EUVD-2026-56405

Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...

CVE-2026-62894 Windows DWM Core Library Elevation of Privilege Vulnerability

...

CVE-2026-62893 Windows Deployment Services TFTP Server Remote Code Execution Vulnerability

...

CVE-2026-62894

CVE-2026-62894 describes a heap-based buffer overflow in the Windows DWM Core Library that allows an authenticated local attacker to elevate privileges. The vulnerability is documented across CVE/NVD listings with a CVSSv3.1 base score of 7.8 (HIGH), vector: LOCAL, LOW attack complexity, and NONE...

CVE-2026-62892 Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability

...

EUVD-2026-56403

Use after free in Capability Access Management Service camsvc allows an authorized attacker to elevate privileges locally...

CVE-2026-62892 Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability

...

CVE-2026-62892

CVE-2026-62892 is a use-after-free vulnerability in the Capability Access Management Service (camsvc) that could allow an authorized attacker to elevate privileges locally. The publicly available data identifies a local attack vector with high impact (confidentiality, integrity, and availability)...

EUVD-2026-56402

Heap-based buffer overflow in Windows GDI+ allows an authorized attacker to execute code locally...

CVE-2026-62890

CVE-2026-62890 is a heap-based buffer overflow in Windows GDI+ that allows an authorized attacker to execute code locally. CVSS v3.1 base score 7.8 (HIGH) with LOCAL attack vector, requiring LOW privileges and no user interaction; impact to confidentiality, integrity, and availability is HIGH. No...

CVE-2026-62889 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

...

CVE-2026-62889 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

...

CVE-2026-62890 Windows GDI+ Elevation of Privilege Vulnerability

...

EUVD-2026-56401

Double free in Windows Secure Socket Tunneling Protocol SSTP allows an unauthorized attacker to execute code over a network...

CVE-2026-62889

CVE-2026-62889 is a Windows SSTP remote code execution vulnerability caused by a double free in the SSTP implementation. The available descriptions from NVD and CVE records state that an unauthenticated attacker could exploit this over a network to execute arbitrary code. The CVSS 3.1 base score ...

CVE-2026-62890 Windows GDI+ Elevation of Privilege Vulnerability

...

EUVD-2026-56400

Stack-based buffer overflow in Windows DNS allows an unauthorized attacker to execute code over a network...

CVE-2026-62878

CVE-2026-62878 is a Windows DNS Server remote code execution vulnerability caused by a stack-based buffer overflow. The NVD entry indicates a network-based exploit with a critical CVSS v3.1 base score of 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Impact is the ability for an unauthenticated, remo...

CVE-2026-62877 Windows Win32k Elevation of Privilege Vulnerability

...

CVE-2026-62877

CVE-2026-62877 is a Windows Win32K vulnerability described as a stack-based buffer overflow that enables local privilege escalation by an authorized user. The affected component is the Windows Win32K subsystem; the root cause is a stack-based buffer overflow within Win32K code paths. The CVSS vec...