124234 matches found
EUVD-2026-73107
Use after free in Windows Secure Socket Tunneling Protocol SSTP allows an authorized attacker to execute code locally...
CVE-2026-72930
CVE-2026-72930 is a use-after-free vulnerability in Windows Secure Socket Tunneling Protocol (SSTP) that allows an authorized attacker to execute code locally. The CVSS 3.1 score is 7.0 (HIGH) , reflecting a local attack vector with high complexity, low privileges required, no user interaction, a...
EUVD-2026-73100
Use after free in Windows Internet Connection Sharing ICS allows an authorized attacker to elevate privileges locally...
CVE-2026-72926
CVE-2026-72926 is a use-after-free vulnerability in Windows Internet Connection Sharing (ICS) that allows an authorized attacker to achieve local privilege elevation . The CVSS v3.1 score is 7.0 (HIGH) with a local attack vector, high complexity, and low privileges required; impact is rated high ...
CVE-2026-71340
CVE-2026-71340 is a Use After Free vulnerability in Windows File History Service that allows an authorized attacker to locally elevate privileges . The flaw requires low privileges , high attack complexity , and no user interaction , yet yields high impact across confidentiality, integrity, and a...
EUVD-2026-73096
Use after free in Windows File History Service allows an authorized attacker to elevate privileges locally...
EUVD-2026-73093
Use after free in Windows Secure Socket Tunneling Protocol SSTP allows an authorized attacker to elevate privileges locally...
CVE-2026-71332
CVE-2026-71332 is a use-after-free vulnerability in Windows Secure Socket Tunneling Protocol (SSTP) that allows an authorized attacker to perform a local privilege escalation . The CVSS 3.1 score is 7.0 (HIGH) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a high-attack-complexi...
EUVD-2026-73091
Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally...
CVE-2026-71333
CVE-2026-71333 is a use-after-free vulnerability in Windows Remote Access Connection Manager that allows an authorized local attacker with low privileges to escalate privileges. The attack requires high complexity, no user interaction, and has a CVSS 3.1 score of 7.0 (HIGH) with high impact on co...
EUVD-2026-73085
Use after free in Windows Services for NFS ONCRPC XDR Driver allows an authorized attacker to execute code locally...
CVE-2026-70585
CVE-2026-70585 is a use-after-free vulnerability in the Windows Services for NFS ONCRPC XDR Driver . An authorized local attacker with low privileges can exploit it to achieve code execution , with high impact on confidentiality, integrity, and availability (CVSS 3.1 score 7.0 HIGH ; vector AV:L/...
CVE-2026-70342
CVE-2026-70342 affects the Windows Ancillary Function Driver for WinSock (AFD). The vulnerability is a use after free flaw that allows an unauthorized attacker to elevate privileges over a network. The CVSS 3.1 score is 8.1 (HIGH) , with a vector of network-based, high complexity, no privileges r...
EUVD-2026-73076
Use after free in Windows Ancillary Function Driver for WinSock allows an unauthorized attacker to elevate privileges over a network...
EUVD-2026-73072
Use after free in Windows Hello allows an authorized attacker to elevate privileges locally...
EUVD-2026-73073
Use after free in Windows Virtual Trusted Platform Module allows an authorized attacker to elevate privileges locally...
CVE-2026-69890
CVE-2026-69890 is a Use-After-Free vulnerability in Windows Virtual Trusted Platform Module (vTPM) that allows an authorized local attacker to escalate privileges. The attack requires high privileges and high complexity , with no user interaction needed, but results in a scope change and high imp...
CVE-2026-69740
Windows Hello contains a use-after-free flaw that allows an authorized local attacker to elevate privileges . The vulnerability is rated CVSS 8.8 (HIGH) with a changed scope, indicating the impact extends beyond the vulnerable component itself, resulting in high confidentiality, integrity, and av...
CVE-2026-69712
CVE-2026-69712 is a use-after-free vulnerability in Windows Key Distribution Center that allows an authorized attacker to execute code over a network. The CVSS 3.1 score is 8.8 (HIGH) with an attack vector of network , low privileges required, no user interaction, and high impact to confidentiali...