EUVD-2026-73593

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges over a network...

EUVD-2026-73549

Use after free in Windows Shell allows an authorized attacker to elevate privileges locally...

EUVD-2026-73421

Use after free in Windows Win32K allows an authorized attacker to elevate privileges over a network...

EUVD-2026-73320

Improper neutralization of special elements in output used by a downstream component 'injection' in SQL Server allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-69846

An integer overflow or wraparound in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally. The flaw requires high privileges and low attack complexity with no user interaction, but changes scope to affect the full system with high impact on confidentiality, integ...

EUVD-2026-73146

Missing authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-69380

CVE-2026-69380 is a missing authorization vulnerability in Microsoft Exchange Server that allows an authorized attacker to elevate privileges over a network. The CVSS 3.1 score is 8.1 (HIGH) , with high impact to confidentiality and integrity and no availability impact. Attack complexity is low, ...

EUVD-2026-73062

Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges over a network...

EUVD-2026-73049

Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

EUVD-2026-72988

Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally...

CVE-2026-69310

CVE-2026-69310 is a use-after-free vulnerability in Windows DNS that allows an authorized attacker to elevate privileges locally. The flaw resides in the DNS component and requires local access with low privileges and no user interaction, though the attack complexity is rated as high. The CVSS 3....

EUVD-2026-73219

Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network...

EUVD-2026-73200

Use after free in Windows Kernel allows an authorized attacker to elevate privileges over a network...

EUVD-2026-73168

Permissive cross-domain policy with untrusted domains in Azure Arc allows an unauthorized attacker to elevate privileges over a network...

Windows CD-ROM Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally...

Windows Core Messaging Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges locally...

Windows Biometric Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

Microsoft Office SharePoint Elevation of Privilege Vulnerability

Execution with unnecessary privileges in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...

Windows DWM Core Library Elevation of Privilege Vulnerability

Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges over a network...

Windows Print Spooler Components Elevation of Privilege Vulnerability

Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally...