EUVD-2026-73481

Allocation of resources without limits or throttling in Windows SMB Server allows an authorized attacker to deny service over a network...

CVE-2026-69374

CVE-2026-69374 is a denial-of-service vulnerability in Windows SMB Server caused by allocation of resources without limits or throttling . An authorized attacker (low privileges) can exploit this over the network to disrupt service, with high availability impact and no confidentiality or integrit...

EUVD-2026-73479

Missing authorization in Windows SMB Server allows an authorized attacker to disclose information locally...

CVE-2026-69369

CVE-2026-69369 is an out-of-bounds read in Windows DNS that allows an authorized local attacker to disclose information. The CVSS 3.1 score is 5.5 (Medium) with a local attack vector, low privileges required, and high impact to confidentiality only. CISA's SSVC assessment indicates no known explo...

CVE-2026-69365

CVE-2026-69365 is an out-of-bounds read in Microsoft Local Security Authority Server (lsasrv) that allows an authorized attacker to escalate privileges over a network. The vulnerability carries a CVSS 3.1 score of 8.0 (High) with a vector of AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H, indicating that ex...

CVE-2026-69372

CVE-2026-69372 is an out-of-bounds read in Windows Network File System (NFS) that allows an authorized attacker (low privileges) to trigger a denial of service over a network. The attack vector is network-based with low complexity, but user interaction is required . CVSS v3.1 base score is 5.7 (M...

EUVD-2026-73474

Out-of-bounds read in Windows Network File System allows an authorized attacker to deny service over a network...

EUVD-2026-73472

Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally...

EUVD-2026-73470

Use of uninitialized resource in Remote Desktop Client allows an authorized attacker to execute code over a network...

CVE-2026-69350

CVE-2026-69350 is a heap-based buffer overflow in Windows Overlay Filter that allows an authorized attacker to elevate privileges locally . The vulnerability requires high privileges and no user interaction, with a CVSS 3.1 score of 6.7 (MEDIUM) reflecting high impact to confidentiality, integrit...

CVE-2026-69348

CVE-2026-69348 is a heap-based buffer overflow in the Windows Win32K kernel component that allows an authorized, locally-privileged attacker to elevate privileges . The CVSS 3.1 score is 7.8 (HIGH) , with low attack complexity and no user interaction required. CISA's SSVC assessment indicates no ...

CVE-2026-69344

CVE-2026-69344 is an out-of-bounds read vulnerability in Windows Print Spooler Components that allows an authorized local attacker with low privileges to disclose information without user interaction. The CVSS v3.1 base score is 5.5 (MEDIUM) , reflecting the local attack vector, low complexity, a...

EUVD-2026-73462

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network...

CVE-2026-69335

CVE-2026-69335 is a use-after-free vulnerability in Windows Win32K that allows an authorized attacker to elevate privileges locally . Microsoft rates it CVSS 3.1: 7.0 (HIGH) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, meaning exploitation requires local access, low privileges, and high ...

EUVD-2026-73460

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges over a network...

CVE-2026-69332

CVE-2026-69332 is an out-of-bounds read in Windows NTFS that allows an authorized, low-privilege attacker to escalate privileges over a network with user interaction. The CVSS 3.1 score is 8.0 (HIGH) with impacts of High across Confidentiality, Integrity, and Availability. No specific affected ve...

CVE-2026-69328

CVE-2026-69328 is an untrusted search path vulnerability in Windows Storage that allows an authorized attacker to elevate privileges locally . The CVSS 3.1 score is 7.8 (HIGH) with vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating low attack complexity, no user interaction required, and high...

CVE-2026-69351

Windows Universal Plug and Play (UPnP) Device Host contains an information disclosure vulnerability that allows a locally authenticated attacker with low privileges to expose private personal information without user interaction. The CVSS v3.1 score is 5.5 (Medium) with a high confidentiality imp...

EUVD-2026-73454

Double free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a network...

CVE-2026-69324

CVE-2026-69324 is a local privilege elevation vulnerability in Windows Performance Monitor caused by type confusion (access of resource using incompatible type). An authorized attacker with low privileges can exploit this locally without user interaction to gain high impact on confidentiality, in...