3996 matches found
CVE-2026-69504
CVE-2026-69504 is an out-of-bounds read in Windows NTFS that allows a local, authenticated attacker to disclose information . The vulnerability scores CVSS 3.1 5.5 (MEDIUM) with a local attack vector, low complexity, low privileges required, no user interaction, and high confidentiality impact bu...
CVE-2026-69500
CVE-2026-69500 is a use-after-free vulnerability in Windows Image Acquisition (WIA) that allows an authorized local attacker with low privileges to escalate privileges, resulting in high impact to confidentiality, integrity, and availability. The CVSS v3.1 base score is 7.0 (HIGH) with a local at...
CVE-2026-69505
An out-of-bounds read in the Windows NTFS component allows an authorized attacker (low privileges required) to elevate privileges over a network, with user interaction required . The CVSS 3.1 score is 8.0 (HIGH) , reflecting high impact on confidentiality, integrity, and availability. No known ex...
CVE-2026-69531
CVE-2026-69531 is a confused deputy vulnerability in Microsoft Windows Speech . An authorized attacker with low privileges can exploit an unintended proxy or intermediary relationship to perform local tampering (high integrity impact, no confidentiality or availability impact). The CVSS 3.1 base ...
EUVD-2026-72996
Use after free in Windows Wireless Networking allows an authorized attacker to elevate privileges locally...
EUVD-2026-72987
Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-69468
CVE-2026-69468 is a heap-based buffer overflow in the Windows Volume Manager Extension Driver that allows a locally authenticated attacker to elevate privileges . Microsoft rates the vulnerability CVSS 3.1: 7.0 (HIGH) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, meaning exploitation requ...
EUVD-2026-72986
Use after free in Windows Devices Human Interface allows an authorized attacker to elevate privileges locally...
CVE-2026-69472
CVE-2026-69472 is a use-after-free vulnerability in the Windows Devices Human Interface component that allows an authorized, local attacker with low privileges to achieve local privilege escalation . The CVSS v3.1 score is 7.0 (HIGH) , with high complexity and no user interaction required. The im...
EUVD-2026-72983
Use of uninitialized resource in Remote Desktop Client allows an authorized attacker to execute code over a network...
CVE-2026-69485
CVE-2026-69485 is a Remote Code Execution vulnerability in Microsoft Remote Desktop Client caused by use of an uninitialized resource . An authorized attacker with low privileges can exploit it remotely over a network without user interaction, achieving full compromise of confidentiality, integri...
EUVD-2026-72982
Out-of-bounds read in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
CVE-2026-69532
CVE-2026-69532 is an out-of-bounds read vulnerability in Windows NTFS that allows an authorized attacker to locally elevate privileges . The attack vector is local, complexity is low, and it requires low privileges with no user interaction. Microsoft rates it CVSS 3.1: 7.8 (HIGH) with high impact...
CVE-2026-69432
CVE-2026-69432 is a heap-based buffer overflow in the Volume Manager Driver (Microsoft) that allows an authorized attacker to elevate privileges locally . The vulnerability is rated CVSS 3.1 7.8 (High) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating local attack vector, low compl...
EUVD-2026-72975
Heap-based buffer overflow in Volume Manager Driver allows an authorized attacker to elevate privileges locally...
EUVD-2026-72972
Heap-based buffer overflow in Windows IKE Extension allows an authorized attacker to execute code over a network...
CVE-2026-69458
Windows BitLocker is affected by an out-of-bounds read vulnerability that allows an authorized attacker to elevate privileges over a network . Per the CNA, the attack requires low privileges (i.e., the attacker must already be authenticated) and user interaction . The CVSS 3.1 score is 8.0 (HIGH)...
EUVD-2026-72973
Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privileges over a network...