27539 matches found
CVE-2026-69741
Windows Spaceport.sys is affected by an out-of-bounds read vulnerability that allows a locally authenticated attacker with low privileges to disclose information . The CVSS 3.1 score is 5.5 (Medium) with a local attack vector, low complexity, no user interaction, and a high confidentiality impact...
EUVD-2026-73050
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally...
EUVD-2026-73049
Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
EUVD-2026-73046
Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally...
EUVD-2026-73043
Deserialization of untrusted data in Windows IP Address Management IPAM Service allows an authorized attacker to elevate privileges locally...
CVE-2026-69711
CVE-2026-69711 is a use after free vulnerability in the Windows Device Association Service that allows an authorized local attacker with low privileges to achieve privilege escalation . The attack requires high complexity and no user interaction, with high impact on confidentiality, integrity, an...
CVE-2026-69859
A time-of-check time-of-use (TOCTOU) race condition in the Windows USB Audio Class driver (usbaudio.sys) allows an authorized local attacker to escalate privileges . The vulnerability is scored CVSS 3.1: 7.0 (HIGH) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H , reflecting high impact to c...
CVE-2026-69693
A use-after-free flaw in the Windows Device Association Broker service allows an authorized local attacker to achieve privilege escalation . The vulnerability is rated HIGH (CVSS 3.1: 7.0) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H , indicating that exploitation requires high attack com...
EUVD-2026-73033
Out-of-bounds read in Windows Remote Desktop Licensing Service allows an authorized attacker to disclose information locally...
EUVD-2026-73029
Use after free in Windows Notification allows an authorized attacker to elevate privileges locally...
CVE-2026-69645
CVE-2026-69645 is a use-after-free vulnerability in Windows Message Queuing that allows an authorized local attacker to escalate privileges. The flaw resides in the Windows Message Queuing component and results in high impact across confidentiality, integrity, and availability (CVSS 3.1 base scor...
EUVD-2026-73026
Heap-based buffer overflow in Microsoft Local Security Authority Server lsasrv allows an authorized attacker to elevate privileges locally...
EUVD-2026-73025
Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally...
CVE-2026-69609
CVE-2026-69609 is an out-of-bounds read in the Windows Win32k kernel driver that allows a local, low-privileged attacker to disclose information without user interaction. The vulnerability is classified as an Information Disclosure issue with a CVSS 3.1 score of 5.5 (Medium) , reflecting limited ...
EUVD-2026-73021
Incorrect type conversion or cast in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
CVE-2026-69585
CVE-2026-69585 affects the Microsoft Windows Search Component , where an incorrect type conversion or cast allows an authorized attacker to perform local privilege escalation . The vulnerability scores 7.8 (HIGH) under CVSS 3.1, with low attack complexity, low privileges required, no user interac...
EUVD-2026-73022
Integer overflow or wraparound in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
CVE-2026-69541
A heap-based buffer overflow in the Virtual Hard Disk (VHD) Miniport Driver allows an authorized (low-privilege) attacker to achieve local privilege escalation on an affected system. The vulnerability is scored CVSS 3.1: 7.8 (High) with impact to confidentiality, integrity, and availability all r...