CVE-2026-69818

CVE-2026-69818 is a use-after-free vulnerability in the Windows Win32K component that allows a low-privileged, locally authenticated attacker to elevate privileges . The CVSS v3.1 score is 7.0 (HIGH) , reflecting a local attack vector with high complexity and high impact on confidentiality, integ...

EUVD-2026-73613

Use after free in Windows Web Platform Storage allows an authorized attacker to elevate privileges locally...

CVE-2026-69878

A heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code locally. The vulnerability is rated CVSS 3.1 6.4 (Medium) with a vector of AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H, indicating a local attack with high complexity and high privileges required, but full i...

EUVD-2026-73612

Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges over a network...

EUVD-2026-73608

Use of uninitialized resource in Windows DNS allows an authorized attacker to disclose information locally...

EUVD-2026-73606

Time-of-check time-of-use toctou race condition in Windows Win32K allows an authorized attacker to elevate privileges locally...

EUVD-2026-73607

Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information locally...

CVE-2026-69895

This information disclosure vulnerability exists in the Windows Spaceport.sys kernel driver, caused by an out-of-bounds read . A local, authorized attacker with low privileges can exploit it to disclose information , with no impact on integrity or availability. The CVSS 3.1 score is 4.7 (Medium) ...

EUVD-2026-73603

Dependency on vulnerable third-party component in Windows Secure Boot allows an authorized attacker to bypass a security feature locally...

CVE-2026-69713

CVE-2026-69713 is a security feature bypass in Windows Secure Boot caused by a dependency on a vulnerable third-party component . An authorized attacker with high privileges can exploit this vulnerability locally to bypass a security feature, resulting in a high integrity impact but no confidenti...

EUVD-2026-73601

Use after free in Windows Win32K allows an authorized attacker to elevate privileges over a network...

CVE-2026-69794

CVE-2026-69794 is a buffer over-read in Windows Encrypting File System (EFS) that allows an authorized local attacker to disclose information . The flaw resides within the EFS component and results in a confidentiality impact with no integrity or availability impact. The CVSS 3.1 base score is 5....

CVE-2026-69773

A heap-based buffer overflow in the Windows Biometric Service allows an authorized attacker to elevate privileges over a network. The CVSS 3.1 score is 8.0 (HIGH) with a vector of AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H, indicating that exploitation requires low privileges and user interaction , but ...

EUVD-2026-73598

Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally...

EUVD-2026-73597

Use after free in Windows Credential Providers allows an authorized attacker to elevate privileges locally...

CVE-2026-69814

CVE-2026-69814 is a use-after-free vulnerability in Windows Credential Providers that allows an authorized attacker to achieve local privilege escalation . The CVSS 3.1 score is 7.0 (HIGH) , with a local attack vector, high complexity, and low privileges required, resulting in high impact to conf...

EUVD-2026-73593

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges over a network...

CVE-2026-69738

CVE-2026-69738 is an integer overflow or wraparound in the Windows Biometric Service that allows an authorized local attacker to elevate privileges . The vulnerability scores CVSS 7.8 (HIGH) with a local attack vector, low complexity, low privileges required, and high impact to confidentiality, i...

EUVD-2026-73592

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges over a network...

CVE-2026-69841

A heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized attacker to perform local privilege escalation . The vulnerability requires low privileges, no user interaction, and has low attack complexity, with high impact to confidentiality, integrity, and availabilit...