214705 matches found
CVE-2026-69378
Microsoft Exchange Server is affected by an uncontrolled recursion vulnerability that allows an unauthenticated, remote attacker to cause a denial of service over the network. The CVSS 3.1 score is 7.5 (HIGH) with low attack complexity, no privileges required, and no user interaction needed. No s...
EUVD-2026-73124
External control of file name or path in Microsoft Exchange Server allows an authorized attacker to execute code over a network...
EUVD-2026-73122
Out-of-bounds read in Windows Message Queuing Queue Manager allows an unauthorized attacker to deny service over a network...
CVE-2026-68887
CVE-2026-68887 is an out-of-bounds read in Windows Message Queuing Queue Manager that allows an unauthorized, network-based attacker to trigger a denial of service . The vulnerability requires no prior authentication or user interaction and carries a CVSS 3.1 base score of 7.5 (HIGH) , with impac...
CVE-2026-68844
CVE-2026-68844 is a heap-based buffer overflow in Windows Storage Spaces Controller that allows an authorized, locally authenticated attacker (with low privileges) to achieve remote code execution . The vulnerability carries a CVSS 3.1 base score of 7.8 (HIGH) with high impact on confidentiality,...
EUVD-2026-73118
Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally...
EUVD-2026-73116
Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally...
EUVD-2026-73115
Double free in Windows Credential Guard allows an authorized attacker to elevate privileges locally...
CVE-2026-72962
CVE-2026-72962 is a heap-based buffer overflow in the Windows USB Video Driver that allows an authorized attacker to achieve local privilege escalation . The Microsoft CVSS 3.1 score is 8.2 (HIGH) with vector AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H, indicating a local attack with low complexity, high...
CVE-2026-72958
CVE-2026-72958 is a double free vulnerability in Windows Credential Guard that allows an authorized attacker to elevate privileges locally . The flaw resides in the Credential Guard component of Windows, a security feature that isolates user credentials from the rest of the operating system. The ...
EUVD-2026-73114
Relative path traversal in Windows DNS allows an authorized attacker to elevate privileges locally...
EUVD-2026-73113
Use of uninitialized resource in Windows Task Scheduler allows an authorized attacker to disclose information locally...
CVE-2026-72945
CVE-2026-72945 is an information disclosure vulnerability in Windows Task Scheduler , caused by the use of an uninitialized resource . An authorized local attacker with low privileges can exploit this to disclose information, with high confidentiality impact and no integrity or availability impac...
CVE-2026-72948
CVE-2026-72948 is a relative path traversal vulnerability in Windows DNS that allows an authorized attacker to escalate privileges locally . Microsoft rates it MEDIUM (CVSS 6.7) requiring high privileges, while NVD assigns HIGH (7.8) with low privileges required. CISA's SSVC assesses no known exp...
EUVD-2026-73112
Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network...
EUVD-2026-73110
Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally...
EUVD-2026-73108
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally...
CVE-2026-72935
CVE-2026-72935 is an out-of-bounds read in the Windows NTFS driver that allows a local attacker with high privileges to escalate privileges . The Microsoft CVSS 3.1 score is 6.7 (Medium) , reflecting a local attack vector, low complexity, and high impact on confidentiality, integrity, and availab...
CVE-2026-71351
This vulnerability is a double free in Windows Routing and Remote Access Service (RRAS) that allows an authorized local attacker to elevate privileges . The CVSS 3.1 score is 7.0 (HIGH) , with a local attack vector, high complexity, and low privileges required, yielding high impact to confidentia...