EUVD-2026-73357

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-73354

Use after free in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

CVE-2026-83988

CVE-2026-83988 is a heap-based buffer overflow in the Windows Biometric Service that allows an authorized local attacker to elevate privileges. The vulnerability carries a CVSS 3.1 score of 7.8 (High) with low attack complexity, low privileges required, and no user interaction, resulting in high ...

EUVD-2026-73350

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-73349

Heap-based buffer overflow in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-72937

This is an out-of-bounds read vulnerability in the Windows Storage Port Driver that allows an authorized local attacker to disclose information. The CVSS 3.1 score is 5.5 (MEDIUM) with a local attack vector, low complexity, and low privileges required, resulting in high confidentiality impact wit...

EUVD-2026-73348

Out-of-bounds read in Storage Port Driver allows an authorized attacker to disclose information locally...

EUVD-2026-73347

Use after free in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...

CVE-2026-83952

CVE-2026-83952 is a heap-based buffer overflow in Windows Resilient File System (ReFS) that allows an authorized attacker to elevate privileges locally . The CVSS 3.1 score is 7.8 (HIGH) with the vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H , reflecting low attack complexity, no user interaction re...

EUVD-2026-73339

Missing authorization in Windows Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-81349

Azure HDInsight is affected by an OS command injection vulnerability in its Ambari component, resulting from improper neutralization of special elements used in OS commands. An authorized attacker can leverage this flaw over the network to elevate privileges , potentially compromising confidentia...

EUVD-2026-73329

Heap-based buffer overflow in Virtual Hard Disk VHD Miniport Driver allows an authorized attacker to execute code locally...

EUVD-2026-73328

Improper neutralization of special elements used in an os command 'os command injection' in Azure HDInsights allows an authorized attacker to elevate privileges over a network...

CVE-2026-81355

A heap-based buffer overflow in the Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to execute code locally. The vulnerability is rated CVSS 3.1 7.5 (HIGH) with the vector AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H , indicating a local attack vector with high complexity, high privi...

EUVD-2026-73324

Heap-based buffer overflow in Windows Work Folders allows an authorized attacker to elevate privileges locally...

EUVD-2026-73319

Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network...

CVE-2026-73029

CVE-2026-73029 is a buffer over-read vulnerability in Microsoft SQL Server that allows an authorized attacker (low privileges required) to disclose information over a network. The CVSS 3.1 base score is 6.5 (MEDIUM) with high confidentiality impact but no integrity or availability impact. CISA's ...

EUVD-2026-73318

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

EUVD-2026-73317

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

CVE-2026-67643

CVE-2026-67643 is a heap-based buffer overflow in Microsoft SQL Server that allows an unauthorized attacker to achieve remote code execution over a network. Microsoft assigned a CVSS 3.1 score of 9.8 (Critical) with a vector of AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. CISA's SSVC assessment rates exp...