CVE-2026-69277

CVE-2026-69277 is a stack-based buffer overflow in the Microsoft Local Security Authority Server (lsasrv) component that enables a locally authenticated attacker to escalate privileges . The vulnerability is scored CVSS 3.1: 7.8 (HIGH) with a local attack vector, low complexity, and low privilege...

CVE-2026-69270

A heap-based buffer overflow in the Windows USB Audio Class driver (usbaudio.sys) allows a locally authenticated attacker to escalate privileges , resulting in high impact to confidentiality, integrity, and availability (CVSS 3.1 base score 7.8 HIGH ). No specific affected Windows version or patc...

CVE-2026-69266

CVE-2026-69266 is an integer overflow or wraparound vulnerability in Windows DHCP Server that allows an unauthorized attacker to achieve remote code execution over the network. The CVSS 3.1 base score is 8.8 (High) with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. CISA's SSVC assessment rates...

EUVD-2026-73424

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over a network...

CVE-2026-68889

A heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network. The CNA-assessed CVSS 3.1 score is 7.1 (HIGH) with a vector of AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H, indicating that exploitation requires low privileges, user interaction, an...

CVE-2026-68888

CVE-2026-68888 is a heap-based buffer overflow in Microsoft Standard XPS that allows an authorized local attacker to escalate privileges . The CVSS 3.1 score is 7.8 (High) , reflecting a local attack vector with low complexity, low privileges required, no user interaction, and high impact to conf...

CVE-2026-68885

CVE-2026-68885 is a heap-based buffer overflow in Microsoft Standard XPS that allows an authorized local attacker to escalate privileges. The vulnerability carries a CVSS 3.1 base score of 7.8 (HIGH) with the vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, meaning it requires local access with low pr...

CVE-2026-68898

Windows iSCSI is vulnerable to an out-of-bounds read that allows an unauthorized, remote attacker to cause a denial of service over a network. The CVSS 3.1 score is 6.5 (Medium) , with the attack requiring user interaction (e.g., opening a crafted file) but no prior privileges. CISA's SSVC assess...

CVE-2026-68850

This vulnerability is a heap-based buffer overflow in Microsoft Account that allows an attacker with existing low-level access to locally elevate privileges . The CVSS 3.1 score is 7.8 (HIGH) , reflecting a local attack vector with low complexity and low privileges required, resulting in high imp...

CVE-2026-68880

CVE-2026-68880 is a heap-based buffer overflow in the Windows Win32K component that allows an authorized attacker to achieve privilege escalation over a network . The CVSS 3.1 score is 8.0 (HIGH) with the vector AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H, meaning low privileges and user interaction are ...

EUVD-2026-73408

Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges over a network...

CVE-2026-68838

CVE-2026-68838 is a stack-based buffer overflow in Windows NTFS that allows an authorized attacker with low privileges to elevate privileges over a network, requiring user interaction. Microsoft assigned a CVSS 3.1 score of 8.0 (HIGH) with high impacts to confidentiality, integrity, and availabil...

EUVD-2026-73402

Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network...

CVE-2026-68834

A stack-based buffer overflow in Windows NTFS allows an authorized attacker to achieve privilege elevation over a network. The vulnerability is rated CVSS 8.0 (HIGH) with a vector of network access, low complexity, low privileges required, and user interaction required, resulting in high impact t...

EUVD-2026-73400

Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network...

CVE-2026-67639

CVE-2026-67639 is a heap-based buffer overflow in Microsoft SQL Server that allows an authorized attacker (low privileges) to achieve remote code execution over a network. The CVSS 3.1 base score is 8.8 (HIGH) with full impact to confidentiality, integrity, and availability. No exploit availabili...

EUVD-2026-73386

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

CVE-2026-62810

CVE-2026-62810 is a heap-based buffer overflow in Microsoft Active Directory Certificate Services (AD CS) that allows an authorized attacker to escalate privileges locally . The CVSS 3.1 base score is 7.8 (HIGH) , reflecting a local attack vector, low complexity, low privileges required, no user ...

CVE-2026-85877

A heap-based buffer overflow in Windows Print Spooler Components allows an unauthorized, remote attacker to achieve code execution over a network . The vulnerability is rated CVSS 3.1: 8.8 (High) with an attack vector of Network, Low complexity, no privileges required, but user interaction is req...

CVE-2026-83996

Windows Error Reporting in Windows is affected by a heap-based buffer overflow that allows an authorized attacker to elevate privileges locally . The assigned CVSS 3.1 score is 8.8 (HIGH) with a scope change (vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H), indicating that successful exploi...