CVE-2026-69338

CVE-2026-69338 is a use-after-free vulnerability in the Remote Desktop Gateway Service that allows an authorized (low-privilege) attacker to elevate privileges over a network. The CVSS 3.1 score is 7.1 (HIGH) , with high complexity, required user interaction, and high impact on confidentiality, i...

CVE-2026-69333

CVE-2026-69333 is a use-after-free vulnerability in the Windows Win32K component that allows an authorized attacker to elevate privileges locally . The vulnerability carries a CVSS 3.1 base score of 7.0 (HIGH) , with a local attack vector, high complexity, and low required privileges. CISA SSVC a...

EUVD-2026-73223

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally...

CVE-2026-69366

CVE-2026-69366 is a use-after-free vulnerability in the Windows Kernel that allows an authorized attacker with low privileges to elevate privileges over a network, with user interaction required. The CVSS 3.1 score is 7.1 (HIGH) with a vector of AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H. No specific af...

EUVD-2026-73221

Use after free in Windows Kernel allows an authorized attacker to elevate privileges over a network...

CVE-2026-69310

CVE-2026-69310 is a use-after-free vulnerability in Windows DNS that allows an authorized attacker to elevate privileges locally. The flaw resides in the DNS component and requires local access with low privileges and no user interaction, though the attack complexity is rated as high. The CVSS 3....

EUVD-2026-73220

Use after free in Windows DNS allows an authorized attacker to elevate privileges locally...

EUVD-2026-73217

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges over a network...

CVE-2026-69296

A use-after-free vulnerability in Windows Device Association Service allows an authorized attacker to escalate privileges over a network. The flaw requires low privileges, user interaction, and high attack complexity, yielding a CVSS 3.1 score of 7.1 (HIGH) with full impact on confidentiality, in...

CVE-2026-69279

CVE-2026-69279 is a use after free vulnerability in the Windows Cloud Files Mini Filter Driver that allows an authorized local attacker to elevate privileges . The CVSS 3.1 score is 7.0 (HIGH) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a local attack with high complexity but...

EUVD-2026-73216

Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-69281

CVE-2026-69281 is a use-after-free vulnerability in the Windows License Manager component that allows an authorized local attacker to elevate privileges. The vulnerability is rated CVSS 7.0 (High) with a vector of local attack, high complexity, low privileges required, no user interaction, unchan...

CVE-2026-68893

CVE-2026-68893 is a use-after-free vulnerability in the Windows Remote Desktop Licensing Service that allows an authorized attacker to elevate privileges over a network . The flaw is rated CVSS 3.1: 7.1 (High) with a vector requiring network access, high complexity, low privileges, and user inter...

EUVD-2026-73210

Use after free in Windows Remote Desktop Licensing Service allows an authorized attacker to elevate privileges over a network...

EUVD-2026-73211

Use after free in Windows License Manager allows an authorized attacker to elevate privileges locally...

EUVD-2026-73200

Use after free in Windows Kernel allows an authorized attacker to elevate privileges over a network...

CVE-2026-68846

CVE-2026-68846 is a use-after-free vulnerability in the Windows Kernel that allows an authorized attacker to elevate privileges over a network. The CVSS 3.1 score is 7.1 (HIGH) with a vector of AV:N/AC:H/PR:L/UI:R, indicating a network-based attack requiring high complexity , low privileges , and...

EUVD-2026-73197

Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally...

CVE-2026-68847

A use-after-free vulnerability in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally . The weakness is scored CVSS 3.1 7.0 (HIGH) with a local attack vector, high complexity, and low privileges required. CISA's SSVC assessment indicates no...

CVE-2026-68835

CVE-2026-68835 is a use-after-free vulnerability in Windows Print Spooler Components that allows an authorized attacker to elevate privileges over a network . The Microsoft-assigned CVSS 3.1 score is 7.1 (HIGH) , with an attack vector of network, high complexity, low privileges required, and user...