EUVD-2026-56413

Improper control of resource identifiers 'resource injection' in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...

EUVD-2026-56406

Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to execute code locally...

EUVD-2026-56404

Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network...

EUVD-2026-56403

Use after free in Capability Access Management Service camsvc allows an authorized attacker to elevate privileges locally...

EUVD-2026-56402

Heap-based buffer overflow in Windows GDI+ allows an authorized attacker to execute code locally...

EUVD-2026-56397

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows DNS allows an unauthorized attacker to execute code over a network...

EUVD-2026-56395

Use after free in Active Directory Certificate Services AD CS allows an authorized attacker to execute code over a network...

EUVD-2026-56394

Out-of-bounds write in Windows DNS allows an unauthorized attacker to execute code over an adjacent network...

EUVD-2026-56393

Heap-based buffer overflow in Reliable Multicast Transport Driver RMCAST allows an unauthorized attacker to execute code over an adjacent network...

EUVD-2026-56386

Use after free in Windows DNS allows an authorized attacker to execute code over a network...

EUVD-2026-56380

Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-62740

CVE-2026-62740 describes a vulnerability in the Windows Imaging Component where an uninitialized resource can lead to local information disclosure by an authorized attacker. The issue is reported with a CVSS v3.1 base score of 5.5 (Medium), vector: Local, low attack complexity, and low privileges...

EUVD-2026-56364

Use of uninitialized resource in Windows Imaging Component allows an authorized attacker to disclose information locally...

EUVD-2026-56363

Buffer over-read in Windows Win32K allows an authorized attacker to disclose information locally...

EUVD-2026-56362

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Telephony Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-56360

Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-56356

Integer underflow wrap or wraparound in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network...

EUVD-2026-56355

Integer underflow wrap or wraparound in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network...

EUVD-2026-56349

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally...

EUVD-2026-56338

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally...