11259 matches found
EUVD-2026-73573
Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally...
EUVD-2026-73524
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network...
CVE-2026-69480
CVE-2026-69480 is a heap-based buffer overflow in the Windows Partition Management Driver that allows an authorized, low-privilege local attacker to escalate privileges. The CVSS v3.1 score is 7.8 (HIGH) , with a local attack vector, low complexity, and high impact on confidentiality, integrity, ...
CVE-2026-69478
CVE-2026-69478 is a heap-based buffer overflow in the Windows Device Association Service that allows an authorized attacker to elevate privileges locally . The vulnerability is rated CVSS 7.8 (HIGH) with a local attack vector, low complexity, and low privileges required, resulting in high impact ...
EUVD-2026-73509
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over a network...
CVE-2026-69433
A heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to achieve local privilege escalation . The vulnerability is rated CVSS 3.1: 7.8 (HIGH) with a local attack vector, low complexity, and low privileges required, yielding high impact on confidentiality, integrity...
EUVD-2026-73503
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
CVE-2026-69449
CVE-2026-69449 is a heap-based buffer overflow in Windows BitLocker that allows an authorized attacker to execute code locally. The CVSS 3.1 score is 6.7 (Medium) , reflecting a local attack vector with high privileges required and no user interaction , resulting in high impact on confidentiality...
CVE-2026-69360
CVE-2026-69360 is a heap-based buffer overflow in Microsoft Office Word that allows an unauthorized attacker to achieve remote code execution over a network. The attack requires user interaction (e.g., opening a malicious document) but no prior authentication. The assigned CVSS v3.1 score is 8.8 ...
EUVD-2026-73432
Heap-based buffer overflow in Windows DCOM Server allows an authorized attacker to elevate privileges locally...
CVE-2026-69270
A heap-based buffer overflow in the Windows USB Audio Class driver (usbaudio.sys) allows a locally authenticated attacker to escalate privileges , resulting in high impact to confidentiality, integrity, and availability (CVSS 3.1 base score 7.8 HIGH ). No specific affected Windows version or patc...
EUVD-2026-73424
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over a network...
CVE-2026-68889
A heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network. The CNA-assessed CVSS 3.1 score is 7.1 (HIGH) with a vector of AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H, indicating that exploitation requires low privileges, user interaction, an...
CVE-2026-68885
CVE-2026-68885 is a heap-based buffer overflow in Microsoft Standard XPS that allows an authorized local attacker to escalate privileges. The vulnerability carries a CVSS 3.1 base score of 7.8 (HIGH) with the vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, meaning it requires local access with low pr...
CVE-2026-68850
This vulnerability is a heap-based buffer overflow in Microsoft Account that allows an attacker with existing low-level access to locally elevate privileges . The CVSS 3.1 score is 7.8 (HIGH) , reflecting a local attack vector with low complexity and low privileges required, resulting in high imp...
CVE-2026-68880
CVE-2026-68880 is a heap-based buffer overflow in the Windows Win32K component that allows an authorized attacker to achieve privilege escalation over a network . The CVSS 3.1 score is 8.0 (HIGH) with the vector AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H, meaning low privileges and user interaction are ...
CVE-2026-62810
CVE-2026-62810 is a heap-based buffer overflow in Microsoft Active Directory Certificate Services (AD CS) that allows an authorized attacker to escalate privileges locally . The CVSS 3.1 base score is 7.8 (HIGH) , reflecting a local attack vector, low complexity, low privileges required, no user ...
CVE-2026-85877
A heap-based buffer overflow in Windows Print Spooler Components allows an unauthorized, remote attacker to achieve code execution over a network . The vulnerability is rated CVSS 3.1: 8.8 (High) with an attack vector of Network, Low complexity, no privileges required, but user interaction is req...
CVE-2026-83996
Windows Error Reporting in Windows is affected by a heap-based buffer overflow that allows an authorized attacker to elevate privileges locally . The assigned CVSS 3.1 score is 8.8 (HIGH) with a scope change (vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H), indicating that successful exploi...