EUVD-2026-72980

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally...

CVE-2026-69513

CVE-2026-69513 is a heap-based buffer overflow in Windows Error Reporting that allows an authorized attacker to perform a local privilege elevation . The CVSS 3.1 score is 7.8 (HIGH) with a vector of local attack, low complexity, low privileges required, no user interaction, and high impact to co...

EUVD-2026-72978

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

CVE-2026-69455

CVE-2026-69455 is a heap-based buffer overflow in Windows Remote Access Connection Manager that allows an authorized attacker to achieve local privilege escalation . The CVSS 3.1 score is 7.8 (HIGH) with a local attack vector, low complexity, and low required privileges, resulting in high impact ...

CVE-2026-69432

CVE-2026-69432 is a heap-based buffer overflow in the Volume Manager Driver (Microsoft) that allows an authorized attacker to elevate privileges locally . The vulnerability is rated CVSS 3.1 7.8 (High) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating local attack vector, low compl...

EUVD-2026-72974

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69448

CVE-2026-69448 is a local privilege escalation vulnerability in the Windows Bluetooth Service , caused by a race condition due to concurrent execution using a shared resource with improper synchronization. An authorized attacker can exploit this to elevate privileges locally, with a CVSS 3.1 scor...

EUVD-2026-72970

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

CVE-2026-69436

CVE-2026-69436 is a heap-based buffer overflow in Windows Error Reporting that allows an authorized attacker with low privileges to escalate privileges locally . The CVSS 3.1 score is 7.8 (HIGH) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating high impact across confidentiality, i...

CVE-2026-69420

CVE-2026-69420 is a heap-based buffer overflow in the Windows VOLSNAP.SYS driver that allows an authorized local attacker to escalate privileges . The CVSS 3.1 base score is 7.8 (HIGH) , with a local attack vector, low complexity, low privileges required, no user interaction, and high impact on c...

EUVD-2026-72966

Out-of-bounds read in Windows USB Driver allows an authorized attacker to disclose information locally...

CVE-2026-69457

An out-of-bounds read in the Windows USB Driver allows a local, authorized attacker with low privileges and no user interaction to disclose information (high confidentiality impact, no integrity or availability impact). The vulnerability is rated CVSS 3.1 5.5 (MEDIUM) with a vector of AV:L/AC:L/P...

EUVD-2026-72963

Use after free in Windows USB Audio Class driver usbaudio.sys allows an authorized attacker to elevate privileges locally...

CVE-2026-69401

This vulnerability is a use after free flaw in Microsoft's Audio Video Control Transport Protocol that allows an authorized attacker with low privileges to escalate privileges locally. The CVSS 3.1 base score is 7.0 (HIGH) with a local attack vector, high complexity, and no user interaction requi...

EUVD-2026-72960

Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information locally...

CVE-2026-69390

CVE-2026-69390 is an out-of-bounds read vulnerability in Windows Spaceport.sys that allows an authorized attacker to locally disclose information . The Microsoft CNA rates it CVSS 5.5 (MEDIUM) with a local attack vector, low complexity, low privileges required, and a high impact on confidentialit...

CVE-2026-69404

CVE-2026-69404 is a race condition in Windows TCP/IP caused by concurrent execution using a shared resource with improper synchronization, allowing an authorized local attacker (low privileges required) to elevate privileges . The CVSS 3.1 score is 7.0 (HIGH) with a local attack vector, high comp...

CVE-2026-69389

This CVE describes a heap-based buffer overflow in Windows Storage Management Provider that allows an authorized, low-privileged attacker to achieve local privilege escalation . The vulnerability requires no user interaction and carries a CVSS 3.1 base score of 7.8 (HIGH) with high impact across ...

CVE-2026-69368

CVE-2026-69368 is a heap-based buffer overflow in the Windows Overlay Filter component that allows an authorized attacker with local access and low privileges to escalate their privileges. The vulnerability carries a CVSS 3.1 base score of 7.8 (HIGH) with high impact to confidentiality, integrity...

CVE-2026-69359

A heap-based buffer overflow in Active Directory Domain Services allows an authorized attacker to perform local privilege escalation . The attack requires local access with low privileges , no user interaction, and has low complexity , with high impact to confidentiality, integrity, and availabil...