CVE-2026-72927

A heap-based buffer overflow exists in Winsock , which allows an authorized attacker to perform a local privilege escalation . While the specific software versions are not explicitly detailed in the provided documents, the vulnerability is addressed in Microsoft's September 8, 2026 security updat...

EUVD-2026-73659

Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally...

CVE-2026-71342

A use-after-free flaw in Windows Remote Access Connection Manager enables a locally authenticated attacker to elevate privileges, as disclosed by Microsoft. The vulnerability is rated CVSS 3.1: 7.0 (HIGH) with a vector of local attack, high complexity, low privileges required, and no user interac...

CVE-2026-70583

Windows Core Messaging is affected by a heap-based buffer overflow that allows an authorized low-privilege attacker to elevate privileges locally . The vulnerability is rated CVSS 7.8 (HIGH) with full impact on confidentiality, integrity, and availability, requiring only local access with low pri...

EUVD-2026-73655

Heap-based buffer overflow in Windows Credential Guard allows an authorized attacker to elevate privileges locally...

CVE-2026-70577

CVE-2026-70577 is a use-after-free vulnerability in Windows Modern Device Management (MDM) that allows an authorized attacker to achieve local privilege escalation . The flaw is rated CVSS 7.0 (HIGH) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a locally exploitable issue with...

CVE-2026-70572

CVE-2026-70572 is an integer overflow or wraparound vulnerability in Windows Biometric Service that allows a locally authenticated attacker to elevate privileges . The root cause lies in improper handling of integer operations within the biometric service component. The vulnerability carries a CV...

EUVD-2026-73651

Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-73650

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

CVE-2026-70573

CVE-2026-70573 is a heap-based buffer overflow in Windows Biometric Service that allows a local attacker with low privileges to achieve privilege escalation . The vulnerability is rated CVSS 3.1: 7.0 (HIGH) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a local attack vector wit...

CVE-2026-70569

CVE-2026-70569 is a local privilege escalation vulnerability in the Windows Spaceport.sys kernel driver, caused by an out-of-bounds read . An authorized attacker with low privileges can exploit it to achieve full local privilege escalation, with High impact on confidentiality, integrity, and avai...

EUVD-2026-73647

Double free in Windows Display Enhancement Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-73646

Out-of-bounds read in Virtual Hard Disk VHD Miniport Driver allows an authorized attacker to elevate privileges locally...

EUVD-2026-73641

Use after free in Windows Hello allows an authorized attacker to elevate privileges locally...

EUVD-2026-73642

Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally...

CVE-2026-58599

CVE-2026-58599 is a heap-based buffer overflow in the HEVC Video Extensions component of the Microsoft Windows Codecs Library , allowing an unauthorized attacker to achieve local code execution . The CVSS 3.1 score is 7.8 (HIGH) with a vector of AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, meaning exploi...

EUVD-2026-73640

Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally...

EUVD-2026-73639

Use after free in Windows Hello allows an authorized attacker to elevate privileges locally...

CVE-2026-69864

CVE-2026-69864 is a use-after-free vulnerability in Windows Hello , Microsoft's biometric authentication component, that allows a low-privileged local attacker to escalate privileges. The CVSS 3.1 score is 7.8 (HIGH) with vector CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H, indicating a changed s...

CVE-2026-69820

Windows Hello is vulnerable to a heap-based buffer overflow that allows an authorized local attacker to escalate privileges . The CVSS 3.1 score is 8.2 (HIGH) with a changed scope and high impact on confidentiality, integrity, and availability. The attack requires high privileges and no user inte...