4009 matches found
CVE-2026-69814
CVE-2026-69814 is a use-after-free vulnerability in Windows Credential Providers that allows an authorized attacker to achieve local privilege escalation . The CVSS 3.1 score is 7.0 (HIGH) , with a local attack vector, high complexity, and low privileges required, resulting in high impact to conf...
EUVD-2026-73598
Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally...
EUVD-2026-73593
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges over a network...
CVE-2026-69738
CVE-2026-69738 is an integer overflow or wraparound in the Windows Biometric Service that allows an authorized local attacker to elevate privileges . The vulnerability scores CVSS 7.8 (HIGH) with a local attack vector, low complexity, low privileges required, and high impact to confidentiality, i...
CVE-2026-69841
A heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized attacker to perform local privilege escalation . The vulnerability requires low privileges, no user interaction, and has low attack complexity, with high impact to confidentiality, integrity, and availabilit...
EUVD-2026-73592
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges over a network...
EUVD-2026-73588
Missing authentication for critical function in Windows Modern Device Management MDM allows an authorized attacker to bypass a security feature locally...
CVE-2026-69688
CVE-2026-69688 is a heap-based buffer overflow in Windows Encrypting File System (EFS) that allows an authorized attacker to achieve privilege elevation over a network. The Microsoft Security Response Center classifies it as an Elevation of Privilege vulnerability. The CVSS 3.1 score is 7.1 (HIGH...
EUVD-2026-73589
Heap-based buffer overflow in Windows Encrypting File System EFS allows an authorized attacker to elevate privileges over a network...
CVE-2026-69866
CVE-2026-69866 is a use-after-free vulnerability in Windows Device Association Service that allows an authorized local attacker to escalate privileges. The CVSS v3.1 score is 7.0 (HIGH) , with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H , meaning exploitation requires local access , low privi...
CVE-2026-69679
Windows DHCP Server is affected by an out-of-bounds read vulnerability that allows an authorized attacker (low privileges) to cause a denial of service over an adjacent network . The CVSS 3.1 score is 5.7 (Medium) with high availability impact and no confidentiality or integrity impact. CISA's SS...
EUVD-2026-73586
Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network...
EUVD-2026-73583
Stack-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges over a network...
CVE-2026-69709
A heap-based buffer overflow in Windows NTFS allows an authorized attacker with low privileges and no user interaction to execute code locally. The vulnerability is rated CVSS 3.1 7.8 (HIGH) with full impact on confidentiality, integrity, and availability. The Microsoft reference points to a spec...
CVE-2026-69654
CVE-2026-69654 is a use-after-free vulnerability in Windows Accounts Control that allows an authorized attacker to achieve local privilege escalation . The CVSS 3.1 score is 7.0 (HIGH) with vector AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a local attack requiring high complexity and low pri...
CVE-2026-69816
CVE-2026-69816 is a use-after-free vulnerability in Windows Accounts Control that allows an authorized attacker to elevate privileges locally . The CVSS 3.1 base score is 7.0 (HIGH) with a local attack vector, high complexity, low privileges required, and no user interaction, resulting in high im...
EUVD-2026-73581
Use after free in Windows Accounts Control allows an authorized attacker to elevate privileges locally...
CVE-2026-69652
CVE-2026-69652 is a use-after-free vulnerability in Windows Win32K that allows an authorized attacker to elevate privileges locally . The CVSS v3.1 base score is 7.0 (HIGH) , with a local attack vector, high complexity, low privileges required, no user interaction, and high impact to confidential...