CVE-2026-69603

CVE-2026-69603 is a heap-based buffer overflow in Windows Hyper-V that allows an authorized local attacker to achieve code execution . The CVSS 3.1 score is 8.8 (HIGH) , with a local attack vector, low privileges required, no user interaction, and changed scope leading to high impact on confident...

EUVD-2026-73142

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69580

A heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to escalate privileges locally. The vulnerability is rated CVSS 3.1 7.8 (HIGH) with a local attack vector, low complexity, and low privileges required, yielding full impact on confidentiality, integrity, and a...

CVE-2026-69589

CVE-2026-69589 is a heap-based buffer overflow in Windows Biometric Service that allows an authorized, low-privilege attacker to achieve local privilege escalation . The vulnerability carries a CVSS v3.1 base score of 7.8 (HIGH) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating low...

EUVD-2026-73141

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69380

CVE-2026-69380 is a missing authorization vulnerability in Microsoft Exchange Server that allows an authorized attacker to elevate privileges over a network. The CVSS 3.1 score is 8.1 (HIGH) , with high impact to confidentiality and integrity and no availability impact. Attack complexity is low, ...

CVE-2026-69375

CVE-2026-69375 is an authorization bypass through user-controlled key vulnerability in Microsoft Exchange Server that allows an authorized attacker to perform tampering over a network. The vulnerability carries a CVSS 3.1 score of 6.5 (MEDIUM) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N ...

EUVD-2026-73126

Server-side request forgery ssrf in Microsoft Exchange Server allows an authorized attacker to perform spoofing over a network...

CVE-2026-69293

CVE-2026-69293 is a heap-based buffer overflow in the Windows Biometric Service that allows an authorized attacker to achieve local privilege escalation . The vulnerability is rated CVSS 3.1 7.8 (HIGH) with a local attack vector, low complexity, and low privileges required, resulting in high impa...

CVE-2026-68877

CVE-2026-68877 is a heap-based buffer overflow in Windows Storage Spaces Controller that allows an authorized local attacker (low privileges, no user interaction) to achieve code execution with high impact on confidentiality, integrity, and availability (CVSS 3.1: 7.8 HIGH ). CISA's SSVC assessme...

CVE-2026-68844

CVE-2026-68844 is a heap-based buffer overflow in Windows Storage Spaces Controller that allows an authorized, locally authenticated attacker (with low privileges) to achieve remote code execution . The vulnerability carries a CVSS 3.1 base score of 7.8 (HIGH) with high impact on confidentiality,...

CVE-2026-68837

CVE-2026-68837 is a use-after-free vulnerability in Windows File History Service that allows an authorized local attacker to elevate privileges. The CVSS 3.1 base score is 7.0 (HIGH) with the vector AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a local attack with high complexity, low required ...

EUVD-2026-73119

Use after free in Windows File History Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-73117

Use after free in Windows Modern Execution Server allows an authorized attacker to elevate privileges locally...

EUVD-2026-73116

Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-72958

CVE-2026-72958 is a double free vulnerability in Windows Credential Guard that allows an authorized attacker to elevate privileges locally . The flaw resides in the Credential Guard component of Windows, a security feature that isolates user credentials from the rest of the operating system. The ...

CVE-2026-72943

A use after free vulnerability in Windows Deployment Services allows an authorized attacker (low privileges) to achieve remote code execution over a network. The CVSS v3.1 score is 7.5 (HIGH) with vector AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, reflecting high attack complexity but high impact on con...

EUVD-2026-73111

Heap-based buffer overflow in Storage Port Driver allows an authorized attacker to elevate privileges locally...

EUVD-2026-73110

Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally...

CVE-2026-72944

CVE-2026-72944 is a heap-based buffer overflow in the Windows Fax Service that allows an authorized attacker to achieve local privilege escalation . The vulnerability carries a CVSS 3.1 base score of 7.8 (High) , with a local attack vector, low complexity, low required privileges, and no user int...