EUVD-2026-73360

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

EUVD-2026-73357

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

CVE-2026-83988

CVE-2026-83988 is a heap-based buffer overflow in the Windows Biometric Service that allows an authorized local attacker to elevate privileges. The vulnerability carries a CVSS 3.1 score of 7.8 (High) with low attack complexity, low privileges required, and no user interaction, resulting in high ...

EUVD-2026-73350

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

CVE-2026-72937

This is an out-of-bounds read vulnerability in the Windows Storage Port Driver that allows an authorized local attacker to disclose information. The CVSS 3.1 score is 5.5 (MEDIUM) with a local attack vector, low complexity, and low privileges required, resulting in high confidentiality impact wit...

EUVD-2026-73348

Out-of-bounds read in Storage Port Driver allows an authorized attacker to disclose information locally...

EUVD-2026-73347

Use after free in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...

EUVD-2026-73339

Missing authorization in Windows Kernel allows an authorized attacker to elevate privileges locally...

EUVD-2026-73328

Improper neutralization of special elements used in an os command 'os command injection' in Azure HDInsights allows an authorized attacker to elevate privileges over a network...

CVE-2026-81355

A heap-based buffer overflow in the Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to execute code locally. The vulnerability is rated CVSS 3.1 7.5 (HIGH) with the vector AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H , indicating a local attack vector with high complexity, high privi...

EUVD-2026-73319

Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network...

CVE-2026-73029

CVE-2026-73029 is a buffer over-read vulnerability in Microsoft SQL Server that allows an authorized attacker (low privileges required) to disclose information over a network. The CVSS 3.1 base score is 6.5 (MEDIUM) with high confidentiality impact but no integrity or availability impact. CISA's ...

EUVD-2026-73318

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

CVE-2026-67636

CVE-2026-67636 is an out-of-bounds read vulnerability in Microsoft SQL Server that allows an authorized attacker to achieve remote code execution over a network. The vulnerability is classified with a CVSS 3.1 base score of 8.5 (HIGH) , reflecting a network-based attack requiring low privileges ,...

EUVD-2026-73314

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...

CVE-2026-67389

Microsoft SQL Server is affected by an out-of-bounds read vulnerability that allows an authorized attacker (low privileges required) to disclose information over a network . The CVSS v3.1 base score is 6.5 (Medium) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N, reflecting high confidential...

CVE-2026-67384

Microsoft SQL Server is affected by an integer overflow or wraparound vulnerability that allows an authorized attacker to execute code over a network, leading to a remote code execution scenario. The CVSS 3.1 score is 8.8 (HIGH) with a network attack vector, low complexity, and low privileges req...

CVE-2026-67378

CVE-2026-67378 affects Microsoft SQL Server and is caused by an untrusted pointer dereference . An authorized attacker with low privileges can execute code over the network. The CVSS 3.1 score is 8.5 (HIGH) with a scope change, reflecting high impact on confidentiality, integrity, and availabilit...

EUVD-2026-73294

Improper control of generation of code 'code injection' in Microsoft Dynamics 365 allows an authorized attacker to execute code over a network...

CVE-2026-77908

CVE-2026-77908 is a code injection vulnerability in Microsoft Dynamics 365 On-Premises that allows an authorized attacker (low privileges) to achieve remote code execution over a network. The flaw stems from improper control of code generation, and the CVSS 3.1 score is 8.8 (HIGH) with impacts ra...