EUVD-2026-73058

Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally...

EUVD-2026-73059

Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally...

CVE-2026-69691

CVE-2026-69691 is a heap-based buffer overflow in the Windows Spaceport.sys driver that allows an authorized local attacker to elevate privileges . The CVSS 3.1 score is 7.8 (HIGH) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating low attack complexity, low privileges required, and...

CVE-2026-69832

CVE-2026-69832 is an information disclosure vulnerability in Windows Win32K , a kernel-mode component handling graphics and input processing. Exposure of sensitive system information to an unauthorized control sphere allows a low-privilege local attacker to read sensitive data. The CVSS 3.1 score...

CVE-2026-69741

Windows Spaceport.sys is affected by an out-of-bounds read vulnerability that allows a locally authenticated attacker with low privileges to disclose information . The CVSS 3.1 score is 5.5 (Medium) with a local attack vector, low complexity, no user interaction, and a high confidentiality impact...

EUVD-2026-73050

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-73049

Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

EUVD-2026-73046

Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-73043

Deserialization of untrusted data in Windows IP Address Management IPAM Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69711

CVE-2026-69711 is a use after free vulnerability in the Windows Device Association Service that allows an authorized local attacker with low privileges to achieve privilege escalation . The attack requires high complexity and no user interaction, with high impact on confidentiality, integrity, an...

CVE-2026-69859

A time-of-check time-of-use (TOCTOU) race condition in the Windows USB Audio Class driver (usbaudio.sys) allows an authorized local attacker to escalate privileges . The vulnerability is scored CVSS 3.1: 7.0 (HIGH) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H , reflecting high impact to c...

CVE-2026-69693

A use-after-free flaw in the Windows Device Association Broker service allows an authorized local attacker to achieve privilege escalation . The vulnerability is rated HIGH (CVSS 3.1: 7.0) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H , indicating that exploitation requires high attack com...

EUVD-2026-73033

Out-of-bounds read in Windows Remote Desktop Licensing Service allows an authorized attacker to disclose information locally...

EUVD-2026-73029

Use after free in Windows Notification allows an authorized attacker to elevate privileges locally...

CVE-2026-69645

CVE-2026-69645 is a use-after-free vulnerability in Windows Message Queuing that allows an authorized local attacker to escalate privileges. The flaw resides in the Windows Message Queuing component and results in high impact across confidentiality, integrity, and availability (CVSS 3.1 base scor...

EUVD-2026-73026

Heap-based buffer overflow in Microsoft Local Security Authority Server lsasrv allows an authorized attacker to elevate privileges locally...

EUVD-2026-73025

Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally...

CVE-2026-69609

CVE-2026-69609 is an out-of-bounds read in the Windows Win32k kernel driver that allows a local, low-privileged attacker to disclose information without user interaction. The vulnerability is classified as an Information Disclosure issue with a CVSS 3.1 score of 5.5 (Medium) , reflecting limited ...

EUVD-2026-73021

Incorrect type conversion or cast in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

CVE-2026-69585

CVE-2026-69585 affects the Microsoft Windows Search Component , where an incorrect type conversion or cast allows an authorized attacker to perform local privilege escalation . The vulnerability scores 7.8 (HIGH) under CVSS 3.1, with low attack complexity, low privileges required, no user interac...