4009 matches found
CVE-2026-69712
CVE-2026-69712 is a use-after-free vulnerability in Windows Key Distribution Center that allows an authorized attacker to execute code over a network. The CVSS 3.1 score is 8.8 (HIGH) with an attack vector of network , low privileges required, no user interaction, and high impact to confidentiali...
CVE-2026-69676
CVE-2026-69676 is an authentication bypass by capture-replay vulnerability in Windows Kerberos that allows an authorized attacker to achieve remote code execution over a network. The underlying mechanism involves replaying captured Kerberos authentication traffic, enabling privilege escalation be...
CVE-2026-69822
CVE-2026-69822 is a local privilege escalation vulnerability in Windows Kerberos caused by a numeric truncation error . An authorized attacker with low privileges can exploit this to achieve full confidentiality, integrity, and availability impact (CVSS 3.1: 7.8 HIGH , vector AV:L/AC:L/PR:L/UI:N/...
CVE-2026-69758
A heap-based buffer overflow in the Windows Universal Disk Format File System (UDFS) Driver allows a locally authenticated attacker to elevate privileges . The flaw is rated CVSS 7.8 (High) with full impact to confidentiality, integrity, and availability (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). CIS...
EUVD-2026-73062
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges over a network...
EUVD-2026-73060
Uncaught exception in Windows iSCSI Target Service allows an authorized attacker to deny service over a network...
EUVD-2026-73057
Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally...
CVE-2026-69808
CVE-2026-69808 is an out-of-bounds read vulnerability in the Windows Win32K component that allows an authorized attacker with local access to disclose information . The CVSS 3.1 base score is 5.5 (MEDIUM) , reflecting a local attack vector, low complexity, low privileges required, no user interac...
EUVD-2026-73059
Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally...
EUVD-2026-73058
Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally...
EUVD-2026-73056
Exposure of sensitive system information to an unauthorized control sphere in Windows Win32K allows an authorized attacker to disclose information locally...
CVE-2026-69832
CVE-2026-69832 is an information disclosure vulnerability in Windows Win32K , a kernel-mode component handling graphics and input processing. Exposure of sensitive system information to an unauthorized control sphere allows a low-privilege local attacker to read sensitive data. The CVSS 3.1 score...
CVE-2026-69862
CVE-2026-69862 is an out-of-bounds read in the Windows Wireless Wide Area Network Service that allows an authorized local attacker to disclose information . The CVSS v3.1 score is 5.5 (Medium) with High confidentiality impact, no integrity or availability impact, and requires low privileges over ...
EUVD-2026-73055
Out-of-bounds read in Windows Wireless Wide Area Network Service allows an authorized attacker to disclose information locally...
CVE-2026-69762
CVE-2026-69762 is a stack-based buffer overflow in Windows Win32K that allows an authorized attacker with low privileges to elevate privileges over a network , requiring user interaction. The CVSS 3.1 base score is 8.0 (HIGH) , reflecting high impact to confidentiality, integrity, and availabilit...
CVE-2026-69741
Windows Spaceport.sys is affected by an out-of-bounds read vulnerability that allows a locally authenticated attacker with low privileges to disclose information . The CVSS 3.1 score is 5.5 (Medium) with a local attack vector, low complexity, no user interaction, and a high confidentiality impact...
EUVD-2026-73051
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information locally...
CVE-2026-69896
CVE-2026-69896 is a use after free vulnerability in Windows Error Reporting that allows an authorized, low-privilege attacker to perform a local privilege escalation . The attack requires local access, involves high complexity, and does not require user interaction. The CVSS 3.1 base score is 7.0...