27522 matches found
CVE-2026-72958
CVE-2026-72958 is a double free vulnerability in Windows Credential Guard that allows an authorized attacker to elevate privileges locally . The flaw resides in the Credential Guard component of Windows, a security feature that isolates user credentials from the rest of the operating system. The ...
EUVD-2026-73115
Double free in Windows Credential Guard allows an authorized attacker to elevate privileges locally...
EUVD-2026-73116
Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally...
EUVD-2026-73114
Relative path traversal in Windows DNS allows an authorized attacker to elevate privileges locally...
CVE-2026-72948
CVE-2026-72948 is a relative path traversal vulnerability in Windows DNS that allows an authorized attacker to escalate privileges locally . Microsoft rates it MEDIUM (CVSS 6.7) requiring high privileges, while NVD assigns HIGH (7.8) with low privileges required. CISA's SSVC assesses no known exp...
EUVD-2026-73113
Use of uninitialized resource in Windows Task Scheduler allows an authorized attacker to disclose information locally...
EUVD-2026-73110
Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally...
CVE-2026-72935
CVE-2026-72935 is an out-of-bounds read in the Windows NTFS driver that allows a local attacker with high privileges to escalate privileges . The Microsoft CVSS 3.1 score is 6.7 (Medium) , reflecting a local attack vector, low complexity, and high impact on confidentiality, integrity, and availab...
EUVD-2026-73108
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally...
CVE-2026-71351
This vulnerability is a double free in Windows Routing and Remote Access Service (RRAS) that allows an authorized local attacker to elevate privileges . The CVSS 3.1 score is 7.0 (HIGH) , with a local attack vector, high complexity, and low privileges required, yielding high impact to confidentia...
EUVD-2026-73106
Double free in Windows Routing and Remote Access Service RRAS allows an authorized attacker to elevate privileges locally...
CVE-2026-72929
CVE-2026-72929 is an elevation of privilege vulnerability in Windows Installer , caused by improper validation of an integrity check value . An authorized local attacker can exploit this to gain elevated privileges, with the CVSS 3.1 base score of 7.8 (HIGH) reflecting full impact on confidential...
EUVD-2026-73105
Improper validation of integrity check value in Windows Installer allows an authorized attacker to elevate privileges locally...
CVE-2026-71341
CVE-2026-71341 is an out-of-bounds read in the Windows Partition Management Driver that allows a locally authenticated attacker with low privileges to disclose information. The vulnerability requires no user interaction and has low attack complexity. It carries a CVSS 3.1 score of 5.5 (Medium) wi...
EUVD-2026-73103
Double free in Windows Routing and Remote Access Service RRAS allows an authorized attacker to elevate privileges locally...
CVE-2026-72926
CVE-2026-72926 is a use-after-free vulnerability in Windows Internet Connection Sharing (ICS) that allows an authorized attacker to achieve local privilege elevation . The CVSS v3.1 score is 7.0 (HIGH) with a local attack vector, high complexity, and low privileges required; impact is rated high ...
EUVD-2026-73100
Use after free in Windows Internet Connection Sharing ICS allows an authorized attacker to elevate privileges locally...
EUVD-2026-73097
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally...
CVE-2026-71340
CVE-2026-71340 is a Use After Free vulnerability in Windows File History Service that allows an authorized attacker to locally elevate privileges . The flaw requires low privileges , high attack complexity , and no user interaction , yet yields high impact across confidentiality, integrity, and a...