CVE-2026-70565

Use after free in Windows AFUNIX Socket Provider allows an authorized attacker to elevate privileges locally...

CVE-2026-69769

Heap-based buffer overflow in Windows HTTP Print Provider allows an unauthorized attacker to execute code over a network...

CVE-2026-69623

Heap-based buffer overflow in Windows HTTP Print Provider allows an authorized attacker to execute code over a network...

CVE-2026-69389

Heap-based buffer overflow in Windows Storage Management Provider allows an authorized attacker to elevate privileges locally...

EUVD-2026-73665

Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code over a network...

CVE-2026-72933

CVE-2026-72933 is a heap-based buffer overflow in the Microsoft WDAC (Windows Defender Application Control) OLE DB provider for SQL , allowing an unauthorized remote attacker to achieve code execution over a network . The vulnerability is rated CVSS 3.1 8.8 (HIGH) by Microsoft (CNA), with the vec...

CVE-2026-70565

CVE-2026-70565 is a use-after-free vulnerability in the Windows AF_UNIX Socket Provider that allows an authorized attacker to perform local privilege escalation . The CVSS 3.1 score is 7.0 (HIGH) , with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a local attack with high complexit...

EUVD-2026-73645

Use after free in Windows AFUNIX Socket Provider allows an authorized attacker to elevate privileges locally...

EUVD-2026-73630

Heap-based buffer overflow in Windows HTTP Print Provider allows an unauthorized attacker to execute code over a network...

CVE-2026-69769

CVE-2026-69769 is a heap-based buffer overflow in the Windows HTTP Print Provider that allows an unauthorized, remote attacker to achieve code execution over a network . The vulnerability is rated CRITICAL (CVSS 9.8) with low attack complexity, no required privileges, and no user interaction, yie...

EUVD-2026-73092

Stack-based buffer overflow in Windows Storage Management Provider allows an authorized attacker to elevate privileges locally...

CVE-2026-71337

CVE-2026-71337 is a stack-based buffer overflow in the Windows Storage Management Provider that allows a locally authenticated attacker with low privileges to achieve local privilege escalation . The CVSS 3.1 score is 7.8 (HIGH) , reflecting local attack vector, low complexity, and high impact to...

EUVD-2026-73035

Heap-based buffer overflow in Windows Credential Providers allows an authorized attacker to elevate privileges locally...

CVE-2026-69623

CVE-2026-69623 is a heap-based buffer overflow in Windows HTTP Print Provider that allows an authorized attacker to achieve remote code execution over a network. The CVSS 3.1 score is 8.0 (HIGH) , with a network attack vector, low complexity, low privileges required, and user interaction required...

EUVD-2026-73031

Heap-based buffer overflow in Windows HTTP Print Provider allows an authorized attacker to execute code over a network...

EUVD-2026-73233

Heap-based buffer overflow in Windows Storage Management Provider allows an authorized attacker to elevate privileges locally...

CVE-2026-69389

This CVE describes a heap-based buffer overflow in Windows Storage Management Provider that allows an authorized, low-privileged attacker to achieve local privilege escalation . The vulnerability requires no user interaction and carries a CVSS 3.1 base score of 7.8 (HIGH) with high impact across ...

EUVD-2026-72933

Apache Airflow FAB provider versions 3.7.3 through 3.8.0 do not validate the issuer or audience of Azure AD idtokens during OAuth login. Deployments are affected only when the FAB auth manager is configured with Azure AD as an OAuth provider. Because the signing keys are fetched from Microsoft's...

CVE-2026-75156 Apache Airflow FAB provider: FAB Azure AD OAuth: id_token issuer/audience not validated — cross-tenant authentication bypass

Apache Airflow FAB provider versions 3.7.3 through 3.8.0 do not validate the issuer or audience of Azure AD idtokens during OAuth login. Deployments are affected only when the FAB auth manager is configured with Azure AD as an OAuth provider. Because the signing keys are fetched from Microsoft's...

CVE-2026-75156

The apache-airflow-providers-fab package (versions 3.7.3 through 3.8.0) is vulnerable to an Origin Validation Error during OAuth login when configured with Azure AD. The root cause is the failure to validate the issuer or audience of Azure AD id_tokens within the _decode_and_validate_azure_jwt fu...