CVE-2026-68843

CVE-2026-68843 is a use-after-free vulnerability in Microsoft Office Word that allows an authorized attacker to disclose information locally. The flaw resides in Word's handling of memory objects, where freed memory is subsequently accessed, potentially leaking sensitive data to a local user with...

EUVD-2026-73373

Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally...

CVE-2026-56172

CVE-2026-56172 is a use-after-free vulnerability in the Windows VHD miniport driver that allows an authorized local attacker to achieve privilege escalation . The CVSS 3.1 score is 7.8 (High) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating low attack complexity and full impact on...

EUVD-2026-73374

Use after free in Windows VHD miniport driver allows an authorized attacker to elevate privileges locally...

CVE-2026-62810

CVE-2026-62810 is a heap-based buffer overflow in Microsoft Active Directory Certificate Services (AD CS) that allows an authorized attacker to escalate privileges locally . The CVSS 3.1 base score is 7.8 (HIGH) , reflecting a local attack vector, low complexity, low privileges required, no user ...

EUVD-2026-73369

Heap-based buffer overflow in Active Directory Certificate Services AD CS allows an authorized attacker to elevate privileges locally...

CVE-2026-58611

CVE-2026-58611 is an improper authorization vulnerability in Xbox Gaming Services that allows an already-authorized (low-privilege) attacker to elevate privileges locally , resulting in high impact to confidentiality, integrity, and availability. The assigned CVSS 3.1 score is 7.8 (HIGH) with a l...

CVE-2026-56198

CVE-2026-56198 is an out-of-bounds read in Microsoft Trace Data Helper that allows an authorized attacker to elevate privileges locally . The vulnerability is rated CVSS 7.8 (HIGH) with a local attack vector, low complexity, and low privileges required, resulting in high impact across confidentia...

CVE-2026-85880

CVE-2026-85880 is a heap-based buffer overflow in Windows ALPC (Advanced Local Procedure Call) that enables a locally authorized attacker to escalate privileges with full impact on confidentiality, integrity, and availability (CVSS 7.8 HIGH). CISA added this CVE to the Known Exploited Vulnerabili...

EUVD-2026-73366

Use after free in Windows Server allows an authorized attacker to elevate privileges locally...

EUVD-2026-73365

Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally...

EUVD-2026-73358

Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally...

EUVD-2026-73357

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

CVE-2026-83976

CVE-2026-83976 is a heap-based buffer overflow in the Windows Biometric Service that allows an authorized attacker to achieve local privilege escalation . The vulnerability requires low privileges and no user interaction , with an attack vector of local and low complexity , rated CVSS 7.8 (HIGH) ...

CVE-2026-83975

Windows Biometric Service is affected by a heap-based buffer overflow that allows a locally authenticated attacker with low privileges to escalate to higher privilege. The vulnerability requires no user interaction and has low attack complexity , resulting in a CVSS 3.1 score of 7.8 (HIGH) with h...

EUVD-2026-73355

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-73354

Use after free in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

CVE-2026-83979

CVE-2026-83979 is a use-after-free vulnerability in Windows Biometric Service that allows an authorized attacker to achieve local privilege escalation . The Microsoft CVSS 3.1 score is 7.8 (HIGH) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating low attack complexity and no require...

EUVD-2026-73353

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

CVE-2026-83988

CVE-2026-83988 is a heap-based buffer overflow in the Windows Biometric Service that allows an authorized local attacker to elevate privileges. The vulnerability carries a CVSS 3.1 score of 7.8 (High) with low attack complexity, low privileges required, and no user interaction, resulting in high ...