EUVD-2026-73353

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

CVE-2026-83988

CVE-2026-83988 is a heap-based buffer overflow in the Windows Biometric Service that allows an authorized local attacker to elevate privileges. The vulnerability carries a CVSS 3.1 score of 7.8 (High) with low attack complexity, low privileges required, and no user interaction, resulting in high ...

CVE-2026-83969

A heap-based buffer overflow in Windows Biometric Service allows an authorized attacker with low privileges to escalate privileges locally, resulting in high impact to confidentiality, integrity, and availability. The CVSS 3.1 score is 7.8 (HIGH) with a local attack vector and no user interaction...

EUVD-2026-73350

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-73347

Use after free in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...

EUVD-2026-73348

Out-of-bounds read in Storage Port Driver allows an authorized attacker to disclose information locally...

EUVD-2026-73343

Integer underflow wrap or wraparound in Windows File History Service allows an authorized attacker to elevate privileges locally...

CVE-2026-72947

CVE-2026-72947 is an integer underflow (wrap/wraparound) in the Windows File History Service that allows an authorized attacker to achieve local privilege escalation . Microsoft rates it 6.4 MEDIUM (CVSS 3.1, high privileges required), while NVD assigns 7.0 HIGH (low privileges required). CISA's ...

EUVD-2026-73327

Improper authentication in Microsoft Authenticator allows an unauthorized attacker to elevate privileges locally...

EUVD-2026-73326

Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-80093

A use-after-free flaw in the Windows Cloud Files Mini Filter Driver allows an authorized local attacker to achieve privilege escalation . The vulnerability is rated CVSS 7.0 (HIGH) with a local attack vector, high complexity, and low privileges required, impacting confidentiality, integrity, and ...

EUVD-2026-73325

Untrusted pointer dereference in Windows Hyper-V allows an authorized attacker to execute code locally...

EUVD-2026-73324

Heap-based buffer overflow in Windows Work Folders allows an authorized attacker to elevate privileges locally...

EUVD-2026-73291

Use after free in Windows Security Center allows an authorized attacker to elevate privileges locally...

EUVD-2026-73292

Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-77904

CVE-2026-77904 is a heap-based buffer overflow in the Windows Volume Manager Extension Driver that allows an attacker with low privileges to achieve local privilege escalation without user interaction. The vulnerability is rated HIGH (CVSS 7.8) with high impact on confidentiality, integrity, and ...

CVE-2026-77894

CVE-2026-77894 is a local privilege escalation vulnerability in Windows Installer caused by a race condition — specifically, concurrent execution of a shared resource with improper synchronization. An authorized attacker with low privileges can exploit this to gain high integrity over confidentia...

EUVD-2026-73280

Out-of-bounds read in Windows DHCP Server allows an authorized attacker to execute code locally...

EUVD-2026-73268

Release of invalid pointer or reference in Windows Device Association Service allows an authorized attacker to elevate privileges locally...

CVE-2026-77489

CVE-2026-77489 is a null pointer dereference in Windows Biometric Service that allows an authorized local attacker to elevate privileges. The flaw carries a CVSS 3.1 score of 7.8 (HIGH) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, meaning exploitation requires only low privileges and no ...