Index
Search
Search the public record. Drafts and scheduled notes are not included.
news
Windows 11 Health Service flaw CVE-2026-85884 allows local privilege escalation
Microsoft fixed CVE-2026-85884 on 13 October 2026. A missing authentication check in the Windows Health and Optimized Experiences Service lets a local attacker gain privileges on Windows 11. CVSS 3.1 7.8 (Important, scored by Microsoft). Third-party PoC claimed. Not in CISA KEV.
Published 5h ago
news
Splunk Enterprise Patroni flaw CVE-2026-76268 allows unauthenticated RCE
Splunk fixed CVE-2026-76268 on 7 October 2026. Unauthenticated network access to the Patroni REST API on search head cluster members can lead to command execution. CVSS 3.1 9.8 (Critical, scored by Splunk). Fixed in 10.2.7 and 10.4.3. A third-party PoC is claimed. Not in CISA KEV.
Published 6h ago
CVE-2026-85884
Windows Health and Optimized Experiences Service elevation of privilege
LPE
Published 2d ago
CVE-2026-76268
Splunk Enterprise Patroni REST API missing authentication RCE
RCE
Published 8d ago