43767 matches found
EUVD-2026-73847
Out-of-bounds read in Windows Remote Desktop Services allows an authorized attacker to elevate privileges over a network...
EUVD-2026-73713
Execution with unnecessary privileges in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...
CVE-2026-69464
Microsoft Office SharePoint contains an elevation of privilege vulnerability characterized as execution with unnecessary privileges. An authorized attacker with low privileges can exploit this over a network to escalate their access, with high impact on confidentiality, integrity, and availabilit...
CVE-2026-69409
Microsoft Office SharePoint is affected by an information disclosure vulnerability caused by execution with unnecessary privileges , allowing an authorized attacker to disclose information over a network. The CVSS 3.1 score is 6.5 (Medium) with high confidentiality impact but no integrity or avai...
CVE-2026-72961
CVE-2026-72961 is an out-of-bounds read vulnerability in Windows Hyper-V that allows a local, authorized attacker to elevate privileges. The CVSS 3.1 score is 8.2 (HIGH) , with a vector of AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H, indicating that exploitation requires existing high privileges on the s...
EUVD-2026-73616
Improper handling of insufficient permissions or privileges in Windows Enterprise App Management allows an authorized attacker to elevate privileges locally...
CVE-2026-69773
A heap-based buffer overflow in the Windows Biometric Service allows an authorized attacker to elevate privileges over a network. The CVSS 3.1 score is 8.0 (HIGH) with a vector of AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H, indicating that exploitation requires low privileges and user interaction , but ...
EUVD-2026-73593
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges over a network...
EUVD-2026-73549
Use after free in Windows Shell allows an authorized attacker to elevate privileges locally...
EUVD-2026-73421
Use after free in Windows Win32K allows an authorized attacker to elevate privileges over a network...
EUVD-2026-73320
Improper neutralization of special elements in output used by a downstream component 'injection' in SQL Server allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-69846
An integer overflow or wraparound in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally. The flaw requires high privileges and low attack complexity with no user interaction, but changes scope to affect the full system with high impact on confidentiality, integ...
EUVD-2026-73146
Missing authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...
CVE-2026-69380
CVE-2026-69380 is a missing authorization vulnerability in Microsoft Exchange Server that allows an authorized attacker to elevate privileges over a network. The CVSS 3.1 score is 8.1 (HIGH) , with high impact to confidentiality and integrity and no availability impact. Attack complexity is low, ...
EUVD-2026-73062
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges over a network...
EUVD-2026-73049
Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
EUVD-2026-72988
Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally...
CVE-2026-69310
CVE-2026-69310 is a use-after-free vulnerability in Windows DNS that allows an authorized attacker to elevate privileges locally. The flaw resides in the DNS component and requires local access with low privileges and no user interaction, though the attack complexity is rated as high. The CVSS 3....