124229 matches found
CVE-2026-67385
Microsoft SQL Server is affected by a use-after-free vulnerability that allows an authorized attacker to achieve remote code execution over a network. The vulnerability is rated CVSS 8.8 (HIGH) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. CISA's SSVC assessment indicates no known exploit...
CVE-2026-56172
CVE-2026-56172 is a use-after-free vulnerability in the Windows VHD miniport driver that allows an authorized local attacker to achieve privilege escalation . The CVSS 3.1 score is 7.8 (High) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating low attack complexity and full impact on...
EUVD-2026-73374
Use after free in Windows VHD miniport driver allows an authorized attacker to elevate privileges locally...
EUVD-2026-73373
Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally...
CVE-2026-62697
CVE-2026-62697 is a use after free vulnerability in Windows Push Notifications that allows an authorized attacker to achieve local privilege escalation . The CVSS 3.1 score is 7.8 (HIGH) with a local attack vector, low complexity, and low privileges required, resulting in high impact to confident...
CVE-2026-62813
CVE-2026-62813 is a use after free vulnerability in Windows Active Directory Domain Services (AD DS) that allows an authorized attacker (low privileges) to achieve remote code execution over a network. The CVSS 3.1 score is 7.5 (HIGH) with high complexity and no user interaction required. No expl...
EUVD-2026-73372
Use after free in Active Directory Domain Services allows an authorized attacker to execute code over a network...
EUVD-2026-73366
Use after free in Windows Server allows an authorized attacker to elevate privileges locally...
CVE-2026-56177
CVE-2026-56177 is a use-after-free vulnerability in Windows Server that allows an authorized attacker to achieve local privilege elevation . The flaw is scored CVSS 3.1: 7.8 (HIGH) with a vector of local attack, low complexity, low privileges required, and no user interaction, resulting in high i...
EUVD-2026-73354
Use after free in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
CVE-2026-83979
CVE-2026-83979 is a use-after-free vulnerability in Windows Biometric Service that allows an authorized attacker to achieve local privilege escalation . The Microsoft CVSS 3.1 score is 7.8 (HIGH) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating low attack complexity and no require...
CVE-2026-69573
CVE-2026-69573 is a use-after-free vulnerability in the Windows Universal Disk Format File System Driver (UDFS) . An authorized local attacker can exploit it to achieve privilege escalation , potentially gaining full control over confidentiality, integrity, and availability (CVSS 3.1 score 7.0 HI...
EUVD-2026-73347
Use after free in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...
CVE-2026-69989
This use-after-free vulnerability in Windows DNS Server allows an unauthorized, unprivileged attacker to execute code over a network. The CVSS 3.1 base score is 8.1 (HIGH) , reflecting a network vector with high attack complexity and no required privileges or user interaction, with high impact to...
EUVD-2026-73341
Use after free in DNS Server allows an unauthorized attacker to execute code over a network...
CVE-2026-80093
A use-after-free flaw in the Windows Cloud Files Mini Filter Driver allows an authorized local attacker to achieve privilege escalation . The vulnerability is rated CVSS 7.0 (HIGH) with a local attack vector, high complexity, and low privileges required, impacting confidentiality, integrity, and ...
EUVD-2026-73326
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally...
EUVD-2026-73321
Use after free in Windows DNS allows an unauthorized attacker to deny service over a network...
CVE-2026-78523
A use-after-free vulnerability in Windows DNS Server allows an unauthenticated, remote attacker to cause a denial of service over the network. NVD scores it 7.5 (HIGH) with low attack complexity, while Microsoft's CNA rates it 5.9 (MEDIUM) with high attack complexity. CISA's SSVC assessment indic...