27520 matches found
CVE-2026-69476
A heap-based buffer overflow in the Windows Biometric Service allows an authorized attacker to escalate privileges locally. The vulnerability is rated CVSS 7.8 (High) with low complexity and low privileges required, resulting in high impact to confidentiality, integrity, and availability. No spec...
EUVD-2026-73259
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
EUVD-2026-73246
Integer overflow or wraparound in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally...
CVE-2026-69603
CVE-2026-69603 is a heap-based buffer overflow in Windows Hyper-V that allows an authorized local attacker to achieve code execution . The CVSS 3.1 score is 8.8 (HIGH) , with a local attack vector, low privileges required, no user interaction, and changed scope leading to high impact on confident...
CVE-2026-69604
CVE-2026-69604 is a heap-based buffer overflow in the Windows Audio Service that allows an authorized local attacker with low privileges to elevate privileges . The vulnerability requires a local attack vector , low privileges , and no user interaction , with a CVSS 3.1 base score of 7.8 (HIGH) a...
CVE-2026-69576
CVE-2026-69576 is a use-after-free vulnerability in the Microsoft Graphic Fonts component that allows an authorized attacker with low privileges to elevate privileges locally without user interaction. The CNA-assigned CVSS v3.1 score is 7.8 (HIGH) , with high impact across confidentiality, integr...
EUVD-2026-73143
Use after free in Graphic Fonts allows an authorized attacker to elevate privileges locally...
CVE-2026-69589
CVE-2026-69589 is a heap-based buffer overflow in Windows Biometric Service that allows an authorized, low-privilege attacker to achieve local privilege escalation . The vulnerability carries a CVSS v3.1 base score of 7.8 (HIGH) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating low...
EUVD-2026-73140
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
CVE-2026-69583
Windows Biometric Service is affected by a heap-based buffer overflow that allows an authorized attacker to achieve local privilege escalation . The vulnerability carries a CVSS 3.1 base score of 7.8 (HIGH) , with local attack vector, low complexity, and low privileges required, resulting in high...
EUVD-2026-73137
Heap-based buffer overflow in Windows SMB Client allows an authorized attacker to elevate privileges locally...
EUVD-2026-73135
Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally...
CVE-2026-69394
CVE-2026-69394 is a heap-based buffer overflow in the Windows Audio Service that allows an authorized local attacker to escalate privileges. The vulnerability is rated CVSS 3.1 7.0 (HIGH) by Microsoft (AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H), reflecting a local attack vector with high complexity, lo...
EUVD-2026-73131
External control of file name or path in Windows Shell allows an authorized attacker to elevate privileges locally...
CVE-2026-69383
CVE-2026-69383 is a local elevation of privilege vulnerability in Windows Shell , caused by external control of file name or path . An authorized attacker with low privileges can exploit this to gain full control over confidentiality, integrity, and availability of the system (CVSS 3.1 base score...
CVE-2026-68844
CVE-2026-68844 is a heap-based buffer overflow in Windows Storage Spaces Controller that allows an authorized, locally authenticated attacker (with low privileges) to achieve remote code execution . The vulnerability carries a CVSS 3.1 base score of 7.8 (HIGH) with high impact on confidentiality,...
EUVD-2026-73118
Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-72962
CVE-2026-72962 is a heap-based buffer overflow in the Windows USB Video Driver that allows an authorized attacker to achieve local privilege escalation . The Microsoft CVSS 3.1 score is 8.2 (HIGH) with vector AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H, indicating a local attack with low complexity, high...
CVE-2026-72958
CVE-2026-72958 is a double free vulnerability in Windows Credential Guard that allows an authorized attacker to elevate privileges locally . The flaw resides in the Credential Guard component of Windows, a security feature that isolates user credentials from the rest of the operating system. The ...