123127 matches found
CVE-2026-69574
CVE-2026-69574 is a use-after-free vulnerability in the Windows Device Association Service that allows an authorized attacker to achieve local privilege escalation . The CVSS 3.1 base score is 7.0 (HIGH) , with high impact to confidentiality, integrity, and availability, but the attack requires l...
CVE-2026-69540
This Use After Free vulnerability affects the Windows Audio Service component and enables a locally authenticated attacker with low privileges to escalate to higher privileges. The CVSS 3.1 base score is 7.0 (High) , with an attack vector of local , high attack complexity, and no user interaction...
EUVD-2026-73013
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally...
EUVD-2026-73012
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally...
EUVD-2026-73009
Use after free in Active Directory Domain Services allows an unauthorized attacker to execute code over a network...
CVE-2026-69524
CVE-2026-69524 is a use-after-free vulnerability in Windows Active Directory Domain Services that allows an unauthorized, network-based attacker to achieve remote code execution without prior authentication or user interaction. Microsoft rates it CVSS 8.1 (HIGH) with high impact on confidentialit...
CVE-2026-69539
CVE-2026-69539 is a use after free vulnerability in Windows Remote Desktop Services that allows an authorized attacker to achieve remote code execution over a network. The CVSS v3.1 base score is 7.5 (HIGH) , with a vector of AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating that exploitation requi...
EUVD-2026-73007
Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network...
CVE-2026-69525
CVE-2026-69525 is a use-after-free vulnerability in Windows Remote Desktop Services that allows an unauthorized attacker to achieve remote code execution over a network. The Microsoft CNA assigned a CVSS 3.1 score of 9.8 (CRITICAL) with a vector of AV:N/AC:L/PR:N/UI:N, indicating low attack compl...
EUVD-2026-73006
Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network...
CVE-2026-69516
CVE-2026-69516 is a use-after-free vulnerability in the Connected Devices Platform Service (Cdpsvc) , a Windows component. An authorized local attacker can exploit this to achieve privilege escalation , with high impact on confidentiality, integrity, and availability (CVSS 3.1: 7.0 HIGH ; vector ...
EUVD-2026-73003
Use after free in Connected Devices Platform Service Cdpsvc allows an authorized attacker to elevate privileges locally...
EUVD-2026-73001
Use after free in Windows DNS allows an authorized attacker to execute code over a network...
CVE-2026-69551
Windows DNS Server is affected by a use after free vulnerability that allows an authorized attacker to execute arbitrary code over the network. The vulnerability is rated CVSS 8.8 (HIGH) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a network-based attack with low complexity th...
EUVD-2026-72997
Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally...
CVE-2026-69500
CVE-2026-69500 is a use-after-free vulnerability in Windows Image Acquisition (WIA) that allows an authorized local attacker with low privileges to escalate privileges, resulting in high impact to confidentiality, integrity, and availability. The CVSS v3.1 base score is 7.0 (HIGH) with a local at...
CVE-2026-69517
CVE-2026-69517 is a use-after-free vulnerability in Windows Wireless Networking that allows an authorized local attacker to elevate privileges . The CVSS 3.1 score is 7.0 (HIGH) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a local attack with high complexity, low required priv...
EUVD-2026-72996
Use after free in Windows Wireless Networking allows an authorized attacker to elevate privileges locally...
CVE-2026-69470
Windows Connected User Experiences and Telemetry contains a use-after-free flaw that allows an authorized attacker to escalate privileges locally . The vulnerability is rated CVSS 7.0 (HIGH) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a local attack with high complexity, low ...