21323 matches found
CVE-2026-72990
CVE-2026-72990 is a heap-based buffer overflow in Windows Biometric Service that allows an authorized attacker to achieve local privilege escalation . The vulnerability requires low privileges, no user interaction, and has low attack complexity, yet results in high impact across confidentiality, ...
CVE-2026-72988
CVE-2026-72988 is a heap-based buffer overflow in Windows Biometric Service that allows an authorized local attacker to elevate privileges. The CVSS 3.1 base score is 7.8 (HIGH) with vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating that exploitation requires low privileges and no user inter...
EUVD-2026-73744
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
CVE-2026-72995
CVE-2026-72995 is a heap-based buffer overflow in Windows Biometric Service that allows a local attacker with low privileges to elevate privileges, leading to high impact on confidentiality, integrity, and availability (CVSS 3.1 score: 7.8 HIGH ). The attack requires local access, has low complex...
CVE-2026-72985
A heap-based buffer overflow in Windows Volume Shadow Copy allows an unauthorized attacker with physical access to escalate privileges, potentially compromising confidentiality, integrity, and availability (CVSS 6.8, MEDIUM). The vulnerability requires no prior privileges or user interaction, but...
EUVD-2026-73737
Heap-based buffer overflow in Windows Volume Shadow Copy allows an unauthorized attacker to elevate privileges with a physical attack...
CVE-2026-72973
Microsoft Office Word is affected by a heap-based buffer overflow that can lead to Remote Code Execution over a network. An unauthorized attacker can execute code with no prior privileges, though user interaction is required (e.g., opening a crafted document). The vulnerability is rated CVSS 8.8 ...
CVE-2026-72972
Microsoft Office Word is affected by a heap-based buffer overflow that allows an unauthorized attacker to achieve remote code execution over a network. The CVSS 3.1 score is 8.8 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, meaning exploitation requires user interaction (e.g., open...
CVE-2026-70203
CVE-2026-70203 is a heap-based buffer overflow in Windows Media Player that allows an unauthorized attacker to execute code over a network . The vulnerability is classified as Remote Code Execution with a CVSS 3.1 score of 8.8 (HIGH) , reflecting a network attack vector, low complexity, no requir...
EUVD-2026-73725
Heap-based buffer overflow in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally...
CVE-2026-69906
Windows Secure Kernel Mode vulnerability (CVE-2026-69906) involves a heap-based buffer overflow that allows an authorized local attacker to elevate privileges . The vulnerability crosses a security boundary (scope changed), resulting in high impact to confidentiality, integrity, and availability....
CVE-2026-69439
Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-69477
A heap-based buffer overflow in Microsoft Office Access allows an authorized attacker with local access and low privileges to execute code, provided user interaction is required. The vulnerability is rated CVSS 7.3 (HIGH) with a vector of AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H, reflecting full impac...
EUVD-2026-73717
Heap-based buffer overflow in Microsoft Office Access allows an authorized attacker to execute code locally...
CVE-2026-69629
Microsoft Office Outlook is affected by a heap-based buffer overflow vulnerability that allows an unauthorized attacker to execute code over a network, resulting in Remote Code Execution . The flaw requires user interaction but no prior privileges, yielding a CVSS v3.1 score of 8.8 (HIGH) with hi...
EUVD-2026-73711
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network...
EUVD-2026-73710
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network...
CVE-2026-69442
CVE-2026-69442 is a heap-based buffer overflow in Microsoft Office that allows an unauthorized, remote attacker to execute code over a network, requiring user interaction. The CVSS 3.1 score is 8.8 (HIGH) , with a network attack vector, low complexity, and no privileges required, but user interac...
CVE-2026-69593
A heap-based buffer overflow in the Windows Biometric Service allows an authorized local attacker with low privileges to elevate privileges on the affected system. The vulnerability requires no user interaction and results in High impact across confidentiality, integrity, and availability, yieldi...