28 matches found
CVE-2026-72943
Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network...
CVE-2026-69834
Use after free in Windows ALPC allows an authorized attacker to elevate privileges locally...
CVE-2026-69615
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...
CVE-2026-69536
Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network...
CVE-2026-69474
Use after free in Windows Overlay Filter allows an authorized attacker to disclose information over a network...
CVE-2026-69406
Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally...
CVE-2026-67645
CVE-2026-67645 is an out-of-bounds read in Microsoft SQL Server that allows an authorized attacker to disclose information over a network . The CVSS 3.1 base score is 6.5 (MEDIUM) , reflecting low complexity, low privileges required, and high confidentiality impact with no integrity or availabili...
EUVD-2026-73694
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...
CVE-2026-69592
CVE-2026-69592 is a heap-based buffer overflow in the Windows Universal Disk Format File System (UDFS) driver that allows an authorized local attacker to escalate privileges . The vulnerability is rated CVSS 3.1: 7.8 (HIGH) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating local at...
CVE-2026-69569
CVE-2026-69569 is an untrusted pointer dereference in Windows Print Spooler Components that allows an authorized attacker to cause a denial of service over a network. The CVSS v3.1 score is 5.7 (Medium) , with high availability impact but no confidentiality or integrity impact. Exploitation requi...
CVE-2026-69536
CVE-2026-69536 is a use-after-free vulnerability in Windows Remote Desktop Services that allows an authorized attacker to achieve remote code execution over a network. The CVSS v3.1 score is 7.1 (HIGH) , with a vector of AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H, indicating that while exploitation requ...
CVE-2026-69416
CVE-2026-69416 is a buffer over-read in Windows DHCP Server that allows an authorized attacker with low privileges on an adjacent network to cause a denial of service , with high availability impact and no confidentiality or integrity impact (CVSS 3.1: 5.7 MEDIUM ). CISA assesses exploitation as ...
EUVD-2026-73389
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...
CVE-2026-67379
CVE-2026-67379 is a stack-based buffer overflow in Microsoft SQL Server that allows an authorized attacker (low privileges) to achieve remote code execution over the network. The CVSS 3.1 score is 8.5 (HIGH) with a scope change, reflecting high impact on confidentiality, integrity, and availabili...
CVE-2026-69273
CVE-2026-69273 is an improper access control vulnerability in Microsoft Office SharePoint that allows an authorized attacker to execute code over a network. The CVSS 3.1 base score is 8.8 (HIGH) , with a network attack vector, low complexity, and low required privileges, resulting in high impact ...
CVE-2026-72945
CVE-2026-72945 is an information disclosure vulnerability in Windows Task Scheduler , caused by the use of an uninitialized resource . An authorized local attacker with low privileges can exploit this to disclose information, with high confidentiality impact and no integrity or availability impac...
CVE-2026-69451
Windows Management Instrumentation (WMI) contains a use-after-free vulnerability that allows an authorized attacker to escalate privileges over a network. The CVSS 3.1 score is 7.1 (HIGH) with a vector of AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H, meaning exploitation requires network access , low priv...
EUVD-2026-72979
Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally...