3967 matches found
EUVD-2026-73202
Buffer over-read in Windows NTFS allows an authorized attacker to execute code locally...
CVE-2026-68851
CVE-2026-68851 is a buffer over-read vulnerability in Windows NTFS that allows an authorized local attacker to disclose information . The CVSS 3.1 score is 5.5 (Medium) with a local attack vector, low complexity, low privileges required, and no user interaction; impact is limited to high confiden...
CVE-2026-68846
CVE-2026-68846 is a use-after-free vulnerability in the Windows Kernel that allows an authorized attacker to elevate privileges over a network. The CVSS 3.1 score is 7.1 (HIGH) with a vector of AV:N/AC:H/PR:L/UI:R, indicating a network-based attack requiring high complexity , low privileges , and...
EUVD-2026-73197
Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally...
CVE-2026-68841
Windows NTFS is affected by a heap-based buffer overflow that allows an authorized, local attacker with low privileges to elevate privileges without user interaction. The vulnerability is classified with a CVSS 3.1 score of 7.8 (HIGH) — AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H — indicating high impact...
EUVD-2026-73196
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally...
CVE-2026-68835
CVE-2026-68835 is a use-after-free vulnerability in Windows Print Spooler Components that allows an authorized attacker to elevate privileges over a network . The Microsoft-assigned CVSS 3.1 score is 7.1 (HIGH) , with an attack vector of network, high complexity, low privileges required, and user...
EUVD-2026-73195
Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges over a network...
EUVD-2026-73193
Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally...
EUVD-2026-73189
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...
CVE-2026-68784
CVE-2026-68784 is an out-of-bounds read vulnerability in Microsoft SQL Server that allows an authorized attacker to disclose information over a network . The CVSS v3.1 score is 6.5 (Medium) with the vector AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N, indicating a high confidentiality impact with low priv...
EUVD-2026-73188
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...
CVE-2026-68781
CVE-2026-68781 is an out-of-bounds read vulnerability in Microsoft SQL Server that allows an authorized attacker to disclose information over a network. The flaw requires low privileges and no user interaction , with low attack complexity . The CVSS 3.1 base score is 6.5 (MEDIUM) , reflecting a h...
CVE-2026-67633
Microsoft SQL Server is affected by an out-of-bounds read vulnerability that allows an authorized attacker (low privileges) to trigger a denial of service over the network. The CNA-assigned CVSS 3.1 score is 6.5 (MEDIUM) , reflecting network attack vector, low complexity, and high availability im...
EUVD-2026-73184
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...
CVE-2026-67631
CVE-2026-67631 is a heap-based buffer overflow in Microsoft SQL Server that allows an authorized (low-privilege) attacker to achieve remote code execution over the network. The vulnerability carries a CVSS 3.1 score of 8.8 (HIGH) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating hi...
EUVD-2026-73183
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...
CVE-2026-67629
CVE-2026-67629 is an out-of-bounds read vulnerability in Microsoft SQL Server that allows an authorized attacker (low privileges) to disclose information over a network . The CVSS 3.1 score is 6.5 (Medium) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N, reflecting high confidentiality impac...
CVE-2026-67370
CVE-2026-67370 is an SQL injection vulnerability in Microsoft SQL Server where improper neutralization of special elements used in a SQL command allows an authorized attacker to elevate privileges over a network. The vulnerability carries a CVSS v3.1 score of 8.8 (HIGH) with a vector of AV:N/AC:L...