3994 matches found
CVE-2026-69351
Windows Universal Plug and Play (UPnP) Device Host contains an information disclosure vulnerability that allows a locally authenticated attacker with low privileges to expose private personal information without user interaction. The CVSS v3.1 score is 5.5 (Medium) with a high confidentiality imp...
CVE-2026-69324
CVE-2026-69324 is a local privilege elevation vulnerability in Windows Performance Monitor caused by type confusion (access of resource using incompatible type). An authorized attacker with low privileges can exploit this locally without user interaction to gain high impact on confidentiality, in...
EUVD-2026-73454
Double free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a network...
EUVD-2026-73452
Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information locally...
EUVD-2026-73451
Out-of-bounds read in Remote Desktop Client allows an authorized attacker to disclose information over a network...
CVE-2026-69318
Windows Imaging Component contains an out-of-bounds read flaw that allows a locally authenticated attacker to disclose information. The vulnerability carries a CVSS 3.1 score of 5.5 (MEDIUM) , with a local attack vector, low complexity, low privileges required, no user interaction, and a High imp...
CVE-2026-69308
Microsoft Standard XPS is affected by an out-of-bounds read that allows an authorized, local attacker to disclose information . The vulnerability requires low privileges and no user interaction, with a CVSS 3.1 score of 5.5 (MEDIUM) (C:H/I:N/A:N). CISA's SSVC assessment rates exploitation as none...
EUVD-2026-73446
Exposure of sensitive system information to an unauthorized control sphere in Windows License Manager allows an authorized attacker to disclose information locally...
CVE-2026-69303
CVE-2026-69303 is an out-of-bounds read in the Push Message Routing Service (Microsoft), rated CVSS 5.5 (MEDIUM) . An authorized attacker with low privileges can exploit this locally to disclose information, with no integrity or availability impact. CISA's SSVC assessment indicates no known explo...
CVE-2026-69313
Microsoft Standard XPS is affected by a heap-based buffer overflow that allows an authorized attacker to elevate privileges over a network. The CVSS 3.1 score is 7.1 (HIGH) , with a network attack vector, high complexity, low privileges required, and user interaction required, leading to high imp...
CVE-2026-69301
A stack-based buffer overflow in the Windows Win32K component allows an authorized attacker to achieve privilege elevation over a network. The CVSS 3.1 score is 8.0 (HIGH) , with low attack complexity, low privileges required, and user interaction required. Exploitation details are not yet public...
CVE-2026-69300
CVE-2026-69300 is a use-after-free vulnerability in the Windows Push Notifications component that allows an authorized attacker to achieve local privilege escalation . The CVSS v3.1 score is 7.0 (HIGH) with vector AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a high-impact but locally exploitab...
EUVD-2026-73441
Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally...
EUVD-2026-73437
Storing passwords in a recoverable format in Windows DHCP Server allows an authorized attacker to disclose information over a network...
EUVD-2026-73436
Heap-based buffer overflow in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally...
EUVD-2026-73432
Heap-based buffer overflow in Windows DCOM Server allows an authorized attacker to elevate privileges locally...
CVE-2026-69284
CVE-2026-69284 is a heap-based buffer overflow in Windows DCOM Server that allows an authorized attacker to elevate privileges locally . The CVSS 3.1 score is 7.8 (HIGH) with a vector of CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a local attack with low complexity and low privileges...
CVE-2026-69305
CVE-2026-69305 is a use-after-free vulnerability in the Microsoft Windows Search Component that allows an authorized attacker to elevate privileges over a network. The CVSS 3.1 base score is 7.1 (HIGH) , with a vector of AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H , indicating that exploitation requires ...