EUVD-2026-73086

Heap-based buffer overflow in Windows Paint allows an unauthorized attacker to execute code over a network...

CVE-2026-69730

CVE-2026-69730 is a use-after-free vulnerability in Windows DNS that allows an unauthorized, remote attacker to execute arbitrary code over the network without any user interaction or prior privileges. Microsoft rates it CVSS 9.8 (Critical) , with high impact on confidentiality, integrity, and av...

EUVD-2026-73068

Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network...

EUVD-2026-73066

Heap-based buffer overflow in Windows Link Layer Topology Discovery Protocol allows an unauthorized attacker to execute code over a network...

EUVD-2026-73052

Stack-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network...

EUVD-2026-73053

Out-of-bounds write in RPC Runtime allows an unauthorized attacker to execute code over a network...

EUVD-2026-73040

Heap-based buffer overflow in Windows Credential Providers allows an authorized attacker to execute code over a network...

CVE-2026-69689

An out-of-bounds read in the Windows Win32K component allows an authorized attacker to elevate privileges over a network . The CVSS v3.1 score is 8.0 (HIGH) with vector AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H , indicating a network-based attack requiring low privileges and user interaction, with high...

CVE-2026-69594

CVE-2026-69594 is a heap-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) that allows an authorized local attacker to escalate privileges. The vulnerability is rated CVSS 7.8 (HIGH) , with a local attack vector, low complexity, low privileges required, no user interacti...

EUVD-2026-73006

Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network...

CVE-2026-69621

CVE-2026-69621 is a heap-based buffer overflow in the Windows Fax Service that allows an authorized local attacker to elevate privileges , resulting in full compromise of confidentiality, integrity, and availability (CVSS 3.1: 7.0 HIGH , AV:L/AC:H/PR:L). CISA's SSVC assessment indicates no known ...

CVE-2026-69514

CVE-2026-69514 is a heap-based buffer overflow in Windows Remote Desktop Services (RDS) that allows an authorized attacker (low privileges) to achieve remote code execution over a network. The vulnerability requires high attack complexity and no user interaction, yielding a CVSS 3.1 base score of...

CVE-2026-69496

CVE-2026-69496 is a heap-based buffer overflow in Windows Compressed Folder that enables an unauthorized, unauthenticated attacker to achieve remote code execution over a network . Microsoft rates it CVSS 9.8 (Critical) with high impact to confidentiality, integrity, and availability. CISA's SSVC...

EUVD-2026-72991

Heap-based buffer overflow in Windows Enterprise App Management allows an authorized attacker to elevate privileges over a network...

CVE-2026-69481

CVE-2026-69481 is a heap-based buffer overflow in Windows Enterprise App Management that allows an authorized attacker to elevate privileges over a network. The vulnerability requires low privileges and user interaction, with high impact to confidentiality, integrity, and availability (CVSS 3.1 b...

EUVD-2026-72990

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally...

CVE-2026-69463

CVE-2026-69463 is a heap-based buffer overflow in the Windows NTFS filesystem component that allows an unauthorized attacker to achieve remote code execution over a network without requiring prior authentication or user interaction. The vulnerability is rated CVSS 3.1: 9.8 (Critical) by the CNA (...

EUVD-2026-72985

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code over a network...

EUVD-2026-72984

Stack-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code over a network...

CVE-2026-69461

CVE-2026-69461 is a stack-based buffer overflow in Windows NTFS that allows an unauthorized, unprivileged attacker to achieve remote code execution over a network. The vulnerability requires user interaction but no prior authentication, yielding a CVSS v3.1 score of 8.8 (HIGH) with full impact on...