353 matches found
CVE-2026-28616
In Setup Wizard, there is a possible way to force connection to a malicious network due to confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-72967
Heap-based buffer overflow in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally...
CVE-2026-68886
Use after free in Windows Network Connection Broker allows an authorized attacker to disclose information locally...
EUVD-2026-73965
In Setup Wizard, there is a possible way to force connection to a malicious network due to confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
EUVD-2026-73679
Heap-based buffer overflow in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally...
CVE-2026-72967
A heap-based buffer overflow in the Windows Network Connection Broker component allows an authorized low-privilege attacker to escalate privileges locally. The vulnerability carries a CVSS 3.1 score of 7.8 (HIGH) with a local attack vector, low complexity, no user interaction, and high impact on ...
CVE-2026-68886
CVE-2026-68886 is a use-after-free vulnerability in the Windows Network Connection Broker component. An authorized local attacker can exploit it to disclose information , with high confidentiality impact and no integrity or availability impact (CVSS 3.1: 5.5 MEDIUM , vector AV:L/AC:L/PR:L/UI:N/S:...
EUVD-2026-73416
Use after free in Windows Network Connection Broker allows an authorized attacker to disclose information locally...
Windows Network Connection Broker Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally...
Windows Network Connection Broker Information Disclosure Vulnerability
Use after free in Windows Network Connection Broker allows an authorized attacker to disclose information locally...
PT-2026-87300
Use after free in Windows Network Connection Broker allows an authorized attacker to disclose information locally...
PT-2026-87882
Heap-based buffer overflow in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally...
CVE-2026-72967: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally...
CVE-2026-68886: Use After Free
Use after free in Windows Network Connection Broker allows an authorized attacker to disclose information locally...
CVE-2026-61366
Double free in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally...
CVE-2026-61366 Windows Network Connection Broker Elevation of Privilege Vulnerability
...
CVE-2026-61366 Windows Network Connection Broker Elevation of Privilege Vulnerability
...
CVE-2026-61366
Affected component: Windows Network Connection Broker. Vulnerability: double free allows local privilege escalation by an authorized user. Root cause: double-free in the broker when handling network connection objects. Impact: high; local attacker with low privileges and no user interaction can e...