313240 matches found
EUVD-2026-99273
Exposure of sensitive system information to an unauthorized control sphere in Windows iSCSI allows an authorized attacker to disclose information locally...
EUVD-2026-99275
Out-of-bounds read in Windows iSCSI allows an authorized attacker to disclose information locally...
EUVD-2026-99279
Missing authentication for critical function in Windows Credential Guard allows an authorized attacker to perform spoofing locally...
EUVD-2026-99267
Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally...
EUVD-2026-99266
Incorrect authorization in Windows Hello allows an authorized attacker to bypass a security feature locally...
EUVD-2026-99203
Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally...
CVE-2026-69705
A critical out-of-bounds write vulnerability in Windows iSCSI allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is rated with a CVSS score of 9.80 , indicating a high severity where no prior authentication or user interaction is required. Systems c...
EUVD-2026-99269
Heap-based buffer overflow in Windows kernel32.dll allows an authorized attacker to elevate privileges locally...
CVE-2026-70280
A Windows Hello security feature bypass vulnerability exists due to incorrect authorization . This flaw allows an authorized attacker to bypass a security feature locally. The vulnerability is associated with CWE-863 and has a CVSS 3.1 base score of 4.4 (Medium) , indicating high confidentiality ...
EUVD-2026-99262
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...
EUVD-2026-99201
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally...
EUVD-2026-99200
Buffer over-read in Desktop Window Manager allows an authorized attacker to disclose information locally...
CVE-2026-70234
A buffer over-read vulnerability exists in the Desktop Window Manager component. This flaw allows an authorized attacker to perform a local information disclosure , potentially exposing sensitive data. No specific exploit details or in-the-wild exploitation information are provided in the documen...
CVE-2026-70218
The Windows StateRepository API is affected by an insufficient granularity of access control vulnerability. This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-1220 and CWE-285 . No specific exploitation details or patch version...
CVE-2026-70223
A Use after free vulnerability exists in the Windows Console Driver . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability has a CVSS 3.1 base score of 7.0 (High) , with impacts affecting confidentiality, integrity, and availability. Remediation is ava...
EUVD-2026-99202
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally...
EUVD-2026-99195
Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-70142
The Windows Update Service is affected by an Untrusted Search Path vulnerability (CWE-426 ). This flaw allows an authorized attacker to achieve local privilege escalation . The impact includes high levels of risk to confidentiality , integrity , and availability . Remediation is available via an ...
CVE-2026-70195
A use after free vulnerability exists in the Windows Ancillary Function Driver for WinSock . This flaw allows an authorized attacker to perform a local information disclosure . The vulnerability is associated with CWE-416 (Use After Free) and CWE-362 (Race Condition). While the vulnerability is c...