EUVD-2026-56586

Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally...

CVE-2026-70304

CVE-2026-70304 : Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally. Attack vector is LOCAL with high privileges required and no user interaction. Impacts are high for confidentiality, integrity, and availability; CVSS 3.1 base score 6.7 (MEDIUM)...

CVE-2026-70330

CVE-2026-70330 describes a heap-based buffer overflow in Windows DNS that allows an authorized, local attacker to elevate privileges. The available sources confirm the vulnerability occurs in the Windows DNS component and enables local privilege escalation with a high impact on confidentiality, i...

EUVD-2026-56587

Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally...

CVE-2026-70329

CVE-2026-70329 describes an integer overflow or wraparound in Microsoft Office Outlook that allows an unauthenticated attacker to achieve remote code execution over a network . The associated metrics indicate a CVSS v3.1 base score of 8.8 (HIGH) with attack vector: NETWORK , attack complexity: LO...

CVE-2026-70324 Microsoft SharePoint Elevation of Privilege Vulnerability

...

EUVD-2026-56582

Server-side request forgery ssrf in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...

CVE-2026-70324

CVE-2026-70324 describes a server-side request forgery (SSRF) in Microsoft Office SharePoint that allows an authorized attacker to elevate privileges over a network. Affected product: SharePoint server components; root cause is SSRF enabling privilege escalation. The CVSSv3.1 score is 8.8 (HIGH) ...

CVE-2026-66301 Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability

...

CVE-2026-70307 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

...

EUVD-2026-56564

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

CVE-2026-70307

CVE-2026-70307 describes a use-after-free flaw in the Windows Ancillary Function Driver for WinSock that can allow an authorized local attacker to elevate privileges. Affected component is the Windows network stack’s Ancillary Function Driver used by WinSock; root cause is a use-after-free bug in...

CVE-2026-68821

The CVE-2026-68821 entry concerns Windows Package Manager with an issue in privilege management that allows an authorized local attacker to elevate privileges. Affected software is Windows Package Manager; the underlying cause is improper privilege handling, enabling local privilege escalation wi...

EUVD-2026-56469

Improper privilege management in Windows Package Manager allows an authorized attacker to elevate privileges locally...

CVE-2026-68821 Windows Package Manager Elevation of Privilege Vulnerability

...

CVE-2026-68820 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

...

CVE-2026-68820

Summary: CVE-2026-68820 is a use-after-free vulnerability in Windows Ancillary Function Driver for WinSock that enables local privilege elevation for an authorized attacker. The impact is described as elevation of privileges (high) with local attack vector, and the CVE’s CVSS vector indicates loc...

CVE-2026-68820 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

...

EUVD-2026-56468

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

EUVD-2026-56465

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...