EUVD-2026-73910

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

CVE-2026-83980

CVE-2026-83980 is a heap-based buffer overflow in the Windows Biometric Service that allows a local, low-privilege attacker to escalate privileges without user interaction. The CVSS 3.1 score is 7.8 (HIGH) , with high impact on confidentiality, integrity, and availability. The vulnerability is ra...

EUVD-2026-73909

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-73907

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-73906

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-73904

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

CVE-2026-83981

A heap-based buffer overflow in Windows Biometric Service allows an authorized (low-privilege) local attacker to elevate privileges , with high impact to confidentiality, integrity, and availability (CVSS 3.1 score 7.8 HIGH ). The attack requires local access , low privileges , and no user intera...

CVE-2026-83968

CVE-2026-83968 is a use-after-free vulnerability in the Windows Biometric Service that allows an authorized attacker to elevate privileges locally . The CVSS 3.1 score is 7.8 (High) with impacts to confidentiality, integrity, and availability all rated High. CISA's SSVC assessment indicates no kn...

EUVD-2026-73902

Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally...

CVE-2026-83972

CVE-2026-83972 is a heap-based buffer overflow in the Windows Biometric Service that allows a locally authenticated attacker to elevate privileges. The vulnerability requires low privileges and no user interaction , with low attack complexity , scoring 7.8 (HIGH) under CVSS 3.1 with high impact t...

CVE-2026-83970

CVE-2026-83970 is a heap-based buffer overflow in Windows Biometric Service that allows an attacker with local access and low privileges to escalate to higher privileges , resulting in high impact to confidentiality, integrity, and availability (CVSS 3.1: 7.8 HIGH ). No user interaction is requir...

EUVD-2026-73898

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

CVE-2026-83971

CVE-2026-83971 is a heap-based buffer overflow in Windows Biometric Service that allows a locally authenticated attacker to elevate privileges . Microsoft rates it CVSS 3.1 7.8 (High) , with local attack vector, low complexity, low privileges required, no user interaction, and high impact on conf...

CVE-2026-83954

CVE-2026-83954 is a heap-based buffer overflow in Windows Biometric Service that allows a local, low-privilege attacker to elevate privileges without user interaction. The vulnerability carries a CVSS 3.1 score of 7.8 (HIGH) with full impact to confidentiality, integrity, and availability, indica...

EUVD-2026-73891

Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally...

CVE-2026-81963

Windows Update Stack is affected by an improper link resolution before file access ('link following') flaw that allows an authorized attacker with low privileges to elevate privileges locally , rated CVSS 7.8 HIGH with high impact to confidentiality, integrity, and availability. The vulnerability...

EUVD-2026-73890

Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally...

CVE-2026-83939

Windows Secure Kernel Mode is affected by an untrusted pointer dereference vulnerability that allows an authorized attacker to perform a local privilege escalation . The CVSS 3.1 score is 8.2 (HIGH) , with a changed scope and high impact to confidentiality, integrity, and availability. The attack...

EUVD-2026-73885

Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally...

CVE-2026-83940

CVE-2026-83940 is a use after free vulnerability in the Windows Device Association Service that allows an authorized local attacker to elevate privileges . The CVSS 3.1 base score is 7.0 (HIGH) with a high attack complexity , low privileges required , and high impact across confidentiality, integ...