EUVD-2026-73002

Heap-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to execute code over a network...

CVE-2026-69516

CVE-2026-69516 is a use-after-free vulnerability in the Connected Devices Platform Service (Cdpsvc) , a Windows component. An authorized local attacker can exploit this to achieve privilege escalation , with high impact on confidentiality, integrity, and availability (CVSS 3.1: 7.0 HIGH ; vector ...

CVE-2026-69514

CVE-2026-69514 is a heap-based buffer overflow in Windows Remote Desktop Services (RDS) that allows an authorized attacker (low privileges) to achieve remote code execution over a network. The vulnerability requires high attack complexity and no user interaction, yielding a CVSS 3.1 base score of...

CVE-2026-69551

Windows DNS Server is affected by a use after free vulnerability that allows an authorized attacker to execute arbitrary code over the network. The vulnerability is rated CVSS 8.8 (HIGH) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a network-based attack with low complexity th...

EUVD-2026-72999

Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally...

EUVD-2026-73000

Insertion of sensitive information into externally-accessible file or directory in Microsoft Windows Search Component allows an authorized attacker to disclose information over a network...

CVE-2026-69504

CVE-2026-69504 is an out-of-bounds read in Windows NTFS that allows a local, authenticated attacker to disclose information . The vulnerability scores CVSS 3.1 5.5 (MEDIUM) with a local attack vector, low complexity, low privileges required, no user interaction, and high confidentiality impact bu...

CVE-2026-69500

CVE-2026-69500 is a use-after-free vulnerability in Windows Image Acquisition (WIA) that allows an authorized local attacker with low privileges to escalate privileges, resulting in high impact to confidentiality, integrity, and availability. The CVSS v3.1 base score is 7.0 (HIGH) with a local at...

CVE-2026-69505

An out-of-bounds read in the Windows NTFS component allows an authorized attacker (low privileges required) to elevate privileges over a network, with user interaction required . The CVSS 3.1 score is 8.0 (HIGH) , reflecting high impact on confidentiality, integrity, and availability. No known ex...

CVE-2026-69531

CVE-2026-69531 is a confused deputy vulnerability in Microsoft Windows Speech . An authorized attacker with low privileges can exploit an unintended proxy or intermediary relationship to perform local tampering (high integrity impact, no confidentiality or availability impact). The CVSS 3.1 base ...

EUVD-2026-72995

Unintended proxy or intermediary 'confused deputy' in Microsoft Windows Speech allows an authorized attacker to perform tampering locally...

CVE-2026-69517

CVE-2026-69517 is a use-after-free vulnerability in Windows Wireless Networking that allows an authorized local attacker to elevate privileges . The CVSS 3.1 score is 7.0 (HIGH) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a local attack with high complexity, low required priv...

EUVD-2026-72996

Use after free in Windows Wireless Networking allows an authorized attacker to elevate privileges locally...

CVE-2026-69481

CVE-2026-69481 is a heap-based buffer overflow in Windows Enterprise App Management that allows an authorized attacker to elevate privileges over a network. The vulnerability requires low privileges and user interaction, with high impact to confidentiality, integrity, and availability (CVSS 3.1 b...

CVE-2026-69470

Windows Connected User Experiences and Telemetry contains a use-after-free flaw that allows an authorized attacker to escalate privileges locally . The vulnerability is rated CVSS 7.0 (HIGH) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a local attack with high complexity, low ...

EUVD-2026-72989

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...

EUVD-2026-72987

Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-69468

CVE-2026-69468 is a heap-based buffer overflow in the Windows Volume Manager Extension Driver that allows a locally authenticated attacker to elevate privileges . Microsoft rates the vulnerability CVSS 3.1: 7.0 (HIGH) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, meaning exploitation requ...

EUVD-2026-72986

Use after free in Windows Devices Human Interface allows an authorized attacker to elevate privileges locally...

CVE-2026-69472

CVE-2026-69472 is a use-after-free vulnerability in the Windows Devices Human Interface component that allows an authorized, local attacker with low privileges to achieve local privilege escalation . The CVSS v3.1 score is 7.0 (HIGH) , with high complexity and no user interaction required. The im...