26213 matches found
CVE-2026-69352
CVE-2026-69352 is a heap-based buffer overflow in Windows Biometric Service that allows an authorized local attacker to elevate privileges . The vulnerability is rated HIGH (CVSS 7.8) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H , meaning an attacker with low privileges and no user intera...
EUVD-2026-73688
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally...
EUVD-2026-73687
Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
CVE-2026-69323
CVE-2026-69323 is a heap-based buffer overflow in Windows Biometric Service that allows an authorized attacker with low privileges to achieve local privilege escalation . The vulnerability requires no user interaction and carries a CVSS 3.1 score of 7.8 (HIGH) with high impact to confidentiality,...
EUVD-2026-73682
Double free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally...
CVE-2026-69287
Windows Remote Desktop Services contains a use-after-free flaw that allows an authorized local attacker to elevate privileges . The CVSS 3.1 score is 7.0 (HIGH) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, meaning exploitation requires local access , high attack complexity , and low prio...
CVE-2026-69309
CVE-2026-69309 is a local privilege escalation vulnerability in Windows Print Spooler Components , caused by a double free defect. An attacker with low local privileges and high attack complexity can exploit it without user interaction to achieve full compromise of confidentiality, integrity, and...
CVE-2026-68896
CVE-2026-68896 is an absolute path traversal vulnerability in the Microsoft Windows Search Component that allows an authorized local attacker to achieve privilege escalation . The vulnerability requires low privileges, no user interaction, and has low attack complexity, with a CVSS 3.1 base score...
EUVD-2026-73680
Absolute path traversal in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
EUVD-2026-73679
Heap-based buffer overflow in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally...
CVE-2026-72967
A heap-based buffer overflow in the Windows Network Connection Broker component allows an authorized low-privilege attacker to escalate privileges locally. The vulnerability carries a CVSS 3.1 score of 7.8 (HIGH) with a local attack vector, low complexity, no user interaction, and high impact on ...
EUVD-2026-73676
Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges locally...
EUVD-2026-73669
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
EUVD-2026-73663
Missing release of resource after effective lifetime in Windows Secure Socket Tunneling Protocol SSTP allows an authorized attacker to deny service locally...
EUVD-2026-73661
Heap-based buffer overflow in Winsock allows an authorized attacker to elevate privileges locally...
CVE-2026-72927
A heap-based buffer overflow exists in Winsock , which allows an authorized attacker to perform a local privilege escalation . While the specific software versions are not explicitly detailed in the provided documents, the vulnerability is addressed in Microsoft's September 8, 2026 security updat...
EUVD-2026-73659
Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally...
CVE-2026-71342
A use-after-free flaw in Windows Remote Access Connection Manager enables a locally authenticated attacker to elevate privileges, as disclosed by Microsoft. The vulnerability is rated CVSS 3.1: 7.0 (HIGH) with a vector of local attack, high complexity, low privileges required, and no user interac...
CVE-2026-70583
Windows Core Messaging is affected by a heap-based buffer overflow that allows an authorized low-privilege attacker to elevate privileges locally . The vulnerability is rated CVSS 7.8 (HIGH) with full impact on confidentiality, integrity, and availability, requiring only local access with low pri...