268260 matches found
CVE-2026-69323
CVE-2026-69323 is a heap-based buffer overflow in Windows Biometric Service that allows an authorized attacker with low privileges to achieve local privilege escalation . The vulnerability requires no user interaction and carries a CVSS 3.1 score of 7.8 (HIGH) with high impact to confidentiality,...
CVE-2026-69334
CVE-2026-69334 is a heap-based buffer overflow in the Windows Volume Manager Extension Driver that allows an unauthorized attacker to execute code over a network. The CVSS 3.1 base score is 8.8 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating network-reachable remote code e...
EUVD-2026-73685
Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network...
EUVD-2026-73683
Stack-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally...
CVE-2026-69290
CVE-2026-69290 is a stack-based buffer overflow in Windows Storage Spaces Controller that allows an authorized, locally authenticated attacker to achieve local privilege escalation . The CVSS 3.1 score is 7.8 (HIGH) with vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating high impact to confid...
EUVD-2026-73684
Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network...
EUVD-2026-73679
Heap-based buffer overflow in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally...
CVE-2026-72967
A heap-based buffer overflow in the Windows Network Connection Broker component allows an authorized low-privilege attacker to escalate privileges locally. The vulnerability carries a CVSS 3.1 score of 7.8 (HIGH) with a local attack vector, low complexity, no user interaction, and high impact on ...
EUVD-2026-73675
Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network...
CVE-2026-72960
Windows Media Player is affected by a heap-based buffer overflow that allows an unauthorized, remote attacker to achieve code execution over a network . The attack requires user interaction (e.g., opening a crafted media file), but no prior privileges or elevated complexity. The assigned CVSS 3.1...
EUVD-2026-73671
Heap-based buffer overflow in Windows Deployment Services allows an authorized attacker to execute code locally...
CVE-2026-72957
CVE-2026-72957 is a heap-based buffer overflow in Windows Deployment Services that allows an authorized attacker to achieve local code execution. The vulnerability is rated CVSS 3.1 7.8 (HIGH) with the vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a low-privilege local attacker requires ...
CVE-2026-72941
CVE-2026-72941 is a heap-based buffer overflow in the Windows Biometric Service that allows an authorized attacker with local and low-privilege access to achieve local privilege escalation . The assigned CVSS 3.1 score is 7.8 (HIGH) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H , indicatin...
EUVD-2026-73669
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
CVE-2026-72953
CVE-2026-72953 is a heap-based buffer overflow in the Windows USB Driver that allows an authorized attacker to achieve local privilege escalation . The flaw is rated CVSS 3.1 7.8 (High) with vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating that low-privilege local access is sufficient to co...
EUVD-2026-73665
Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code over a network...
CVE-2026-72933
CVE-2026-72933 is a heap-based buffer overflow in the Microsoft WDAC (Windows Defender Application Control) OLE DB provider for SQL , allowing an unauthorized remote attacker to achieve code execution over a network . The vulnerability is rated CVSS 3.1 8.8 (HIGH) by Microsoft (CNA), with the vec...
CVE-2026-72927
CVE-2026-72927 is a heap-based buffer overflow in Winsock (the Windows Sockets implementation) that allows an authorized attacker to escalate privileges locally . The CVSS 3.1 score is 6.7 (MEDIUM) with vector AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H, indicating that high privileges are already requir...