227184 matches found
EUVD-2026-56404
Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network...
CVE-2026-62894 Windows DWM Core Library Elevation of Privilege Vulnerability
...
CVE-2026-62893 Windows Deployment Services TFTP Server Remote Code Execution Vulnerability
...
CVE-2026-62893
CVE-2026-62893 affects Windows Deployment Services’ TFTP Server. The provided sources confirm a use-after-free defect that enables an unauthenticated, remote attacker to execute code over the network. CVSSv3.1 base score is 9.8 (CRITICAL) with network exploitation, no user interaction, and impact...
CVE-2026-62894
CVE-2026-62894 describes a heap-based buffer overflow in the Windows DWM Core Library that allows an authenticated local attacker to elevate privileges. The vulnerability is documented across CVE/NVD listings with a CVSSv3.1 base score of 7.8 (HIGH), vector: LOCAL, LOW attack complexity, and NONE...
CVE-2026-62893 Windows Deployment Services TFTP Server Remote Code Execution Vulnerability
...
CVE-2026-62894 Windows DWM Core Library Elevation of Privilege Vulnerability
...
EUVD-2026-56405
Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...
CVE-2026-62892 Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability
...
CVE-2026-62892 Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability
...
EUVD-2026-56403
Use after free in Capability Access Management Service camsvc allows an authorized attacker to elevate privileges locally...
CVE-2026-62892
CVE-2026-62892 is a use-after-free vulnerability in the Capability Access Management Service (camsvc) that could allow an authorized attacker to elevate privileges locally. The publicly available data identifies a local attack vector with high impact (confidentiality, integrity, and availability)...
CVE-2026-62890
CVE-2026-62890 is a heap-based buffer overflow in Windows GDI+ that allows an authorized attacker to execute code locally. CVSS v3.1 base score 7.8 (HIGH) with LOCAL attack vector, requiring LOW privileges and no user interaction; impact to confidentiality, integrity, and availability is HIGH. No...
EUVD-2026-56402
Heap-based buffer overflow in Windows GDI+ allows an authorized attacker to execute code locally...
CVE-2026-62889 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
...
CVE-2026-62889 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
...
CVE-2026-62890 Windows GDI+ Elevation of Privilege Vulnerability
...
CVE-2026-62889
CVE-2026-62889 is a Windows SSTP remote code execution vulnerability caused by a double free in the SSTP implementation. The available descriptions from NVD and CVE records state that an unauthenticated attacker could exploit this over a network to execute arbitrary code. The CVSS 3.1 base score ...