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.
High · CVSS 3.1 7.0 · Assessor: [email protected]
Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.
CVE-2026-85827Read original ↗ (opens in a new tab) - NVD
CVE-2026-85826 — Out-of-bounds write in Windows Fast FAT Driver allows an authorized attacker to elevate privileges locally.
High · CVSS 3.1 7.0 · Assessor: [email protected]
Out-of-bounds write in Windows Fast FAT Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-85826Read original ↗ (opens in a new tab) - NVD
CVE-2026-85825 — Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privilege…
High · CVSS 3.1 7.0 · Assessor: [email protected]
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
CVE-2026-85825Read original ↗ (opens in a new tab) - NVD
CVE-2026-85824 — Use after free in Windows Composite Image File System allows an authorized attacker to elevate privileges locally.
High · CVSS 3.1 7.0 · Assessor: [email protected]
Use after free in Windows Composite Image File System allows an authorized attacker to elevate privileges locally.
CVE-2026-85824Read original ↗ (opens in a new tab) - NVD
CVE-2026-85823 — Use after free in Windows Composite Image File System allows an authorized attacker to elevate privileges locally.
High · CVSS 3.1 7.0 · Assessor: [email protected]
Use after free in Windows Composite Image File System allows an authorized attacker to elevate privileges locally.
CVE-2026-85823Read original ↗ (opens in a new tab) - NVD
CVE-2026-85822 — Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate privileges locally.
High · CVSS 3.1 7.8 · Assessor: [email protected]
Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate privileges locally.
CVE-2026-85822Read original ↗ (opens in a new tab) - NVD
CVE-2026-85821 — Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose info…
Medium · CVSS 3.1 6.5 · Assessor: [email protected]
Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally.
CVE-2026-85821Read original ↗ (opens in a new tab) - NVD
CVE-2026-85820 — Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privilege…
High · CVSS 3.1 7.8 · Assessor: [email protected]
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
CVE-2026-85820Read original ↗ (opens in a new tab) - NVD
CVE-2026-85818 — Improper verification of cryptographic signature in Windows Schannel allows an unauthorized attacker to perform spoofing ove…
Critical · CVSS 3.1 9.0 · Assessor: [email protected]
Improper verification of cryptographic signature in Windows Schannel allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-85818Read original ↗ (opens in a new tab) - NVD
CVE-2026-85817 — Reliance on untrusted inputs in a security decision in Windows PowerShell allows an unauthorized attacker to execute code ov…
High · CVSS 3.1 8.8 · Assessor: [email protected]
Reliance on untrusted inputs in a security decision in Windows PowerShell allows an unauthorized attacker to execute code over a network.
CVE-2026-85817Read original ↗ (opens in a new tab) - NVD
CVE-2026-85816 — Out-of-bounds read in Windows Wi-Fi Driver allows an authorized attacker to disclose information over an adjacent network.
Medium · CVSS 3.1 5.7 · Assessor: [email protected]
Out-of-bounds read in Windows Wi-Fi Driver allows an authorized attacker to disclose information over an adjacent network.
CVE-2026-85816Read original ↗ (opens in a new tab) - NVD
CVE-2026-85815 — Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally.
Medium · CVSS 3.1 5.5 · Assessor: [email protected]
Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally.
CVE-2026-85815Read original ↗ (opens in a new tab) - NVD
CVE-2026-85814 — Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a netw…
Critical · CVSS 3.1 9.8 · Assessor: [email protected]
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
CVE-2026-85814Read original ↗ (opens in a new tab) - NVD
CVE-2026-85812 — Files or directories accessible to external parties in Windows Bind Filter Driver allows an authorized attacker to disclose…
Medium · CVSS 3.1 5.5 · Assessor: [email protected]
Files or directories accessible to external parties in Windows Bind Filter Driver allows an authorized attacker to disclose information locally.
CVE-2026-85812Read original ↗ (opens in a new tab) - NVD
CVE-2026-85811 — Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over an adjacent network.
High · CVSS 3.1 7.5 · Assessor: [email protected]
Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over an adjacent network.
CVE-2026-85811Read original ↗ (opens in a new tab) - NVD
CVE-2026-85810 — Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally.
High · CVSS 3.1 7.0 · Assessor: [email protected]
Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally.
CVE-2026-85810Read original ↗ (opens in a new tab)
Summaries are excerpts from the publishers. The default Advisories view includes CISA KEV, CISA Industrial and CERT-EU. When several scores exist, PATCHBAY shows the newest valid CVSS version, then prefers a primary assessment, NVD, and a stable assessor ordering. Open the original for all assessments. CISA Known Exploited dates indicate catalog additions. This product uses data from the NVD API but is not endorsed or certified by the NVD.