CVE-2026-61368

CVE-2026-61368 is a Windows Hyper-V heap-based buffer overflow that enables a locally authenticated attacker (low privileges, user interaction required) to disclose information. Affected component: Hyper-V; root cause is a heap overflow leading to information disclosure. CVSS 3.1 base score 5.0 (...

CVE-2026-61368 Windows Hyper-V Information Disclosure Vulnerability

...

CVE-2026-61366 Windows Network Connection Broker Elevation of Privilege Vulnerability

...

CVE-2026-61366 Windows Network Connection Broker Elevation of Privilege Vulnerability

...

CVE-2026-61366

Affected component: Windows Network Connection Broker. Vulnerability: double free allows local privilege escalation by an authorized user. Root cause: double-free in the broker when handling network connection objects. Impact: high; local attacker with low privileges and no user interaction can e...

EUVD-2026-56329

Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to disclose information locally...

EUVD-2026-56328

Double free in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally...

EUVD-2026-56327

Heap-based buffer overflow in Windows Display Enhancement Service allows an authorized attacker to elevate privileges locally...

CVE-2026-61367 Windows Remote Desktop Services Elevation of Privilege Vulnerability

...

CVE-2026-61923 Windows Display Enhancement Service Elevation of Privilege Vulnerability

...

CVE-2026-61923

CVE-2026-61923 describes a heap-based buffer overflow in Windows Display Enhancement Service that could allow an authorized local attacker to elevate privileges. Documented impact is high for confidentiality, integrity, and availability; exploitation details, affected Windows versions, specific v...

CVE-2026-61367 Windows Remote Desktop Services Elevation of Privilege Vulnerability

...

CVE-2026-61923 Windows Display Enhancement Service Elevation of Privilege Vulnerability

...

CVE-2026-61367

The CVE-2026-61367 entry describes a local Privilege Escalation in Windows Remote Desktop Services caused by missing authentication for a critical function. An authorized attacker can elevate privileges locally (ATT&CK-style: Privilege Escalation) with a CVSSv3.1 base score of 7.8 (HIGH) and LOCA...

EUVD-2026-56325

Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally...

CVE-2026-61350 Windows NTFS Information Disclosure Vulnerability

...

EUVD-2026-56324

Buffer over-read in Windows NTFS allows an unauthorized attacker to disclose information with a physical attack...

CVE-2026-61356 Windows Remote Desktop Services Elevation of Privilege Vulnerability

...

CVE-2026-61350

Windows NTFS contains a buffer over-read that can disclose information when an attacker performs a physical attack. Affected component: NTFS; root cause: buffer over-read. CVSSv3.1 metrics indicate AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N with base score 4.6 (Medium). Impact is limited to confidential...

CVE-2026-61356

CVE-2026-61356 : The vulnerability concerns Windows Remote Desktop Services . The issue is described as “Missing authentication for a critical function,” enabling an elevation of privileges attack from a local, authenticated position. The CVSS 3.1 score is reported as 7.8 (HIGH) with local access...