EUVD-2026-73708

Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network...

CVE-2026-69607

CVE-2026-69607 is a use-after-free vulnerability in Windows Deployment Services (WDS) that allows an unauthorized attacker to achieve remote code execution over a network. The CVSS 3.1 score is 7.5 (HIGH) , with a network attack vector, high complexity, no privileges required, and user interactio...

EUVD-2026-73703

Use after free in Windows Work Folder Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69560

CVE-2026-69560 is a use-after-free vulnerability in the Windows Work Folder Service that allows an authorized local attacker to elevate privileges . The CVSS 3.1 score is 7.0 (HIGH) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, reflecting a high attack complexity and low privileges requir...

EUVD-2026-73693

Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network...

CVE-2026-69397

OpenSSH for Windows is affected by a use-after-free flaw that allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is rated CVSS 7.5 (High) with the vector AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating a network-based attack with high complexity tha...

EUVD-2026-73691

Use after free in Windows Shell allows an authorized attacker to elevate privileges locally...

CVE-2026-69392

CVE-2026-69392 is a use-after-free vulnerability in Windows Shell that allows an authorized attacker to perform local privilege escalation . The CVSS 3.1 score is 7.8 (HIGH) , reflecting a local attack vector with high complexity, low privileges required, no user interaction, and a scope change l...

CVE-2026-69311

CVE-2026-69311 is a use-after-free vulnerability in Windows Audio Service that allows a locally authenticated attacker to elevate privileges . The flaw requires low privileges , high attack complexity , and no user interaction , but yields high impact across confidentiality, integrity, and availa...

EUVD-2026-73688

Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-73681

Use after free in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally...

CVE-2026-69287

Windows Remote Desktop Services contains a use-after-free flaw that allows an authorized local attacker to elevate privileges . The CVSS 3.1 score is 7.0 (HIGH) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, meaning exploitation requires local access , high attack complexity , and low prio...

CVE-2026-72954

CVE-2026-72954 is a use-after-free vulnerability in Windows Deployment Services (Microsoft) that allows an authorized attacker (low privileges) to achieve remote code execution over a network. The CVSS 3.1 score is 7.5 (HIGH) with vector AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, reflecting high attack...

EUVD-2026-73674

Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network...

EUVD-2026-73664

Use after free in Windows SMB Client allows an unauthorized attacker to execute code over a network...

CVE-2026-72936

CVE-2026-72936 is a use-after-free vulnerability in the Windows SMB Client that allows an unauthorized, remote attacker to achieve remote code execution over the network. The CVSS 3.1 base score is 8.1 (HIGH) , reflecting a network attack vector with high complexity, no required privileges, and n...

CVE-2026-72928

A use-after-free vulnerability in Windows DNS Server allows an authorized (low-privilege) attacker to execute remote code over a network . The CVSS 3.1 score is 7.5 (High) , reflecting a network attack vector with high complexity but high impact to confidentiality, integrity, and availability. Th...

EUVD-2026-73662

Use after free in Windows DNS allows an authorized attacker to execute code over a network...

EUVD-2026-73659

Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally...

CVE-2026-71342

A use-after-free flaw in Windows Remote Access Connection Manager enables a locally authenticated attacker to elevate privileges, as disclosed by Microsoft. The vulnerability is rated CVSS 3.1: 7.0 (HIGH) with a vector of local attack, high complexity, low privileges required, and no user interac...