3932 matches found
CVE-2026-71332
CVE-2026-71332 is a use-after-free vulnerability in Windows Secure Socket Tunneling Protocol (SSTP) that allows an authorized attacker to perform a local privilege escalation . The CVSS 3.1 score is 7.0 (HIGH) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a high-attack-complexi...
CVE-2026-71336
Windows Work Folder Service is vulnerable to an integer overflow or wraparound flaw that allows an authorized attacker to achieve remote code execution over the network. The CVSS 3.1 base score is 8.8 (HIGH) with vector AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating network-attackable exploitati...
CVE-2026-70584
Windows Core Messaging is affected by a type confusion vulnerability (access of resource using incompatible type) that allows a locally authenticated attacker to escalate privileges. The impact is rated HIGH (CVSS 3.1 base score 7.8, full confidentiality, integrity, and availability impact) with ...
EUVD-2026-73079
Double free in Windows Audio Service allows an authorized attacker to elevate privileges locally...
EUVD-2026-73075
Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally...
CVE-2026-69890
CVE-2026-69890 is a Use-After-Free vulnerability in Windows Virtual Trusted Platform Module (vTPM) that allows an authorized local attacker to escalate privileges. The attack requires high privileges and high complexity , with no user interaction needed, but results in a scope change and high imp...
CVE-2026-69712
CVE-2026-69712 is a use-after-free vulnerability in Windows Key Distribution Center that allows an authorized attacker to execute code over a network. The CVSS 3.1 score is 8.8 (HIGH) with an attack vector of network , low privileges required, no user interaction, and high impact to confidentiali...
CVE-2026-69676
CVE-2026-69676 is an authentication bypass by capture-replay vulnerability in Windows Kerberos that allows an authorized attacker to achieve remote code execution over a network. The underlying mechanism involves replaying captured Kerberos authentication traffic, enabling privilege escalation be...
CVE-2026-69822
CVE-2026-69822 is a local privilege escalation vulnerability in Windows Kerberos caused by a numeric truncation error . An authorized attacker with low privileges can exploit this to achieve full confidentiality, integrity, and availability impact (CVSS 3.1: 7.8 HIGH , vector AV:L/AC:L/PR:L/UI:N/...
CVE-2026-69758
A heap-based buffer overflow in the Windows Universal Disk Format File System (UDFS) Driver allows a locally authenticated attacker to elevate privileges . The flaw is rated CVSS 7.8 (High) with full impact to confidentiality, integrity, and availability (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). CIS...
EUVD-2026-73062
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges over a network...
EUVD-2026-73060
Uncaught exception in Windows iSCSI Target Service allows an authorized attacker to deny service over a network...
EUVD-2026-73057
Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally...
CVE-2026-69808
CVE-2026-69808 is an out-of-bounds read vulnerability in the Windows Win32K component that allows an authorized attacker with local access to disclose information . The CVSS 3.1 base score is 5.5 (MEDIUM) , reflecting a local attack vector, low complexity, low privileges required, no user interac...
EUVD-2026-73059
Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally...
EUVD-2026-73058
Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally...
EUVD-2026-73056
Exposure of sensitive system information to an unauthorized control sphere in Windows Win32K allows an authorized attacker to disclose information locally...
CVE-2026-69832
CVE-2026-69832 is an information disclosure vulnerability in Windows Win32K , a kernel-mode component handling graphics and input processing. Exposure of sensitive system information to an unauthorized control sphere allows a low-privilege local attacker to read sensitive data. The CVSS 3.1 score...
CVE-2026-69862
CVE-2026-69862 is an out-of-bounds read in the Windows Wireless Wide Area Network Service that allows an authorized local attacker to disclose information . The CVSS v3.1 score is 5.5 (Medium) with High confidentiality impact, no integrity or availability impact, and requires low privileges over ...