27517 matches found
CVE-2026-69707
CVE-2026-69707 is an integer overflow or wraparound vulnerability in the Windows USB Audio Class driver (usbaudio.sys) that allows an authorized, locally-privileged attacker to escalate privileges. The flaw is rated CVSS 3.1: 7.8 (HIGH) with a local attack vector, low complexity, low privileges r...
CVE-2026-69791
CVE-2026-69791 is a use-after-free vulnerability in the Windows Device Association Service that allows an authorized attacker to achieve local privilege escalation . The vulnerability carries a CVSS 3.1 base score of 7.0 (HIGH) , with a local attack vector, high complexity, low privileges require...
EUVD-2026-73577
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally...
EUVD-2026-73572
Use after free in Windows Host Guardian Service allows an authorized attacker to elevate privileges locally...
CVE-2026-69720
CVE-2026-69720 is a heap-based buffer overflow in the Windows MIDI Service Module that allows a locally authenticated attacker with low privileges to escalate privileges. The vulnerability requires local access , low complexity , and no user interaction , with high impact across confidentiality, ...
CVE-2026-69613
CVE-2026-69613 is a use after free vulnerability in Windows Image Acquisition (WIA) that allows an authorized attacker to perform local privilege escalation . The flaw requires low existing privileges and high attack complexity, with no user interaction needed (CVSS 3.1: 7.0 HIGH , vector AV:L/AC...
EUVD-2026-73560
Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally...
EUVD-2026-73559
Buffer over-read in Windows Win32K allows an authorized attacker to elevate privileges locally...
CVE-2026-69616
Windows Remote Desktop Services is affected by an out-of-bounds read vulnerability that allows an authorized local attacker to disclose information (CVSS 3.1: 5.5 MEDIUM — local vector, low privileges required, high confidentiality impact, no integrity or availability impact). CISA's SSVC assessm...
EUVD-2026-73557
Out-of-bounds read in Windows Remote Desktop Services allows an authorized attacker to disclose information locally...
CVE-2026-69630
CVE-2026-69630 is an out-of-bounds read vulnerability in the Windows Win32K kernel driver that allows a locally authenticated attacker to escalate privileges . The CVSS v3.1 score is 7.0 (HIGH) with vector AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, reflecting the high complexity and required low-privil...
CVE-2026-69611
This is a use-after-free vulnerability in the Virtual Hard Disk (VHD) Miniport Driver on Microsoft platforms. An attacker with low local privileges can exploit it to elevate privileges on the system. The CVSS 3.1 score is 7.0 (HIGH) with high complexity, meaning exploitation requires specific con...
CVE-2026-69617
CVE-2026-69617 is an out-of-bounds read vulnerability in the Windows Resilient File System (ReFS) component that allows an authorized local attacker to escalate privileges . The CVSS 3.1 score is 7.0 (HIGH) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, reflecting the high complexity and l...
CVE-2026-69618
CVE-2026-69618 is an out-of-bounds read in the Windows SMB Client that allows an authorized local attacker to disclose information . The CVSS 3.1 score is 5.5 (MEDIUM) with a local attack vector, low complexity, low privileges required, and high confidentiality impact but no integrity or availabi...
EUVD-2026-73549
Use after free in Windows Shell allows an authorized attacker to elevate privileges locally...
EUVD-2026-73548
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
CVE-2026-69600
CVE-2026-69600 is a use after free vulnerability in the Microsoft Windows Search Component that allows an authorized attacker to perform local privilege escalation . The vulnerability requires low privileges, high attack complexity, and no user interaction, with high impact to confidentiality, in...
EUVD-2026-73547
Integer overflow or wraparound in Windows USB Video Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-69567
CVE-2026-69567 is a use-after-free vulnerability in Windows NTFS (New Technology File System) that allows a locally authenticated attacker with low privileges to elevate privileges on the affected system. The CVSS v3.1 score is 7.0 (HIGH) , reflecting a local attack vector with high complexity, n...