CVE-2026-73001: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

CVE-2026-73000: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

CVE-2026-73020: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

CVE-2026-72996: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

CVE-2026-72993: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

CVE-2026-72992: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69900: Untrusted Pointer Dereference

Untrusted pointer dereference in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-69878: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code locally...

CVE-2026-69731: Heap-based Buffer Overflow

Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally...

CVE-2026-78506: Improper Null Termination

Improper null termination in Microsoft Office Word allows an unauthorized attacker to disclose information locally...

CVE-2026-78454: Out-of-bounds Read

Out-of-bounds read in Windows CD-ROM Driver allows an authorized attacker to disclose information locally...

CVE-2026-78447: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

CVE-2026-77488: Integer Underflow (Wrap or Wraparound)

Integer underflow wrap or wraparound in SQL Server allows an authorized attacker to disclose information locally...

CVE-2026-77485: Use After Free

Use after free in SQL Server allows an authorized attacker to elevate privileges locally...

CVE-2026-69654: Use After Free

Use after free in Windows Accounts Control allows an authorized attacker to elevate privileges locally...

CVE-2026-69652: Use After Free

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally...

CVE-2026-69707: Integer Overflow or Wraparound

Integer overflow or wraparound in Windows USB Audio Class driver usbaudio.sys allows an authorized attacker to elevate privileges locally...

CVE-2026-69791: Use After Free

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69535: Numeric Truncation Error

Numeric truncation error in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally...

CVE-2026-69821: Improper Encoding or Escaping of Output

Improper encoding or escaping of output in Active Directory Certificate Services AD CS allows an authorized attacker to elevate privileges locally...