EUVD-2026-73484

Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-73482

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows TCP/IP allows an authorized attacker to elevate privileges locally...

CVE-2026-69369

CVE-2026-69369 is an out-of-bounds read in Windows DNS that allows an authorized local attacker to disclose information. The CVSS 3.1 score is 5.5 (Medium) with a local attack vector, low privileges required, and high impact to confidentiality only. CISA's SSVC assessment indicates no known explo...

EUVD-2026-73472

Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally...

CVE-2026-69376

CVE-2026-69376 is an out-of-bounds read vulnerability in Microsoft Standard XPS that allows an authorized local attacker to disclose information . The CVSS 3.1 score is 5.5 (Medium) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N, indicating local attack, low complexity, low privileges requi...

EUVD-2026-73473

Null pointer dereference in Virtual Hard Disk VHD Miniport Driver allows an unauthorized attacker to deny service locally...

EUVD-2026-73468

Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges locally...

CVE-2026-69353

CVE-2026-69353 is an out-of-bounds read vulnerability in Windows Text Shaping that allows a locally authenticated attacker with low privileges to disclose information. The attack vector is local, requires no user interaction, and the scope is unchanged. The CVSS v3.1 base score is 5.5 (Medium) , ...

CVE-2026-69348

CVE-2026-69348 is a heap-based buffer overflow in the Windows Win32K kernel component that allows an authorized, locally-privileged attacker to elevate privileges . The CVSS 3.1 score is 7.8 (HIGH) , with low attack complexity and no user interaction required. CISA's SSVC assessment indicates no ...

CVE-2026-69343

CVE-2026-69343 is an out-of-bounds read in the Windows Overlay Filter component that allows a low-privilege local attacker to achieve information disclosure without user interaction. The vulnerability is rated CVSS 5.5 (MEDIUM) with a vector of local attack, low complexity, and high confidentiali...

CVE-2026-69335

CVE-2026-69335 is a use-after-free vulnerability in Windows Win32K that allows an authorized attacker to elevate privileges locally . Microsoft rates it CVSS 3.1: 7.0 (HIGH) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, meaning exploitation requires local access, low privileges, and high ...

EUVD-2026-73459

Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally...

CVE-2026-69328

CVE-2026-69328 is an untrusted search path vulnerability in Windows Storage that allows an authorized attacker to elevate privileges locally . The CVSS 3.1 score is 7.8 (HIGH) with vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating low attack complexity, no user interaction required, and high...

EUVD-2026-73453

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows USB Video Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-69316

CVE-2026-69316 is a buffer over-read vulnerability in the Windows Overlay Filter component. An authorized local attacker with low privileges can exploit it to disclose sensitive information . The attack requires high complexity and no user interaction, with a CVSS v3.1 base score of 4.7 (MEDIUM) ...

CVE-2026-69319

CVE-2026-69319 is a local privilege elevation vulnerability in the Windows USB Video Driver , caused by a race condition — concurrent execution using a shared resource with improper synchronization. An attacker with low local privileges and no user interaction can exploit this under conditions of...

CVE-2026-69318

Windows Imaging Component contains an out-of-bounds read flaw that allows a locally authenticated attacker to disclose information. The vulnerability carries a CVSS 3.1 score of 5.5 (MEDIUM) , with a local attack vector, low complexity, low privileges required, no user interaction, and a High imp...

EUVD-2026-73447

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally...

CVE-2026-69315

Windows License Manager is affected by an information disclosure vulnerability (CVE-2026-69315) where sensitive system information is exposed to an unauthorized control sphere, allowing an authorized local attacker to disclose information. The vulnerability requires low privileges and local acces...

CVE-2026-69300

CVE-2026-69300 is a use-after-free vulnerability in the Windows Push Notifications component that allows an authorized attacker to achieve local privilege escalation . The CVSS v3.1 score is 7.0 (HIGH) with vector AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a high-impact but locally exploitab...