43249 matches found
EUVD-2026-73132
Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally...
EUVD-2026-73123
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
CVE-2026-69293
CVE-2026-69293 is a heap-based buffer overflow in the Windows Biometric Service that allows an authorized attacker to achieve local privilege escalation . The vulnerability is rated CVSS 3.1 7.8 (HIGH) with a local attack vector, low complexity, and low privileges required, resulting in high impa...
CVE-2026-68837
CVE-2026-68837 is a use-after-free vulnerability in Windows File History Service that allows an authorized local attacker to elevate privileges. The CVSS 3.1 base score is 7.0 (HIGH) with the vector AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a local attack with high complexity, low required ...
EUVD-2026-73119
Use after free in Windows File History Service allows an authorized attacker to elevate privileges locally...
EUVD-2026-73111
Heap-based buffer overflow in Storage Port Driver allows an authorized attacker to elevate privileges locally...
EUVD-2026-73095
Double free in Windows Failover Cluster allows an authorized attacker to elevate privileges locally...
EUVD-2026-73094
Heap-based buffer overflow in Windows NFS Portmapper allows an authorized attacker to elevate privileges locally...
CVE-2026-71332
CVE-2026-71332 is a use-after-free vulnerability in Windows Secure Socket Tunneling Protocol (SSTP) that allows an authorized attacker to perform a local privilege escalation . The CVSS 3.1 score is 7.0 (HIGH) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a high-attack-complexi...
CVE-2026-70584
Windows Core Messaging is affected by a type confusion vulnerability (access of resource using incompatible type) that allows a locally authenticated attacker to escalate privileges. The impact is rated HIGH (CVSS 3.1 base score 7.8, full confidentiality, integrity, and availability impact) with ...
CVE-2026-69822
CVE-2026-69822 is a local privilege escalation vulnerability in Windows Kerberos caused by a numeric truncation error . An authorized attacker with low privileges can exploit this to achieve full confidentiality, integrity, and availability impact (CVSS 3.1: 7.8 HIGH , vector AV:L/AC:L/PR:L/UI:N/...
CVE-2026-69758
A heap-based buffer overflow in the Windows Universal Disk Format File System (UDFS) Driver allows a locally authenticated attacker to elevate privileges . The flaw is rated CVSS 7.8 (High) with full impact to confidentiality, integrity, and availability (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). CIS...
EUVD-2026-73057
Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally...
CVE-2026-69896
CVE-2026-69896 is a use after free vulnerability in Windows Error Reporting that allows an authorized, low-privilege attacker to perform a local privilege escalation . The attack requires local access, involves high complexity, and does not require user interaction. The CVSS 3.1 base score is 7.0...
EUVD-2026-73035
Heap-based buffer overflow in Windows Credential Providers allows an authorized attacker to elevate privileges locally...
CVE-2026-69470
Windows Connected User Experiences and Telemetry contains a use-after-free flaw that allows an authorized attacker to escalate privileges locally . The vulnerability is rated CVSS 7.0 (HIGH) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a local attack with high complexity, low ...
EUVD-2026-72987
Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-69472
CVE-2026-69472 is a use-after-free vulnerability in the Windows Devices Human Interface component that allows an authorized, local attacker with low privileges to achieve local privilege escalation . The CVSS v3.1 score is 7.0 (HIGH) , with high complexity and no user interaction required. The im...