TheWindowsUpdate.com

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-85360 Windows Kernel Elevation of Privilege Vulnerability→

Time-of-check time-of-use (toctou) race condition in Windows Kernel allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-69466 Windows Kernel Elevation of Privilege Vulnerability→

Missing authorization in Entra ID allows an authorized attacker to elevate privileges over a network. Continue reading CVE-2026-83941 Entra ID Elevation of Privilege Vulnerability→

Integer overflow or wraparound in Volume Manager Driver allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-69407 Volume Manager Driver Elevation of Privilege Vulnerability→

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. Continue reading CVE-2026-69360 Microsoft Office Word Remote Code Execution Vulnerability→

Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-69331 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability→

Missing authentication for critical function in Windows Power Dependency Coordinator allows an authorized attacker to perform tampering locally. Continue reading CVE-2026-69321 Windows Power Dependency Coordinator Tampering Vulnerability→

Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-69280 Windows Push Notifications Elevation of Privilege Vulnerability→