CVE-2026-70289

CVE-2026-70289 is a heap-based buffer overflow in the Windows Win32 Kernel Subsystem (Win32k) that allows an authorized (low-privilege) attacker to elevate privileges locally . The vulnerability is rated CVSS 7.8 (HIGH) with local attack vector, low complexity, and high impact to confidentiality,...

EUVD-2026-73075

Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally...

EUVD-2026-73068

Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network...

CVE-2026-69860

CVE-2026-69860 is a heap-based buffer overflow in Windows Imaging Component that allows an unauthorized attacker to execute code over a network. The CVSS 3.1 score is 8.8 (HIGH) , with a vector of AV:N/AC:L/PR:N/UI:R, meaning the attack is network-based, requires user interaction , and needs no p...

CVE-2026-69732

CVE-2026-69732 is a heap-based buffer overflow in Windows Link Layer Topology Discovery Protocol (LLTD) that allows an unauthorized attacker to execute code over a network. The vulnerability carries a CVSS 3.1 score of 8.1 (HIGH) , with high impact on confidentiality, integrity, and availability,...

CVE-2026-69758

A heap-based buffer overflow in the Windows Universal Disk Format File System (UDFS) Driver allows a locally authenticated attacker to elevate privileges . The flaw is rated CVSS 7.8 (High) with full impact to confidentiality, integrity, and availability (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). CIS...

CVE-2026-69772

CVE-2026-69772 is a heap-based buffer overflow in Windows Network File System (NFS) that allows an unauthorized attacker to execute code over a network, achieving full remote code execution. The Microsoft-assigned CVSS 3.1 score is 8.8 (HIGH) with vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indic...

EUVD-2026-73061

Heap-based buffer overflow in Windows Network File System allows an unauthorized attacker to execute code over a network...

EUVD-2026-73057

Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally...

CVE-2026-69691

CVE-2026-69691 is a heap-based buffer overflow in the Windows Spaceport.sys driver that allows an authorized local attacker to elevate privileges . The CVSS 3.1 score is 7.8 (HIGH) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating low attack complexity, low privileges required, and...

CVE-2026-69681

CVE-2026-69681 is a heap-based buffer overflow in the Virtual Hard Disk (VHD) Miniport Driver that allows an authorized attacker to elevate privileges over a network . The CVSS 3.1 score is 8.0 (HIGH) with a vector of AV:N/AC:L/PR:L/UI:R, indicating a network attack with low complexity, low privi...

CVE-2026-69875

CVE-2026-69875 is a heap-based buffer overflow in Windows NTFS that allows an authorized attacker (low privileges, user interaction required) to elevate privileges over a network . The vulnerability carries a CVSS 3.1 score of 8.0 (HIGH) with impacts of High across confidentiality, integrity, and...

CVE-2026-69729

CVE-2026-69729 is a heap-based buffer overflow in Windows Credential Providers that allows an authorized attacker to achieve remote code execution over a network. The vulnerability requires low privileges and no user interaction , with an attack complexity of low and network attack vector, as sco...

EUVD-2026-73037

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally...

CVE-2026-69790

CVE-2026-69790 is a heap-based buffer overflow in Windows Credential Providers that enables a local, low-privilege attacker to escalate privileges. The vulnerability requires local access with low privileges , no user interaction , and has low attack complexity , resulting in HIGH impact across c...

EUVD-2026-73035

Heap-based buffer overflow in Windows Credential Providers allows an authorized attacker to elevate privileges locally...

EUVD-2026-73034

Heap-based buffer overflow in Windows iSCSI allows an authorized attacker to execute code over a network...

CVE-2026-69628

CVE-2026-69628 is a heap-based buffer overflow in Windows iSCSI that allows an authorized attacker to achieve remote code execution over a network. The Microsoft-assigned CVSS 3.1 score is 8.8 (HIGH) , reflecting a network attack vector, low complexity, low privileges required, no user interactio...

EUVD-2026-73031

Heap-based buffer overflow in Windows HTTP Print Provider allows an authorized attacker to execute code over a network...

CVE-2026-69623

CVE-2026-69623 is a heap-based buffer overflow in Windows HTTP Print Provider that allows an authorized attacker to achieve remote code execution over a network. The CVSS 3.1 score is 8.0 (HIGH) , with a network attack vector, low complexity, low privileges required, and user interaction required...