EUVD-2026-73182

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

EUVD-2026-73180

Improper link resolution before file access 'link following' in SQL Server allows an authorized attacker to elevate privileges over a network...

EUVD-2026-73173

Missing authorization in Entra ID allows an authorized attacker to elevate privileges over a network...

EUVD-2026-73166

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-62694

CVE-2026-62694 is a use-after-free vulnerability in Windows Installer that allows a locally authenticated attacker with low privileges to escalate privileges . The attack requires high complexity and no user interaction , with high impact on confidentiality, integrity, and availability (CVSS 3.1:...

Power Automate Elevation of Privilege Vulnerability

Server-side request forgery ssrf in Power Automate allows an authorized attacker to elevate privileges over a network...

Microsoft Fabric Elevation of Privilege Vulnerability

Missing authorization in Microsoft Fabric allows an authorized attacker to elevate privileges over a network...

Windows Installer Elevation of Privilege Vulnerability

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

Microsoft Power Automate Desktop Elevation of Privilege Vulnerability

Relative path traversal in Power Automate allows an authorized attacker to elevate privileges locally...

Windows Management Services Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Management Services allows an authorized attacker to elevate privileges over a network...

Microsoft Office SharePoint Spoofing Vulnerability

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

Windows Audio Service Elevation of Privilege Vulnerability

Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally...

Graphics Kernel Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to execute code locally...

Microsoft Windows Search Component Elevation of Privilege Vulnerability

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

Microsoft Office SharePoint Remote Code Execution Vulnerability

Missing authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

Winsock Elevation of Privilege Vulnerability

Heap-based buffer overflow in Winsock allows an authorized attacker to elevate privileges locally...

Windows DNS Server Remote Code Execution Vulnerability

Use after free in Windows DNS allows an authorized attacker to execute code over a network...

Windows DHCP Server Remote Code Execution Vulnerability

Use after free in Windows DHCP Server allows an authorized attacker to execute code over an adjacent network...

Microsoft Windows Search Component Elevation of Privilege Vulnerability

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

Microsoft SQL Server Remote Code Execution Vulnerability

Out-of-bounds read in SQL Server allows an authorized attacker to execute code over a network...