20238 matches found
EUVD-2026-73757
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
CVE-2026-72991
CVE-2026-72991 is a heap-based buffer overflow in the Windows Biometric Service that allows a locally authenticated attacker with low privileges to escalate to higher privileges. The vulnerability scores 7.8 (HIGH) under CVSS v3.1, with all three impact dimensions rated High. Attack requires loca...
CVE-2026-72992
A heap-based buffer overflow in the Windows Biometric Service allows an authorized local attacker to elevate privileges, resulting in high impact to confidentiality, integrity, and availability. The vulnerability carries a CVSS 3.1 score of 7.8 (HIGH) with a local attack vector, low complexity, a...
EUVD-2026-73732
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...
EUVD-2026-73730
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...
EUVD-2026-73726
Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network...
EUVD-2026-73716
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network...
CVE-2026-69601
CVE-2026-69601 is a heap-based buffer overflow in Microsoft Windows Media Foundation that allows an unauthorized, unprivileged attacker to achieve remote code execution over a network , provided the victim is induced to interact (e.g., open a crafted media file). The assigned CVSS 3.1 score is 8....
CVE-2026-69426
CVE-2026-69426 is a heap-based buffer overflow in the Windows VOLSNAP.SYS driver (part of the Volume Shadow Copy service). An authorized attacker with low privileges can exploit this flaw to achieve local code execution with high impact on confidentiality, integrity, and availability. The vulnera...
EUVD-2026-73685
Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network...
CVE-2026-72957
CVE-2026-72957 is a heap-based buffer overflow in Windows Deployment Services that allows an authorized attacker to achieve local code execution. The vulnerability is rated CVSS 3.1 7.8 (HIGH) with the vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a low-privilege local attacker requires ...
EUVD-2026-73661
Heap-based buffer overflow in Winsock allows an authorized attacker to elevate privileges locally...
EUVD-2026-73658
Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code with a physical attack...
CVE-2026-69786
CVE-2026-69786 is a heap-based buffer overflow in Windows Text Shaping that allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is assigned a CVSS 3.1 score of 8.1 (HIGH) with a vector of AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H, indicating high attack co...
CVE-2026-69845
Windows DHCP Server is affected by a heap-based buffer overflow that allows an unauthorized, remote attacker to achieve code execution over a network without any user interaction or prior privileges. The vulnerability is rated CRITICAL (CVSS 9.8) with high impact to confidentiality, integrity, an...
EUVD-2026-73620
Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over an adjacent network...
CVE-2026-69768
A heap-based buffer overflow in Windows RNDIS (Remote Network Driver Interface Specification) allows an unauthorized, network-based attacker to achieve remote code execution without user interaction or prior privileges. Microsoft assigned a CVSS 3.1 score of 9.8 (Critical) , reflecting high impac...
EUVD-2026-73592
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges over a network...
EUVD-2026-73590
Heap-based buffer overflow in Windows Encrypting File System EFS allows an authorized attacker to elevate privileges locally...
CVE-2026-69709
A heap-based buffer overflow in Windows NTFS allows an authorized attacker with low privileges and no user interaction to execute code locally. The vulnerability is rated CVSS 3.1 7.8 (HIGH) with full impact on confidentiality, integrity, and availability. The Microsoft reference points to a spec...