EUVD-2026-35521

Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally...

EUVD-2026-35512

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

EUVD-2026-35515

Untrusted search path in Windows Storage allows an authorized attacker to elevate privileges locally...

EUVD-2026-35509

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

EUVD-2026-35696

Protection mechanism failure in Windows UEFI allows an authorized attacker to bypass a security feature locally...

EUVD-2026-35505

Improper authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

EUVD-2026-35692

Stack-based buffer overflow in Active Directory Domain Services allows an authorized attacker to execute code over a network...

EUVD-2026-35685

Out-of-bounds read in Microsoft UxTheme Library uxtheme.dll allows an authorized attacker to deny service locally...

EUVD-2026-35688

Out-of-bounds read in Windows DHCP Server allows an authorized attacker to disclose information locally...

EUVD-2026-35514

Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally...

EUVD-2026-35654

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office Project Server allows an authorized attacker to perform spoofing over a network...

EUVD-2026-35673

Time-of-check time-of-use TOCTOU race condition in Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-35678

Server-side request forgery ssrf in Microsoft Exchange Server allows an authorized attacker to disclose information over a network...

EUVD-2026-35644

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

EUVD-2026-35667

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

EUVD-2026-35534

Improper access control in Windows Administrator Protection allows an authorized attacker to bypass a security feature locally...

EUVD-2026-35535

Improper neutralization of special elements in output used by a downstream component 'injection' in Microsoft Teams for Android allows an authorized attacker to disclose information over a network...

EUVD-2026-35643

Heap-based buffer overflow in Microsoft Windows DNS allows an authorized attacker to elevate privileges locally...

EUVD-2026-35658

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

EUVD-2026-35504

Improper limitation of a pathname to a restricted directory 'path traversal' in Microsoft Azure Kubernetes Service allows an authorized attacker to execute code locally...