13 matches found
CVE-2026-69427
Out-of-bounds read in Windows VOLSNAP.SYS allows an authorized attacker to elevate privileges over a network...
EUVD-2026-73697
Heap-based buffer overflow in Windows VOLSNAP.SYS allows an authorized attacker to execute code locally...
CVE-2026-69426
CVE-2026-69426 is a heap-based buffer overflow in the Windows VOLSNAP.SYS driver (part of the Volume Shadow Copy service). An authorized attacker with low privileges can exploit this flaw to achieve local code execution with high impact on confidentiality, integrity, and availability. The vulnera...
CVE-2026-69427
CVE-2026-69427 is an out-of-bounds read vulnerability in the Windows VOLSNAP.SYS driver (Volume Shadow Copy service). An authorized attacker can exploit it over a network to elevate privileges . The CVSS 3.1 base score is 8.0 (HIGH) with a vector of AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H , indicatin...
EUVD-2026-73498
Out-of-bounds read in Windows VOLSNAP.SYS allows an authorized attacker to elevate privileges over a network...
EUVD-2026-72969
Heap-based buffer overflow in Windows VOLSNAP.SYS allows an authorized attacker to elevate privileges locally...
CVE-2026-69420
CVE-2026-69420 is a heap-based buffer overflow in the Windows VOLSNAP.SYS driver that allows an authorized local attacker to escalate privileges . The CVSS 3.1 base score is 7.8 (HIGH) , with a local attack vector, low complexity, low privileges required, no user interaction, and high impact on c...
Microsoft VOLSNAP.SYS Elevation of Privilege Vulnerability
Out-of-bounds read in Windows VOLSNAP.SYS allows an authorized attacker to elevate privileges over a network...
CVE-2023-35312
Microsoft VOLSNAP.SYS Elevation of Privilege Vulnerability...
Privilege escalation
Microsoft VOLSNAP.SYS Elevation of Privilege Vulnerability...
CVE-2023-35312 Microsoft VOLSNAP.SYS Elevation of Privilege Vulnerability
...
CVE-2023-35312
The CVE-2023-35312 entry concerns Microsoft VOLSNAP.SYS with local access privilege escalation. Based on the provided metrics, the vulnerability supports LOCAL attack vector, requiring LOW privileges and no user interaction, with HIGH impact on confidentiality, integrity, and availability (CVSS 3...