EUVD-2026-73682

Double free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally...

EUVD-2026-73681

Use after free in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally...

CVE-2026-69309

CVE-2026-69309 is a local privilege escalation vulnerability in Windows Print Spooler Components , caused by a double free defect. An attacker with low local privileges and high attack complexity can exploit it without user interaction to achieve full compromise of confidentiality, integrity, and...

EUVD-2026-73679

Heap-based buffer overflow in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally...

EUVD-2026-73678

Missing authorization in Windows Remote Access Connection Manager allows an authorized attacker to perform tampering locally...

CVE-2026-72966

CVE-2026-72966 affects Windows Remote Access Connection Manager , where a missing authorization check allows an already-authorized (low-privilege) local attacker to perform tampering without user interaction. The impact is rated HIGH for integrity with no effect on confidentiality or availability...

EUVD-2026-73676

Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges locally...

EUVD-2026-73677

Missing authentication for critical function in Windows Internet Connection Sharing ICS allows an authorized attacker to perform tampering locally...

CVE-2026-72954

CVE-2026-72954 is a use-after-free vulnerability in Windows Deployment Services (Microsoft) that allows an authorized attacker (low privileges) to achieve remote code execution over a network. The CVSS 3.1 score is 7.5 (HIGH) with vector AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, reflecting high attack...

CVE-2026-72957

CVE-2026-72957 is a heap-based buffer overflow in Windows Deployment Services that allows an authorized attacker to achieve local code execution. The vulnerability is rated CVSS 3.1 7.8 (HIGH) with the vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a low-privilege local attacker requires ...

EUVD-2026-73671

Heap-based buffer overflow in Windows Deployment Services allows an authorized attacker to execute code locally...

CVE-2026-72941

CVE-2026-72941 is a heap-based buffer overflow in the Windows Biometric Service that allows an authorized attacker with local and low-privilege access to achieve local privilege escalation . The assigned CVSS 3.1 score is 7.8 (HIGH) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H , indicatin...

EUVD-2026-73669

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-73667

Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to execute code locally...

CVE-2026-72928

A use-after-free vulnerability in Windows DNS Server allows an authorized (low-privilege) attacker to execute remote code over a network . The CVSS 3.1 score is 7.5 (High) , reflecting a network attack vector with high complexity but high impact to confidentiality, integrity, and availability. Th...

EUVD-2026-73662

Use after free in Windows DNS allows an authorized attacker to execute code over a network...

CVE-2026-72931

CVE-2026-72931 is a denial-of-service vulnerability in Windows Secure Socket Tunneling Protocol (SSTP) , caused by a missing release of a resource after its effective lifetime . An authorized local attacker with low privileges can trigger the condition, resulting in a high availability impact but...

CVE-2026-72927

CVE-2026-72927 is a heap-based buffer overflow in Winsock (the Windows Sockets implementation) that allows an authorized attacker to escalate privileges locally . The CVSS 3.1 score is 6.7 (MEDIUM) with vector AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H, indicating that high privileges are already requir...

EUVD-2026-73660

Integer underflow wrap or wraparound in Windows Remote Access Connection Manager allows an authorized attacker to execute code over a network...

CVE-2026-71352

CVE-2026-71352 is an integer underflow (wrap or wraparound) in Windows Remote Access Connection Manager that allows an authorized attacker to achieve remote code execution over a network. The vulnerability requires low privileges and no user interaction, with a CVSS 3.1 base score of 8.8 (HIGH) r...