EUVD-2026-73446

Exposure of sensitive system information to an unauthorized control sphere in Windows License Manager allows an authorized attacker to disclose information locally...

CVE-2026-69313

Microsoft Standard XPS is affected by a heap-based buffer overflow that allows an authorized attacker to elevate privileges over a network. The CVSS 3.1 score is 7.1 (HIGH) , with a network attack vector, high complexity, low privileges required, and user interaction required, leading to high imp...

CVE-2026-69303

CVE-2026-69303 is an out-of-bounds read in the Push Message Routing Service (Microsoft), rated CVSS 5.5 (MEDIUM) . An authorized attacker with low privileges can exploit this locally to disclose information, with no integrity or availability impact. CISA's SSVC assessment indicates no known explo...

CVE-2026-69301

A stack-based buffer overflow in the Windows Win32K component allows an authorized attacker to achieve privilege elevation over a network. The CVSS 3.1 score is 8.0 (HIGH) , with low attack complexity, low privileges required, and user interaction required. Exploitation details are not yet public...

CVE-2026-69300

CVE-2026-69300 is a use-after-free vulnerability in the Windows Push Notifications component that allows an authorized attacker to achieve local privilege escalation . The CVSS v3.1 score is 7.0 (HIGH) with vector AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a high-impact but locally exploitab...

EUVD-2026-73441

Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally...

EUVD-2026-73437

Storing passwords in a recoverable format in Windows DHCP Server allows an authorized attacker to disclose information over a network...

EUVD-2026-73436

Heap-based buffer overflow in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally...

EUVD-2026-73432

Heap-based buffer overflow in Windows DCOM Server allows an authorized attacker to elevate privileges locally...

CVE-2026-69284

CVE-2026-69284 is a heap-based buffer overflow in Windows DCOM Server that allows an authorized attacker to elevate privileges locally . The CVSS 3.1 score is 7.8 (HIGH) with a vector of CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a local attack with low complexity and low privileges...

CVE-2026-69305

CVE-2026-69305 is a use-after-free vulnerability in the Microsoft Windows Search Component that allows an authorized attacker to elevate privileges over a network. The CVSS 3.1 base score is 7.1 (HIGH) , with a vector of AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H , indicating that exploitation requires ...

EUVD-2026-73430

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a network...

CVE-2026-69280

CVE-2026-69280 is a use-after-free vulnerability in Windows Push Notifications that allows an authorized attacker to achieve local privilege escalation . Microsoft assigned a CVSS 3.1 base score of 7.0 (HIGH) with a vector of local attack, high complexity, low privileges required, and high impact...

EUVD-2026-73426

Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally...

EUVD-2026-73425

Numeric truncation error in Internet Storage Name Service allows an authorized attacker to disclose information locally...

EUVD-2026-73422

Use of uninitialized resource in Windows GDI+ allows an authorized attacker to disclose information locally...

CVE-2026-69274

CVE-2026-69274 is a Use After Free vulnerability in Windows Win32K that allows an authorized attacker to achieve privilege elevation over a network. The CVSS 3.1 score is 7.1 (HIGH) , with the attack requiring network vector, high complexity , low privileges , and user interaction , impacting con...

EUVD-2026-73421

Use after free in Windows Win32K allows an authorized attacker to elevate privileges over a network...

EUVD-2026-73419

Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally...

CVE-2026-68889

A heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network. The CNA-assessed CVSS 3.1 score is 7.1 (HIGH) with a vector of AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H, indicating that exploitation requires low privileges, user interaction, an...