All Critical High Medium Low
CVE Severity CVSS EPSS First Seen Flags Description
CVE-2026-85860 high 7.8 0.0024 2026-10-29 Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to e
CVE-2026-85858 high 7.8 0.0025 2026-10-29 Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to elev
CVE-2026-85855 high 7.0 0.0034 2026-10-29 Use after free in Windows DWM Core Library allows an authorized attacker to elevate privil
CVE-2026-85856 high 7.1 0.0036 2026-10-29 Heap-based buffer overflow in Windows Internet Connection Sharing (ICS) allows an authoriz
CVE-2026-85854 high 7.0 0.0025 2026-10-29 Use after free in Windows DWM Core Library allows an authorized attacker to elevate privil
CVE-2026-85853 high 7.0 0.0025 2026-10-29 Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate pr
CVE-2026-85850 high 7.8 0.0034 2026-10-29 Release of invalid pointer or reference in Windows Kernel allows an authorized attacker to
CVE-2026-85851 high 7.8 0.0033 2026-10-29 Use after free in Windows SmartScreen allows an authorized attacker to elevate privileges
CVE-2026-85848 high 7.8 0.0037 2026-10-29 Heap-based buffer overflow in Windows Background Intelligent Transfer Service (BITS) allow
CVE-2026-85849 high 7.8 0.0049 2026-10-29 Improper link resolution before file access ('link following') in Windows AppX Deployment
CVE-2026-85843 high 7.8 0.0037 2026-10-29 Use of uninitialized resource in Windows Background Intelligent Transfer Service (BITS) al
CVE-2026-85846 high 7.0 0.0020 2026-10-29 Use after free in Windows Web Account Manager allows an authorized attacker to elevate pri
CVE-2026-85842 high 7.8 0.0032 2026-10-29 Use of externally-controlled format string in Windows Image Acquisition allows an authoriz
CVE-2026-85836 high 7.8 0.0031 2026-10-29 Use after free in Windows Kernel allows an authorized attacker to elevate privileges local
CVE-2026-85837 high 7.8 0.0031 2026-10-29 Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges l
CVE-2026-85834 high 7.0 0.0025 2026-10-29 Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate priv
CVE-2026-85832 high 7.8 0.0037 2026-10-29 Heap-based buffer overflow in Windows Background Intelligent Transfer Service (BITS) allow
CVE-2026-85833 high 7.8 0.0032 2026-10-29 Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to
CVE-2026-85829 high 7.8 0.0032 2026-10-29 Double free in Windows Wired AutoConfig Service allows an authorized attacker to elevate p
CVE-2026-85827 high 7.0 0.0020 2026-10-29 Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges l
CVE-2026-85828 high 7.0 0.0025 2026-10-29 Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges l
CVE-2026-85825 high 7.0 0.0019 2026-10-29 Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an author
CVE-2026-85826 high 7.0 0.0025 2026-10-29 Out-of-bounds write in Windows Fast FAT Driver allows an authorized attacker to elevate pr
CVE-2026-85823 high 7.0 0.0025 2026-10-29 Use after free in Windows Composite Image File System allows an authorized attacker to ele
CVE-2026-85824 high 7.0 0.0019 2026-10-29 Use after free in Windows Composite Image File System allows an authorized attacker to ele
CVE-2026-85822 high 7.8 0.0031 2026-10-29 Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to e
CVE-2026-85820 high 7.8 0.0031 2026-10-29 Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an author
CVE-2026-85817 high 8.8 0.0072 2026-10-29 Reliance on untrusted inputs in a security decision in Windows PowerShell allows an unauth
CVE-2026-85810 high 7.0 0.0025 2026-10-29 Use after free in Windows Telephony Server allows an authorized attacker to elevate privil
CVE-2026-85811 high 7.5 0.0035 2026-10-29 Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute c
CVE-2026-85807 high 7.8 0.0031 2026-10-29 Integer overflow or wraparound in Windows USB Video Driver allows an authorized attacker t
CVE-2026-85808 high 7.5 0.0112 2026-10-29 Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthori
CVE-2026-85803 high 7.0 0.0025 2026-10-29 Use after free in Windows Camera Frame Server Monitor allows an authorized attacker to ele
CVE-2026-85804 high 7.8 0.0034 2026-10-29 Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate
CVE-2026-85802 high 7.0 0.0026 2026-10-29 Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate
CVE-2026-85799 high 8.1 0.0066 2026-10-29 Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute c
CVE-2026-85800 high 7.8 0.0031 2026-10-29 Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to ele
CVE-2026-85798 high 7.2 0.0087 2026-10-29 Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized a
CVE-2026-85795 high 7.8 0.0031 2026-10-29 Use after free in Windows Text Services Framework allows an authorized attacker to elevate
CVE-2026-85796 high 7.8 0.0031 2026-10-29 Numeric truncation error in Windows Installer allows an authorized attacker to elevate pri
CVE-2026-85791 high 7.0 0.0028 2026-10-29 Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized at
CVE-2026-85377 high 7.8 0.0031 2026-10-29 Access of resource using incompatible type ('type confusion') in Windows CD-ROM Driver all
CVE-2026-85375 high 7.8 0.0031 2026-10-29 Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized
CVE-2026-85376 high 7.8 0.0028 2026-10-29 Weak authentication in Windows Print Spooler Components allows an authorized attacker to e
CVE-2026-85372 high 7.0 0.0025 2026-10-29 Use after free in Windows Kernel allows an authorized attacker to elevate privileges local
CVE-2026-85373 high 7.8 0.0031 2026-10-29 Heap-based buffer overflow in Windows Universal Plug and Play (UPnP) Device Host allows an
CVE-2026-85370 high 7.0 0.0025 2026-10-29 Use after free in WebDAV allows an authorized attacker to elevate privileges locally.
CVE-2026-85371 high 8.1 0.0067 2026-10-29 Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute c
CVE-2026-85365 high 7.0 0.0020 2026-10-29 Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to ele
CVE-2026-85338 high 7.8 0.0032 2026-10-29 Out-of-bounds read in Microsoft Graphics Component allows an authorized attacker to elevat