4009 matches found
CVE-2026-68886
CVE-2026-68886 is a use-after-free vulnerability in the Windows Network Connection Broker component. An authorized local attacker can exploit it to disclose information , with high confidentiality impact and no integrity or availability impact (CVSS 3.1: 5.5 MEDIUM , vector AV:L/AC:L/PR:L/UI:N/S:...
EUVD-2026-73417
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally...
EUVD-2026-73416
Use after free in Windows Network Connection Broker allows an authorized attacker to disclose information locally...
CVE-2026-68885
CVE-2026-68885 is a heap-based buffer overflow in Microsoft Standard XPS that allows an authorized local attacker to escalate privileges. The vulnerability carries a CVSS 3.1 base score of 7.8 (HIGH) with the vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, meaning it requires local access with low pr...
CVE-2026-68852
Microsoft Account is affected by a use of uninitialized resource vulnerability that allows an authorized attacker with low privileges to locally disclose information (CVSS 3.1: 5.5, MEDIUM). The vulnerability requires local access and no user interaction, with a high impact on confidentiality but...
EUVD-2026-73411
Use of uninitialized resource in Microsoft Account allows an authorized attacker to disclose information locally...
EUVD-2026-73412
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally...
EUVD-2026-73409
Out-of-bounds read in Windows Program Compatibility Assistant Service allows an authorized attacker to disclose information over a network...
EUVD-2026-73408
Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges over a network...
EUVD-2026-73407
Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network...
CVE-2026-68848
CVE-2026-68848 is a heap-based buffer overflow in Windows Print Spooler Components that allows an authorized local attacker to escalate privileges . The vulnerability requires low privileges , has low attack complexity , and needs no user interaction , yielding a CVSS 3.1 score of 7.8 (HIGH) with...
EUVD-2026-73402
Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network...
EUVD-2026-73401
Use after free in Microsoft Office Word allows an authorized attacker to disclose information locally...
CVE-2026-68834
A stack-based buffer overflow in Windows NTFS allows an authorized attacker to achieve privilege elevation over a network. The vulnerability is rated CVSS 8.0 (HIGH) with a vector of network access, low complexity, low privileges required, and user interaction required, resulting in high impact t...
EUVD-2026-73400
Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network...
CVE-2026-68831
CVE-2026-68831 is an information disclosure vulnerability in Windows Defender Firewall Service . The issue arises from files or directories accessible to external parties, allowing an authorized attacker with low privileges to disclose information locally (CVSS 3.1 score 5.5 – MEDIUM ; vector AV:...
EUVD-2026-73399
Integer underflow wrap or wraparound in Windows GDI+ allows an authorized attacker to elevate privileges over a network...
EUVD-2026-73398
Files or directories accessible to external parties in Windows Defender Firewall Service allows an authorized attacker to disclose information locally...
CVE-2026-68780
CVE-2026-68780 is an out-of-bounds read in Microsoft SQL Server that allows an authorized attacker (low privileges required) to disclose information over a network. The CVSS 3.1 score is 6.5 (MEDIUM) with vector AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N , reflecting high confidentiality impact with no ...