122854 matches found
EUVD-2026-72989
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...
EUVD-2026-72988
Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally...
CVE-2026-69473
CVE-2026-69473 is a use-after-free vulnerability in the Windows Kernel that allows an authorized local attacker to escalate privileges . The CVSS 3.1 score is 7.0 (HIGH) , with a local attack vector, high complexity, low privileges required, and no user interaction. Impact is rated high for confi...
EUVD-2026-72986
Use after free in Windows Devices Human Interface allows an authorized attacker to elevate privileges locally...
CVE-2026-69472
CVE-2026-69472 is a use-after-free vulnerability in the Windows Devices Human Interface component that allows an authorized, local attacker with low privileges to achieve local privilege escalation . The CVSS v3.1 score is 7.0 (HIGH) , with high complexity and no user interaction required. The im...
CVE-2026-69451
Windows Management Instrumentation (WMI) contains a use-after-free vulnerability that allows an authorized attacker to escalate privileges over a network. The CVSS 3.1 score is 7.1 (HIGH) with a vector of AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H, meaning exploitation requires network access , low priv...
EUVD-2026-72981
Use after free in Windows Management Instrumentation allows an authorized attacker to elevate privileges over a network...
CVE-2026-69413
CVE-2026-69413 is a use-after-free vulnerability in the Windows USB Audio Class driver (usbaudio.sys) that allows an authorized attacker to perform local privilege escalation . The CVSS 3.1 score is 7.0 (HIGH) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating high attack complexity...
EUVD-2026-72963
Use after free in Windows USB Audio Class driver usbaudio.sys allows an authorized attacker to elevate privileges locally...
EUVD-2026-72962
Use after free in Audio Video Control Transport Protocol allows an authorized attacker to elevate privileges locally...
CVE-2026-69401
This vulnerability is a use after free flaw in Microsoft's Audio Video Control Transport Protocol that allows an authorized attacker with low privileges to escalate privileges locally. The CVSS 3.1 base score is 7.0 (HIGH) with a local attack vector, high complexity, and no user interaction requi...
EUVD-2026-73230
Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
CVE-2026-69362
CVE-2026-69362 is a use after free vulnerability in Windows Error Reporting that allows an authorized attacker to perform local privilege escalation . The CVSS 3.1 score is 7.0 (HIGH) , with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating that exploitation requires low privileges , no...
EUVD-2026-73225
Use after free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges over a network...
CVE-2026-69338
CVE-2026-69338 is a use-after-free vulnerability in the Remote Desktop Gateway Service that allows an authorized (low-privilege) attacker to elevate privileges over a network. The CVSS 3.1 score is 7.1 (HIGH) , with high complexity, required user interaction, and high impact on confidentiality, i...
CVE-2026-69333
CVE-2026-69333 is a use-after-free vulnerability in the Windows Win32K component that allows an authorized attacker to elevate privileges locally . The vulnerability carries a CVSS 3.1 base score of 7.0 (HIGH) , with a local attack vector, high complexity, and low required privileges. CISA SSVC a...
EUVD-2026-73223
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally...
CVE-2026-69366
CVE-2026-69366 is a use-after-free vulnerability in the Windows Kernel that allows an authorized attacker with low privileges to elevate privileges over a network, with user interaction required. The CVSS 3.1 score is 7.1 (HIGH) with a vector of AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H. No specific af...
EUVD-2026-73221
Use after free in Windows Kernel allows an authorized attacker to elevate privileges over a network...
CVE-2026-69310
CVE-2026-69310 is a use-after-free vulnerability in Windows DNS that allows an authorized attacker to elevate privileges locally. The flaw resides in the DNS component and requires local access with low privileges and no user interaction, though the attack complexity is rated as high. The CVSS 3....