312897 matches found
EUVD-2026-100275
Null pointer dereference in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to execute code locally...
EUVD-2026-100271
Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver csc.sys allows an authorized attacker to disclose information locally...
CVE-2026-88094
The Azure Storage Library is affected by a vulnerability involving the improper neutralization of special elements in output used by a downstream component (injection). This flaw allows an authorized attacker to elevate privileges over a network. The vulnerability has been addressed by Microsoft;...
CVE-2026-96945
An uncaught exception in Windows Failover Cluster allows an unauthorized attacker to perform a denial of service over a network. The vulnerability is associated with CWE-248 . While specific affected versions and remediation steps are not detailed in the provided documents, the issue carries a Hi...
CVE-2026-96931
A vulnerability exists in Windows NTFS involving an untrusted pointer dereference . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is assigned CWE-822 and has a CVSS 3.1 base score of 7.8 (High) . Official remediation is available via a patch fro...
CVE-2026-69675
An out-of-bounds read vulnerability exists in the Windows Network File System . This flaw allows an authorized attacker to perform a local information disclosure, potentially exposing sensitive data on the system. The vulnerability is associated with CWE-125 . No specific exploit code or in-the-w...
CVE-2026-96932
A race condition vulnerability exists in the Windows Embedded Mode Service due to improper synchronization during concurrent execution using a shared resource. This flaw allows an authorized attacker to perform a local privilege elevation . While the documents confirm the vulnerability type and i...
EUVD-2026-100261
Exposure of sensitive system information to an unauthorized control sphere in Windows ALPC allows an authorized attacker to disclose information locally...
EUVD-2026-100259
Missing authorization in DNS Server allows an authorized attacker to perform tampering locally...
EUVD-2026-100260
Out-of-bounds read in Windows Network File System allows an authorized attacker to disclose information locally...
CVE-2026-96926
A missing authorization vulnerability in the DNS Server allows an authorized attacker to perform tampering locally . The vulnerability is associated with CWE-862 . The CVSS 3.1 score is 5.5 (Medium) , with an attack vector of Local and a high impact on Integrity . Official remediation is availabl...
EUVD-2026-100258
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally...
CVE-2026-96925
An integer underflow (wrap or wraparound) vulnerability exists in Windows NTFS . This flaw allows an authorized attacker to perform a local information disclosure . The vulnerability is associated with CWE-191 . No specific exploit information or remediation details are provided in the documents.
CVE-2026-96927
An out-of-bounds read vulnerability exists in the Windows NTFS file system. This flaw allows an authorized attacker to perform a local information disclosure , potentially accessing data they are not permitted to view. The vulnerability is categorized under CWE-125 and has a CVSS 3.1 base score o...
EUVD-2026-100250
Integer underflow wrap or wraparound in Windows NTFS allows an authorized attacker to disclose information locally...
CVE-2026-96930
An out-of-bounds read vulnerability exists in the Windows Universal Disk Format File System Driver (UDFS) . This flaw allows an authorized attacker to perform a local information disclosure , potentially exposing sensitive data. No specific exploit details or patch versions are provided in the do...
CVE-2026-96911
The Microsoft Windows Search Component is vulnerable to an improper link resolution before file access (link following) vulnerability. This flaw allows an authorized attacker to achieve local privilege escalation . The CVSS 3.1 score is 7.8 (High), with high impacts on confidentiality, integrity,...
EUVD-2026-100247
Improper access control in Windows NTFS allows an authorized attacker to elevate privileges locally...
CVE-2026-96858
A missing authentication vulnerability in the Windows Security Account Manager allows an authorized attacker to perform tampering locally . The root cause is identified as CWE-306 . While no specific exploit code is provided, the vulnerability has an official fix available via Microsoft. Detailed...