6279 matches found
EUVD-2026-73407
Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network...
CVE-2026-68848
CVE-2026-68848 is a heap-based buffer overflow in Windows Print Spooler Components that allows an authorized local attacker to escalate privileges . The vulnerability requires low privileges , has low attack complexity , and needs no user interaction , yielding a CVSS 3.1 score of 7.8 (HIGH) with...
EUVD-2026-73402
Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network...
EUVD-2026-73401
Use after free in Microsoft Office Word allows an authorized attacker to disclose information locally...
CVE-2026-68834
A stack-based buffer overflow in Windows NTFS allows an authorized attacker to achieve privilege elevation over a network. The vulnerability is rated CVSS 8.0 (HIGH) with a vector of network access, low complexity, low privileges required, and user interaction required, resulting in high impact t...
EUVD-2026-73400
Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network...
CVE-2026-68831
CVE-2026-68831 is an information disclosure vulnerability in Windows Defender Firewall Service . The issue arises from files or directories accessible to external parties, allowing an authorized attacker with low privileges to disclose information locally (CVSS 3.1 score 5.5 – MEDIUM ; vector AV:...
EUVD-2026-73399
Integer underflow wrap or wraparound in Windows GDI+ allows an authorized attacker to elevate privileges over a network...
EUVD-2026-73398
Files or directories accessible to external parties in Windows Defender Firewall Service allows an authorized attacker to disclose information locally...
CVE-2026-68780
CVE-2026-68780 is an out-of-bounds read in Microsoft SQL Server that allows an authorized attacker (low privileges required) to disclose information over a network. The CVSS 3.1 score is 6.5 (MEDIUM) with vector AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N , reflecting high confidentiality impact with no ...
EUVD-2026-73396
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...
EUVD-2026-73395
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...
EUVD-2026-73394
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...
CVE-2026-68779
CVE-2026-68779 is an out-of-bounds read in Microsoft SQL Server that allows an authorized (low-privilege) attacker to disclose information over a network. The CVSS 3.1 score is 6.5 (MEDIUM) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N , indicating a high confidentiality impact with no int...
CVE-2026-68778
CVE-2026-68778 is an out-of-bounds read vulnerability in Microsoft SQL Server that allows an authorized attacker (low privileges required) to disclose information over a network . The CVSS 3.1 score is 6.5 (Medium) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N, reflecting high confidential...
CVE-2026-68776
CVE-2026-68776 is an information disclosure vulnerability in Microsoft SQL Server caused by a use of uninitialized resource . An authorized attacker can exploit this over a network to disclose sensitive information. The CNA-assigned CVSS 3.1 score is 6.5 (Medium) with the vector AV:N/AC:L/PR:L/UI...
CVE-2026-68777
CVE-2026-68777 is an out-of-bounds read vulnerability in Microsoft SQL Server that allows an authorized attacker to disclose information over a network. The CVSS 3.1 base score is 6.5 (Medium) with high confidentiality impact but no integrity or availability impact. CISA's SSVC assessment rates e...
EUVD-2026-73392
Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network...