EUVD-2026-73116

Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-72958

CVE-2026-72958 is a double free vulnerability in Windows Credential Guard that allows an authorized attacker to elevate privileges locally . The flaw resides in the Credential Guard component of Windows, a security feature that isolates user credentials from the rest of the operating system. The ...

CVE-2026-72945

CVE-2026-72945 is an information disclosure vulnerability in Windows Task Scheduler , caused by the use of an uninitialized resource . An authorized local attacker with low privileges can exploit this to disclose information, with high confidentiality impact and no integrity or availability impac...

CVE-2026-72948

CVE-2026-72948 is a local privilege escalation vulnerability in Windows DNS caused by a relative path traversal . An authorized attacker (high privileges required) can exploit it locally with low complexity and no user interaction, achieving full compromise of confidentiality, integrity, and avai...

CVE-2026-72943

A use after free vulnerability in Windows Deployment Services allows an authorized attacker (low privileges) to achieve remote code execution over a network. The CVSS v3.1 score is 7.5 (HIGH) with vector AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, reflecting high attack complexity but high impact on con...

EUVD-2026-73112

Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network...

EUVD-2026-73111

Heap-based buffer overflow in Storage Port Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-72944

CVE-2026-72944 is a heap-based buffer overflow in the Windows Fax Service that allows an authorized attacker to achieve local privilege escalation . The vulnerability carries a CVSS 3.1 base score of 7.8 (High) , with a local attack vector, low complexity, low required privileges, and no user int...

EUVD-2026-73110

Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-73109

Null pointer dereference in Windows Routing and Remote Access Service RRAS allows an authorized attacker to deny service over a network...

EUVD-2026-73108

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally...

CVE-2026-72939

CVE-2026-72939 is a null pointer dereference in Windows Routing and Remote Access Service (RRAS) that allows an authorized attacker to cause a denial of service over a network. The CVSS 3.1 score is 6.5 (Medium) with vector AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H , indicating a network-attackable fla...

CVE-2026-72935

CVE-2026-72935 is an out-of-bounds read in the Windows NTFS driver that allows a local attacker with high privileges to escalate privileges . The Microsoft CVSS 3.1 score is 6.7 (Medium) , reflecting a local attack vector, low complexity, and high impact on confidentiality, integrity, and availab...

EUVD-2026-73107

Use after free in Windows Secure Socket Tunneling Protocol SSTP allows an authorized attacker to execute code locally...

CVE-2026-72930

CVE-2026-72930 is a use-after-free vulnerability in Windows Secure Socket Tunneling Protocol (SSTP) that allows an authorized attacker to execute code locally. The CVSS 3.1 score is 7.0 (HIGH) , reflecting a local attack vector with high complexity, low privileges required, no user interaction, a...

CVE-2026-71351

This vulnerability is a double free in Windows Routing and Remote Access Service (RRAS) that allows an authorized local attacker to elevate privileges . The CVSS 3.1 score is 7.0 (HIGH) , with a local attack vector, high complexity, and low privileges required, yielding high impact to confidentia...

EUVD-2026-73106

Double free in Windows Routing and Remote Access Service RRAS allows an authorized attacker to elevate privileges locally...

EUVD-2026-73104

Out-of-bounds write in Windows Spaceport.sys allows an authorized attacker to execute code locally...

CVE-2026-71345

CVE-2026-71345 is an out-of-bounds write vulnerability in the Windows driver Spaceport.sys that allows an authorized low-privilege attacker to achieve local code execution . The vulnerability is rated CVSS 3.1: 7.8 (HIGH) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating that explo...

CVE-2026-71353

CVE-2026-71353 is a double free vulnerability in Windows Routing and Remote Access Service (RRAS) that allows an authorized local attacker to elevate privileges. The vulnerability requires local access with low privileges , has high attack complexity , and needs no user interaction , yielding a C...