CVE-2026-69761

A use-after-free vulnerability in Windows TCP/IP allows an authorized attacker to elevate privileges over a network . The CVSS 3.1 score is 7.1 (HIGH) , with a vector of AV:N/AC:H/PR:L/UI:R, meaning exploitation requires network access , high attack complexity , low existing privileges , and user...

CVE-2026-69672

Windows DNS contains an information disclosure vulnerability caused by a use of uninitialized resource . An authenticated attacker with local access and low privileges can exploit it to disclose information, with no user interaction required. The CVSS 3.1 score is 5.5 (MEDIUM) , reflecting high c...

EUVD-2026-73608

Use of uninitialized resource in Windows DNS allows an authorized attacker to disclose information locally...

EUVD-2026-73606

Time-of-check time-of-use toctou race condition in Windows Win32K allows an authorized attacker to elevate privileges locally...

CVE-2026-69895

This information disclosure vulnerability exists in the Windows Spaceport.sys kernel driver, caused by an out-of-bounds read . A local, authorized attacker with low privileges can exploit it to disclose information , with no impact on integrity or availability. The CVSS 3.1 score is 4.7 (Medium) ...

EUVD-2026-73607

Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information locally...

CVE-2026-69921

CVE-2026-69921 is a heap-based buffer overflow in Windows Print Spooler Components that allows a low-privilege local attacker to elevate privileges , with no user interaction required. The CVSS 3.1 score is 7.8 (HIGH) , reflecting local attack vector, low complexity, and high impact on confidenti...

CVE-2026-69713

CVE-2026-69713 is a security feature bypass in Windows Secure Boot caused by a dependency on a vulnerable third-party component . An authorized attacker with high privileges can exploit this vulnerability locally to bypass a security feature, resulting in a high integrity impact but no confidenti...

EUVD-2026-73603

Dependency on vulnerable third-party component in Windows Secure Boot allows an authorized attacker to bypass a security feature locally...

EUVD-2026-73601

Use after free in Windows Win32K allows an authorized attacker to elevate privileges over a network...

CVE-2026-69773

A heap-based buffer overflow in the Windows Biometric Service allows an authorized attacker to elevate privileges over a network. The CVSS 3.1 score is 8.0 (HIGH) with a vector of AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H, indicating that exploitation requires low privileges and user interaction , but ...

CVE-2026-69794

CVE-2026-69794 is a buffer over-read in Windows Encrypting File System (EFS) that allows an authorized local attacker to disclose information . The flaw resides within the EFS component and results in a confidentiality impact with no integrity or availability impact. The CVSS 3.1 base score is 5....

EUVD-2026-73597

Use after free in Windows Credential Providers allows an authorized attacker to elevate privileges locally...

CVE-2026-69814

CVE-2026-69814 is a use-after-free vulnerability in Windows Credential Providers that allows an authorized attacker to achieve local privilege escalation . The CVSS 3.1 score is 7.0 (HIGH) , with a local attack vector, high complexity, and low privileges required, resulting in high impact to conf...

EUVD-2026-73598

Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally...

EUVD-2026-73593

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges over a network...

CVE-2026-69738

CVE-2026-69738 is an integer overflow or wraparound in the Windows Biometric Service that allows an authorized local attacker to elevate privileges . The vulnerability scores CVSS 7.8 (HIGH) with a local attack vector, low complexity, low privileges required, and high impact to confidentiality, i...

CVE-2026-69841

A heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized attacker to perform local privilege escalation . The vulnerability requires low privileges, no user interaction, and has low attack complexity, with high impact to confidentiality, integrity, and availabilit...

EUVD-2026-73592

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges over a network...

CVE-2026-69674

Windows Modern Device Management (MDM) contains a missing authentication vulnerability in a critical function that allows a locally authenticated attacker to bypass a security feature . The CVSS v3.1 score is 5.5 (MEDIUM) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N , indicating a local a...