CVE-2026-72926

CVE-2026-72926 is a use-after-free vulnerability in Windows Internet Connection Sharing (ICS) that allows an authorized attacker to achieve local privilege elevation . The CVSS v3.1 score is 7.0 (HIGH) with a local attack vector, high complexity, and low privileges required; impact is rated high ...

EUVD-2026-73098

Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code with a physical attack...

CVE-2026-71350

CVE-2026-71350 is a heap-based buffer overflow in the Windows Spaceport.sys driver that allows an unauthorized attacker to execute code on the target system. The vulnerability requires a physical attack vector (CVSS 3.1: AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H , base score 6.8 – MEDIUM ), meaning the...

EUVD-2026-73097

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-71340

CVE-2026-71340 is a Use After Free vulnerability in Windows File History Service that allows an authorized attacker to locally elevate privileges . The flaw requires low privileges , high attack complexity , and no user interaction , yet yields high impact across confidentiality, integrity, and a...

EUVD-2026-73096

Use after free in Windows File History Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-73091

Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally...

CVE-2026-71333

CVE-2026-71333 is a use-after-free vulnerability in Windows Remote Access Connection Manager that allows an authorized local attacker with low privileges to escalate privileges. The attack requires high complexity, no user interaction, and has a CVSS 3.1 score of 7.0 (HIGH) with high impact on co...

EUVD-2026-73088

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code with a physical attack...

CVE-2026-71329

CVE-2026-71329 is a heap-based buffer overflow in Windows NTFS that allows an unauthorized attacker to execute code via a physical attack vector. The vulnerability requires low complexity and no privileges or user interaction, but demands physical access to the target system. The CVSS 3.1 base sc...

CVE-2026-70586

CVE-2026-70586 is a heap-based buffer overflow in Windows Paint that allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability requires user interaction (e.g., opening a crafted file) but no prior privileges. Microsoft rates it CVSS 8.8 (HIGH) with high im...

EUVD-2026-73084

Access of resource using incompatible type 'type confusion' in Windows Core Messaging allows an authorized attacker to elevate privileges locally...

EUVD-2026-73083

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally...

CVE-2026-70582

Windows Management Instrumentation (WMI) is affected by a race condition caused by concurrent execution using a shared resource with improper synchronization. An authorized local attacker can leverage this to elevate privileges . The CVSS 3.1 base score is 6.4 (MEDIUM) , reflecting a local attack...

EUVD-2026-73082

Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally...

CVE-2026-70564

A heap-based buffer overflow in Windows Print Spooler Components allows an authorized local attacker to elevate privileges. The flaw requires low privileges and no user interaction, with high impact to confidentiality, integrity, and availability (CVSS 7.8, HIGH ). A reference to the Microsoft Se...

CVE-2026-70562

CVE-2026-70562 is a double free vulnerability in the Windows Audio Service that allows a low-privilege (authorized) local attacker to elevate privileges . The CVSS 3.1 score is 7.0 (HIGH) with vector AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H , reflecting a local attack vector with high complexity. No e...

EUVD-2026-73081

Improper link resolution before file access 'link following' in Windows Shell allows an unauthorized attacker to perform spoofing over a network...

EUVD-2026-73079

Double free in Windows Audio Service allows an authorized attacker to elevate privileges locally...

CVE-2026-70351

CVE-2026-70351 is an integer overflow or wraparound in Microsoft WebP Image Extension that allows an unauthorized attacker to achieve remote code execution over a network. The CVSS 3.1 base score is 8.8 (High) , with low attack complexity and no privileges required, though user interaction is req...