6218 matches found
EUVD-2026-73029
Use after free in Windows Notification allows an authorized attacker to elevate privileges locally...
CVE-2026-69605
CVE-2026-69605 is a use-after-free vulnerability in Microsoft Install Service that allows an authorized attacker to perform a local privilege escalation . The flaw is classified with a CVSS 3.1 base score of 7.0 (HIGH) , requiring local access, low privileges, and high attack complexity, with hig...
EUVD-2026-73027
Use after free in Microsoft Install Service allows an authorized attacker to elevate privileges locally...
CVE-2026-69609
CVE-2026-69609 is an out-of-bounds read in the Windows Win32k kernel driver that allows a local, low-privileged attacker to disclose information without user interaction. The vulnerability is classified as an Information Disclosure issue with a CVSS 3.1 score of 5.5 (Medium) , reflecting limited ...
EUVD-2026-73021
Incorrect type conversion or cast in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
CVE-2026-69585
CVE-2026-69585 affects the Microsoft Windows Search Component , where an incorrect type conversion or cast allows an authorized attacker to perform local privilege escalation . The vulnerability scores 7.8 (HIGH) under CVSS 3.1, with low attack complexity, low privileges required, no user interac...
EUVD-2026-73019
Missing authentication for critical function in Microsoft Windows Search Component allows an authorized attacker to perform tampering locally...
EUVD-2026-73020
Out-of-bounds read in Windows SMB Client allows an authorized attacker to disclose information over a network...
CVE-2026-69553
CVE-2026-69553 is a missing authorization vulnerability in Windows Hyper-V that allows an authorized attacker (with low privileges) to elevate privileges over a network . The attack requires user interaction and has high attack complexity , but the impact on confidentiality, integrity, and availa...
CVE-2026-69552
CVE-2026-69552 affects Windows Print Spooler Components , where a flaw in the generation of error messages containing sensitive information allows an authorized attacker to disclose information over a network. The attack requires low privileges and user interaction , with a CVSS 3.1 score of 5.7 ...
EUVD-2026-73018
Generation of error message containing sensitive information in Windows Print Spooler Components allows an authorized attacker to disclose information over a network...
EUVD-2026-73014
Out-of-bounds read in Virtual Hard Disk VHD Miniport Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-69540
This Use After Free vulnerability affects the Windows Audio Service component and enables a locally authenticated attacker with low privileges to escalate to higher privileges. The CVSS 3.1 base score is 7.0 (High) , with an attack vector of local , high attack complexity, and no user interaction...
CVE-2026-69574
CVE-2026-69574 is a use-after-free vulnerability in the Windows Device Association Service that allows an authorized attacker to achieve local privilege escalation . The CVSS 3.1 base score is 7.0 (HIGH) , with high impact to confidentiality, integrity, and availability, but the attack requires l...
EUVD-2026-73013
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally...
CVE-2026-69528
CVE-2026-69528 is a local privilege escalation vulnerability in Windows Shell caused by missing authentication for a critical function . An authorized attacker (with low privileges, no user interaction required) can exploit this to gain full control over confidentiality, integrity, and availabili...
CVE-2026-69539
CVE-2026-69539 is a use after free vulnerability in Windows Remote Desktop Services that allows an authorized attacker to achieve remote code execution over a network. The CVSS v3.1 base score is 7.5 (HIGH) , with a vector of AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating that exploitation requi...
EUVD-2026-73007
Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network...
CVE-2026-69621
CVE-2026-69621 is a heap-based buffer overflow in the Windows Fax Service that allows an authorized local attacker to elevate privileges , resulting in full compromise of confidentiality, integrity, and availability (CVSS 3.1: 7.0 HIGH , AV:L/AC:H/PR:L). CISA's SSVC assessment indicates no known ...