23884 matches found
CVE-2026-71338
CVE-2026-71338 is a double free vulnerability in Windows Failover Cluster that allows an authorized attacker to elevate privileges locally . The underlying cause is a double-free memory error within the Failover Cluster component. Per the CVSS 3.1 vector (AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H), the...
EUVD-2026-73095
Double free in Windows Failover Cluster allows an authorized attacker to elevate privileges locally...
EUVD-2026-73079
Double free in Windows Audio Service allows an authorized attacker to elevate privileges locally...
CVE-2026-70562
CVE-2026-70562 is a double free vulnerability in the Windows Audio Service that allows a low-privilege (authorized) local attacker to elevate privileges . The CVSS 3.1 score is 7.0 (HIGH) with vector AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H , reflecting a local attack vector with high complexity. No e...
CVE-2026-69337
A double free vulnerability in the Windows Registry allows an authorized attacker to elevate privileges over a network . The flaw requires low privileges and user interaction , with high attack complexity , but results in high impact to confidentiality, integrity, and availability (CVSS 3.1 score...
EUVD-2026-73222
Double free in Windows Registry allows an authorized attacker to elevate privileges over a network...
EUVD-2026-73214
Double free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges locally...
CVE-2026-69292
A double free vulnerability in the Remote Desktop Gateway Service (Microsoft) allows an authorized local attacker to elevate privileges . The flaw requires local access with low privileges and high attack complexity , but grants full compromise of confidentiality, integrity, and availability upon...
EUVD-2026-73178
Double free in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network...
CVE-2026-55007
CVE-2026-55007 is a double free vulnerability in Microsoft Exchange Server that allows an unauthorized, unauthenticated attacker to achieve remote code execution over the network. The vulnerability is rated CVSS 8.1 (HIGH) with a vector of AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H, meaning exploitation...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.21.32 bug fix and security update
Red Hat OpenShift Container Platform release 4.21.32 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.21. Red Hat Product Security has rated this update as having a...
Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability
Double free in Windows Routing and Remote Access Service RRAS allows an authorized attacker to elevate privileges locally...
Windows Registry Elevation of Privilege Vulnerability
Double free in Windows Registry allows an authorized attacker to elevate privileges over a network...
Microsoft Windows Search Component Elevation of Privilege Vulnerability
Double free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a network...
Microsoft Office Word Remote Code Execution Vulnerability
Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network...
Microsoft Excel Remote Code Execution Vulnerability
Double free in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
Windows Print Spooler Components Elevation of Privilege Vulnerability
Double free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally...
Windows Hello Elevation of Privilege Vulnerability
Double free in Windows Hello allows an authorized attacker to elevate privileges locally...