4993 matches found
CVE-2026-83982
CVE-2026-83982 is a heap-based buffer overflow in the Windows Biometric Service that allows an authorized attacker to perform a local privilege escalation . The vulnerability is rated HIGH (CVSS 3.1: 7.8 ) with a local attack vector, low complexity, low privileges required, and no user interactio...
EUVD-2026-73905
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
CVE-2026-83977
CVE-2026-83977 is a heap-based buffer overflow in the Windows Biometric Service that allows an authorized, low-privilege local attacker to achieve local privilege escalation . The CVSS 3.1 score is 7.8 (HIGH) with vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating that exploitation requires n...
CVE-2026-83973
CVE-2026-83973 is a heap-based buffer overflow in the Windows Biometric Service component, allowing a locally authenticated attacker with low privileges to achieve privilege escalation with high impact to confidentiality, integrity, and availability (CVSS 3.1 score 7.8 – HIGH ). CISA's SSVC asses...
EUVD-2026-73902
Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally...
CVE-2026-83968
CVE-2026-83968 is a use-after-free vulnerability in the Windows Biometric Service that allows an authorized attacker to elevate privileges locally . The CVSS 3.1 score is 7.8 (High) with impacts to confidentiality, integrity, and availability all rated High. CISA's SSVC assessment indicates no kn...
CVE-2026-83972
CVE-2026-83972 is a heap-based buffer overflow in the Windows Biometric Service that allows a locally authenticated attacker to elevate privileges. The vulnerability requires low privileges and no user interaction , with low attack complexity , scoring 7.8 (HIGH) under CVSS 3.1 with high impact t...
CVE-2026-83971
CVE-2026-83971 is a heap-based buffer overflow in Windows Biometric Service that allows a locally authenticated attacker to elevate privileges . Microsoft rates it CVSS 3.1 7.8 (High) , with local attack vector, low complexity, low privileges required, no user interaction, and high impact on conf...
CVE-2026-83954
CVE-2026-83954 is a heap-based buffer overflow in Windows Biometric Service that allows a local, low-privilege attacker to elevate privileges without user interaction. The vulnerability carries a CVSS 3.1 score of 7.8 (HIGH) with full impact to confidentiality, integrity, and availability, indica...
EUVD-2026-73888
Improper neutralization of special elements used in a command 'command injection' in Microsoft Azure CLI allows an authorized attacker to execute code over a network...
CVE-2026-83948
CVE-2026-83948 is a command injection vulnerability in Microsoft Azure CLI , caused by improper neutralization of special elements used in a command. An authorized attacker can leverage this to execute code over a network, achieving remote code execution with high impact on confidentiality, integ...
EUVD-2026-73887
Relative path traversal in Power Automate allows an authorized attacker to elevate privileges locally...
EUVD-2026-73850
Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally...
CVE-2026-80096
CVE-2026-80096 is an out-of-bounds read vulnerability in Windows Remote Desktop Services that allows an authorized attacker to elevate privileges over a network. Microsoft rated it CVSS 3.1: 8.8 (High) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a network-exploitable flaw req...
EUVD-2026-73823
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...
EUVD-2026-73824
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...
EUVD-2026-73822
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...
EUVD-2026-73814
Improper neutralization of special elements used in an sql command 'sql injection' in SQL Server allows an authorized attacker to elevate privileges over a network...