EUVD-2026-73772

Heap-based buffer overflow in Windows Management Services allows an authorized attacker to elevate privileges over a network...

EUVD-2026-73771

Missing authentication for critical function in Windows Autopilot allows an authorized attacker to perform tampering locally...

EUVD-2026-73770

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-73769

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-73767

Use after free in Windows Authentication Methods allows an authorized attacker to elevate privileges locally...

CVE-2026-73008

CVE-2026-73008 is an information disclosure vulnerability in Windows Biometric Service . It allows a locally authenticated attacker with low privileges to expose private personal information to an unauthorized actor, resulting in high confidentiality impact with no integrity or availability impac...

EUVD-2026-73763

Use after free in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges locally...

CVE-2026-73022

CVE-2026-73022 is a use-after-free vulnerability in Windows Modern Device Management (MDM) that allows an authorized attacker to escalate privileges locally . The CVSS 3.1 score is 7.0 (HIGH) with a local attack vector, high complexity, low privileges required, and no user interaction, resulting ...

CVE-2026-73003

CVE-2026-73003 is a Use After Free vulnerability in Windows Modern Device Management (MDM) . An authorized attacker can exploit it to achieve local privilege elevation . The CVSS v3.1 base score is 7.0 (HIGH) with vector AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, reflecting high impact across confident...

EUVD-2026-73762

Use after free in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges locally...

CVE-2026-73000

CVE-2026-73000 is a heap-based buffer overflow in the Windows Biometric Service that allows an authorized local attacker to elevate privileges . The CVSS 3.1 score is 7.8 (HIGH) with a vector of local attack, low complexity, low privileges required, no user interaction, and high impact to confide...

EUVD-2026-73757

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

CVE-2026-73020

CVE-2026-73020 is a heap-based buffer overflow in the Windows Biometric Service that allows an authorized attacker to elevate privileges locally . The vulnerability requires low privileges and no user interaction, with a CVSS 3.1 score of 7.8 (HIGH) and high impact to confidentiality, integrity, ...

EUVD-2026-73752

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-73750

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

CVE-2026-72991

CVE-2026-72991 is a heap-based buffer overflow in the Windows Biometric Service that allows a locally authenticated attacker with low privileges to escalate to higher privileges. The vulnerability scores 7.8 (HIGH) under CVSS v3.1, with all three impact dimensions rated High. Attack requires loca...

CVE-2026-72992

A heap-based buffer overflow in the Windows Biometric Service allows an authorized local attacker to elevate privileges, resulting in high impact to confidentiality, integrity, and availability. The vulnerability carries a CVSS 3.1 score of 7.8 (HIGH) with a local attack vector, low complexity, a...

CVE-2026-72988

CVE-2026-72988 is a heap-based buffer overflow in Windows Biometric Service that allows an authorized local attacker to elevate privileges. The CVSS 3.1 base score is 7.8 (HIGH) with vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating that exploitation requires low privileges and no user inter...

EUVD-2026-73740

Missing authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

CVE-2026-69465

Microsoft Office SharePoint is affected by a missing authorization flaw that allows an authorized attacker to execute code over a network (remote code execution). The Microsoft CNA rates the severity as CVSS 3.1 8.8 (HIGH) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H , meaning exploitatio...