EUVD-2026-73426

Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally...

EUVD-2026-73425

Numeric truncation error in Internet Storage Name Service allows an authorized attacker to disclose information locally...

CVE-2026-69280

CVE-2026-69280 is a use-after-free vulnerability in Windows Push Notifications that allows an authorized attacker to achieve local privilege escalation . Microsoft assigned a CVSS 3.1 base score of 7.0 (HIGH) with a vector of local attack, high complexity, low privileges required, and high impact...

EUVD-2026-73422

Use of uninitialized resource in Windows GDI+ allows an authorized attacker to disclose information locally...

CVE-2026-69274

CVE-2026-69274 is a Use After Free vulnerability in Windows Win32K that allows an authorized attacker to achieve privilege elevation over a network. The CVSS 3.1 score is 7.1 (HIGH) , with the attack requiring network vector, high complexity , low privileges , and user interaction , impacting con...

EUVD-2026-73420

Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network...

EUVD-2026-73421

Use after free in Windows Win32K allows an authorized attacker to elevate privileges over a network...

CVE-2026-69272

A heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network . The CVSS 3.1 score is 7.1 (HIGH) , with an attack vector of network, high complexity , low privileges required , and user interaction required , leading to high impact on co...

EUVD-2026-73419

Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally...

CVE-2026-68889

A heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network. The CNA-assessed CVSS 3.1 score is 7.1 (HIGH) with a vector of AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H, indicating that exploitation requires low privileges, user interaction, an...

CVE-2026-68886

CVE-2026-68886 is a use-after-free vulnerability in the Windows Network Connection Broker component. An authorized local attacker can exploit it to disclose information , with high confidentiality impact and no integrity or availability impact (CVSS 3.1: 5.5 MEDIUM , vector AV:L/AC:L/PR:L/UI:N/S:...

EUVD-2026-73417

Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally...

EUVD-2026-73416

Use after free in Windows Network Connection Broker allows an authorized attacker to disclose information locally...

CVE-2026-68885

CVE-2026-68885 is a heap-based buffer overflow in Microsoft Standard XPS that allows an authorized local attacker to escalate privileges. The vulnerability carries a CVSS 3.1 base score of 7.8 (HIGH) with the vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, meaning it requires local access with low pr...

CVE-2026-68852

Microsoft Account is affected by a use of uninitialized resource vulnerability that allows an authorized attacker with low privileges to locally disclose information (CVSS 3.1: 5.5, MEDIUM). The vulnerability requires local access and no user interaction, with a high impact on confidentiality but...

EUVD-2026-73411

Use of uninitialized resource in Microsoft Account allows an authorized attacker to disclose information locally...

EUVD-2026-73412

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally...

EUVD-2026-73410

Heap-based buffer overflow in Microsoft Account allows an authorized attacker to elevate privileges locally...

EUVD-2026-73409

Out-of-bounds read in Windows Program Compatibility Assistant Service allows an authorized attacker to disclose information over a network...

EUVD-2026-73408

Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges over a network...