EUVD-2026-73424

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over a network...

CVE-2026-68889

A heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network. The CNA-assessed CVSS 3.1 score is 7.1 (HIGH) with a vector of AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H, indicating that exploitation requires low privileges, user interaction, an...

CVE-2026-68888

CVE-2026-68888 is a heap-based buffer overflow in Microsoft Standard XPS that allows an authorized local attacker to escalate privileges . The CVSS 3.1 score is 7.8 (High) , reflecting a local attack vector with low complexity, low privileges required, no user interaction, and high impact to conf...

CVE-2026-68885

CVE-2026-68885 is a heap-based buffer overflow in Microsoft Standard XPS that allows an authorized local attacker to escalate privileges. The vulnerability carries a CVSS 3.1 base score of 7.8 (HIGH) with the vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, meaning it requires local access with low pr...

CVE-2026-68898

Windows iSCSI is vulnerable to an out-of-bounds read that allows an unauthorized, remote attacker to cause a denial of service over a network. The CVSS 3.1 score is 6.5 (Medium) , with the attack requiring user interaction (e.g., opening a crafted file) but no prior privileges. CISA's SSVC assess...

CVE-2026-68850

This vulnerability is a heap-based buffer overflow in Microsoft Account that allows an attacker with existing low-level access to locally elevate privileges . The CVSS 3.1 score is 7.8 (HIGH) , reflecting a local attack vector with low complexity and low privileges required, resulting in high imp...

CVE-2026-68880

CVE-2026-68880 is a heap-based buffer overflow in the Windows Win32K component that allows an authorized attacker to achieve privilege escalation over a network . The CVSS 3.1 score is 8.0 (HIGH) with the vector AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H, meaning low privileges and user interaction are ...

EUVD-2026-73408

Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges over a network...

CVE-2026-68838

CVE-2026-68838 is a stack-based buffer overflow in Windows NTFS that allows an authorized attacker with low privileges to elevate privileges over a network, requiring user interaction. Microsoft assigned a CVSS 3.1 score of 8.0 (HIGH) with high impacts to confidentiality, integrity, and availabil...

EUVD-2026-73402

Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network...

CVE-2026-68834

A stack-based buffer overflow in Windows NTFS allows an authorized attacker to achieve privilege elevation over a network. The vulnerability is rated CVSS 8.0 (HIGH) with a vector of network access, low complexity, low privileges required, and user interaction required, resulting in high impact t...

EUVD-2026-73400

Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network...

CVE-2026-67639

CVE-2026-67639 is a heap-based buffer overflow in Microsoft SQL Server that allows an authorized attacker (low privileges) to achieve remote code execution over a network. The CVSS 3.1 base score is 8.8 (HIGH) with full impact to confidentiality, integrity, and availability. No exploit availabili...

EUVD-2026-73386

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

CVE-2026-62810

CVE-2026-62810 is a heap-based buffer overflow in Microsoft Active Directory Certificate Services (AD CS) that allows an authorized attacker to escalate privileges locally . The CVSS 3.1 base score is 7.8 (HIGH) , reflecting a local attack vector, low complexity, low privileges required, no user ...

CVE-2026-85877

A heap-based buffer overflow in Windows Print Spooler Components allows an unauthorized, remote attacker to achieve code execution over a network . The vulnerability is rated CVSS 3.1: 8.8 (High) with an attack vector of Network, Low complexity, no privileges required, but user interaction is req...

CVE-2026-83996

Windows Error Reporting in Windows is affected by a heap-based buffer overflow that allows an authorized attacker to elevate privileges locally . The assigned CVSS 3.1 score is 8.8 (HIGH) with a scope change (vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H), indicating that successful exploi...

EUVD-2026-73353

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-73351

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

CVE-2026-83955

CVE-2026-83955 is a heap-based buffer overflow in the Windows Biometric Service that allows an authorized attacker (low privileges, no user interaction) to achieve local privilege escalation . The assigned CVSS 3.1 score is 7.8 (HIGH) , with high impact to confidentiality, integrity, and availabi...