CVE-2026-70347

CVE-2026-70347 describes a heap-based buffer overflow in Windows Installer that can enable an authenticated, local attacker to elevate privileges. Affected component is Windows Installer; the vulnerability is a local, privilege-escalation flaw with high impact (C:H/I:H/A:H) and CVSSv3.1 score 7.8...

EUVD-2026-56599

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-70347 Windows Installer Elevation of Privilege Vulnerability

...

CVE-2026-70345 Windows Installer Elevation of Privilege Vulnerability

...

CVE-2026-70346 Windows Installer Elevation of Privilege Vulnerability

...

CVE-2026-70345

CVE-2026-70345 describes a heap-based buffer overflow in Windows Installer that enables a locally authenticated attacker to achieve elevation of privilege. The root cause is a heap-based overflow within the Windows Installer process, with an attacker requiring local access and no user interaction...

CVE-2026-70345 Windows Installer Elevation of Privilege Vulnerability

...

EUVD-2026-56598

Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally...

EUVD-2026-56597

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-70346 Windows Installer Elevation of Privilege Vulnerability

...

CVE-2026-70346

CVE-2026-70346 is a Windows Installer vulnerability: a stack-based buffer overflow could allow an authorized, local attacker to elevate privileges. The description indicates local execution with high impact, but the documents do not provide exploit details or a remediation/patch. Exploitation sta...

CVE-2026-70344 Windows Installer Elevation of Privilege Vulnerability

...

CVE-2026-70344 Windows Installer Elevation of Privilege Vulnerability

...

CVE-2026-70344

CVE-2026-70344 originates from a stack-based buffer overflow in Windows Installer. The vulnerability could allow an authorized attacker to perform local privilege escalation on affected systems. The CVSS 3.1 vector (L/L/P:L/U:N/S:U/C:H/I:H/A:H) indicates local attack vector, low attack complexity...

CVE-2026-66804 Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability

...

EUVD-2026-56595

Improper access control in Windows Cross Device Service allows an authorized attacker to elevate privileges locally...

CVE-2026-66804

Technical details about CVE-2026-66804 are not publicly available in the provided documents. Monitor for updates from Microsoft and NVD for affected products, vulnerable component, impact, and remediation.

CVE-2026-66804 Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability

...

EUVD-2026-56596

Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-65783

CVE-2026-65783 is a use-after-free vulnerability in Windows Autopilot that allows an authorized attacker to perform local privilege escalation. The available documents confirm the affected component (Windows Autopilot) and the underlying issue (use-after-free) with a local attacker requiring low ...