CVE-2026-69616

Out-of-bounds read in Windows Remote Desktop Services allows an authorized attacker to disclose information locally...

CVE-2026-69607

Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network...

CVE-2026-69599

Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network...

CVE-2026-69546

Use after free in Active Directory Domain Services allows an unauthorized attacker to execute code over a network...

CVE-2026-69525

Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network...

CVE-2026-69514

Heap-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to execute code over a network...

CVE-2026-69475

Untrusted pointer dereference in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally...

CVE-2026-69359

Heap-based buffer overflow in Active Directory Domain Services allows an authorized attacker to elevate privileges locally...

CVE-2026-69287

Use after free in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally...

CVE-2026-58611

Improper authorization in XBox Gaming Services allows an authorized attacker to elevate privileges locally...

CVE-2026-69595

CVE-2026-69595 is a use-after-free vulnerability in the Windows Services for NFS ONCRPC XDR Driver that allows an unauthorized, unauthenticated attacker to achieve remote code execution over the network. Microsoft rated it CRITICAL (CVSS 3.1: 9.8) with low attack complexity and no user interactio...

CVE-2026-73012

CVE-2026-73012 is a heap-based buffer overflow in Windows Management Services that allows an authorized (low-privilege) attacker to elevate privileges over a network . The vulnerability is rated CVSS 8.8 (HIGH) with vector AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating low attack complexity and ...

EUVD-2026-73772

Heap-based buffer overflow in Windows Management Services allows an authorized attacker to elevate privileges over a network...

CVE-2026-69607

CVE-2026-69607 is a use-after-free vulnerability in Windows Deployment Services (WDS) that allows an unauthorized attacker to achieve remote code execution over a network. The CVSS 3.1 score is 7.5 (HIGH) , with a network attack vector, high complexity, no privileges required, and user interactio...

EUVD-2026-73708

Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network...

CVE-2026-69287

Windows Remote Desktop Services contains a use-after-free flaw that allows an authorized local attacker to elevate privileges . The CVSS 3.1 score is 7.0 (HIGH) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, meaning exploitation requires local access , high attack complexity , and low prio...

EUVD-2026-73681

Use after free in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally...

CVE-2026-72954

CVE-2026-72954 is a use-after-free vulnerability in Windows Deployment Services (Microsoft) that allows an authorized attacker (low privileges) to achieve remote code execution over a network. The CVSS 3.1 score is 7.5 (HIGH) with vector AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, reflecting high attack...

EUVD-2026-73674

Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network...

CVE-2026-72957

CVE-2026-72957 is a heap-based buffer overflow in Windows Deployment Services that allows an authorized attacker to achieve local code execution. The vulnerability is rated CVSS 3.1 7.8 (HIGH) with the vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a low-privilege local attacker requires ...