3932 matches found
CVE-2026-72943
A use after free vulnerability in Windows Deployment Services allows an authorized attacker (low privileges) to achieve remote code execution over a network. The CVSS v3.1 score is 7.5 (HIGH) with vector AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, reflecting high attack complexity but high impact on con...
EUVD-2026-73111
Heap-based buffer overflow in Storage Port Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-72944
CVE-2026-72944 is a heap-based buffer overflow in the Windows Fax Service that allows an authorized attacker to achieve local privilege escalation . The vulnerability carries a CVSS 3.1 base score of 7.8 (High) , with a local attack vector, low complexity, low required privileges, and no user int...
EUVD-2026-73110
Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally...
EUVD-2026-73109
Null pointer dereference in Windows Routing and Remote Access Service RRAS allows an authorized attacker to deny service over a network...
EUVD-2026-73108
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally...
CVE-2026-72939
CVE-2026-72939 is a null pointer dereference in Windows Routing and Remote Access Service (RRAS) that allows an authorized attacker to cause a denial of service over a network. The CVSS 3.1 score is 6.5 (Medium) with vector AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H , indicating a network-attackable fla...
CVE-2026-72935
CVE-2026-72935 is an out-of-bounds read in the Windows NTFS driver that allows a local attacker with high privileges to escalate privileges . The Microsoft CVSS 3.1 score is 6.7 (Medium) , reflecting a local attack vector, low complexity, and high impact on confidentiality, integrity, and availab...
EUVD-2026-73107
Use after free in Windows Secure Socket Tunneling Protocol SSTP allows an authorized attacker to execute code locally...
CVE-2026-72930
CVE-2026-72930 is a use-after-free vulnerability in Windows Secure Socket Tunneling Protocol (SSTP) that allows an authorized attacker to execute code locally. The CVSS 3.1 score is 7.0 (HIGH) , reflecting a local attack vector with high complexity, low privileges required, no user interaction, a...
EUVD-2026-73106
Double free in Windows Routing and Remote Access Service RRAS allows an authorized attacker to elevate privileges locally...
EUVD-2026-73104
Out-of-bounds write in Windows Spaceport.sys allows an authorized attacker to execute code locally...
CVE-2026-71353
CVE-2026-71353 is a double free vulnerability in Windows Routing and Remote Access Service (RRAS) that allows an authorized local attacker to elevate privileges. The vulnerability requires local access with low privileges , has high attack complexity , and needs no user interaction , yielding a C...
CVE-2026-71343
CVE-2026-71343 affects Windows Remote Access Connection Manager and is caused by a heap-based buffer overflow that allows a local, authorized attacker with low privileges to execute code. The CVSS 3.1 score is 7.8 (HIGH) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating full compro...
CVE-2026-71339
CVE-2026-71339 is a heap-based buffer overflow in Windows Installer that allows an authorized local attacker to elevate privileges . The CVSS 3.1 score is 6.7 (MEDIUM) with a vector of AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H, indicating that while high privileges are required, the impact on confident...
EUVD-2026-73097
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally...
EUVD-2026-73095
Double free in Windows Failover Cluster allows an authorized attacker to elevate privileges locally...
EUVD-2026-73093
Use after free in Windows Secure Socket Tunneling Protocol SSTP allows an authorized attacker to elevate privileges locally...
CVE-2026-71334
CVE-2026-71334 is a heap-based buffer overflow in the Windows NFS Portmapper component that allows an authorized local attacker to elevate privileges. The Microsoft-assigned CVSS 3.1 base score is 7.8 (High) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, reflecting low privilege requiremen...