27517 matches found
EUVD-2026-73507
Time-of-check time-of-use toctou race condition in Windows Kernel allows an authorized attacker to elevate privileges locally...
CVE-2026-69444
CVE-2026-69444 is a heap-based buffer overflow in Microsoft Windows Speech that allows an authorized attacker to escalate privileges locally. The vulnerability carries a CVSS 3.1 score of 7.8 (HIGH) , with a local attack vector, low complexity, low privileges required, and high impact across conf...
CVE-2026-69466
CVE-2026-69466 is a Time-of-Check Time-of-Use (TOCTOU) race condition in the Windows Kernel that allows a low-privileged local attacker to elevate privileges . The vulnerability carries a CVSS 3.1 score of 7.0 (High) , with high impact to confidentiality, integrity, and availability, though explo...
EUVD-2026-73506
Heap-based buffer overflow in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally...
EUVD-2026-73505
Time-of-check time-of-use toctou race condition in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...
CVE-2026-69440
CVE-2026-69440 is a Time-of-Check Time-of-Use (TOCTOU) race condition in the Windows MIDI Service Module that allows an authorized low-privilege attacker to achieve local privilege escalation . The vulnerability is scored CVSS 3.1: 7.0 (High) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H ,...
CVE-2026-69447
CVE-2026-69447 is a heap-based buffer overflow in the Windows Audio Service that allows an authorized local attacker to achieve privilege escalation . The vulnerability is rated CVSS 7.8 (HIGH) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, meaning it requires only low privileges and no us...
CVE-2026-69433
A heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to achieve local privilege escalation . The vulnerability is rated CVSS 3.1: 7.8 (HIGH) with a local attack vector, low complexity, and low privileges required, yielding high impact on confidentiality, integrity...
EUVD-2026-73499
Untrusted pointer dereference in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally...
CVE-2026-69475
CVE-2026-69475 is an elevation of privilege vulnerability in Windows Remote Desktop Services , caused by an untrusted pointer dereference . An authorized local attacker with low privileges can exploit this with low complexity and no user interaction to gain high impact across confidentiality, int...
CVE-2026-69425
CVE-2026-69425 is an improper link resolution before file access (link following) vulnerability in Windows NTFS . An authorized attacker with low privileges and high attack complexity can perform local tampering , resulting in high integrity impact with no confidentiality or availability impact (...
EUVD-2026-73495
Use after free in Windows USB Video Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-69422
CVE-2026-69422 is a use-after-free vulnerability in the Windows USB Video Driver that allows a locally authenticated attacker with low privileges to escalate privileges. The attack requires high complexity and no user interaction, with high impact on confidentiality, integrity, and availability, ...
CVE-2026-69424
CVE-2026-69424 is a heap-based buffer overflow in Windows Distributed File System (DFS) that allows an authorized attacker to elevate privileges locally . The CVSS 3.1 score is 7.8 (HIGH) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating low attack complexity and no user interactio...
EUVD-2026-73493
Heap-based buffer overflow in Windows Distributed File System DFS allows an authorized attacker to elevate privileges locally...
EUVD-2026-73491
Integer overflow or wraparound in Volume Manager Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-69421
CVE-2026-69421 is an integer underflow (wrap/wraparound) vulnerability in a Windows Kernel Mode Driver . An authorized local attacker can exploit the flaw to elevate privileges , with full impact to confidentiality, integrity, and availability (CVSS 3.1: 7.8 HIGH , vector AV:L/AC:L/PR:L/UI:N/S:U/...
EUVD-2026-73487
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally...