124234 matches found
EUVD-2026-73354
Use after free in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
CVE-2026-83979
CVE-2026-83979 is a use-after-free vulnerability in Windows Biometric Service that allows an authorized attacker to achieve local privilege escalation . The Microsoft CVSS 3.1 score is 7.8 (HIGH) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating low attack complexity and no require...
CVE-2026-69573
CVE-2026-69573 is a use-after-free vulnerability in the Windows Universal Disk Format File System Driver (UDFS) . An authorized local attacker can exploit it to achieve privilege escalation , potentially gaining full control over confidentiality, integrity, and availability (CVSS 3.1 score 7.0 HI...
EUVD-2026-73347
Use after free in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...
CVE-2026-69989
This use-after-free vulnerability in Windows DNS Server allows an unauthorized, unprivileged attacker to execute code over a network. The CVSS 3.1 base score is 8.1 (HIGH) , reflecting a network vector with high attack complexity and no required privileges or user interaction, with high impact to...
EUVD-2026-73341
Use after free in DNS Server allows an unauthorized attacker to execute code over a network...
CVE-2026-80093
A use-after-free flaw in the Windows Cloud Files Mini Filter Driver allows an authorized local attacker to achieve privilege escalation . The vulnerability is rated CVSS 7.0 (HIGH) with a local attack vector, high complexity, and low privileges required, impacting confidentiality, integrity, and ...
EUVD-2026-73326
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally...
EUVD-2026-73321
Use after free in Windows DNS allows an unauthorized attacker to deny service over a network...
CVE-2026-78523
A use-after-free vulnerability in Windows DNS Server allows an unauthenticated, remote attacker to cause a denial of service over the network. NVD scores it 7.5 (HIGH) with low attack complexity, while Microsoft's CNA rates it 5.9 (MEDIUM) with high attack complexity. CISA's SSVC assessment indic...
EUVD-2026-73291
Use after free in Windows Security Center allows an authorized attacker to elevate privileges locally...
CVE-2026-77899
CVE-2026-77899 is a use-after-free vulnerability in Windows Security Center that allows an authorized attacker to escalate privileges locally . The CVSS v3.1 score is 7.0 (HIGH) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, reflecting the need for low privileges and high attack complexity...
CVE-2026-77505
CVE-2026-77505 is a use after free vulnerability in Windows DNS Server that allows an unauthorized, unauthenticated attacker to execute code over a network. The flaw is scored 8.1 (HIGH) under CVSS 3.1, with a network attack vector, high attack complexity, no required privileges, and high impact ...
EUVD-2026-73275
Use after free in DNS Server allows an unauthorized attacker to execute code over a network...
EUVD-2026-73268
Release of invalid pointer or reference in Windows Device Association Service allows an authorized attacker to elevate privileges locally...
CVE-2026-69579
CVE-2026-69579 is a use-after-free vulnerability in Windows Message Queuing that allows an unauthorized attacker to execute code over a network . The CVSS 3.1 score is 9.8 (Critical) with a vector of AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, indicating network-exploitable, low-complexity remote code e...
EUVD-2026-73261
Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network...
EUVD-2026-73256
Use after free in Windows Internet Connection Sharing ICS allows an unauthorized attacker to execute code over a network...
CVE-2026-72983
CVE-2026-72983 is a use-after-free vulnerability in Windows Internet Connection Sharing (ICS) that allows an unauthorized remote attacker to achieve remote code execution over the network. The CVSS 3.1 score is 9.8 (Critical) with no privileges or user interaction required. CISA's SSVC assessment...