EUVD-2026-73660

Integer underflow wrap or wraparound in Windows Remote Access Connection Manager allows an authorized attacker to execute code over a network...

CVE-2026-71352

CVE-2026-71352 is an integer underflow (wrap or wraparound) in Windows Remote Access Connection Manager that allows an authorized attacker to achieve remote code execution over a network. The vulnerability requires low privileges and no user interaction, with a CVSS 3.1 base score of 8.8 (HIGH) r...

CVE-2026-70583

Windows Core Messaging is affected by a heap-based buffer overflow that allows an authorized low-privilege attacker to elevate privileges locally . The vulnerability is rated CVSS 7.8 (HIGH) with full impact on confidentiality, integrity, and availability, requiring only local access with low pri...

EUVD-2026-73657

Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges locally...

CVE-2026-70578

CVE-2026-70578 is a heap-based buffer overflow in Windows Credential Guard that allows an authorized local attacker to elevate privileges . The Microsoft-assigned CVSS 3.1 score is 7.0 (High) , with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H , indicating local access, high attack complexity,...

EUVD-2026-73654

Use after free in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges locally...

CVE-2026-70581

An integer overflow or wraparound vulnerability in the Windows Biometric Service allows an authorized local attacker to elevate privileges . According to Microsoft's CVSS 3.1 scoring, the flaw rates 7.8 (HIGH) , with local attack vector, low complexity, low privileges required, no user interactio...

CVE-2026-70577

CVE-2026-70577 is a use-after-free vulnerability in Windows Modern Device Management (MDM) that allows an authorized attacker to achieve local privilege escalation . The flaw is rated CVSS 7.0 (HIGH) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a locally exploitable issue with...

EUVD-2026-73653

Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

CVE-2026-70575

CVE-2026-70575 is a null pointer dereference in Windows Schannel (the Windows Secure Channel TLS/SSL component) that allows an authorized attacker (low privileges required) to trigger a denial of service over a network. The attack requires high complexity , no user interaction, and results in ava...

EUVD-2026-73652

Null pointer dereference in Windows Schannel allows an authorized attacker to deny service over a network...

EUVD-2026-73650

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

CVE-2026-70569

CVE-2026-70569 is a local privilege escalation vulnerability in the Windows Spaceport.sys kernel driver, caused by an out-of-bounds read . An authorized attacker with low privileges can exploit it to achieve full local privilege escalation, with High impact on confidentiality, integrity, and avai...

EUVD-2026-73649

Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally...

CVE-2026-70573

CVE-2026-70573 is a heap-based buffer overflow in Windows Biometric Service that allows a local attacker with low privileges to achieve privilege escalation . The vulnerability is rated CVSS 3.1: 7.0 (HIGH) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a local attack vector wit...

EUVD-2026-73648

Heap-based buffer overflow in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally...

CVE-2026-70568

This is a heap-based buffer overflow vulnerability in Windows Defender Firewall Service that allows an authorized attacker to achieve local privilege escalation with high impact on confidentiality, integrity, and availability. The CVSS 3.1 score is 7.0 (HIGH) , reflecting a local attack vector wi...

CVE-2026-70565

CVE-2026-70565 is a use-after-free vulnerability in the Windows AF_UNIX Socket Provider that allows an authorized attacker to perform local privilege escalation . The CVSS 3.1 score is 7.0 (HIGH) , with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a local attack with high complexit...

EUVD-2026-73646

Out-of-bounds read in Virtual Hard Disk VHD Miniport Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-70574

CVE-2026-70574 is an out-of-bounds read vulnerability in the Virtual Hard Disk (VHD) Miniport Driver (Microsoft). An attacker with low local privileges can exploit this to elevate privileges to high integrity, resulting in full compromise of confidentiality, integrity, and availability (CVSS 3.1:...