CVE-2026-72944

CVE-2026-72944 is a heap-based buffer overflow in the Windows Fax Service that allows an authorized attacker to achieve local privilege escalation . The vulnerability carries a CVSS 3.1 base score of 7.8 (High) , with a local attack vector, low complexity, low required privileges, and no user int...

EUVD-2026-73094

Heap-based buffer overflow in Windows NFS Portmapper allows an authorized attacker to elevate privileges locally...

CVE-2026-71329

CVE-2026-71329 is a heap-based buffer overflow in Windows NTFS that allows an unauthorized attacker to execute code via a physical attack vector. The vulnerability requires low complexity and no privileges or user interaction, but demands physical access to the target system. The CVSS 3.1 base sc...

EUVD-2026-73066

Heap-based buffer overflow in Windows Link Layer Topology Discovery Protocol allows an unauthorized attacker to execute code over a network...

EUVD-2026-73040

Heap-based buffer overflow in Windows Credential Providers allows an authorized attacker to execute code over a network...

CVE-2026-69594

CVE-2026-69594 is a heap-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) that allows an authorized local attacker to escalate privileges. The vulnerability is rated CVSS 7.8 (HIGH) , with a local attack vector, low complexity, low privileges required, no user interacti...

CVE-2026-69621

CVE-2026-69621 is a heap-based buffer overflow in the Windows Fax Service that allows an authorized local attacker to elevate privileges , resulting in full compromise of confidentiality, integrity, and availability (CVSS 3.1: 7.0 HIGH , AV:L/AC:H/PR:L). CISA's SSVC assessment indicates no known ...

CVE-2026-69496

CVE-2026-69496 is a heap-based buffer overflow in Windows Compressed Folder that enables an unauthorized, unauthenticated attacker to achieve remote code execution over a network . Microsoft rates it CVSS 9.8 (Critical) with high impact to confidentiality, integrity, and availability. CISA's SSVC...

EUVD-2026-72991

Heap-based buffer overflow in Windows Enterprise App Management allows an authorized attacker to elevate privileges over a network...

CVE-2026-69481

CVE-2026-69481 is a heap-based buffer overflow in Windows Enterprise App Management that allows an authorized attacker to elevate privileges over a network. The vulnerability requires low privileges and user interaction, with high impact to confidentiality, integrity, and availability (CVSS 3.1 b...

EUVD-2026-72985

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code over a network...

CVE-2026-69463

CVE-2026-69463 is a heap-based buffer overflow in the Windows NTFS filesystem component that allows an unauthorized attacker to achieve remote code execution over a network without requiring prior authentication or user interaction. The vulnerability is rated CVSS 3.1: 9.8 (Critical) by the CNA (...

CVE-2026-69491

CVE-2026-69491 is a heap-based buffer overflow in Windows Microsoft DirectMusic that allows an unauthorized, network-based attacker to achieve remote code execution without user interaction or prior privileges. The vulnerability is rated CVSS 9.8 (Critical) with high impact to confidentiality, in...

CVE-2026-69429

CVE-2026-69429 is a heap-based buffer overflow in the Windows Internet Key Exchange (IKE) Protocol Extension that allows an authorized attacker to achieve remote code execution over a network. The CVSS 3.1 score is 7.5 (HIGH) with the vector AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating that ex...

CVE-2026-69436

CVE-2026-69436 is a heap-based buffer overflow in Windows Error Reporting that allows an authorized attacker with low privileges to escalate privileges locally . The CVSS 3.1 score is 7.8 (HIGH) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating high impact across confidentiality, i...

CVE-2026-69420

CVE-2026-69420 is a heap-based buffer overflow in the Windows VOLSNAP.SYS driver that allows an authorized local attacker to escalate privileges . The CVSS 3.1 base score is 7.8 (HIGH) , with a local attack vector, low complexity, low privileges required, no user interaction, and high impact on c...

CVE-2026-69371

A heap-based buffer overflow in Windows Overlay Filter allows an authorized, low-privileged attacker to elevate privileges over a network , with user interaction required and high impact to confidentiality, integrity, and availability (CVSS 8.0 HIGH ). CISA's SSVC assessment indicates no known ex...

EUVD-2026-73233

Heap-based buffer overflow in Windows Storage Management Provider allows an authorized attacker to elevate privileges locally...

EUVD-2026-73231

Heap-based buffer overflow in Active Directory Domain Services allows an authorized attacker to elevate privileges locally...

CVE-2026-69336

CVE-2026-69336 is a heap-based buffer overflow in Microsoft Standard XPS that allows an authorized attacker to achieve privilege elevation over a network. The vulnerability is rated CVSS 3.1: 7.1 (HIGH) with a vector of AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H, indicating that exploitation requires us...