Continuous enterprise threat intelligence tracking active in-the-wild zero-days (CISA KEV), Microsoft Windows KB cumulative updates, MSRC security advisories, and CVE remediation.
Updated an acknowledgement. This is an informational change only.
Updated an acknowledgement. This is an informational change only.
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Google is aware that an exploit for CVE-2026-85046 exists in the wild.
Updated an acknowledgement. This is an informational change only.
Updated an acknowledgement. This is an informational change only.
Updated an acknowledgement. This is an informational change only.
Updated an acknowledgement. This is an informational change only.
Updated an acknowledgement. This is an informational change only.
Updated an acknowledgement. This is an informational change only.
Updated an acknowledgement. This is an informational change only.
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
Missing authorization in Entra ID allows an authorized attacker to elevate privileges over a network.
Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.
Use after free in Windows Modern Execution Server allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.
Double free in Windows Credential Guard allows an authorized attacker to elevate privileges locally.
Relative path traversal in Windows DNS allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in Storage Port Driver allows an authorized attacker to elevate privileges locally.
Use of uninitialized resource in Windows Task Scheduler allows an authorized attacker to disclose information locally.
Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally.
Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network.
Null pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to deny service over a network.
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to execute code locally.