5147 matches found
CVE-2026-69616
Windows Remote Desktop Services is affected by an out-of-bounds read vulnerability that allows an authorized local attacker to disclose information (CVSS 3.1: 5.5 MEDIUM — local vector, low privileges required, high confidentiality impact, no integrity or availability impact). CISA's SSVC assessm...
EUVD-2026-73557
Out-of-bounds read in Windows Remote Desktop Services allows an authorized attacker to disclose information locally...
EUVD-2026-73555
Use after free in Virtual Hard Disk VHD Miniport Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-69611
This is a use-after-free vulnerability in the Virtual Hard Disk (VHD) Miniport Driver on Microsoft platforms. An attacker with low local privileges can exploit it to elevate privileges on the system. The CVSS 3.1 score is 7.0 (HIGH) with high complexity, meaning exploitation requires specific con...
EUVD-2026-73551
Out-of-bounds read in Windows SMB Client allows an authorized attacker to disclose information locally...
EUVD-2026-73552
Incomplete list of disallowed inputs in Active Directory Certificate Services AD CS allows an authorized attacker to perform tampering over a network...
CVE-2026-69624
Active Directory Certificate Services (AD CS) is affected by an incomplete list of disallowed inputs , enabling an authorized attacker to perform tampering over a network . The root cause is that the input validation does not fully cover all disallowed values, allowing manipulation of certificate...
CVE-2026-69618
CVE-2026-69618 is an out-of-bounds read in the Windows SMB Client that allows an authorized local attacker to disclose information . The CVSS 3.1 score is 5.5 (MEDIUM) with a local attack vector, low complexity, low privileges required, and high confidentiality impact but no integrity or availabi...
CVE-2026-69625
A heap-based buffer overflow in Windows Connected User Experiences and Telemetry (UXTelemetry) allows an authorized attacker to elevate privileges over a network. The vulnerability requires low privileges and user interaction , but results in high impact to confidentiality, integrity, and availab...
EUVD-2026-73548
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
EUVD-2026-73545
Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally...
EUVD-2026-73540
Untrusted pointer dereference in Windows Print Spooler Components allows an authorized attacker to deny service over a network...
EUVD-2026-73539
Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information over a network...
EUVD-2026-73538
Heap-based buffer overflow in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally...
CVE-2026-69538
CVE-2026-69538 is an out-of-bounds read vulnerability in the Windows Spaceport.sys driver. An attacker with low local privileges can exploit this to execute code on the target system, leading to high impact on confidentiality, integrity, and availability (CVSS 3.1 score 7.8 – HIGH ). The attack v...
CVE-2026-69571
CVE-2026-69571 is a heap-based buffer overflow in the Windows USB Audio Class driver (usbaudio.sys) that allows an authorized local attacker to elevate privileges. The vulnerability is scored CVSS 3.1: 7.8 (HIGH) with a vector of local attack, low complexity, low privileges required, no user inte...
EUVD-2026-73533
Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network...
EUVD-2026-73532
Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over a network...
CVE-2026-69599
Windows Remote Desktop Services contains a use-after-free vulnerability that allows an authorized attacker (low privileges required) to execute code over a network. The CVSS 3.1 score is 7.5 (HIGH) , with high attack complexity and no user interaction required, impacting confidentiality, integrit...