EUVD-2026-73617

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally...

CVE-2026-69878

A heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code locally. The vulnerability is rated CVSS 3.1 6.4 (Medium) with a vector of AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H, indicating a local attack with high complexity and high privileges required, but full i...

EUVD-2026-73613

Use after free in Windows Web Platform Storage allows an authorized attacker to elevate privileges locally...

CVE-2026-69853

CVE-2026-69853 is an information disclosure vulnerability in Windows Win32K caused by use of an uninitialized resource. An authorized local attacker with low privileges can exploit it to disclose sensitive information , with no impact on integrity or availability. The CVSS 3.1 score is 4.7 (MEDIU...

CVE-2026-69792

CVE-2026-69792 is a race condition in Windows Win32K caused by concurrent execution of a shared resource with improper synchronization. An authorized local attacker with low privileges and high attack complexity can bypass a security feature , resulting in a HIGH integrity impact with no confiden...

EUVD-2026-73606

Time-of-check time-of-use toctou race condition in Windows Win32K allows an authorized attacker to elevate privileges locally...

CVE-2026-69895

This information disclosure vulnerability exists in the Windows Spaceport.sys kernel driver, caused by an out-of-bounds read . A local, authorized attacker with low privileges can exploit it to disclose information , with no impact on integrity or availability. The CVSS 3.1 score is 4.7 (Medium) ...

CVE-2026-69921

CVE-2026-69921 is a heap-based buffer overflow in Windows Print Spooler Components that allows a low-privilege local attacker to elevate privileges , with no user interaction required. The CVSS 3.1 score is 7.8 (HIGH) , reflecting local attack vector, low complexity, and high impact on confidenti...

EUVD-2026-73605

Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally...

EUVD-2026-73597

Use after free in Windows Credential Providers allows an authorized attacker to elevate privileges locally...

EUVD-2026-73596

Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-73595

Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69801

This CVE describes a heap-based buffer overflow in the Windows Audio Service that allows an authorized attacker to achieve local privilege escalation . The vulnerability is rated CVSS 7.8 (HIGH) with low attack complexity and low privileges required, impacting confidentiality, integrity, and avai...

EUVD-2026-73588

Missing authentication for critical function in Windows Modern Device Management MDM allows an authorized attacker to bypass a security feature locally...

CVE-2026-69674

Windows Modern Device Management (MDM) contains a missing authentication vulnerability in a critical function that allows a locally authenticated attacker to bypass a security feature . The CVSS v3.1 score is 5.5 (MEDIUM) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N , indicating a local a...

EUVD-2026-73581

Use after free in Windows Accounts Control allows an authorized attacker to elevate privileges locally...

CVE-2026-69652

CVE-2026-69652 is a use-after-free vulnerability in Windows Win32K that allows an authorized attacker to elevate privileges locally . The CVSS v3.1 base score is 7.0 (HIGH) , with a local attack vector, high complexity, low privileges required, no user interaction, and high impact to confidential...

EUVD-2026-73579

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally...

CVE-2026-69707

CVE-2026-69707 is an integer overflow or wraparound vulnerability in the Windows USB Audio Class driver (usbaudio.sys) that allows an authorized, locally-privileged attacker to escalate privileges. The flaw is rated CVSS 3.1: 7.8 (HIGH) with a local attack vector, low complexity, low privileges r...

CVE-2026-69791

CVE-2026-69791 is a use-after-free vulnerability in the Windows Device Association Service that allows an authorized attacker to achieve local privilege escalation . The vulnerability carries a CVSS 3.1 base score of 7.0 (HIGH) , with a local attack vector, high complexity, low privileges require...