CVE-2026-68894

CVE-2026-68894 is a heap-based buffer overflow in Windows Error Reporting that allows an authorized attacker to elevate privileges over a network . The vulnerability is rated CVSS 8.0 (High) with the vector AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H , meaning it requires low privileges and user interact...

EUVD-2026-73360

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

CVE-2026-83996

Windows Error Reporting in Windows is affected by a heap-based buffer overflow that allows an authorized attacker to elevate privileges locally . The assigned CVSS 3.1 score is 8.8 (HIGH) with a scope change (vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H), indicating that successful exploi...

CVE-2026-69896

CVE-2026-69896 is a use after free vulnerability in Windows Error Reporting that allows an authorized, low-privilege attacker to perform a local privilege escalation . The attack requires local access, involves high complexity, and does not require user interaction. The CVSS 3.1 base score is 7.0...

EUVD-2026-73049

Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

EUVD-2026-73030

Generation of error message containing sensitive information in Windows Error Reporting allows an authorized attacker to disclose information locally...

CVE-2026-69684

Windows Error Reporting in Windows contains an information disclosure vulnerability caused by the generation of an error message that includes sensitive information . An authorized local attacker with low privileges can exploit this to disclose sensitive data. The CVSS 3.1 score is 5.5 (Medium) ,...

EUVD-2026-72982

Out-of-bounds read in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

CVE-2026-69450

CVE-2026-69450 is a local privilege escalation vulnerability in Windows Error Reporting , caused by an out-of-bounds read . An authorized attacker with low privileges can exploit this locally without user interaction to gain high impact on confidentiality, integrity, and availability (CVSS 3.1 sc...

EUVD-2026-72978

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

CVE-2026-69513

CVE-2026-69513 is a heap-based buffer overflow in Windows Error Reporting that allows an authorized attacker to perform a local privilege elevation . The CVSS 3.1 score is 7.8 (HIGH) with a vector of local attack, low complexity, low privileges required, no user interaction, and high impact to co...

EUVD-2026-72970

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

CVE-2026-69436

CVE-2026-69436 is a heap-based buffer overflow in Windows Error Reporting that allows an authorized attacker with low privileges to escalate privileges locally . The CVSS 3.1 score is 7.8 (HIGH) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating high impact across confidentiality, i...

EUVD-2026-73230

Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

CVE-2026-69362

CVE-2026-69362 is a use after free vulnerability in Windows Error Reporting that allows an authorized attacker to perform local privilege escalation . The CVSS 3.1 score is 7.0 (HIGH) , with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating that exploitation requires low privileges , no...

CVE-2026-82070 Insufficiently Protected Credentials in MongoDB Server Diagnostic Reporting Interface

A security issue in MongoDB Server's diagnostic reporting interface allows an authenticated user with monitoring privileges to access insufficiently protected credentials from concurrent administrative operations. The same credentials are properly redacted in server log output, but the diagnostic...

EUVD-2026-72914

A security issue in MongoDB Server's diagnostic reporting interface allows an authenticated user with monitoring privileges to access insufficiently protected credentials from concurrent administrative operations. The same credentials are properly redacted in server log output, but the diagnostic...

CVE-2026-82070 Insufficiently Protected Credentials in MongoDB Server Diagnostic Reporting Interface

A security issue in MongoDB Server's diagnostic reporting interface allows an authenticated user with monitoring privileges to access insufficiently protected credentials from concurrent administrative operations. The same credentials are properly redacted in server log output, but the diagnostic...

CVE-2026-82070

CVE-2026-82070 is an insufficiently protected credentials vulnerability in MongoDB Server's diagnostic reporting interface . The interface fails to redact credentials that are properly masked in server log output, allowing an authenticated user with monitoring-level permissions to access cleartex...

CVE-2026-82070 Insufficiently Protected Credentials in MongoDB Server Diagnostic Reporting Interface

A security issue in MongoDB Server's diagnostic reporting interface allows an authenticated user with monitoring privileges to access insufficiently protected credentials from concurrent administrative operations. The same credentials are properly redacted in server log output, but the diagnostic...