23797 matches found
CVE-2026-69725
CVE-2026-69725 is a double free vulnerability in Windows Hello that allows an authorized attacker with low privileges to achieve local privilege escalation . The flaw is scored CVSS 3.1 7.8 (HIGH) with a local attack vector, low complexity, and high impact to confidentiality, integrity, and avail...
CVE-2026-69322
A double free vulnerability in the Microsoft Windows Search Component allows an authorized, network-based attacker to elevate privileges . The CVSS 3.1 score is 8.0 (High) , with a network attack vector, low privileges required, and user interaction required, impacting confidentiality, integrity,...
EUVD-2026-73454
Double free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a network...
SUSE CVE-2026-84964
A double free in the OpenSSL-based TLS certificate revocation checking path of the MongoDB C Driver can be reached by a TLS endpoint that the client already trusts. During the handshake, specially formed certificate data can cause the same heap object to be released twice. An unauthenticated part...
EUVD-2026-73274
Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network...
CVE-2026-77504
CVE-2026-77504 is a double free flaw in Microsoft Office Word that allows an unauthorized attacker to achieve remote code execution over a network with user interaction required. The vulnerability carries a CVSS 3.1 score of 8.8 (HIGH) with full confidentiality, integrity, and availability impact...
EUVD-2026-73265
Double free in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network...
CVE-2026-77493
CVE-2026-77493 is a double free flaw in the Microsoft Windows Graphics Component that allows an unauthorized, remote attacker to achieve code execution over the network with no privileges or user interaction. The CNA-assigned CVSS 3.1 score is 9.8 (CRITICAL) , with high impact to confidentiality,...
EUVD-2026-73115
Double free in Windows Credential Guard allows an authorized attacker to elevate privileges locally...
CVE-2026-72958
CVE-2026-72958 is a double free vulnerability in Windows Credential Guard that allows an authorized attacker to elevate privileges locally . The flaw resides in the Credential Guard component of Windows, a security feature that isolates user credentials from the rest of the operating system. The ...
EUVD-2026-73106
Double free in Windows Routing and Remote Access Service RRAS allows an authorized attacker to elevate privileges locally...
CVE-2026-71351
This vulnerability is a double free in Windows Routing and Remote Access Service (RRAS) that allows an authorized local attacker to elevate privileges . The CVSS 3.1 score is 7.0 (HIGH) , with a local attack vector, high complexity, and low privileges required, yielding high impact to confidentia...
EUVD-2026-73103
Double free in Windows Routing and Remote Access Service RRAS allows an authorized attacker to elevate privileges locally...
CVE-2026-71353
CVE-2026-71353 is a double free vulnerability in Windows Routing and Remote Access Service (RRAS) that allows an authorized local attacker to elevate privileges. The vulnerability requires local access with low privileges , has high attack complexity , and needs no user interaction , yielding a C...
EUVD-2026-73095
Double free in Windows Failover Cluster allows an authorized attacker to elevate privileges locally...
CVE-2026-71338
CVE-2026-71338 is a double free vulnerability in Windows Failover Cluster that allows an authorized attacker to elevate privileges locally . The underlying cause is a double-free memory error within the Failover Cluster component. Per the CVSS 3.1 vector (AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H), the...
EUVD-2026-73079
Double free in Windows Audio Service allows an authorized attacker to elevate privileges locally...
CVE-2026-70562
CVE-2026-70562 is a double free vulnerability in the Windows Audio Service that allows a low-privilege (authorized) local attacker to elevate privileges . The CVSS 3.1 score is 7.0 (HIGH) with vector AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H , reflecting a local attack vector with high complexity. No e...
CVE-2026-69337
A double free vulnerability in the Windows Registry allows an authorized attacker to elevate privileges over a network . The flaw requires low privileges and user interaction , with high attack complexity , but results in high impact to confidentiality, integrity, and availability (CVSS 3.1 score...