27515 matches found
CVE-2026-70572
CVE-2026-70572 is an integer overflow or wraparound vulnerability in Windows Biometric Service that allows a locally authenticated attacker to elevate privileges . The root cause lies in improper handling of integer operations within the biometric service component. The vulnerability carries a CV...
EUVD-2026-73651
Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
CVE-2026-70569
CVE-2026-70569 is a local privilege escalation vulnerability in the Windows Spaceport.sys kernel driver, caused by an out-of-bounds read . An authorized attacker with low privileges can exploit it to achieve full local privilege escalation, with High impact on confidentiality, integrity, and avai...
CVE-2026-70573
CVE-2026-70573 is a heap-based buffer overflow in Windows Biometric Service that allows a local attacker with low privileges to achieve privilege escalation . The vulnerability is rated CVSS 3.1: 7.0 (HIGH) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a local attack vector wit...
EUVD-2026-73650
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
EUVD-2026-73647
Double free in Windows Display Enhancement Service allows an authorized attacker to elevate privileges locally...
EUVD-2026-73646
Out-of-bounds read in Virtual Hard Disk VHD Miniport Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-58599
CVE-2026-58599 is a heap-based buffer overflow in the HEVC Video Extensions component of the Microsoft Windows Codecs Library , allowing an unauthorized attacker to achieve local code execution . The CVSS 3.1 score is 7.8 (HIGH) with a vector of AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, meaning exploi...
EUVD-2026-73641
Use after free in Windows Hello allows an authorized attacker to elevate privileges locally...
EUVD-2026-73642
Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally...
CVE-2026-69864
CVE-2026-69864 is a use-after-free vulnerability in Windows Hello , Microsoft's biometric authentication component, that allows a low-privileged local attacker to escalate privileges. The CVSS 3.1 score is 7.8 (HIGH) with vector CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H, indicating a changed s...
EUVD-2026-73639
Use after free in Windows Hello allows an authorized attacker to elevate privileges locally...
CVE-2026-69820
Windows Hello is vulnerable to a heap-based buffer overflow that allows an authorized local attacker to escalate privileges . The CVSS 3.1 score is 8.2 (HIGH) with a changed scope and high impact on confidentiality, integrity, and availability. The attack requires high privileges and no user inte...
EUVD-2026-73640
Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally...
CVE-2026-69799
CVE-2026-69799 is a race condition vulnerability in Windows Hello , where concurrent execution using a shared resource with improper synchronization allows an authorized local attacker to elevate privileges. The CVSS 3.1 score is 7.8 (HIGH) with a changed scope, indicating the attacker crosses a ...
EUVD-2026-73633
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Hello allows an authorized attacker to elevate privileges locally...
CVE-2026-69911
CVE-2026-69911 is a use-after-free vulnerability in the Microsoft Windows Search Component that allows a locally authenticated attacker to achieve local privilege escalation . The flaw requires low privileges , high attack complexity , and no user interaction , with unchanged scope and high impac...
EUVD-2026-73621
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
CVE-2026-69900
CVE-2026-69900 is an untrusted pointer dereference in the Kernel Streaming WOW Thunk Service Driver (a Windows kernel-mode driver) that allows a locally authenticated attacker to escalate privileges . Microsoft rated it HIGH (CVSS 7.8) with local attack vector, low complexity, low privileges requ...