123122 matches found
EUVD-2026-73073
Use after free in Windows Virtual Trusted Platform Module allows an authorized attacker to elevate privileges locally...
EUVD-2026-73072
Use after free in Windows Hello allows an authorized attacker to elevate privileges locally...
CVE-2026-69890
CVE-2026-69890 is a Use-After-Free vulnerability in Windows Virtual Trusted Platform Module (vTPM) that allows an authorized local attacker to escalate privileges. The attack requires high privileges and high complexity , with no user interaction needed, but results in a scope change and high imp...
CVE-2026-69740
Windows Hello contains a use-after-free flaw that allows an authorized local attacker to elevate privileges . The vulnerability is rated CVSS 8.8 (HIGH) with a changed scope, indicating the impact extends beyond the vulnerable component itself, resulting in high confidentiality, integrity, and av...
CVE-2026-69712
CVE-2026-69712 is a use-after-free vulnerability in Windows Key Distribution Center that allows an authorized attacker to execute code over a network. The CVSS 3.1 score is 8.8 (HIGH) with an attack vector of network , low privileges required, no user interaction, and high impact to confidentiali...
EUVD-2026-73070
Use after free in Windows Key Distribution Center allows an authorized attacker to execute code over a network...
CVE-2026-69730
CVE-2026-69730 is a use-after-free vulnerability in Windows DNS that allows an unauthorized, remote attacker to execute arbitrary code over the network without any user interaction or prior privileges. Microsoft rates it CVSS 9.8 (Critical) , with high impact on confidentiality, integrity, and av...
EUVD-2026-73069
Use after free in Windows DNS allows an unauthorized attacker to execute code over a network...
EUVD-2026-73062
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges over a network...
CVE-2026-69775
CVE-2026-69775 is a use-after-free vulnerability in the Windows DWM Core Library that allows an authorized attacker to elevate privileges over a network. The CVSS 3.1 score is 7.1 (HIGH) , with a vector of AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H, indicating that exploitation requires network access, ...
CVE-2026-69838
CVE-2026-69838 is a use-after-free vulnerability in Windows Print Spooler Components that allows an authorized attacker to achieve local privilege escalation . The attack vector is local, requires low privileges, and has high complexity with no user interaction needed. The CVSS 3.1 score is 7.0 (...
EUVD-2026-73058
Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally...
EUVD-2026-73050
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally...
CVE-2026-69735
A use after free vulnerability in the Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally . The flaw resides in the service's memory management, where a freed object is referenced again, enabling a local user with low privileges to escalate to higher acc...
CVE-2026-69896
CVE-2026-69896 is a use after free vulnerability in Windows Error Reporting that allows an authorized, low-privilege attacker to perform a local privilege escalation . The attack requires local access, involves high complexity, and does not require user interaction. The CVSS 3.1 base score is 7.0...
EUVD-2026-73049
Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
EUVD-2026-73046
Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally...
CVE-2026-69889
CVE-2026-69889 is a use-after-free vulnerability in the Windows Bluetooth Service that allows an authorized attacker to elevate privileges locally . The CVSS v3.1 base score is 7.0 (HIGH) , with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H , indicating a local attack requiring low privileges, ...
EUVD-2026-73047
Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges over a network...
CVE-2026-69757
CVE-2026-69757 is a use-after-free vulnerability in Windows TCP/IP that allows an authorized attacker to elevate privileges over a network. The attack requires low privileges and user interaction , with high complexity , yet yields high impact across confidentiality, integrity, and availability (...