29253 matches found
CVE-2026-96933
The Windows COM+ Event System Service is vulnerable to an untrusted pointer dereference . This security flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is assigned a CVSS v3.1 score of 7.8 (High) , indicating significant impact on confidentiality, integ...
EUVD-2026-100015
Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network...
EUVD-2026-100021
Heap-based buffer overflow in Windows Event Tracing allows an unauthorized attacker to execute code over a network...
CVE-2026-83856
An out-of-bounds read vulnerability exists in the Windows Event Logging Service . This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is associated with CWE-125 and has a CVSS 3.1 base score of 7.5 . No specific exploit code or remediation ...
CVE-2026-83874
A heap-based buffer overflow exists in Windows Event Tracing which could allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability carries a high severity score of 8.8, indicating significant impact on confidentiality, integrity, and availability. While the...
EUVD-2026-100008
Heap-based buffer overflow in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally...
CVE-2026-83830
A heap-based buffer overflow exists in the Windows COM+ Event System Service . This vulnerability allows an authorized attacker to achieve local privilege escalation . No specific details regarding the root cause, affected versions, or available exploits are provided in the documents. Remediation...
CVE-2026-83785
A Use after free vulnerability exists in the Windows COM+ Event System Service . This flaw allows an authorized attacker to achieve local privilege escalation . No specific software versions or exploit links are provided in the documents; however, a remediation level of OFFICIAL_FIX is indicated.
EUVD-2026-99996
Use after free in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally...
EUVD-2026-99954
Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose information locally...
CVE-2026-83695
A vulnerability in the Windows Event Logging Service involves the use of uninitialized resource (CWE-908). This flaw allows an authorized attacker to perform a local information disclosure , potentially revealing sensitive data on the system. The CVSS 3.1 score is 5.5 (Medium). No specific exploi...
EUVD-2026-99796
Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclose information locally...
CVE-2026-95904
A buffer over-read vulnerability exists in the Windows Event Logging Service . This flaw allows an authorized attacker to perform a local information disclosure. The vulnerability is assigned a Medium severity (CVSS 3.1 score of 5.5) and is characterized by low attack complexity and low privilege...
CVE-2026-70134
A Use after free vulnerability exists in Windows Event Tracing . This flaw allows an authorized attacker to perform a local privilege escalation . No specific exploit code or in-the-wild exploitation details are provided in the documents, though the CVSS 3.1 score indicates a High severity (7.0) ...
EUVD-2026-99678
Use after free in Windows Event Tracing allows an authorized attacker to elevate privileges locally...
CVE-2026-85840
A vulnerability in Windows Event Viewer allows an authorized attacker to disclose information over a network. The root cause is that certain files or directories are accessible to external parties , leading to potential information disclosure. The vulnerability is associated with CWE-552 . No spe...
EUVD-2026-99547
Files or directories accessible to external parties in Windows Event Viewer allows an authorized attacker to disclose information over a network...
EUVD-2026-99376
Heap-based buffer overflow in Windows Event Tracing allows an unauthorized attacker to execute code locally...
EUVD-2026-99386
Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally...
CVE-2026-83836
A Heap-based buffer overflow exists in Windows Event Tracing which could allow an unauthorized attacker to execute code locally . The vulnerability involves a CWE-122 (Heap-based Buffer Overflow) and CWE-191 (Integer Underflow) condition. The Base Severity is High (7.8), with the attack vector be...