104783 matches found
CVE-2026-73017
CVE-2026-73017 is a heap-based buffer overflow in Windows Graphics Kernel that allows a local, authorized attacker to achieve code execution . The vulnerability requires high privileges and high attack complexity , with no user interaction needed. Scope is changed, with high impact on confidentia...
CVE-2026-73025
CVE-2026-73025 is a Security Feature Bypass vulnerability in Windows iSCSI , rooted in weak authentication that allows an unauthorized attacker to bypass a security feature over a network. The vulnerability carries a CVSS 3.1 score of 9.8 (CRITICAL) with a network attack vector, low complexity, n...
EUVD-2026-73776
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network...
EUVD-2026-73774
Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network...
CVE-2026-73006
CVE-2026-73006 is a stack-based buffer overflow in DirectWrite , a component of the Microsoft Graphics Component , that allows an unauthorized remote attacker to achieve remote code execution over a network. The flaw requires user interaction (e.g., opening a crafted file) but no prior authentica...
CVE-2026-73012
CVE-2026-73012 is a heap-based buffer overflow in Windows Management Services that allows an authorized (low-privilege) attacker to elevate privileges over a network . The vulnerability is rated CVSS 8.8 (HIGH) with vector AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating low attack complexity and ...
CVE-2026-73009
This use-after-free vulnerability affects Windows Secure Socket Tunneling Protocol (SSTP) , allowing an unauthorized attacker to achieve remote code execution over a network with low attack complexity and no required privileges or user interaction . The CVSS 3.1 score is 9.8 (Critical) with high ...
EUVD-2026-73761
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
EUVD-2026-73757
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
CVE-2026-72991
CVE-2026-72991 is a heap-based buffer overflow in the Windows Biometric Service that allows a locally authenticated attacker with low privileges to escalate to higher privileges. The vulnerability scores 7.8 (HIGH) under CVSS v3.1, with all three impact dimensions rated High. Attack requires loca...
CVE-2026-72992
A heap-based buffer overflow in the Windows Biometric Service allows an authorized local attacker to elevate privileges, resulting in high impact to confidentiality, integrity, and availability. The vulnerability carries a CVSS 3.1 score of 7.8 (HIGH) with a local attack vector, low complexity, a...
CVE-2026-72977
CVE-2026-72977 is an out-of-bounds read vulnerability in Microsoft Office PowerPoint that allows an unauthorized, network-based attacker to disclose information . The attack requires user interaction (e.g., opening a crafted file) but no prior authentication. CVSS 3.1 base score is 6.5 (MEDIUM) w...
EUVD-2026-73732
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...
EUVD-2026-73730
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...
EUVD-2026-73726
Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network...
CVE-2026-69805
CVE-2026-69805 is an elevation of privilege vulnerability in Microsoft .NET , caused by external control of a file name or path . An unauthorized network-based attacker can exploit this to escalate privileges, with high impact on confidentiality, integrity, and availability. The CVSS 3.1 score is...
CVE-2026-69439
A heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network, as reported by Microsoft (CNA: [email protected]). The vulnerability carries a CVSS 3.1 score of 8.8 (HIGH) with the vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicati...
EUVD-2026-73716
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network...
CVE-2026-69636
CVE-2026-69636 is an SQL injection vulnerability in Microsoft Office SharePoint , caused by improper neutralization of special elements used in SQL commands. An authorized attacker with low privileges can exploit it over a network to disclose information , with high confidentiality impact but no ...