4009 matches found
CVE-2026-69821
CVE-2026-69821 is a local privilege escalation vulnerability in Active Directory Certificate Services (AD CS) caused by improper encoding or escaping of output. An authorized attacker with low privileges can exploit it without user interaction to gain full compromise of confidentiality, integrity...
EUVD-2026-73568
Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...
CVE-2026-69619
CVE-2026-69619 is an out-of-bounds read in the Windows exFAT File System that allows an authorized attacker to elevate privileges over a network . The CVSS 3.1 base score is 8.0 (HIGH) with a vector of AV:N/AC:L/PR:L/UI:R, requiring low privileges and user interaction, with high impact on confide...
EUVD-2026-73565
Use after free in Windows Bluetooth Port Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-69610
A buffer over-read in Windows Win32K (the kernel-mode component handling graphical subsystem operations) allows an authorized attacker with low privileges to achieve local privilege escalation . The vulnerability requires local access , has high attack complexity , and does not require user inter...
EUVD-2026-73558
Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally...
CVE-2026-69616
Windows Remote Desktop Services is affected by an out-of-bounds read vulnerability that allows an authorized local attacker to disclose information (CVSS 3.1: 5.5 MEDIUM — local vector, low privileges required, high confidentiality impact, no integrity or availability impact). CISA's SSVC assessm...
EUVD-2026-73557
Out-of-bounds read in Windows Remote Desktop Services allows an authorized attacker to disclose information locally...
EUVD-2026-73555
Use after free in Virtual Hard Disk VHD Miniport Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-69611
This is a use-after-free vulnerability in the Virtual Hard Disk (VHD) Miniport Driver on Microsoft platforms. An attacker with low local privileges can exploit it to elevate privileges on the system. The CVSS 3.1 score is 7.0 (HIGH) with high complexity, meaning exploitation requires specific con...
EUVD-2026-73552
Incomplete list of disallowed inputs in Active Directory Certificate Services AD CS allows an authorized attacker to perform tampering over a network...
EUVD-2026-73551
Out-of-bounds read in Windows SMB Client allows an authorized attacker to disclose information locally...
CVE-2026-69624
Active Directory Certificate Services (AD CS) is affected by an incomplete list of disallowed inputs , enabling an authorized attacker to perform tampering over a network . The root cause is that the input validation does not fully cover all disallowed values, allowing manipulation of certificate...
CVE-2026-69618
CVE-2026-69618 is an out-of-bounds read in the Windows SMB Client that allows an authorized local attacker to disclose information . The CVSS 3.1 score is 5.5 (MEDIUM) with a local attack vector, low complexity, low privileges required, and high confidentiality impact but no integrity or availabi...
CVE-2026-69625
A heap-based buffer overflow in Windows Connected User Experiences and Telemetry (UXTelemetry) allows an authorized attacker to elevate privileges over a network. The vulnerability requires low privileges and user interaction , but results in high impact to confidentiality, integrity, and availab...
EUVD-2026-73548
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
EUVD-2026-73545
Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally...
EUVD-2026-73540
Untrusted pointer dereference in Windows Print Spooler Components allows an authorized attacker to deny service over a network...