3897 matches found
EUVD-2026-73454
Double free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a network...
EUVD-2026-73452
Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information locally...
EUVD-2026-73451
Out-of-bounds read in Remote Desktop Client allows an authorized attacker to disclose information over a network...
CVE-2026-69318
Windows Imaging Component contains an out-of-bounds read flaw that allows a locally authenticated attacker to disclose information. The vulnerability carries a CVSS 3.1 score of 5.5 (MEDIUM) , with a local attack vector, low complexity, low privileges required, no user interaction, and a High imp...
CVE-2026-69308
Microsoft Standard XPS is affected by an out-of-bounds read that allows an authorized, local attacker to disclose information . The vulnerability requires low privileges and no user interaction, with a CVSS 3.1 score of 5.5 (MEDIUM) (C:H/I:N/A:N). CISA's SSVC assessment rates exploitation as none...
EUVD-2026-73446
Exposure of sensitive system information to an unauthorized control sphere in Windows License Manager allows an authorized attacker to disclose information locally...
CVE-2026-69313
Microsoft Standard XPS is affected by a heap-based buffer overflow that allows an authorized attacker to elevate privileges over a network. The CVSS 3.1 score is 7.1 (HIGH) , with a network attack vector, high complexity, low privileges required, and user interaction required, leading to high imp...
CVE-2026-69303
CVE-2026-69303 is an out-of-bounds read in the Push Message Routing Service (Microsoft), rated CVSS 5.5 (MEDIUM) . An authorized attacker with low privileges can exploit this locally to disclose information, with no integrity or availability impact. CISA's SSVC assessment indicates no known explo...
CVE-2026-69301
A stack-based buffer overflow in the Windows Win32K component allows an authorized attacker to achieve privilege elevation over a network. The CVSS 3.1 score is 8.0 (HIGH) , with low attack complexity, low privileges required, and user interaction required. Exploitation details are not yet public...
CVE-2026-69300
CVE-2026-69300 is a use-after-free vulnerability in the Windows Push Notifications component that allows an authorized attacker to achieve local privilege escalation . The CVSS v3.1 score is 7.0 (HIGH) with vector AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a high-impact but locally exploitab...
EUVD-2026-73441
Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally...
EUVD-2026-73437
Storing passwords in a recoverable format in Windows DHCP Server allows an authorized attacker to disclose information over a network...
EUVD-2026-73436
Heap-based buffer overflow in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally...
EUVD-2026-73432
Heap-based buffer overflow in Windows DCOM Server allows an authorized attacker to elevate privileges locally...
CVE-2026-69284
CVE-2026-69284 is a heap-based buffer overflow in Windows DCOM Server that allows an authorized attacker to elevate privileges locally . The CVSS 3.1 score is 7.8 (HIGH) with a vector of CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a local attack with low complexity and low privileges...
CVE-2026-69305
CVE-2026-69305 is a use-after-free vulnerability in the Microsoft Windows Search Component that allows an authorized attacker to elevate privileges over a network. The CVSS 3.1 base score is 7.1 (HIGH) , with a vector of AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H , indicating that exploitation requires ...
EUVD-2026-73430
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a network...
EUVD-2026-73426
Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally...
CVE-2026-69280
CVE-2026-69280 is a use-after-free vulnerability in Windows Push Notifications that allows an authorized attacker to achieve local privilege escalation . Microsoft assigned a CVSS 3.1 base score of 7.0 (HIGH) with a vector of local attack, high complexity, low privileges required, and high impact...