227590 matches found
CVE-2026-65662
CVE-2026-65662 describes an out-of-bounds read in Windows GDI that allows an authorized local attacker to disclose information. The vulnerability impacts Windows GDI components and is rated with a CVSS v3.1 base score of 5.5 (Medium) , with local attack vector, low attack complexity, and low priv...
CVE-2026-65662 Windows GDI Information Disclosure Vulnerability
...
EUVD-2026-56434
Out-of-bounds read in Windows GDI allows an authorized attacker to disclose information locally...
CVE-2026-65657 Microsoft Office Remote Code Execution Vulnerability
...
CVE-2026-63513 Microsoft Office Graphics Component Remote Code Execution Vulnerability
...
CVE-2026-62909 .NET Elevation of Privilege Vulnerability
...
CVE-2026-62908 Windows Backup Engine Elevation of Privilege Vulnerability
...
CVE-2026-62908
CVE-2026-62908: A race condition in the Windows Backup Engine allows local privilege escalation by an authorized attacker. Documented impact: high across confidentiality, integrity, and availability (CVSS 3.1 base score 7.0; LOCAL access; HIGH likelihood of impact). Affected component is the Wind...
CVE-2026-62908 Windows Backup Engine Elevation of Privilege Vulnerability
...
EUVD-2026-56411
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Backup Engine allows an authorized attacker to elevate privileges locally...
CVE-2026-62894 Windows DWM Core Library Elevation of Privilege Vulnerability
...
EUVD-2026-56404
Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network...
CVE-2026-62893 Windows Deployment Services TFTP Server Remote Code Execution Vulnerability
...
CVE-2026-62893
CVE-2026-62893 affects Windows Deployment Services’ TFTP Server. The provided sources confirm a use-after-free defect that enables an unauthenticated, remote attacker to execute code over the network. CVSSv3.1 base score is 9.8 (CRITICAL) with network exploitation, no user interaction, and impact...
EUVD-2026-56405
Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...
CVE-2026-62893 Windows Deployment Services TFTP Server Remote Code Execution Vulnerability
...
CVE-2026-62894
CVE-2026-62894 describes a heap-based buffer overflow in the Windows DWM Core Library that allows an authenticated local attacker to elevate privileges. The vulnerability is documented across CVE/NVD listings with a CVSSv3.1 base score of 7.8 (HIGH), vector: LOCAL, LOW attack complexity, and NONE...
CVE-2026-62894 Windows DWM Core Library Elevation of Privilege Vulnerability
...