123008 matches found
EUVD-2026-73100
Use after free in Windows Internet Connection Sharing ICS allows an authorized attacker to elevate privileges locally...
CVE-2026-72926
CVE-2026-72926 is a use-after-free vulnerability in Windows Internet Connection Sharing (ICS) that allows an authorized attacker to achieve local privilege elevation . The CVSS v3.1 score is 7.0 (HIGH) with a local attack vector, high complexity, and low privileges required; impact is rated high ...
CVE-2026-71340
CVE-2026-71340 is a Use After Free vulnerability in Windows File History Service that allows an authorized attacker to locally elevate privileges . The flaw requires low privileges , high attack complexity , and no user interaction , yet yields high impact across confidentiality, integrity, and a...
EUVD-2026-73096
Use after free in Windows File History Service allows an authorized attacker to elevate privileges locally...
EUVD-2026-73093
Use after free in Windows Secure Socket Tunneling Protocol SSTP allows an authorized attacker to elevate privileges locally...
CVE-2026-71332
CVE-2026-71332 is a use-after-free vulnerability in Windows Secure Socket Tunneling Protocol (SSTP) that allows an authorized attacker to perform a local privilege escalation . The CVSS 3.1 score is 7.0 (HIGH) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a high-attack-complexi...
EUVD-2026-73091
Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally...
CVE-2026-71333
CVE-2026-71333 is a use-after-free vulnerability in Windows Remote Access Connection Manager that allows an authorized local attacker with low privileges to escalate privileges. The attack requires high complexity, no user interaction, and has a CVSS 3.1 score of 7.0 (HIGH) with high impact on co...
EUVD-2026-73085
Use after free in Windows Services for NFS ONCRPC XDR Driver allows an authorized attacker to execute code locally...
CVE-2026-70585
CVE-2026-70585 is a use-after-free vulnerability in the Windows Services for NFS ONCRPC XDR Driver . An authorized local attacker with low privileges can exploit it to achieve code execution , with high impact on confidentiality, integrity, and availability (CVSS 3.1 score 7.0 HIGH ; vector AV:L/...
CVE-2026-70342
CVE-2026-70342 affects the Windows Ancillary Function Driver for WinSock (AFD). The vulnerability is a use after free flaw that allows an unauthorized attacker to elevate privileges over a network. The CVSS 3.1 score is 8.1 (HIGH) , with a vector of network-based, high complexity, no privileges r...
EUVD-2026-73076
Use after free in Windows Ancillary Function Driver for WinSock allows an unauthorized attacker to elevate privileges over a network...
EUVD-2026-73073
Use after free in Windows Virtual Trusted Platform Module allows an authorized attacker to elevate privileges locally...
EUVD-2026-73072
Use after free in Windows Hello allows an authorized attacker to elevate privileges locally...
CVE-2026-69890
CVE-2026-69890 is a Use-After-Free vulnerability in Windows Virtual Trusted Platform Module (vTPM) that allows an authorized local attacker to escalate privileges. The attack requires high privileges and high complexity , with no user interaction needed, but results in a scope change and high imp...
CVE-2026-69740
Windows Hello contains a use-after-free flaw that allows an authorized local attacker to elevate privileges . The vulnerability is rated CVSS 8.8 (HIGH) with a changed scope, indicating the impact extends beyond the vulnerable component itself, resulting in high confidentiality, integrity, and av...
CVE-2026-69712
CVE-2026-69712 is a use-after-free vulnerability in Windows Key Distribution Center that allows an authorized attacker to execute code over a network. The CVSS 3.1 score is 8.8 (HIGH) with an attack vector of network , low privileges required, no user interaction, and high impact to confidentiali...
EUVD-2026-73070
Use after free in Windows Key Distribution Center allows an authorized attacker to execute code over a network...
CVE-2026-69730
CVE-2026-69730 is a use-after-free vulnerability in Windows DNS that allows an unauthorized, remote attacker to execute arbitrary code over the network without any user interaction or prior privileges. Microsoft rates it CVSS 9.8 (Critical) , with high impact on confidentiality, integrity, and av...