27604 matches found
CVE-2026-72997: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
CVE-2026-69911: Use After Free
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
CVE-2026-69907: Improper Handling of Insufficient Permissions or Privileges
Improper handling of insufficient permissions or privileges in Windows Enterprise App Management allows an authorized attacker to elevate privileges locally...
CVE-2026-69785: Untrusted Search Path
Untrusted search path in Windows Smart Card allows an authorized attacker to elevate privileges locally...
CVE-2026-69866: Use After Free
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally...
CVE-2026-72953: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-69891: Use After Free
Use after free in Windows Media allows an authorized attacker to elevate privileges locally...
CVE-2026-69792: Concurrent Execution using Shared Resource with Improper Synchronization
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Win32K allows an authorized attacker to bypass a security feature locally...
CVE-2026-69779: Time-of-check Time-of-use (TOCTOU) Race Condition
Time-of-check time-of-use toctou race condition in Windows Win32K allows an authorized attacker to elevate privileges locally...
CVE-2026-69489: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
CVE-2026-69298: Integer Overflow or Wraparound
Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
CVE-2026-69376: Out-of-bounds Read
Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally...
CVE-2026-69351: Exposure of Private Personal Information to an Unauthorized Actor
Exposure of private personal information to an unauthorized actor in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to disclose information locally...
CVE-2026-69318: Out-of-bounds Read
Out-of-bounds read in Windows Imaging Component allows an authorized attacker to disclose information locally...
CVE-2026-69308: Out-of-bounds Read
Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally...
CVE-2026-69321: Missing Authentication for Critical Function
Missing authentication for critical function in Windows Power Dependency Coordinator allows an authorized attacker to perform tampering locally...
CVE-2026-69300: Use After Free
Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally...
CVE-2026-69294: Generation of Error Message Containing Sensitive Information
Generation of error message containing sensitive information in Microsoft COM for Windows allows an authorized attacker to disclose information locally...
CVE-2026-69289: Improper Link Resolution Before File Access
Improper link resolution before file access 'link following' in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally...