27423 matches found
CVE-2026-69792
CVE-2026-69792 is a race condition in Windows Win32K caused by concurrent execution of a shared resource with improper synchronization. An authorized local attacker with low privileges and high attack complexity can bypass a security feature , resulting in a HIGH integrity impact with no confiden...
EUVD-2026-73606
Time-of-check time-of-use toctou race condition in Windows Win32K allows an authorized attacker to elevate privileges locally...
CVE-2026-69895
This information disclosure vulnerability exists in the Windows Spaceport.sys kernel driver, caused by an out-of-bounds read . A local, authorized attacker with low privileges can exploit it to disclose information , with no impact on integrity or availability. The CVSS 3.1 score is 4.7 (Medium) ...
EUVD-2026-73605
Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally...
CVE-2026-69921
CVE-2026-69921 is a heap-based buffer overflow in Windows Print Spooler Components that allows a low-privilege local attacker to elevate privileges , with no user interaction required. The CVSS 3.1 score is 7.8 (HIGH) , reflecting local attack vector, low complexity, and high impact on confidenti...
EUVD-2026-73597
Use after free in Windows Credential Providers allows an authorized attacker to elevate privileges locally...
EUVD-2026-73595
Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally...
CVE-2026-69801
This CVE describes a heap-based buffer overflow in the Windows Audio Service that allows an authorized attacker to achieve local privilege escalation . The vulnerability is rated CVSS 7.8 (HIGH) with low attack complexity and low privileges required, impacting confidentiality, integrity, and avai...
EUVD-2026-73596
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally...
CVE-2026-69674
Windows Modern Device Management (MDM) contains a missing authentication vulnerability in a critical function that allows a locally authenticated attacker to bypass a security feature . The CVSS v3.1 score is 5.5 (MEDIUM) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N , indicating a local a...
EUVD-2026-73588
Missing authentication for critical function in Windows Modern Device Management MDM allows an authorized attacker to bypass a security feature locally...
EUVD-2026-73581
Use after free in Windows Accounts Control allows an authorized attacker to elevate privileges locally...
CVE-2026-69652
CVE-2026-69652 is a use-after-free vulnerability in Windows Win32K that allows an authorized attacker to elevate privileges locally . The CVSS v3.1 base score is 7.0 (HIGH) , with a local attack vector, high complexity, low privileges required, no user interaction, and high impact to confidential...
EUVD-2026-73579
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally...
CVE-2026-69707
CVE-2026-69707 is an integer overflow or wraparound vulnerability in the Windows USB Audio Class driver (usbaudio.sys) that allows an authorized, locally-privileged attacker to escalate privileges. The flaw is rated CVSS 3.1: 7.8 (HIGH) with a local attack vector, low complexity, low privileges r...
CVE-2026-69791
CVE-2026-69791 is a use-after-free vulnerability in the Windows Device Association Service that allows an authorized attacker to achieve local privilege escalation . The vulnerability carries a CVSS 3.1 base score of 7.0 (HIGH) , with a local attack vector, high complexity, low privileges require...
EUVD-2026-73577
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally...
EUVD-2026-73572
Use after free in Windows Host Guardian Service allows an authorized attacker to elevate privileges locally...
CVE-2026-69720
CVE-2026-69720 is a heap-based buffer overflow in the Windows MIDI Service Module that allows a locally authenticated attacker with low privileges to escalate privileges. The vulnerability requires local access , low complexity , and no user interaction , with high impact across confidentiality, ...