CVE-2026-69816

CVE-2026-69816 is a use-after-free vulnerability in Windows Accounts Control that allows an authorized attacker to elevate privileges locally . The CVSS 3.1 base score is 7.0 (HIGH) with a local attack vector, high complexity, low privileges required, and no user interaction, resulting in high im...

EUVD-2026-73581

Use after free in Windows Accounts Control allows an authorized attacker to elevate privileges locally...

CVE-2026-69652

CVE-2026-69652 is a use-after-free vulnerability in Windows Win32K that allows an authorized attacker to elevate privileges locally . The CVSS v3.1 base score is 7.0 (HIGH) , with a local attack vector, high complexity, low privileges required, no user interaction, and high impact to confidential...

EUVD-2026-73573

Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally...

EUVD-2026-73571

Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network...

CVE-2026-69821

CVE-2026-69821 is a local privilege escalation vulnerability in Active Directory Certificate Services (AD CS) caused by improper encoding or escaping of output. An authorized attacker with low privileges can exploit it without user interaction to gain full compromise of confidentiality, integrity...

EUVD-2026-73568

Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...

CVE-2026-69619

CVE-2026-69619 is an out-of-bounds read in the Windows exFAT File System that allows an authorized attacker to elevate privileges over a network . The CVSS 3.1 base score is 8.0 (HIGH) with a vector of AV:N/AC:L/PR:L/UI:R, requiring low privileges and user interaction, with high impact on confide...

EUVD-2026-73565

Use after free in Windows Bluetooth Port Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-69610

A buffer over-read in Windows Win32K (the kernel-mode component handling graphical subsystem operations) allows an authorized attacker with low privileges to achieve local privilege escalation . The vulnerability requires local access , has high attack complexity , and does not require user inter...

EUVD-2026-73558

Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally...

CVE-2026-69616

Windows Remote Desktop Services is affected by an out-of-bounds read vulnerability that allows an authorized local attacker to disclose information (CVSS 3.1: 5.5 MEDIUM — local vector, low privileges required, high confidentiality impact, no integrity or availability impact). CISA's SSVC assessm...

EUVD-2026-73557

Out-of-bounds read in Windows Remote Desktop Services allows an authorized attacker to disclose information locally...

EUVD-2026-73555

Use after free in Virtual Hard Disk VHD Miniport Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-69611

This is a use-after-free vulnerability in the Virtual Hard Disk (VHD) Miniport Driver on Microsoft platforms. An attacker with low local privileges can exploit it to elevate privileges on the system. The CVSS 3.1 score is 7.0 (HIGH) with high complexity, meaning exploitation requires specific con...

EUVD-2026-73551

Out-of-bounds read in Windows SMB Client allows an authorized attacker to disclose information locally...

EUVD-2026-73552

Incomplete list of disallowed inputs in Active Directory Certificate Services AD CS allows an authorized attacker to perform tampering over a network...

CVE-2026-69624

Active Directory Certificate Services (AD CS) is affected by an incomplete list of disallowed inputs , enabling an authorized attacker to perform tampering over a network . The root cause is that the input validation does not fully cover all disallowed values, allowing manipulation of certificate...

CVE-2026-69618

CVE-2026-69618 is an out-of-bounds read in the Windows SMB Client that allows an authorized local attacker to disclose information . The CVSS 3.1 score is 5.5 (MEDIUM) with a local attack vector, low complexity, low privileges required, and high confidentiality impact but no integrity or availabi...

CVE-2026-69625

A heap-based buffer overflow in Windows Connected User Experiences and Telemetry (UXTelemetry) allows an authorized attacker to elevate privileges over a network. The vulnerability requires low privileges and user interaction , but results in high impact to confidentiality, integrity, and availab...