6221 matches found
CVE-2026-69457
An out-of-bounds read in the Windows USB Driver allows a local, authorized attacker with low privileges and no user interaction to disclose information (high confidentiality impact, no integrity or availability impact). The vulnerability is rated CVSS 3.1 5.5 (MEDIUM) with a vector of AV:L/AC:L/P...
EUVD-2026-72966
Out-of-bounds read in Windows USB Driver allows an authorized attacker to disclose information locally...
CVE-2026-69418
Volume Manager Driver contains a heap-based buffer overflow that allows an authorized attacker to elevate privileges over a network. The vulnerability is rated CVSS 3.1: 8.0 (HIGH) with low attack complexity, low privileges required, and user interaction needed, yielding high impact to confidenti...
CVE-2026-69406
CVE-2026-69406 is a Windows Kernel information disclosure vulnerability. It stems from the exposure of sensitive system information to an unauthorized control sphere, allowing an authorized attacker to disclose information locally. The assigned CVSS 3.1 score is 5.5 (Medium) with a local attack v...
EUVD-2026-72961
Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally...
CVE-2026-69401
This vulnerability is a use after free flaw in Microsoft's Audio Video Control Transport Protocol that allows an authorized attacker with low privileges to escalate privileges locally. The CVSS 3.1 base score is 7.0 (HIGH) with a local attack vector, high complexity, and no user interaction requi...
EUVD-2026-72962
Use after free in Audio Video Control Transport Protocol allows an authorized attacker to elevate privileges locally...
EUVD-2026-72960
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information locally...
CVE-2026-69371
A heap-based buffer overflow in Windows Overlay Filter allows an authorized, low-privileged attacker to elevate privileges over a network , with user interaction required and high impact to confidentiality, integrity, and availability (CVSS 8.0 HIGH ). CISA's SSVC assessment indicates no known ex...
EUVD-2026-73235
Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges over a network...
EUVD-2026-73233
Heap-based buffer overflow in Windows Storage Management Provider allows an authorized attacker to elevate privileges locally...
EUVD-2026-73231
Heap-based buffer overflow in Active Directory Domain Services allows an authorized attacker to elevate privileges locally...
CVE-2026-69367
An out-of-bounds read in Microsoft Standard XPS allows an authorized local attacker to disclose information. The CVSS v3.1 score is 5.5 (Medium) , with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N , indicating that exploitation requires local access, low privileges, no user interaction, and re...
CVE-2026-69349
CVE-2026-69349 is an information disclosure vulnerability in Windows Management Instrumentation (WMI) caused by use of an uninitialized resource . An authorized attacker can exploit it over a network to disclose information, with high confidentiality impact but no integrity or availability impact...
EUVD-2026-73229
Use of uninitialized resource in Windows Management Instrumentation allows an authorized attacker to disclose information over a network...
CVE-2026-69345
CVE-2026-69345 is an out-of-bounds read in Microsoft Standard XPS that allows an authorized attacker (low privileges, no user interaction) to disclose information locally , with high confidentiality impact and no integrity or availability impact (CVSS 3.1: 5.5 MEDIUM ). CISA's SSVC assessment rat...
EUVD-2026-73225
Use after free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges over a network...
CVE-2026-69338
CVE-2026-69338 is a use-after-free vulnerability in the Remote Desktop Gateway Service that allows an authorized (low-privilege) attacker to elevate privileges over a network. The CVSS 3.1 score is 7.1 (HIGH) , with high complexity, required user interaction, and high impact on confidentiality, i...
CVE-2026-69339
CVE-2026-69339 is an information disclosure vulnerability in the Windows MIDI Service Module . It allows an attacker with low local privileges to expose sensitive system information to an unauthorized control sphere, resulting in high confidentiality impact with no integrity or availability impac...