5067 matches found
CVE-2026-72957
CVE-2026-72957 is a heap-based buffer overflow in Windows Deployment Services that allows an authorized attacker to achieve local code execution. The vulnerability is rated CVSS 3.1 7.8 (HIGH) with the vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a low-privilege local attacker requires ...
EUVD-2026-73671
Heap-based buffer overflow in Windows Deployment Services allows an authorized attacker to execute code locally...
EUVD-2026-73669
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
CVE-2026-72941
CVE-2026-72941 is a heap-based buffer overflow in the Windows Biometric Service that allows an authorized attacker with local and low-privilege access to achieve local privilege escalation . The assigned CVSS 3.1 score is 7.8 (HIGH) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H , indicatin...
EUVD-2026-73667
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to execute code locally...
EUVD-2026-73662
Use after free in Windows DNS allows an authorized attacker to execute code over a network...
CVE-2026-72931
CVE-2026-72931 is a denial-of-service vulnerability in Windows Secure Socket Tunneling Protocol (SSTP) , caused by a missing release of a resource after its effective lifetime . An authorized local attacker with low privileges can trigger the condition, resulting in a high availability impact but...
CVE-2026-72928
A use-after-free vulnerability in Windows DNS Server allows an authorized (low-privilege) attacker to execute remote code over a network . The CVSS 3.1 score is 7.5 (High) , reflecting a network attack vector with high complexity but high impact to confidentiality, integrity, and availability. Th...
EUVD-2026-73660
Integer underflow wrap or wraparound in Windows Remote Access Connection Manager allows an authorized attacker to execute code over a network...
CVE-2026-71352
CVE-2026-71352 is an integer underflow (wrap or wraparound) in Windows Remote Access Connection Manager that allows an authorized attacker to achieve remote code execution over a network. The vulnerability requires low privileges and no user interaction, with a CVSS 3.1 base score of 8.8 (HIGH) r...
CVE-2026-72927
A heap-based buffer overflow exists in Winsock , which allows an authorized attacker to perform a local privilege escalation . While the specific software versions are not explicitly detailed in the provided documents, the vulnerability is addressed in Microsoft's September 8, 2026 security updat...
EUVD-2026-73657
Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges locally...
CVE-2026-70583
Windows Core Messaging is affected by a heap-based buffer overflow that allows an authorized low-privilege attacker to elevate privileges locally . The vulnerability is rated CVSS 7.8 (HIGH) with full impact on confidentiality, integrity, and availability, requiring only local access with low pri...
CVE-2026-70578
CVE-2026-70578 is a heap-based buffer overflow in Windows Credential Guard that allows an authorized local attacker to elevate privileges . The Microsoft-assigned CVSS 3.1 score is 7.0 (High) , with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H , indicating local access, high attack complexity,...
EUVD-2026-73654
Use after free in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges locally...
EUVD-2026-73653
Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
CVE-2026-70577
CVE-2026-70577 is a use-after-free vulnerability in Windows Modern Device Management (MDM) that allows an authorized attacker to achieve local privilege escalation . The flaw is rated CVSS 7.0 (HIGH) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a locally exploitable issue with...
EUVD-2026-73652
Null pointer dereference in Windows Schannel allows an authorized attacker to deny service over a network...
CVE-2026-70575
CVE-2026-70575 is a null pointer dereference in Windows Schannel (the Windows Secure Channel TLS/SSL component) that allows an authorized attacker (low privileges required) to trigger a denial of service over a network. The attack requires high complexity , no user interaction, and results in ava...