6279 matches found
EUVD-2026-73492
Buffer over-read in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network...
CVE-2026-69407
CVE-2026-69407 is an integer overflow or wraparound vulnerability in the Microsoft Volume Manager Driver that allows an authorized attacker to escalate privileges locally . The vulnerability is rated CVSS 3.1 7.8 (HIGH) with a local attack vector, low complexity, low privileges required, and high...
CVE-2026-69416
CVE-2026-69416 is a buffer over-read in Windows DHCP Server that allows an authorized attacker with low privileges on an adjacent network to cause a denial of service , with high availability impact and no confidentiality or integrity impact (CVSS 3.1: 5.7 MEDIUM ). CISA assesses exploitation as ...
EUVD-2026-73490
Missing release of memory after effective lifetime in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network...
CVE-2026-69405
CVE-2026-69405 is a memory leak in Windows DHCP Server , specifically a missing release of memory after its effective lifetime. An attacker with low privileges on an adjacent network can trigger a denial of service by exhausting server resources. The CVSS 3.1 score is 5.7 (MEDIUM) with the vector...
EUVD-2026-73486
Use after free in Windows NDIS allows an authorized attacker to elevate privileges over a network...
CVE-2026-69396
A use-after-free vulnerability in the Windows NDIS (Network Driver Interface Specification) component allows an authorized attacker to elevate privileges over a network . The CVSS 3.1 score is 7.1 (HIGH) , with a network attack vector, high complexity, low privileges required, and user interactio...
EUVD-2026-73485
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information over a network...
CVE-2026-69388
CVE-2026-69388 is a use-after-free vulnerability in Windows Bluetooth Service that allows a local attacker with low privileges to elevate privileges . The attack requires local access and is characterized by high complexity , with no user interaction needed. The CVSS 3.1 base score is 7.0 (HIGH) ...
CVE-2026-69393
CVE-2026-69393 is an out-of-bounds read in the Windows Spaceport.sys kernel driver that allows an authorized attacker to disclose information over a network . The vulnerability is rated CVSS 3.1: 5.7 (MEDIUM) with a vector of AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N, reflecting that an attacker with l...
EUVD-2026-73481
Allocation of resources without limits or throttling in Windows SMB Server allows an authorized attacker to deny service over a network...
CVE-2026-69374
CVE-2026-69374 is a denial-of-service vulnerability in Windows SMB Server caused by allocation of resources without limits or throttling . An authorized attacker (low privileges) can exploit this over the network to disrupt service, with high availability impact and no confidentiality or integrit...
EUVD-2026-73479
Missing authorization in Windows SMB Server allows an authorized attacker to disclose information locally...
CVE-2026-69369
CVE-2026-69369 is an out-of-bounds read in Windows DNS that allows an authorized local attacker to disclose information. The CVSS 3.1 score is 5.5 (Medium) with a local attack vector, low privileges required, and high impact to confidentiality only. CISA's SSVC assessment indicates no known explo...
EUVD-2026-73476
Out-of-bounds read in Microsoft Local Security Authority Server lsasrv allows an authorized attacker to elevate privileges over a network...
CVE-2026-69365
CVE-2026-69365 is an out-of-bounds read in Microsoft Local Security Authority Server (lsasrv) that allows an authorized attacker to escalate privileges over a network. The vulnerability carries a CVSS 3.1 score of 8.0 (High) with a vector of AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H, indicating that ex...
EUVD-2026-73474
Out-of-bounds read in Windows Network File System allows an authorized attacker to deny service over a network...
CVE-2026-69372
CVE-2026-69372 is an out-of-bounds read in Windows Network File System (NFS) that allows an authorized attacker (low privileges) to trigger a denial of service over a network. The attack vector is network-based with low complexity, but user interaction is required . CVSS v3.1 base score is 5.7 (M...