217 matches found
CVE-2026-69818
CVE-2026-69818 is a use-after-free vulnerability in the Windows Win32K component that allows a low-privileged, locally authenticated attacker to elevate privileges . The CVSS v3.1 score is 7.0 (HIGH) , reflecting a local attack vector with high complexity and high impact on confidentiality, integ...
CVE-2026-69853
CVE-2026-69853 is an information disclosure vulnerability in Windows Win32K caused by use of an uninitialized resource. An authorized local attacker with low privileges can exploit it to disclose sensitive information , with no impact on integrity or availability. The CVSS 3.1 score is 4.7 (MEDIU...
EUVD-2026-73611
Use of uninitialized resource in Windows Win32K allows an authorized attacker to disclose information locally...
CVE-2026-69792
CVE-2026-69792 is a race condition in Windows Win32K caused by concurrent execution of a shared resource with improper synchronization. An authorized local attacker with low privileges and high attack complexity can bypass a security feature , resulting in a HIGH integrity impact with no confiden...
EUVD-2026-73610
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Win32K allows an authorized attacker to bypass a security feature locally...
EUVD-2026-73606
Time-of-check time-of-use toctou race condition in Windows Win32K allows an authorized attacker to elevate privileges locally...
CVE-2026-69706
CVE-2026-69706 is a use-after-free vulnerability in the Windows Win32K kernel component that allows an authorized attacker to elevate privileges over a network . The CVSS 3.1 score is 7.1 (HIGH) (AV:N/AC:H/PR:L/UI:R), meaning exploitation requires network access, high attack complexity, low exist...
EUVD-2026-73601
Use after free in Windows Win32K allows an authorized attacker to elevate privileges over a network...
EUVD-2026-73585
Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally...
CVE-2026-69844
CVE-2026-69844 is an out-of-bounds read vulnerability in the Windows Win32K component (the kernel-mode driver that handles the graphical subsystem). An authorized local attacker with low privileges can exploit it to elevate privileges on the affected system. Microsoft rates the severity as HIGH (...
CVE-2026-69652
CVE-2026-69652 is a use-after-free vulnerability in Windows Win32K that allows an authorized attacker to elevate privileges locally . The CVSS v3.1 base score is 7.0 (HIGH) , with a local attack vector, high complexity, low privileges required, no user interaction, and high impact to confidential...
EUVD-2026-73579
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally...
CVE-2026-69610
A buffer over-read in Windows Win32K (the kernel-mode component handling graphical subsystem operations) allows an authorized attacker with low privileges to achieve local privilege escalation . The vulnerability requires local access , has high attack complexity , and does not require user inter...
EUVD-2026-73559
Buffer over-read in Windows Win32K allows an authorized attacker to elevate privileges locally...
EUVD-2026-73558
Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally...
CVE-2026-69630
CVE-2026-69630 is an out-of-bounds read vulnerability in the Windows Win32K kernel driver that allows a locally authenticated attacker to escalate privileges . The CVSS v3.1 score is 7.0 (HIGH) with vector AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, reflecting the high complexity and required low-privil...
EUVD-2026-73487
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally...
CVE-2026-69410
CVE-2026-69410 is a use-after-free vulnerability in Windows Win32K that allows an authorized attacker to escalate privileges locally . The CVSS 3.1 score is 7.0 (HIGH) , with a local attack vector, high attack complexity, low privileges required, no user interaction, and high impact on confidenti...
CVE-2026-69348
CVE-2026-69348 is a heap-based buffer overflow in the Windows Win32K kernel component that allows an authorized, locally-privileged attacker to elevate privileges . The CVSS 3.1 score is 7.8 (HIGH) , with low attack complexity and no user interaction required. CISA's SSVC assessment indicates no ...