102514 matches found
EUVD-2026-73636
Use after free in Windows DNS allows an unauthorized attacker to execute code over a network...
CVE-2026-69786
CVE-2026-69786 is a heap-based buffer overflow in Windows Text Shaping that allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is assigned a CVSS 3.1 score of 8.1 (HIGH) with a vector of AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H, indicating high attack co...
EUVD-2026-73628
Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network...
CVE-2026-69845
Windows DHCP Server is affected by a heap-based buffer overflow that allows an unauthorized, remote attacker to achieve code execution over a network without any user interaction or prior privileges. The vulnerability is rated CRITICAL (CVSS 9.8) with high impact to confidentiality, integrity, an...
EUVD-2026-73620
Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over an adjacent network...
CVE-2026-69768
A heap-based buffer overflow in Windows RNDIS (Remote Network Driver Interface Specification) allows an unauthorized, network-based attacker to achieve remote code execution without user interaction or prior privileges. Microsoft assigned a CVSS 3.1 score of 9.8 (Critical) , reflecting high impac...
EUVD-2026-73590
Heap-based buffer overflow in Windows Encrypting File System EFS allows an authorized attacker to elevate privileges locally...
CVE-2026-69727
A heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges over a network. The vulnerability is rated CVSS 8.0 (High) with vector AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H, indicating a network attack vector with low complexity, requiring low privilege...
EUVD-2026-73592
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges over a network...
CVE-2026-69688
CVE-2026-69688 is a heap-based buffer overflow in Windows Encrypting File System (EFS) that allows an authorized attacker to achieve privilege elevation over a network. The Microsoft Security Response Center classifies it as an Elevation of Privilege vulnerability. The CVSS 3.1 score is 7.1 (HIGH...
CVE-2026-69714
CVE-2026-69714 is a stack-based buffer overflow in the Windows Device Association Service that allows an authorized attacker to elevate privileges over a network. The vulnerability requires low privileges and user interaction , with a CVSS 3.1 score of 8.0 (HIGH) and impacts of High across Confid...
EUVD-2026-73583
Stack-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges over a network...
CVE-2026-69709
A heap-based buffer overflow in Windows NTFS allows an authorized attacker with low privileges and no user interaction to execute code locally. The vulnerability is rated CVSS 3.1 7.8 (HIGH) with full impact on confidentiality, integrity, and availability. The Microsoft reference points to a spec...
CVE-2026-69685
Windows Kerberos is affected by a heap-based buffer overflow that allows an authorized attacker to locally elevate privileges . Per Microsoft, the vulnerability carries a CVSS 3.1 score of 7.8 (HIGH) with a local attack vector, low complexity, low privileges required, and no user interaction, res...
EUVD-2026-73573
Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally...
CVE-2026-69669
CVE-2026-69669 is a heap-based buffer overflow in the Windows Kernel that allows an unauthorized attacker to achieve remote code execution over a network. The Microsoft-provided CVSS 3.1 score is 8.8 (HIGH) with the vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating a network-reachable attack...
CVE-2026-69624
Active Directory Certificate Services (AD CS) is affected by an incomplete list of disallowed inputs , enabling an authorized attacker to perform tampering over a network . The root cause is that the input validation does not fully cover all disallowed values, allowing manipulation of certificate...
EUVD-2026-73552
Incomplete list of disallowed inputs in Active Directory Certificate Services AD CS allows an authorized attacker to perform tampering over a network...
CVE-2026-69508
A stack-based buffer overflow in the Windows MIDI Service Module allows a locally authenticated attacker with low privileges to escalate privileges, achieving high impact across confidentiality, integrity, and availability (CVSS 3.1: 7.8 HIGH ). No user interaction is required. The vulnerability ...