6274 matches found
CVE-2026-69758
A heap-based buffer overflow in the Windows Universal Disk Format File System (UDFS) Driver allows a locally authenticated attacker to elevate privileges . The flaw is rated CVSS 7.8 (High) with full impact to confidentiality, integrity, and availability (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). CIS...
EUVD-2026-73062
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges over a network...
EUVD-2026-73060
Uncaught exception in Windows iSCSI Target Service allows an authorized attacker to deny service over a network...
CVE-2026-69839
CVE-2026-69839 is a denial-of-service vulnerability in the Windows iSCSI Target Service , caused by an uncaught exception that allows an authorized attacker (low privileges) to deny service over the network. The CVSS v3.1 score is 6.5 (Medium) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H,...
EUVD-2026-73057
Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally...
CVE-2026-69808
CVE-2026-69808 is an out-of-bounds read vulnerability in the Windows Win32K component that allows an authorized attacker with local access to disclose information . The CVSS 3.1 base score is 5.5 (MEDIUM) , reflecting a local attack vector, low complexity, low privileges required, no user interac...
CVE-2026-69838
CVE-2026-69838 is a use-after-free vulnerability in Windows Print Spooler Components that allows an authorized attacker to achieve local privilege escalation . The attack vector is local, requires low privileges, and has high complexity with no user interaction needed. The CVSS 3.1 score is 7.0 (...
EUVD-2026-73059
Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally...
EUVD-2026-73058
Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally...
EUVD-2026-73056
Exposure of sensitive system information to an unauthorized control sphere in Windows Win32K allows an authorized attacker to disclose information locally...
CVE-2026-69832
CVE-2026-69832 is an information disclosure vulnerability in Windows Win32K , a kernel-mode component handling graphics and input processing. Exposure of sensitive system information to an unauthorized control sphere allows a low-privilege local attacker to read sensitive data. The CVSS 3.1 score...
CVE-2026-69862
CVE-2026-69862 is an out-of-bounds read in the Windows Wireless Wide Area Network Service that allows an authorized local attacker to disclose information . The CVSS v3.1 score is 5.5 (Medium) with High confidentiality impact, no integrity or availability impact, and requires low privileges over ...
EUVD-2026-73055
Out-of-bounds read in Windows Wireless Wide Area Network Service allows an authorized attacker to disclose information locally...
CVE-2026-69762
CVE-2026-69762 is a stack-based buffer overflow in Windows Win32K that allows an authorized attacker with low privileges to elevate privileges over a network , requiring user interaction. The CVSS 3.1 base score is 8.0 (HIGH) , reflecting high impact to confidentiality, integrity, and availabilit...
EUVD-2026-73050
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally...
CVE-2026-69741
Windows Spaceport.sys is affected by an out-of-bounds read vulnerability that allows a locally authenticated attacker with low privileges to disclose information . The CVSS 3.1 score is 5.5 (Medium) with a local attack vector, low complexity, no user interaction, and a high confidentiality impact...
EUVD-2026-73051
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information locally...
EUVD-2026-73048
Heap-based buffer overflow in Virtual Hard Disk VHD Miniport Driver allows an authorized attacker to elevate privileges over a network...
CVE-2026-69896
CVE-2026-69896 is a use after free vulnerability in Windows Error Reporting that allows an authorized, low-privilege attacker to perform a local privilege escalation . The attack requires local access, involves high complexity, and does not require user interaction. The CVSS 3.1 base score is 7.0...