3878 matches found
EUVD-2026-73514
Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...
CVE-2026-69459
CVE-2026-69459 is a heap-based buffer overflow in the Windows Power Dependency Coordinator that allows an authorized attacker to achieve local privilege escalation . The Microsoft CVSS v3.1 score is 7.8 (HIGH) with vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating that low-privilege access i...
EUVD-2026-73510
Missing authorization in Microsoft Windows Search Component allows an authorized attacker to perform tampering locally...
CVE-2026-69453
CVE-2026-69453 is a missing authorization vulnerability in the Microsoft Windows Search Component that allows an authenticated, low-privilege local attacker to perform tampering (integrity impact). The CVSS 3.1 base score is 5.5 (Medium) with the vector AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N, indica...
CVE-2026-69445
CVE-2026-69445 is a local privilege escalation vulnerability in Windows Compressed Folder caused by an improper limitation of a pathname to a restricted directory (path traversal ). An authorized attacker with low privileges can exploit this locally without user interaction to achieve high impact...
CVE-2026-69466
CVE-2026-69466 is a Time-of-Check Time-of-Use (TOCTOU) race condition in the Windows Kernel that allows a low-privileged local attacker to elevate privileges . The vulnerability carries a CVSS 3.1 score of 7.0 (High) , with high impact to confidentiality, integrity, and availability, though explo...
EUVD-2026-73507
Time-of-check time-of-use toctou race condition in Windows Kernel allows an authorized attacker to elevate privileges locally...
EUVD-2026-73503
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
EUVD-2026-73502
Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally...
CVE-2026-69449
CVE-2026-69449 is a heap-based buffer overflow in Windows BitLocker that allows an authorized attacker to execute code locally. The CVSS 3.1 score is 6.7 (Medium) , reflecting a local attack vector with high privileges required and no user interaction , resulting in high impact on confidentiality...
EUVD-2026-73501
Heap-based buffer overflow in Windows BitLocker allows an authorized attacker to execute code locally...
EUVD-2026-73500
Use after free in Windows Embedded Mode Service allows an authorized attacker to elevate privileges locally...
EUVD-2026-73497
Improper link resolution before file access 'link following' in Windows NTFS allows an authorized attacker to perform tampering locally...
CVE-2026-69424
CVE-2026-69424 is a heap-based buffer overflow in Windows Distributed File System (DFS) that allows an authorized attacker to elevate privileges locally . The CVSS 3.1 score is 7.8 (HIGH) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating low attack complexity and no user interactio...
EUVD-2026-73492
Buffer over-read in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network...
EUVD-2026-73490
Missing release of memory after effective lifetime in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network...
EUVD-2026-73486
Use after free in Windows NDIS allows an authorized attacker to elevate privileges over a network...
CVE-2026-69396
A use-after-free vulnerability in the Windows NDIS (Network Driver Interface Specification) component allows an authorized attacker to elevate privileges over a network . The CVSS 3.1 score is 7.1 (HIGH) , with a network attack vector, high complexity, low privileges required, and user interactio...
EUVD-2026-73485
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information over a network...
CVE-2026-69388
CVE-2026-69388 is a use-after-free vulnerability in Windows Bluetooth Service that allows a local attacker with low privileges to elevate privileges . The attack requires local access and is characterized by high complexity , with no user interaction needed. The CVSS 3.1 base score is 7.0 (HIGH) ...