EUVD-2026-72968

Missing authentication for critical function in Windows DHCP Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-69412

Windows DHCP Server is vulnerable to a stack-based buffer overflow that allows an authorized attacker (low privileges, no user interaction) to achieve remote code execution over an adjacent network . The vulnerability is scored CVSS 3.1: 8.0 (HIGH) with high impact to confidentiality, integrity, ...

EUVD-2026-72966

Out-of-bounds read in Windows USB Driver allows an authorized attacker to disclose information locally...

CVE-2026-69418

Volume Manager Driver contains a heap-based buffer overflow that allows an authorized attacker to elevate privileges over a network. The vulnerability is rated CVSS 3.1: 8.0 (HIGH) with low attack complexity, low privileges required, and user interaction needed, yielding high impact to confidenti...

EUVD-2026-72961

Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally...

EUVD-2026-72962

Use after free in Audio Video Control Transport Protocol allows an authorized attacker to elevate privileges locally...

EUVD-2026-72960

Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information locally...

CVE-2026-69371

A heap-based buffer overflow in Windows Overlay Filter allows an authorized, low-privileged attacker to elevate privileges over a network , with user interaction required and high impact to confidentiality, integrity, and availability (CVSS 8.0 HIGH ). CISA's SSVC assessment indicates no known ex...

EUVD-2026-73233

Heap-based buffer overflow in Windows Storage Management Provider allows an authorized attacker to elevate privileges locally...

EUVD-2026-73231

Heap-based buffer overflow in Active Directory Domain Services allows an authorized attacker to elevate privileges locally...

CVE-2026-69367

An out-of-bounds read in Microsoft Standard XPS allows an authorized local attacker to disclose information. The CVSS v3.1 score is 5.5 (Medium) , with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N , indicating that exploitation requires local access, low privileges, no user interaction, and re...

CVE-2026-69338

CVE-2026-69338 is a use-after-free vulnerability in the Remote Desktop Gateway Service that allows an authorized (low-privilege) attacker to elevate privileges over a network. The CVSS 3.1 score is 7.1 (HIGH) , with high complexity, required user interaction, and high impact on confidentiality, i...

EUVD-2026-73223

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally...

CVE-2026-69366

CVE-2026-69366 is a use-after-free vulnerability in the Windows Kernel that allows an authorized attacker with low privileges to elevate privileges over a network, with user interaction required. The CVSS 3.1 score is 7.1 (HIGH) with a vector of AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H. No specific af...

CVE-2026-69337

A double free vulnerability in the Windows Registry allows an authorized attacker to elevate privileges over a network . The flaw requires low privileges and user interaction , with high attack complexity , but results in high impact to confidentiality, integrity, and availability (CVSS 3.1 score...

EUVD-2026-73221

Use after free in Windows Kernel allows an authorized attacker to elevate privileges over a network...

EUVD-2026-73222

Double free in Windows Registry allows an authorized attacker to elevate privileges over a network...

CVE-2026-69310

CVE-2026-69310 is a use-after-free vulnerability in Windows DNS that allows an authorized attacker to elevate privileges locally. The flaw resides in the DNS component and requires local access with low privileges and no user interaction, though the attack complexity is rated as high. The CVSS 3....

EUVD-2026-73220

Use after free in Windows DNS allows an authorized attacker to elevate privileges locally...

CVE-2026-69336

CVE-2026-69336 is a heap-based buffer overflow in Microsoft Standard XPS that allows an authorized attacker to achieve privilege elevation over a network. The vulnerability is rated CVSS 3.1: 7.1 (HIGH) with a vector of AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H, indicating that exploitation requires us...