EUVD-2026-73510

Missing authorization in Microsoft Windows Search Component allows an authorized attacker to perform tampering locally...

CVE-2026-69453

CVE-2026-69453 is a missing authorization vulnerability in the Microsoft Windows Search Component that allows an authenticated, low-privilege local attacker to perform tampering (integrity impact). The CVSS 3.1 base score is 5.5 (Medium) with the vector AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N, indica...

EUVD-2026-73508

Improper limitation of a pathname to a restricted directory 'path traversal' in Windows Compressed Folder allows an authorized attacker to elevate privileges locally...

CVE-2026-69445

CVE-2026-69445 is a local privilege escalation vulnerability in Windows Compressed Folder caused by an improper limitation of a pathname to a restricted directory (path traversal ). An authorized attacker with low privileges can exploit this locally without user interaction to achieve high impact...

CVE-2026-69466

CVE-2026-69466 is a Time-of-Check Time-of-Use (TOCTOU) race condition in the Windows Kernel that allows a low-privileged local attacker to elevate privileges . The vulnerability carries a CVSS 3.1 score of 7.0 (High) , with high impact to confidentiality, integrity, and availability, though explo...

EUVD-2026-73507

Time-of-check time-of-use toctou race condition in Windows Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-69447

CVE-2026-69447 is a heap-based buffer overflow in the Windows Audio Service that allows an authorized local attacker to achieve privilege escalation . The vulnerability is rated CVSS 7.8 (HIGH) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, meaning it requires only low privileges and no us...

EUVD-2026-73503

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

EUVD-2026-73502

Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69449

CVE-2026-69449 is a heap-based buffer overflow in Windows BitLocker that allows an authorized attacker to execute code locally. The CVSS 3.1 score is 6.7 (Medium) , reflecting a local attack vector with high privileges required and no user interaction , resulting in high impact on confidentiality...

EUVD-2026-73501

Heap-based buffer overflow in Windows BitLocker allows an authorized attacker to execute code locally...

EUVD-2026-73500

Use after free in Windows Embedded Mode Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69475

CVE-2026-69475 is an elevation of privilege vulnerability in Windows Remote Desktop Services , caused by an untrusted pointer dereference . An authorized local attacker with low privileges can exploit this with low complexity and no user interaction to gain high impact across confidentiality, int...

EUVD-2026-73497

Improper link resolution before file access 'link following' in Windows NTFS allows an authorized attacker to perform tampering locally...

CVE-2026-69427

CVE-2026-69427 is an out-of-bounds read vulnerability in the Windows VOLSNAP.SYS driver (Volume Shadow Copy service). An authorized attacker can exploit it over a network to elevate privileges . The CVSS 3.1 base score is 8.0 (HIGH) with a vector of AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H , indicatin...

CVE-2026-69424

CVE-2026-69424 is a heap-based buffer overflow in Windows Distributed File System (DFS) that allows an authorized attacker to elevate privileges locally . The CVSS 3.1 score is 7.8 (HIGH) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating low attack complexity and no user interactio...

EUVD-2026-73492

Buffer over-read in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network...

CVE-2026-69407

CVE-2026-69407 is an integer overflow or wraparound vulnerability in the Microsoft Volume Manager Driver that allows an authorized attacker to escalate privileges locally . The vulnerability is rated CVSS 3.1 7.8 (HIGH) with a local attack vector, low complexity, low privileges required, and high...

CVE-2026-69416

CVE-2026-69416 is a buffer over-read in Windows DHCP Server that allows an authorized attacker with low privileges on an adjacent network to cause a denial of service , with high availability impact and no confidentiality or integrity impact (CVSS 3.1: 5.7 MEDIUM ). CISA assesses exploitation as ...

CVE-2026-69405

CVE-2026-69405 is a memory leak in Windows DHCP Server , specifically a missing release of memory after its effective lifetime. An attacker with low privileges on an adjacent network can trigger a denial of service by exhausting server resources. The CVSS 3.1 score is 5.7 (MEDIUM) with the vector...