CVE-2026-78452

Out-of-bounds read in the Microsoft Windows SCSI Class System File allows an unauthorized attacker with physical access to perform an information disclosure attack. The vulnerability requires no privileges and no user interaction , with a CVSS 3.1 base score of 4.6 (MEDIUM) . CISA's SSVC assessme...

EUVD-2026-73807

Out-of-bounds read in Microsoft Windows SCSI Class System File allows an unauthorized attacker to disclose information with a physical attack...

EUVD-2026-73806

Out-of-bounds read in Xbox allows an unauthorized attacker to disclose information with a physical attack...

CVE-2026-78455

CVE-2026-78455 is an out-of-bounds read in Xbox that allows an unauthorized attacker with physical access to disclose information (high confidentiality impact). The attack requires user interaction but no prior privileges. CVSS v3.1 scores it 4.3 (MEDIUM) with a physical attack vector. CISA's SSV...

CVE-2026-78451

CVE-2026-78451 is an untrusted pointer dereference in the Microsoft Windows SCSI Class System File that enables an unauthorized attacker to escalate privileges via a physical attack vector (CVSS AV:P). The vulnerability carries a CVSS 3.1 base score of 6.8 (Medium) with high impact to confidentia...

EUVD-2026-73804

Untrusted pointer dereference in Microsoft Windows SCSI Class System File allows an unauthorized attacker to elevate privileges with a physical attack...

EUVD-2026-73755

Out-of-bounds read in Windows USB Hub Driver allows an unauthorized attacker to elevate privileges with a physical attack...

CVE-2026-72999

CVE-2026-72999 is an out-of-bounds read in the Windows USB Hub Driver that allows an unauthorized attacker to escalate privileges via a physical attack . The CVSS 3.1 score is 6.8 (MEDIUM) with vector AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, meaning the attacker requires physical access to the system...

CVE-2026-72985

A heap-based buffer overflow in Windows Volume Shadow Copy allows an unauthorized attacker with physical access to escalate privileges, potentially compromising confidentiality, integrity, and availability (CVSS 6.8, MEDIUM). The vulnerability requires no prior privileges or user interaction, but...

EUVD-2026-73737

Heap-based buffer overflow in Windows Volume Shadow Copy allows an unauthorized attacker to elevate privileges with a physical attack...

EUVD-2026-73699

Out-of-bounds read in Windows USB Mass Storage Class Driver allows an unauthorized attacker to elevate privileges with a physical attack...

CVE-2026-69490

CVE-2026-69490 is an out-of-bounds read vulnerability in the Windows USB Mass Storage Class Driver that allows an unauthorized attacker to elevate privileges via a physical attack . The CVSS 3.1 base score is 6.8 (Medium) , reflecting the physical attack vector requirement (AV:P), low complexity,...

EUVD-2026-73658

Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code with a physical attack...

CVE-2026-71349

CVE-2026-71349 is a heap-based buffer overflow in the Windows Spaceport.sys driver that allows an unauthorized attacker to execute code via a physical attack. The vulnerability requires no privileges or user interaction, with low attack complexity, but demands physical access to the target system...

EUVD-2026-73544

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code with a physical attack...

CVE-2026-69566

CVE-2026-69566 is a heap-based buffer overflow in Windows NTFS that allows an unauthorized attacker to execute code with a physical attack . The assigned CVSS 3.1 score is 6.8 (Medium) with a vector of AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, reflecting that exploitation requires physical access but ...

EUVD-2026-73309

Out-of-bounds read in Windows CD-ROM Driver allows an unauthorized attacker to disclose information with a physical attack...

CVE-2026-78508

CVE-2026-78508 is an out-of-bounds read in the Windows CD-ROM Driver that allows an unauthorized attacker with physical access to disclose information. The CVSS 3.1 score is 4.6 (MEDIUM) , reflecting the physical attack vector, low complexity, no privileges required, and a high confidentiality im...

EUVD-2026-73281

No cwe for this issue in Windows Boot Manager allows an unauthorized attacker to elevate privileges with a physical attack...

CVE-2026-77892

CVE-2026-77892 is a privilege escalation vulnerability in Windows Boot Manager . An unauthorized attacker with physical access to the system can elevate privileges, with high impact on confidentiality, integrity, and availability (CVSS 3.1: 6.8 MEDIUM ). The vulnerability requires no prior privil...