CVE-2026-69725

Double free in Windows Hello allows an authorized attacker to elevate privileges locally...

CVE-2026-69337

Double free in Windows Registry allows an authorized attacker to elevate privileges over a network...

CVE-2026-69322

Double free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a network...

CVE-2026-69309

Double free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally...

CVE-2026-69292

Double free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges locally...

CVE-2026-55007

Double free in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network...

net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME

A flaw was found in the net package of Go golang, specifically when using the LookupCNAME function with the cgo DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name CNAME response. This can trigger a double-free of C memory, leading to a crash and a Denial of...

EUVD-2026-73881

Double free in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

CVE-2026-81950

CVE-2026-81950 is a double free vulnerability in Microsoft Office Excel that allows an unauthorized attacker to execute code locally. The CVSS 3.1 score is 7.8 (HIGH) , reflecting a local attack vector with low complexity, no privileges required, and user interaction required, resulting in high i...

EUVD-2026-73838

Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

CVE-2026-80080

CVE-2026-80080 is a double free vulnerability in Microsoft Office Word that allows an unauthorized attacker to achieve remote code execution over a network with user interaction required. The CVSS 3.1 base score is 8.8 (HIGH) , reflecting high impact to confidentiality, integrity, and availabilit...

EUVD-2026-73682

Double free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally...

CVE-2026-69309

CVE-2026-69309 is a local privilege escalation vulnerability in Windows Print Spooler Components , caused by a double free defect. An attacker with low local privileges and high attack complexity can exploit it without user interaction to achieve full compromise of confidentiality, integrity, and...

CVE-2026-70567

CVE-2026-70567 is a double free vulnerability in the Windows Display Enhancement Service that allows a low-privileged, authorized local attacker to achieve privilege escalation . The attack vector is local with high complexity and requires no user interaction. The CVSS 3.1 score is 7.0 (HIGH) wit...

EUVD-2026-73647

Double free in Windows Display Enhancement Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-73638

Double free in Windows Hello allows an authorized attacker to elevate privileges locally...

CVE-2026-69725

CVE-2026-69725 is a double free vulnerability in Windows Hello that allows an authorized attacker with low privileges to achieve local privilege escalation . The flaw is scored CVSS 3.1 7.8 (HIGH) with a local attack vector, low complexity, and high impact to confidentiality, integrity, and avail...

CVE-2026-69322

A double free vulnerability in the Microsoft Windows Search Component allows an authorized, network-based attacker to elevate privileges . The CVSS 3.1 score is 8.0 (High) , with a network attack vector, low privileges required, and user interaction required, impacting confidentiality, integrity,...

EUVD-2026-73454

Double free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a network...

SUSE CVE-2026-84964

A double free in the OpenSSL-based TLS certificate revocation checking path of the MongoDB C Driver can be reached by a TLS endpoint that the client already trusts. During the handshake, specially formed certificate data can cause the same heap object to be released twice. An unauthenticated part...