227984 matches found
CVE-2026-71329
CVE-2026-71329 is a heap-based buffer overflow in Windows NTFS that allows an unauthorized attacker to execute code via a physical attack vector. The vulnerability requires low complexity and no privileges or user interaction, but demands physical access to the target system. The CVSS 3.1 base sc...
CVE-2026-70586
CVE-2026-70586 is a heap-based buffer overflow in Windows Paint that allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability requires user interaction (e.g., opening a crafted file) but no prior privileges. Microsoft rates it CVSS 8.8 (HIGH) with high im...
EUVD-2026-73084
Access of resource using incompatible type 'type confusion' in Windows Core Messaging allows an authorized attacker to elevate privileges locally...
EUVD-2026-73083
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally...
CVE-2026-70582
Windows Management Instrumentation (WMI) is affected by a race condition caused by concurrent execution using a shared resource with improper synchronization. An authorized local attacker can leverage this to elevate privileges . The CVSS 3.1 base score is 6.4 (MEDIUM) , reflecting a local attack...
EUVD-2026-73082
Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally...
CVE-2026-70564
A heap-based buffer overflow in Windows Print Spooler Components allows an authorized local attacker to elevate privileges. The flaw requires low privileges and no user interaction, with high impact to confidentiality, integrity, and availability (CVSS 7.8, HIGH ). A reference to the Microsoft Se...
CVE-2026-70562
CVE-2026-70562 is a double free vulnerability in the Windows Audio Service that allows a low-privilege (authorized) local attacker to elevate privileges . The CVSS 3.1 score is 7.0 (HIGH) with vector AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H , reflecting a local attack vector with high complexity. No e...
EUVD-2026-73081
Improper link resolution before file access 'link following' in Windows Shell allows an unauthorized attacker to perform spoofing over a network...
EUVD-2026-73079
Double free in Windows Audio Service allows an authorized attacker to elevate privileges locally...
CVE-2026-70351
CVE-2026-70351 is an integer overflow or wraparound in Microsoft WebP Image Extension that allows an unauthorized attacker to achieve remote code execution over a network. The CVSS 3.1 base score is 8.8 (High) , with low attack complexity and no privileges required, though user interaction is req...
EUVD-2026-73077
Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to elevate privileges locally...
CVE-2026-70342
CVE-2026-70342 affects the Windows Ancillary Function Driver for WinSock (AFD). The vulnerability is a use after free flaw that allows an unauthorized attacker to elevate privileges over a network. The CVSS 3.1 score is 8.1 (HIGH) , with a vector of network-based, high complexity, no privileges r...
EUVD-2026-73074
Incomplete list of disallowed inputs in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...
CVE-2026-70289
CVE-2026-70289 is a heap-based buffer overflow in the Windows Win32 Kernel Subsystem (Win32k) that allows an authorized (low-privilege) attacker to elevate privileges locally . The vulnerability is rated CVSS 7.8 (HIGH) with local attack vector, low complexity, and high impact to confidentiality,...
EUVD-2026-73075
Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally...
EUVD-2026-73070
Use after free in Windows Key Distribution Center allows an authorized attacker to execute code over a network...
EUVD-2026-73069
Use after free in Windows DNS allows an unauthorized attacker to execute code over a network...
CVE-2026-69770
CVE-2026-69770 is an information disclosure vulnerability in the Windows Spaceport.sys kernel driver, caused by the use of an uninitialized resource . An authorized attacker with local access and low privileges can exploit it to disclose sensitive information (high confidentiality impact, no inte...