6218 matches found
CVE-2026-69485
CVE-2026-69485 is a Remote Code Execution vulnerability in Microsoft Remote Desktop Client caused by use of an uninitialized resource . An authorized attacker with low privileges can exploit it remotely over a network without user interaction, achieving full compromise of confidentiality, integri...
EUVD-2026-72982
Out-of-bounds read in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
CVE-2026-69451
Windows Management Instrumentation (WMI) contains a use-after-free vulnerability that allows an authorized attacker to escalate privileges over a network. The CVSS 3.1 score is 7.1 (HIGH) with a vector of AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H, meaning exploitation requires network access , low priv...
CVE-2026-69532
CVE-2026-69532 is an out-of-bounds read vulnerability in Windows NTFS that allows an authorized attacker to locally elevate privileges . The attack vector is local, complexity is low, and it requires low privileges with no user interaction. Microsoft rates it CVSS 3.1: 7.8 (HIGH) with high impact...
EUVD-2026-72979
Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally...
CVE-2026-69432
CVE-2026-69432 is a heap-based buffer overflow in the Volume Manager Driver (Microsoft) that allows an authorized attacker to elevate privileges locally . The vulnerability is rated CVSS 3.1 7.8 (High) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating local attack vector, low compl...
EUVD-2026-72975
Heap-based buffer overflow in Volume Manager Driver allows an authorized attacker to elevate privileges locally...
EUVD-2026-72972
Heap-based buffer overflow in Windows IKE Extension allows an authorized attacker to execute code over a network...
CVE-2026-69458
Windows BitLocker is affected by an out-of-bounds read vulnerability that allows an authorized attacker to elevate privileges over a network . Per the CNA, the attack requires low privileges (i.e., the attacker must already be authenticated) and user interaction . The CVSS 3.1 score is 8.0 (HIGH)...
EUVD-2026-72973
Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privileges over a network...
CVE-2026-69429
CVE-2026-69429 is a heap-based buffer overflow in the Windows Internet Key Exchange (IKE) Protocol Extension that allows an authorized attacker to achieve remote code execution over a network. The CVSS 3.1 score is 7.5 (HIGH) with the vector AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating that ex...
EUVD-2026-72971
Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges over a network...
EUVD-2026-72970
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
EUVD-2026-72968
Missing authentication for critical function in Windows DHCP Server allows an authorized attacker to elevate privileges over a network...
CVE-2026-69412
Windows DHCP Server is vulnerable to a stack-based buffer overflow that allows an authorized attacker (low privileges, no user interaction) to achieve remote code execution over an adjacent network . The vulnerability is scored CVSS 3.1: 8.0 (HIGH) with high impact to confidentiality, integrity, ...
CVE-2026-69457
An out-of-bounds read in the Windows USB Driver allows a local, authorized attacker with low privileges and no user interaction to disclose information (high confidentiality impact, no integrity or availability impact). The vulnerability is rated CVSS 3.1 5.5 (MEDIUM) with a vector of AV:L/AC:L/P...
EUVD-2026-72966
Out-of-bounds read in Windows USB Driver allows an authorized attacker to disclose information locally...
CVE-2026-69418
Volume Manager Driver contains a heap-based buffer overflow that allows an authorized attacker to elevate privileges over a network. The vulnerability is rated CVSS 3.1: 8.0 (HIGH) with low attack complexity, low privileges required, and user interaction needed, yielding high impact to confidenti...
CVE-2026-69406
CVE-2026-69406 is a Windows Kernel information disclosure vulnerability. It stems from the exposure of sensitive system information to an unauthorized control sphere, allowing an authorized attacker to disclose information locally. The assigned CVSS 3.1 score is 5.5 (Medium) with a local attack v...