405991 matches found
EUVD-2026-100095
Heap-based buffer overflow in Windows Secure Socket Tunneling Protocol SSTP allows an authorized attacker to elevate privileges locally...
CVE-2026-88110
A heap-based buffer overflow exists in the Windows Graphics Kernel . This vulnerability allows an authorized attacker to achieve local privilege elevation . No specific versions, root causes, or remediation details are provided in the documents. Exploitation details are not present.
EUVD-2026-100089
Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally...
EUVD-2026-100070
Heap-based buffer overflow in Winlogon allows an authorized attacker to elevate privileges locally...
CVE-2026-87699
A heap-based buffer overflow exists in Winlogon , which allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-122 . Official remediation is available via Microsoft updates.
EUVD-2026-100061
Stack-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network...
EUVD-2026-100062
Heap-based buffer overflow in Microsoft XML allows an unauthorized attacker to execute code over a network...
EUVD-2026-100058
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally...
EUVD-2026-100065
Heap-based buffer overflow in Reliable Multicast Transport Driver RMCAST allows an unauthorized attacker to execute code over an adjacent network...
CVE-2026-69789
A heap-based buffer overflow exists in the Reliable Multicast Transport Driver (RMCAST) . This vulnerability allows an unauthorized attacker to achieve remote code execution over an adjacent network. The vulnerability is classified with a HIGH base severity score (7.5) and requires high attack co...
CVE-2026-83934
A stack-based buffer overflow vulnerability exists in Windows GDI+ , which could allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability is rated as HIGH severity with a CVSS 3.1 score of 8.8, as it could impact confidentiality, integrity, and availabilit...
CVE-2026-83931
A heap-based buffer overflow vulnerability exists in Windows Hyper-V . This flaw allows an authorized attacker to achieve local code execution . The vulnerability has a high severity rating and the official remediation is provided via Microsoft updates.
CVE-2026-83935
A heap-based buffer overflow vulnerability exists in Microsoft XML , which allows an unauthorized attacker to achieve remote code execution over a network. This vulnerability is categorized as CRITICAL with a CVSSv3.1 score of 9.8 . The NCSC confirms that this flaw allows malicious actors to exec...
CVE-2026-85910
A buffer over-read vulnerability exists in the Windows StateRepository API . This flaw allows an authorized attacker to perform a local information disclosure, potentially exposing sensitive data. The vulnerability is associated with CWE-126 . No specific exploit details or active in-the-wild exp...
EUVD-2026-100046
Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally...
EUVD-2026-100049
Buffer over-read in Windows StateRepository API allows an authorized attacker to disclose information locally...
CVE-2026-85908
A heap-based buffer overflow exists in the Windows Win32K - GRFX component. This vulnerability allows an authorized attacker to perform a local privilege escalation . The issue is associated with CWE-122 (Heap-based Buffer Overflow) and CWE-190 (Integer Overflow or Wraparound). While the severity...
CVE-2026-85901
A heap-based buffer overflow vulnerability exists in the Windows Win32K - GRFX component. This flaw allows an authorized attacker to perform a local privilege escalation . The severity is rated as HIGH with a CVSS score of 7.8. Documentation does not provide specific exploit links or detailed rem...
CVE-2026-85902
A heap-based buffer overflow exists in Windows Direct Composition that allows an authorized attacker to achieve local privilege escalation . The vulnerability is categorized under CWE-122 and has a CVSS 3.1 base score of 7.8 (High). No specific exploit information or in-the-wild exploitation deta...