EUVD-2026-73552

Incomplete list of disallowed inputs in Active Directory Certificate Services AD CS allows an authorized attacker to perform tampering over a network...

CVE-2026-69508

A stack-based buffer overflow in the Windows MIDI Service Module allows a locally authenticated attacker with low privileges to escalate privileges, achieving high impact across confidentiality, integrity, and availability (CVSS 3.1: 7.8 HIGH ). No user interaction is required. The vulnerability ...

EUVD-2026-73529

Stack-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...

EUVD-2026-73528

Stack-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges over a network...

CVE-2026-69503

CVE-2026-69503 is a stack-based buffer overflow in the Windows USB Driver that allows an authorized attacker to elevate privileges over a network. The vulnerability carries a CVSS 3.1 base score of 8.0 (HIGH) with a network attack vector, low complexity, low required privileges, and required user...

EUVD-2026-73524

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network...

CVE-2026-69480

CVE-2026-69480 is a heap-based buffer overflow in the Windows Partition Management Driver that allows an authorized, low-privilege local attacker to escalate privileges. The CVSS v3.1 score is 7.8 (HIGH) , with a local attack vector, low complexity, and high impact on confidentiality, integrity, ...

CVE-2026-69478

CVE-2026-69478 is a heap-based buffer overflow in the Windows Device Association Service that allows an authorized attacker to elevate privileges locally . The vulnerability is rated CVSS 7.8 (HIGH) with a local attack vector, low complexity, and low privileges required, resulting in high impact ...

EUVD-2026-73514

Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...

CVE-2026-69467

CVE-2026-69467 is a stack-based buffer overflow in the Microsoft Graphics Component that allows an authorized attacker to elevate privileges locally . The CVSS 3.1 score is 7.8 (HIGH) with a vector of local attack, low complexity, low privileges required, and high impact on confidentiality, integ...

EUVD-2026-73509

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over a network...

CVE-2026-69433

A heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to achieve local privilege escalation . The vulnerability is rated CVSS 3.1: 7.8 (HIGH) with a local attack vector, low complexity, and low privileges required, yielding high impact on confidentiality, integrity...

EUVD-2026-73503

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

CVE-2026-69449

CVE-2026-69449 is a heap-based buffer overflow in Windows BitLocker that allows an authorized attacker to execute code locally. The CVSS 3.1 score is 6.7 (Medium) , reflecting a local attack vector with high privileges required and no user interaction , resulting in high impact on confidentiality...

CVE-2026-69427

CVE-2026-69427 is an out-of-bounds read vulnerability in the Windows VOLSNAP.SYS driver (Volume Shadow Copy service). An authorized attacker can exploit it over a network to elevate privileges . The CVSS 3.1 base score is 8.0 (HIGH) with a vector of AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H , indicatin...

EUVD-2026-73493

Heap-based buffer overflow in Windows Distributed File System DFS allows an authorized attacker to elevate privileges locally...

EUVD-2026-73494

Out-of-bounds read in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to deny service over a network...

CVE-2026-69428

Windows LDAP (Lightweight Directory Access Protocol) is vulnerable to an out-of-bounds read that allows an unauthorized, network-based attacker to cause a denial of service , with a CVSS 3.1 base score of 7.5 (HIGH) . The vulnerability requires no privileges and no user interaction, though it imp...

CVE-2026-69360

CVE-2026-69360 is a heap-based buffer overflow in Microsoft Office Word that allows an unauthorized attacker to achieve remote code execution over a network. The attack requires user interaction (e.g., opening a malicious document) but no prior authentication. The assigned CVSS v3.1 score is 8.8 ...

CVE-2026-69357

Windows NDIS (Network Driver Interface Specification) contains a use-after-free vulnerability that allows an authorized attacker to elevate privileges over a network. The flaw requires low privileges , user interaction , and a high-attack-complexity network vector to succeed, resulting in high im...