6105 matches found
CVE-2026-73000
CVE-2026-73000 is a heap-based buffer overflow in the Windows Biometric Service that allows an authorized local attacker to elevate privileges . The CVSS 3.1 score is 7.8 (HIGH) with a vector of local attack, low complexity, low privileges required, no user interaction, and high impact to confide...
CVE-2026-73001
CVE-2026-73001 is a heap-based buffer overflow in Windows Biometric Service that allows an authorized attacker to elevate privileges locally . The vulnerability is rated CVSS 7.8 (HIGH) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating low attack complexity and that low privileges ...
EUVD-2026-73757
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
CVE-2026-73020
CVE-2026-73020 is a heap-based buffer overflow in the Windows Biometric Service that allows an authorized attacker to elevate privileges locally . The vulnerability requires low privileges and no user interaction, with a CVSS 3.1 score of 7.8 (HIGH) and high impact to confidentiality, integrity, ...
EUVD-2026-73752
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
EUVD-2026-73750
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
CVE-2026-72994
CVE-2026-72994 is a heap-based buffer overflow in the Windows Biometric Service that allows an authorized attacker to elevate privileges locally . The vulnerability requires low privileges and no user interaction , with low attack complexity . The CVSS 3.1 base score is 7.8 (HIGH) , with high imp...
CVE-2026-72991
CVE-2026-72991 is a heap-based buffer overflow in the Windows Biometric Service that allows a locally authenticated attacker with low privileges to escalate to higher privileges. The vulnerability scores 7.8 (HIGH) under CVSS v3.1, with all three impact dimensions rated High. Attack requires loca...
CVE-2026-72992
A heap-based buffer overflow in the Windows Biometric Service allows an authorized local attacker to elevate privileges, resulting in high impact to confidentiality, integrity, and availability. The vulnerability carries a CVSS 3.1 score of 7.8 (HIGH) with a local attack vector, low complexity, a...
EUVD-2026-73745
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
CVE-2026-72988
CVE-2026-72988 is a heap-based buffer overflow in Windows Biometric Service that allows an authorized local attacker to elevate privileges. The CVSS 3.1 base score is 7.8 (HIGH) with vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating that exploitation requires low privileges and no user inter...
EUVD-2026-73740
Missing authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...
CVE-2026-69465
Microsoft Office SharePoint is affected by a missing authorization flaw that allows an authorized attacker to execute code over a network (remote code execution). The Microsoft CNA rates the severity as CVSS 3.1 8.8 (HIGH) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H , meaning exploitatio...
EUVD-2026-73738
Deserialization of untrusted data in Microsoft Dynamics 365 allows an authorized attacker to execute code over a network...
CVE-2026-65772
CVE-2026-65772 is a deserialization of untrusted data flaw in Microsoft Dynamics 365 On-Premises that allows an authorized attacker (low privileges) to execute code over a network. The CVSS 3.1 score is 8.8 (High) with high impact to confidentiality, integrity, and availability, and no user inter...
CVE-2026-69906
Windows Secure Kernel Mode vulnerability (CVE-2026-69906) involves a heap-based buffer overflow that allows an authorized local attacker to elevate privileges . The vulnerability crosses a security boundary (scope changed), resulting in high impact to confidentiality, integrity, and availability....
CVE-2026-69904
A server-side request forgery (SSRF) vulnerability in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network. The flaw requires user interaction and low privileges (CVSS 3.1: 3.5 – LOW ). CISA's SSVC assessment indicates no known exploitation , the vulner...
EUVD-2026-73724
Server-side request forgery ssrf in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network...
CVE-2026-69477
A heap-based buffer overflow in Microsoft Office Access allows an authorized attacker with local access and low privileges to execute code, provided user interaction is required. The vulnerability is rated CVSS 7.3 (HIGH) with a vector of AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H, reflecting full impac...