CVE-2026-69560

CVE-2026-69560 is a use-after-free vulnerability in the Windows Work Folder Service that allows an authorized local attacker to elevate privileges . The CVSS 3.1 score is 7.0 (HIGH) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, reflecting a high attack complexity and low privileges requir...

EUVD-2026-73702

Origin validation error in Microsoft Teams for Android allows an authorized attacker to disclose information over a network...

CVE-2026-69426

CVE-2026-69426 is a heap-based buffer overflow in the Windows VOLSNAP.SYS driver (part of the Volume Shadow Copy service). An authorized attacker with low privileges can exploit this flaw to achieve local code execution with high impact on confidentiality, integrity, and availability. The vulnera...

EUVD-2026-73697

Heap-based buffer overflow in Windows VOLSNAP.SYS allows an authorized attacker to execute code locally...

EUVD-2026-73691

Use after free in Windows Shell allows an authorized attacker to elevate privileges locally...

EUVD-2026-73692

Use of externally-controlled format string in Active Directory Certificate Services AD CS allows an authorized attacker to disclose information over a network...

EUVD-2026-73688

Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69323

CVE-2026-69323 is a heap-based buffer overflow in Windows Biometric Service that allows an authorized attacker with low privileges to achieve local privilege escalation . The vulnerability requires no user interaction and carries a CVSS 3.1 score of 7.8 (HIGH) with high impact to confidentiality,...

EUVD-2026-73686

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-73683

Stack-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally...

EUVD-2026-73682

Double free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally...

EUVD-2026-73681

Use after free in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally...

CVE-2026-69309

CVE-2026-69309 is a local privilege escalation vulnerability in Windows Print Spooler Components , caused by a double free defect. An attacker with low local privileges and high attack complexity can exploit it without user interaction to achieve full compromise of confidentiality, integrity, and...

EUVD-2026-73679

Heap-based buffer overflow in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally...

EUVD-2026-73678

Missing authorization in Windows Remote Access Connection Manager allows an authorized attacker to perform tampering locally...

CVE-2026-72966

CVE-2026-72966 affects Windows Remote Access Connection Manager , where a missing authorization check allows an already-authorized (low-privilege) local attacker to perform tampering without user interaction. The impact is rated HIGH for integrity with no effect on confidentiality or availability...

EUVD-2026-73676

Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges locally...

EUVD-2026-73677

Missing authentication for critical function in Windows Internet Connection Sharing ICS allows an authorized attacker to perform tampering locally...

CVE-2026-72954

CVE-2026-72954 is a use-after-free vulnerability in Windows Deployment Services (Microsoft) that allows an authorized attacker (low privileges) to achieve remote code execution over a network. The CVSS 3.1 score is 7.5 (HIGH) with vector AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, reflecting high attack...

CVE-2026-72957

CVE-2026-72957 is a heap-based buffer overflow in Windows Deployment Services that allows an authorized attacker to achieve local code execution. The vulnerability is rated CVSS 3.1 7.8 (HIGH) with the vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a low-privilege local attacker requires ...