88394 matches found
EUVD-2026-73509
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over a network...
CVE-2026-69462
CVE-2026-69462 is a heap-based buffer overflow in Windows Error Reporting that allows an authorized attacker to elevate privileges over a network . The vulnerability carries a CVSS 3.1 score of 8.0 (HIGH) with the vector AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H , meaning exploitation requires low priv...
CVE-2026-69433
A heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to achieve local privilege escalation . The vulnerability is rated CVSS 3.1: 7.8 (HIGH) with a local attack vector, low complexity, and low privileges required, yielding high impact on confidentiality, integrity...
EUVD-2026-73503
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
EUVD-2026-73439
Generation of error message containing sensitive information in Microsoft COM for Windows allows an authorized attacker to disclose information locally...
CVE-2026-69294
Microsoft COM for Windows is affected by an information disclosure vulnerability caused by the generation of an error message containing sensitive information. An authorized local attacker can exploit this to disclose information, with no user interaction required. The CVSS 3.1 score is 5.5 (Medi...
CVE-2026-68894
CVE-2026-68894 is a heap-based buffer overflow in Windows Error Reporting that allows an authorized attacker to elevate privileges over a network . The vulnerability is rated CVSS 8.0 (High) with the vector AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H , meaning it requires low privileges and user interact...
EUVD-2026-73424
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over a network...
CVE-2026-83996
Windows Error Reporting in Windows is affected by a heap-based buffer overflow that allows an authorized attacker to elevate privileges locally . The assigned CVSS 3.1 score is 8.8 (HIGH) with a scope change (vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H), indicating that successful exploi...
EUVD-2026-73360
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
SUSE CVE-2026-84969
A memory-handling error in the BSON-to-JSON conversion helpers of the MongoDB C Driver can write a small number of bytes past the end of a heap buffer when a binary field is encoded and the output is cut short at a caller-configured length limit. A party who supplies the document content, with no...
EUVD-2026-73302
Generation of error message containing sensitive information in SQL Server allows an authorized attacker to disclose information over a network...
CVE-2026-67383
Microsoft SQL Server is affected by an information disclosure vulnerability caused by the generation of error messages that contain sensitive information. An authorized attacker (low privileges required) can exploit this over a network to disclose sensitive data, with high confidentiality impact ...
EUVD-2026-73049
Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
CVE-2026-69896
CVE-2026-69896 is a use after free vulnerability in Windows Error Reporting that allows an authorized, low-privilege attacker to perform a local privilege escalation . The attack requires local access, involves high complexity, and does not require user interaction. The CVSS 3.1 base score is 7.0...
CVE-2026-69684
Windows Error Reporting in Windows contains an information disclosure vulnerability caused by the generation of an error message that includes sensitive information . An authorized local attacker with low privileges can exploit this to disclose sensitive data. The CVSS 3.1 score is 5.5 (Medium) ,...
EUVD-2026-73030
Generation of error message containing sensitive information in Windows Error Reporting allows an authorized attacker to disclose information locally...
EUVD-2026-73018
Generation of error message containing sensitive information in Windows Print Spooler Components allows an authorized attacker to disclose information over a network...
CVE-2026-69552
CVE-2026-69552 affects Windows Print Spooler Components , where a flaw in the generation of error messages containing sensitive information allows an authorized attacker to disclose information over a network. The attack requires low privileges and user interaction , with a CVSS 3.1 score of 5.7 ...