5505 matches found
EUVD-2026-73476
Out-of-bounds read in Microsoft Local Security Authority Server lsasrv allows an authorized attacker to elevate privileges over a network...
CVE-2026-69365
CVE-2026-69365 is an out-of-bounds read in Microsoft Local Security Authority Server (lsasrv) that allows an authorized attacker to escalate privileges over a network. The vulnerability carries a CVSS 3.1 score of 8.0 (High) with a vector of AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H, indicating that ex...
EUVD-2026-73475
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...
EUVD-2026-73470
Use of uninitialized resource in Remote Desktop Client allows an authorized attacker to execute code over a network...
CVE-2026-69340
CVE-2026-69340 is a heap-based buffer overflow in Windows NTFS that allows an authorized, low-privilege attacker to elevate privileges over a network . The vulnerability requires user interaction and carries a high attack complexity, yielding a CVSS 3.1 base score of 7.1 (HIGH) with high impact t...
EUVD-2026-73462
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network...
CVE-2026-69332
CVE-2026-69332 is an out-of-bounds read in Windows NTFS that allows an authorized, low-privilege attacker to escalate privileges over a network with user interaction. The CVSS 3.1 score is 8.0 (HIGH) with impacts of High across Confidentiality, Integrity, and Availability. No specific affected ve...
CVE-2026-69322
A double free vulnerability in the Microsoft Windows Search Component allows an authorized, network-based attacker to elevate privileges . The CVSS 3.1 score is 8.0 (High) , with a network attack vector, low privileges required, and user interaction required, impacting confidentiality, integrity,...
EUVD-2026-73445
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network...
CVE-2026-69305
CVE-2026-69305 is a use-after-free vulnerability in the Microsoft Windows Search Component that allows an authorized attacker to elevate privileges over a network. The CVSS 3.1 base score is 7.1 (HIGH) , with a vector of AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H , indicating that exploitation requires ...
EUVD-2026-73430
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a network...
CVE-2026-69272
A heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network . The CVSS 3.1 score is 7.1 (HIGH) , with an attack vector of network, high complexity , low privileges required , and user interaction required , leading to high impact on co...
CVE-2026-68889
A heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network. The CNA-assessed CVSS 3.1 score is 7.1 (HIGH) with a vector of AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H, indicating that exploitation requires low privileges, user interaction, an...
EUVD-2026-73415
Out-of-bounds read in Windows iSCSI allows an unauthorized attacker to deny service over a network...
CVE-2026-68880
CVE-2026-68880 is a heap-based buffer overflow in the Windows Win32K component that allows an authorized attacker to achieve privilege escalation over a network . The CVSS 3.1 score is 8.0 (HIGH) with the vector AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H, meaning low privileges and user interaction are ...
EUVD-2026-73403
Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network...
CVE-2026-68839
CVE-2026-68839 is a heap-based buffer overflow in the Windows USB Mass Storage Class Driver , allowing an unauthorized attacker to execute code over a network. Microsoft rates it CRITICAL with a CVSS 3.1 score of 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), indicating network-exploitable, no privil...
CVE-2026-68827
CVE-2026-68827 is an integer underflow (wrap or wraparound) vulnerability in Windows GDI+ that allows an authorized attacker to achieve elevation of privileges over a network . The vulnerability is rated HIGH severity (CVSS 8.0) with a vector of AV:N/AC:L/PR:L/UI:R, meaning exploitation requires ...
CVE-2026-68828
CVE-2026-68828 is a heap-based buffer overflow in the Microsoft Remote Desktop Client that allows an unauthorized attacker to execute arbitrary code over a network. The vulnerability is rated CVSS 3.1: 8.8 (HIGH) with the vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating network-based exploi...