CVE-2026-69338

CVE-2026-69338 is a use-after-free vulnerability in the Remote Desktop Gateway Service that allows an authorized (low-privilege) attacker to elevate privileges over a network. The CVSS 3.1 score is 7.1 (HIGH) , with high complexity, required user interaction, and high impact on confidentiality, i...

EUVD-2026-73223

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally...

CVE-2026-69366

CVE-2026-69366 is a use-after-free vulnerability in the Windows Kernel that allows an authorized attacker with low privileges to elevate privileges over a network, with user interaction required. The CVSS 3.1 score is 7.1 (HIGH) with a vector of AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H. No specific af...

CVE-2026-69337

A double free vulnerability in the Windows Registry allows an authorized attacker to elevate privileges over a network . The flaw requires low privileges and user interaction , with high attack complexity , but results in high impact to confidentiality, integrity, and availability (CVSS 3.1 score...

EUVD-2026-73222

Double free in Windows Registry allows an authorized attacker to elevate privileges over a network...

EUVD-2026-73221

Use after free in Windows Kernel allows an authorized attacker to elevate privileges over a network...

CVE-2026-69310

CVE-2026-69310 is a use-after-free vulnerability in Windows DNS that allows an authorized attacker to elevate privileges locally. The flaw resides in the DNS component and requires local access with low privileges and no user interaction, though the attack complexity is rated as high. The CVSS 3....

EUVD-2026-73220

Use after free in Windows DNS allows an authorized attacker to elevate privileges locally...

CVE-2026-69336

CVE-2026-69336 is a heap-based buffer overflow in Microsoft Standard XPS that allows an authorized attacker to achieve privilege elevation over a network. The vulnerability is rated CVSS 3.1: 7.1 (HIGH) with a vector of AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H, indicating that exploitation requires us...

CVE-2026-69292

A double free vulnerability in the Remote Desktop Gateway Service (Microsoft) allows an authorized local attacker to elevate privileges . The flaw requires local access with low privileges and high attack complexity , but grants full compromise of confidentiality, integrity, and availability upon...

EUVD-2026-73210

Use after free in Windows Remote Desktop Licensing Service allows an authorized attacker to elevate privileges over a network...

EUVD-2026-73211

Use after free in Windows License Manager allows an authorized attacker to elevate privileges locally...

CVE-2026-68890

CVE-2026-68890 is a heap-based buffer overflow in Microsoft Standard XPS that allows an authorized local attacker to escalate privileges . The vulnerability is scored CVSS 3.1: 7.8 (HIGH) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, reflecting low attack complexity, low privileges requir...

CVE-2026-69271

A heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network with user interaction required . The vulnerability is scored CVSS 3.1: 8.0 (HIGH) with high impact to confidentiality, integrity, and availability. CISA's SSVC assessment indi...

EUVD-2026-73206

Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally...

CVE-2026-68878

CVE-2026-68878 is a stack-based buffer overflow in the Windows Fast FAT Driver that allows an authorized attacker to elevate privileges over a network . The CNA (Microsoft) assigned a CVSS 3.1 score of 8.0 (HIGH) with the vector AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H , indicating network-reachable e...

CVE-2026-68897

A heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to escalate privileges locally . The vulnerability carries a CVSS 3.1 score of 7.0 (HIGH) with the vector AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a local attack with high complexity, low required privileg...

EUVD-2026-73201

Buffer over-read in Windows NTFS allows an authorized attacker to disclose information locally...

EUVD-2026-73202

Buffer over-read in Windows NTFS allows an authorized attacker to execute code locally...

CVE-2026-68875

CVE-2026-68875 is a buffer over-read in Windows NTFS that allows an authorized local attacker to achieve code execution . The vulnerability is rated CVSS 3.1 7.8 (High) with a local attack vector, low complexity, low privileges required, and no user interaction needed. No exploitation details or ...