CVE-2026-69500

CVE-2026-69500 is a use-after-free vulnerability in Windows Image Acquisition (WIA) that allows an authorized local attacker with low privileges to escalate privileges, resulting in high impact to confidentiality, integrity, and availability. The CVSS v3.1 base score is 7.0 (HIGH) with a local at...

CVE-2026-69505

An out-of-bounds read in the Windows NTFS component allows an authorized attacker (low privileges required) to elevate privileges over a network, with user interaction required . The CVSS 3.1 score is 8.0 (HIGH) , reflecting high impact on confidentiality, integrity, and availability. No known ex...

EUVD-2026-72995

Unintended proxy or intermediary 'confused deputy' in Microsoft Windows Speech allows an authorized attacker to perform tampering locally...

CVE-2026-69531

CVE-2026-69531 is a confused deputy vulnerability in Microsoft Windows Speech . An authorized attacker with low privileges can exploit an unintended proxy or intermediary relationship to perform local tampering (high integrity impact, no confidentiality or availability impact). The CVSS 3.1 base ...

CVE-2026-69517

CVE-2026-69517 is a use-after-free vulnerability in Windows Wireless Networking that allows an authorized local attacker to elevate privileges . The CVSS 3.1 score is 7.0 (HIGH) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a local attack with high complexity, low required priv...

EUVD-2026-72996

Use after free in Windows Wireless Networking allows an authorized attacker to elevate privileges locally...

CVE-2026-69481

CVE-2026-69481 is a heap-based buffer overflow in Windows Enterprise App Management that allows an authorized attacker to elevate privileges over a network. The vulnerability requires low privileges and user interaction, with high impact to confidentiality, integrity, and availability (CVSS 3.1 b...

CVE-2026-69470

Windows Connected User Experiences and Telemetry contains a use-after-free flaw that allows an authorized attacker to escalate privileges locally . The vulnerability is rated CVSS 7.0 (HIGH) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a local attack with high complexity, low ...

EUVD-2026-72989

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...

EUVD-2026-72987

Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-69468

CVE-2026-69468 is a heap-based buffer overflow in the Windows Volume Manager Extension Driver that allows a locally authenticated attacker to elevate privileges . Microsoft rates the vulnerability CVSS 3.1: 7.0 (HIGH) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, meaning exploitation requ...

EUVD-2026-72986

Use after free in Windows Devices Human Interface allows an authorized attacker to elevate privileges locally...

CVE-2026-69472

CVE-2026-69472 is a use-after-free vulnerability in the Windows Devices Human Interface component that allows an authorized, local attacker with low privileges to achieve local privilege escalation . The CVSS v3.1 score is 7.0 (HIGH) , with high complexity and no user interaction required. The im...

EUVD-2026-72983

Use of uninitialized resource in Remote Desktop Client allows an authorized attacker to execute code over a network...

CVE-2026-69485

CVE-2026-69485 is a Remote Code Execution vulnerability in Microsoft Remote Desktop Client caused by use of an uninitialized resource . An authorized attacker with low privileges can exploit it remotely over a network without user interaction, achieving full compromise of confidentiality, integri...

EUVD-2026-72982

Out-of-bounds read in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

CVE-2026-69451

Windows Management Instrumentation (WMI) contains a use-after-free vulnerability that allows an authorized attacker to escalate privileges over a network. The CVSS 3.1 score is 7.1 (HIGH) with a vector of AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H, meaning exploitation requires network access , low priv...

CVE-2026-69532

CVE-2026-69532 is an out-of-bounds read vulnerability in Windows NTFS that allows an authorized attacker to locally elevate privileges . The attack vector is local, complexity is low, and it requires low privileges with no user interaction. Microsoft rates it CVSS 3.1: 7.8 (HIGH) with high impact...

EUVD-2026-72979

Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally...

CVE-2026-69432

CVE-2026-69432 is a heap-based buffer overflow in the Volume Manager Driver (Microsoft) that allows an authorized attacker to elevate privileges locally . The vulnerability is rated CVSS 3.1 7.8 (High) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating local attack vector, low compl...