6218 matches found
CVE-2026-68846
CVE-2026-68846 is a use-after-free vulnerability in the Windows Kernel that allows an authorized attacker to elevate privileges over a network. The CVSS 3.1 score is 7.1 (HIGH) with a vector of AV:N/AC:H/PR:L/UI:R, indicating a network-based attack requiring high complexity , low privileges , and...
EUVD-2026-73200
Use after free in Windows Kernel allows an authorized attacker to elevate privileges over a network...
EUVD-2026-73197
Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally...
EUVD-2026-73196
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally...
CVE-2026-68841
Windows NTFS is affected by a heap-based buffer overflow that allows an authorized, local attacker with low privileges to elevate privileges without user interaction. The vulnerability is classified with a CVSS 3.1 score of 7.8 (HIGH) — AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H — indicating high impact...
CVE-2026-68835
CVE-2026-68835 is a use-after-free vulnerability in Windows Print Spooler Components that allows an authorized attacker to elevate privileges over a network . The Microsoft-assigned CVSS 3.1 score is 7.1 (HIGH) , with an attack vector of network, high complexity, low privileges required, and user...
EUVD-2026-73195
Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges over a network...
EUVD-2026-73193
Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally...
CVE-2026-68830
CVE-2026-68830 is an information disclosure vulnerability in Windows Universal Plug and Play (UPnP) Device Host , caused by improper link resolution before file access ('link following'). An authorized local attacker (low privileges, no user interaction) can exploit this to disclose information, ...
CVE-2026-68787
A heap-based buffer overflow in Microsoft SQL Server allows an authorized attacker with low privileges to execute code locally. The flaw requires no user interaction and results in high impact to confidentiality, integrity, and availability (CVSS 3.1 base score 7.8 – HIGH , vector AV:L/AC:L/PR:L/...
CVE-2026-68785
Microsoft SQL Server is affected by a heap-based buffer overflow that allows an authorized attacker (high privileges required) to execute code over a network. The CVSS v3.1 score is 4.9 (Medium) , reflecting a network attack vector with low complexity, high privileges required, and no user intera...
EUVD-2026-73189
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...
CVE-2026-68784
CVE-2026-68784 is an out-of-bounds read vulnerability in Microsoft SQL Server that allows an authorized attacker to disclose information over a network . The CVSS v3.1 score is 6.5 (Medium) with the vector AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N, indicating a high confidentiality impact with low priv...
EUVD-2026-73188
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...
EUVD-2026-73186
Out-of-bounds read in SQL Server allows an authorized attacker to deny service over a network...
CVE-2026-68781
CVE-2026-68781 is an out-of-bounds read vulnerability in Microsoft SQL Server that allows an authorized attacker to disclose information over a network. The flaw requires low privileges and no user interaction , with low attack complexity . The CVSS 3.1 base score is 6.5 (MEDIUM) , reflecting a h...
EUVD-2026-73187
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...
CVE-2026-67633
Microsoft SQL Server is affected by an out-of-bounds read vulnerability that allows an authorized attacker (low privileges) to trigger a denial of service over the network. The CNA-assigned CVSS 3.1 score is 6.5 (MEDIUM) , reflecting network attack vector, low complexity, and high availability im...