EUVD-2026-73650

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-73647

Double free in Windows Display Enhancement Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-73646

Out-of-bounds read in Virtual Hard Disk VHD Miniport Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-58599

CVE-2026-58599 is a heap-based buffer overflow in the HEVC Video Extensions component of the Microsoft Windows Codecs Library , allowing an unauthorized attacker to achieve local code execution . The CVSS 3.1 score is 7.8 (HIGH) with a vector of AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, meaning exploi...

EUVD-2026-73641

Use after free in Windows Hello allows an authorized attacker to elevate privileges locally...

EUVD-2026-73642

Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally...

CVE-2026-69864

CVE-2026-69864 is a use-after-free vulnerability in Windows Hello , Microsoft's biometric authentication component, that allows a low-privileged local attacker to escalate privileges. The CVSS 3.1 score is 7.8 (HIGH) with vector CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H, indicating a changed s...

EUVD-2026-73639

Use after free in Windows Hello allows an authorized attacker to elevate privileges locally...

CVE-2026-69820

Windows Hello is vulnerable to a heap-based buffer overflow that allows an authorized local attacker to escalate privileges . The CVSS 3.1 score is 8.2 (HIGH) with a changed scope and high impact on confidentiality, integrity, and availability. The attack requires high privileges and no user inte...

EUVD-2026-73640

Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally...

CVE-2026-69799

CVE-2026-69799 is a race condition vulnerability in Windows Hello , where concurrent execution using a shared resource with improper synchronization allows an authorized local attacker to elevate privileges. The CVSS 3.1 score is 7.8 (HIGH) with a changed scope, indicating the attacker crosses a ...

EUVD-2026-73633

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Hello allows an authorized attacker to elevate privileges locally...

CVE-2026-69911

CVE-2026-69911 is a use-after-free vulnerability in the Microsoft Windows Search Component that allows a locally authenticated attacker to achieve local privilege escalation . The flaw requires low privileges , high attack complexity , and no user interaction , with unchanged scope and high impac...

EUVD-2026-73621

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

CVE-2026-69900

CVE-2026-69900 is an untrusted pointer dereference in the Kernel Streaming WOW Thunk Service Driver (a Windows kernel-mode driver) that allows a locally authenticated attacker to escalate privileges . Microsoft rated it HIGH (CVSS 7.8) with local attack vector, low complexity, low privileges requ...

EUVD-2026-73618

Untrusted pointer dereference in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally...

EUVD-2026-73617

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally...

CVE-2026-69878

A heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code locally. The vulnerability is rated CVSS 3.1 6.4 (Medium) with a vector of AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H, indicating a local attack with high complexity and high privileges required, but full i...

EUVD-2026-73613

Use after free in Windows Web Platform Storage allows an authorized attacker to elevate privileges locally...

CVE-2026-69853

CVE-2026-69853 is an information disclosure vulnerability in Windows Win32K caused by use of an uninitialized resource. An authorized local attacker with low privileges can exploit it to disclose sensitive information , with no impact on integrity or availability. The CVSS 3.1 score is 4.7 (MEDIU...