EUVD-2026-73528

Stack-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges over a network...

EUVD-2026-73524

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network...

CVE-2026-69480

CVE-2026-69480 is a heap-based buffer overflow in the Windows Partition Management Driver that allows an authorized, low-privilege local attacker to escalate privileges. The CVSS v3.1 score is 7.8 (HIGH) , with a local attack vector, low complexity, and high impact on confidentiality, integrity, ...

CVE-2026-69478

CVE-2026-69478 is a heap-based buffer overflow in the Windows Device Association Service that allows an authorized attacker to elevate privileges locally . The vulnerability is rated CVSS 7.8 (HIGH) with a local attack vector, low complexity, and low privileges required, resulting in high impact ...

EUVD-2026-73514

Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...

CVE-2026-69467

CVE-2026-69467 is a stack-based buffer overflow in the Microsoft Graphics Component that allows an authorized attacker to elevate privileges locally . The CVSS 3.1 score is 7.8 (HIGH) with a vector of local attack, low complexity, low privileges required, and high impact on confidentiality, integ...

EUVD-2026-73509

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over a network...

CVE-2026-69433

A heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to achieve local privilege escalation . The vulnerability is rated CVSS 3.1: 7.8 (HIGH) with a local attack vector, low complexity, and low privileges required, yielding high impact on confidentiality, integrity...

EUVD-2026-73503

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

CVE-2026-69449

CVE-2026-69449 is a heap-based buffer overflow in Windows BitLocker that allows an authorized attacker to execute code locally. The CVSS 3.1 score is 6.7 (Medium) , reflecting a local attack vector with high privileges required and no user interaction , resulting in high impact on confidentiality...

CVE-2026-69427

CVE-2026-69427 is an out-of-bounds read vulnerability in the Windows VOLSNAP.SYS driver (Volume Shadow Copy service). An authorized attacker can exploit it over a network to elevate privileges . The CVSS 3.1 base score is 8.0 (HIGH) with a vector of AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H , indicatin...

EUVD-2026-73493

Heap-based buffer overflow in Windows Distributed File System DFS allows an authorized attacker to elevate privileges locally...

EUVD-2026-73494

Out-of-bounds read in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to deny service over a network...

CVE-2026-69428

Windows LDAP (Lightweight Directory Access Protocol) is vulnerable to an out-of-bounds read that allows an unauthorized, network-based attacker to cause a denial of service , with a CVSS 3.1 base score of 7.5 (HIGH) . The vulnerability requires no privileges and no user interaction, though it imp...

CVE-2026-69360

CVE-2026-69360 is a heap-based buffer overflow in Microsoft Office Word that allows an unauthorized attacker to achieve remote code execution over a network. The attack requires user interaction (e.g., opening a malicious document) but no prior authentication. The assigned CVSS v3.1 score is 8.8 ...

CVE-2026-69357

Windows NDIS (Network Driver Interface Specification) contains a use-after-free vulnerability that allows an authorized attacker to elevate privileges over a network. The flaw requires low privileges , user interaction , and a high-attack-complexity network vector to succeed, resulting in high im...

EUVD-2026-73432

Heap-based buffer overflow in Windows DCOM Server allows an authorized attacker to elevate privileges locally...

CVE-2026-69277

CVE-2026-69277 is a stack-based buffer overflow in the Microsoft Local Security Authority Server (lsasrv) component that enables a locally authenticated attacker to escalate privileges . The vulnerability is scored CVSS 3.1: 7.8 (HIGH) with a local attack vector, low complexity, and low privilege...

CVE-2026-69270

A heap-based buffer overflow in the Windows USB Audio Class driver (usbaudio.sys) allows a locally authenticated attacker to escalate privileges , resulting in high impact to confidentiality, integrity, and availability (CVSS 3.1 base score 7.8 HIGH ). No specific affected Windows version or patc...

CVE-2026-69266

CVE-2026-69266 is an integer overflow or wraparound vulnerability in Windows DHCP Server that allows an unauthorized attacker to achieve remote code execution over the network. The CVSS 3.1 base score is 8.8 (High) with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. CISA's SSVC assessment rates...