1139698 matches found
CVE-2026-69397
OpenSSH for Windows is affected by a use-after-free flaw that allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is rated CVSS 7.5 (High) with the vector AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating a network-based attack with high complexity tha...
CVE-2026-69910
Windows Hyper-V is affected by a stack-based buffer overflow that allows an unauthorized attacker to achieve remote code execution over the network without any privileges or user interaction. The vulnerability is rated CVSS 9.8 (Critical) by Microsoft, with high impact to confidentiality, integri...
EUVD-2026-73690
Stack-based buffer overflow in Windows Hyper-V allows an unauthorized attacker to execute code over a network...
EUVD-2026-73685
Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network...
CVE-2026-69334
CVE-2026-69334 is a heap-based buffer overflow in the Windows Volume Manager Extension Driver that allows an unauthorized attacker to execute code over a network. The CVSS 3.1 base score is 8.8 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating network-reachable remote code e...
CVE-2026-69291
A heap-based buffer overflow in the Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code remotely over a network. The vulnerability is rated CVSS 8.8 (HIGH) with an attack vector of network, low complexity, no privileges required, and user interaction required. ...
EUVD-2026-73684
Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network...
CVE-2026-72954
CVE-2026-72954 is a use-after-free vulnerability in Windows Deployment Services (Microsoft) that allows an authorized attacker (low privileges) to achieve remote code execution over a network. The CVSS 3.1 score is 7.5 (HIGH) with vector AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, reflecting high attack...
EUVD-2026-73675
Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network...
CVE-2026-72960
Windows Media Player is affected by a heap-based buffer overflow that allows an unauthorized, remote attacker to achieve code execution over a network . The attack requires user interaction (e.g., opening a crafted media file), but no prior privileges or elevated complexity. The assigned CVSS 3.1...
EUVD-2026-73674
Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network...
EUVD-2026-73673
Remote Code Execution in Windows Routing and Remote Access Service RRAS allows attacker to gain an unauthorized access to victim's machine...
CVE-2026-72959
CVE-2026-72959 is a Remote Code Execution vulnerability in Windows Routing and Remote Access Service (RRAS) . An attacker with low privileges can exploit it over the network with low complexity and no user interaction to gain full compromise of the victim's machine, as reflected by the CVSS 3.1 s...
CVE-2026-72957
CVE-2026-72957 is a heap-based buffer overflow in Windows Deployment Services that allows an authorized attacker to achieve local code execution. The vulnerability is rated CVSS 3.1 7.8 (HIGH) with the vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a low-privilege local attacker requires ...
CVE-2026-72950
CVE-2026-72950 is a Remote Code Execution vulnerability in Windows Routing and Remote Access Service (RRAS) that allows an attacker with low privileges over the network to gain unauthorized access to a victim's machine. The assigned CVSS 3.1 score is 8.8 (HIGH) , reflecting low attack complexity,...
EUVD-2026-73671
Heap-based buffer overflow in Windows Deployment Services allows an authorized attacker to execute code locally...
EUVD-2026-73672
Remote Code Execution in Windows Routing and Remote Access Service RRAS allows attacker to gain an unauthorized access to victim's machine...
EUVD-2026-73667
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to execute code locally...
CVE-2026-72952
CVE-2026-72952 is an out-of-bounds read vulnerability in the Windows Spaceport.sys driver that allows an authorized attacker to achieve local code execution . The attack vector is local, with high complexity and low privileges required ; no user interaction is needed. The CVSS v3.1 base score is ...