EUVD-2026-73490

Missing release of memory after effective lifetime in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network...

EUVD-2026-73486

Use after free in Windows NDIS allows an authorized attacker to elevate privileges over a network...

CVE-2026-69396

A use-after-free vulnerability in the Windows NDIS (Network Driver Interface Specification) component allows an authorized attacker to elevate privileges over a network . The CVSS 3.1 score is 7.1 (HIGH) , with a network attack vector, high complexity, low privileges required, and user interactio...

EUVD-2026-73485

Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information over a network...

CVE-2026-69388

CVE-2026-69388 is a use-after-free vulnerability in Windows Bluetooth Service that allows a local attacker with low privileges to elevate privileges . The attack requires local access and is characterized by high complexity , with no user interaction needed. The CVSS 3.1 base score is 7.0 (HIGH) ...

CVE-2026-69393

CVE-2026-69393 is an out-of-bounds read in the Windows Spaceport.sys kernel driver that allows an authorized attacker to disclose information over a network . The vulnerability is rated CVSS 3.1: 5.7 (MEDIUM) with a vector of AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N, reflecting that an attacker with l...

EUVD-2026-73481

Allocation of resources without limits or throttling in Windows SMB Server allows an authorized attacker to deny service over a network...

CVE-2026-69374

CVE-2026-69374 is a denial-of-service vulnerability in Windows SMB Server caused by allocation of resources without limits or throttling . An authorized attacker (low privileges) can exploit this over the network to disrupt service, with high availability impact and no confidentiality or integrit...

EUVD-2026-73479

Missing authorization in Windows SMB Server allows an authorized attacker to disclose information locally...

CVE-2026-69369

CVE-2026-69369 is an out-of-bounds read in Windows DNS that allows an authorized local attacker to disclose information. The CVSS 3.1 score is 5.5 (Medium) with a local attack vector, low privileges required, and high impact to confidentiality only. CISA's SSVC assessment indicates no known explo...

EUVD-2026-73476

Out-of-bounds read in Microsoft Local Security Authority Server lsasrv allows an authorized attacker to elevate privileges over a network...

CVE-2026-69365

CVE-2026-69365 is an out-of-bounds read in Microsoft Local Security Authority Server (lsasrv) that allows an authorized attacker to escalate privileges over a network. The vulnerability carries a CVSS 3.1 score of 8.0 (High) with a vector of AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H, indicating that ex...

EUVD-2026-73474

Out-of-bounds read in Windows Network File System allows an authorized attacker to deny service over a network...

CVE-2026-69372

CVE-2026-69372 is an out-of-bounds read in Windows Network File System (NFS) that allows an authorized attacker (low privileges) to trigger a denial of service over a network. The attack vector is network-based with low complexity, but user interaction is required . CVSS v3.1 base score is 5.7 (M...

EUVD-2026-73472

Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally...

EUVD-2026-73470

Use of uninitialized resource in Remote Desktop Client allows an authorized attacker to execute code over a network...

CVE-2026-69358

Microsoft Remote Desktop Client is affected by a use of uninitialized resource flaw that allows an authorized attacker to achieve remote code execution over a network. The vulnerability requires user interaction and carries a CVSS 3.1 score of 7.1 (HIGH) with high impact on confidentiality, integ...

CVE-2026-69350

CVE-2026-69350 is a heap-based buffer overflow in Windows Overlay Filter that allows an authorized attacker to elevate privileges locally . The vulnerability requires high privileges and no user interaction, with a CVSS 3.1 score of 6.7 (MEDIUM) reflecting high impact to confidentiality, integrit...

CVE-2026-69348

CVE-2026-69348 is a heap-based buffer overflow in the Windows Win32K kernel component that allows an authorized, locally-privileged attacker to elevate privileges . The CVSS 3.1 score is 7.8 (HIGH) , with low attack complexity and no user interaction required. CISA's SSVC assessment indicates no ...

CVE-2026-69344

CVE-2026-69344 is an out-of-bounds read vulnerability in Windows Print Spooler Components that allows an authorized local attacker with low privileges to disclose information without user interaction. The CVSS v3.1 base score is 5.5 (MEDIUM) , reflecting the local attack vector, low complexity, a...