89528 matches found
CVE-2026-69612
CVE-2026-69612 is an absolute path traversal vulnerability in Windows Error Reporting that allows an authorized attacker to elevate privileges locally . The flaw resides in how the component handles file paths, permitting traversal beyond the intended directory. The CVSS 3.1 score is 7.8 (HIGH) w...
EUVD-2026-73543
Absolute path traversal in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
CVE-2026-69482
Windows Error Reporting contains a local tampering vulnerability caused by the creation of a temporary file in a directory with insecure permissions , allowing an authorized attacker to tamper with data locally. The vulnerability is rated CVSS 7.1 (HIGH) with a vector of local attack, low complex...
EUVD-2026-73516
Creation of temporary file in directory with insecure permissions in Windows Error Reporting allows an authorized attacker to perform tampering locally...
CVE-2026-69462
CVE-2026-69462 is a heap-based buffer overflow in Windows Error Reporting that allows an authorized attacker to elevate privileges over a network . The vulnerability carries a CVSS 3.1 score of 8.0 (HIGH) with the vector AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H , meaning exploitation requires low priv...
EUVD-2026-73509
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over a network...
CVE-2026-69433
A heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to achieve local privilege escalation . The vulnerability is rated CVSS 3.1: 7.8 (HIGH) with a local attack vector, low complexity, and low privileges required, yielding high impact on confidentiality, integrity...
EUVD-2026-73503
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
EUVD-2026-73439
Generation of error message containing sensitive information in Microsoft COM for Windows allows an authorized attacker to disclose information locally...
CVE-2026-69294
Microsoft COM for Windows is affected by an information disclosure vulnerability caused by the generation of an error message containing sensitive information. An authorized local attacker can exploit this to disclose information, with no user interaction required. The CVSS 3.1 score is 5.5 (Medi...
CVE-2026-68894
CVE-2026-68894 is a heap-based buffer overflow in Windows Error Reporting that allows an authorized attacker to elevate privileges over a network . The vulnerability is rated CVSS 8.0 (High) with the vector AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H , meaning it requires low privileges and user interact...
EUVD-2026-73424
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over a network...
CVE-2026-83996
Windows Error Reporting in Windows is affected by a heap-based buffer overflow that allows an authorized attacker to elevate privileges locally . The assigned CVSS 3.1 score is 8.8 (HIGH) with a scope change (vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H), indicating that successful exploi...
EUVD-2026-73360
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
SUSE CVE-2026-84969
A memory-handling error in the BSON-to-JSON conversion helpers of the MongoDB C Driver can write a small number of bytes past the end of a heap buffer when a binary field is encoded and the output is cut short at a caller-configured length limit. A party who supplies the document content, with no...
EUVD-2026-73302
Generation of error message containing sensitive information in SQL Server allows an authorized attacker to disclose information over a network...
CVE-2026-67383
Microsoft SQL Server is affected by an information disclosure vulnerability caused by the generation of error messages that contain sensitive information. An authorized attacker (low privileges required) can exploit this over a network to disclose sensitive data, with high confidentiality impact ...
CVE-2026-69896
CVE-2026-69896 is a use after free vulnerability in Windows Error Reporting that allows an authorized, low-privilege attacker to perform a local privilege escalation . The attack requires local access, involves high complexity, and does not require user interaction. The CVSS 3.1 base score is 7.0...