21210 matches found
CVE-2026-69649
CVE-2026-69649 is a heap-based buffer overflow in the Windows Raw Image Extension that allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability requires user interaction but no prior privileges, with a CVSS 3.1 score of 8.8 (HIGH) reflecting high impact o...
EUVD-2026-73145
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally...
CVE-2026-69603
CVE-2026-69603 is a heap-based buffer overflow in Windows Hyper-V that allows an authorized local attacker to achieve code execution . The CVSS 3.1 score is 8.8 (HIGH) , with a local attack vector, low privileges required, no user interaction, and changed scope leading to high impact on confident...
EUVD-2026-73142
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
EUVD-2026-73141
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
CVE-2026-69580
A heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to escalate privileges locally. The vulnerability is rated CVSS 3.1 7.8 (HIGH) with a local attack vector, low complexity, and low privileges required, yielding full impact on confidentiality, integrity, and a...
EUVD-2026-73139
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...
CVE-2026-69583
Windows Biometric Service is affected by a heap-based buffer overflow that allows an authorized attacker to achieve local privilege escalation . The vulnerability carries a CVSS 3.1 base score of 7.8 (HIGH) , with local attack vector, low complexity, and low privileges required, resulting in high...
EUVD-2026-73140
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
CVE-2026-69556
Microsoft Office Word is affected by a heap-based buffer overflow vulnerability that allows an unauthorized attacker to execute code over a network. The vulnerability requires user interaction (e.g., opening a crafted file) but no prior authentication, as reflected in the CVSS 3.1 base score of 8...
CVE-2026-69548
CVE-2026-69548 is a heap-based buffer overflow in Windows RNDIS that allows an unauthorized attacker to disclose information via a physical attack . The CVSS 3.1 score is 4.6 (MEDIUM) with a vector of AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N, reflecting high confidentiality impact but no integrity or ...
CVE-2026-69544
CVE-2026-69544 is a heap-based buffer overflow in the Windows SMB Client that allows an authorized attacker with low local privileges to achieve local privilege escalation . The attack vector is local with low complexity and requires no user interaction , rated CVSS 3.1: 7.8 (HIGH) with high impa...
EUVD-2026-73132
Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally...
CVE-2026-69394
CVE-2026-69394 is a heap-based buffer overflow in the Windows Audio Service that allows an authorized local attacker to escalate privileges. The vulnerability is rated CVSS 3.1 7.0 (HIGH) by Microsoft (AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H), reflecting a local attack vector with high complexity, lo...
EUVD-2026-73120
Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to execute code locally...
CVE-2026-68877
CVE-2026-68877 is a heap-based buffer overflow in Windows Storage Spaces Controller that allows an authorized local attacker (low privileges, no user interaction) to achieve code execution with high impact on confidentiality, integrity, and availability (CVSS 3.1: 7.8 HIGH ). CISA's SSVC assessme...
CVE-2026-68844
CVE-2026-68844 is a heap-based buffer overflow in Windows Storage Spaces Controller that allows an authorized, locally authenticated attacker (with low privileges) to achieve remote code execution . The vulnerability carries a CVSS 3.1 base score of 7.8 (HIGH) with high impact on confidentiality,...
CVE-2026-72962
CVE-2026-72962 is a heap-based buffer overflow in the Windows USB Video Driver that allows an authorized attacker to achieve local privilege escalation . The Microsoft CVSS 3.1 score is 8.2 (HIGH) with vector AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H, indicating a local attack with low complexity, high...
CVE-2026-72946
CVE-2026-72946 is a heap-based buffer overflow in Microsoft's Storage Port Driver that allows an authorized attacker with local access to elevate privileges , achieving high impact on confidentiality, integrity, and availability. The vulnerability requires low privileges and no user interaction (...