EUVD-2026-73032

Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges over a network...

CVE-2026-69689

An out-of-bounds read in the Windows Win32K component allows an authorized attacker to elevate privileges over a network . The CVSS v3.1 score is 8.0 (HIGH) with vector AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H , indicating a network-based attack requiring low privileges and user interaction, with high...

CVE-2026-69648

CVE-2026-69648 is a use after free vulnerability in Windows Notification that allows a low-privilege local attacker to escalate privileges. The CVSS 3.1 score is 7.0 (HIGH) with a local attack vector, high complexity, and no user interaction required, but full impact to confidentiality, integrity...

CVE-2026-69645

CVE-2026-69645 is a use-after-free vulnerability in Windows Message Queuing that allows an authorized local attacker to escalate privileges. The flaw resides in the Windows Message Queuing component and results in high impact across confidentiality, integrity, and availability (CVSS 3.1 base scor...

EUVD-2026-73028

Use after free in Windows Message Queuing allows an authorized attacker to elevate privileges locally...

EUVD-2026-73029

Use after free in Windows Notification allows an authorized attacker to elevate privileges locally...

CVE-2026-69594

CVE-2026-69594 is a heap-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) that allows an authorized local attacker to escalate privileges. The vulnerability is rated CVSS 7.8 (HIGH) , with a local attack vector, low complexity, low privileges required, no user interacti...

EUVD-2026-73026

Heap-based buffer overflow in Microsoft Local Security Authority Server lsasrv allows an authorized attacker to elevate privileges locally...

CVE-2026-69605

CVE-2026-69605 is a use-after-free vulnerability in Microsoft Install Service that allows an authorized attacker to perform a local privilege escalation . The flaw is classified with a CVSS 3.1 base score of 7.0 (HIGH) , requiring local access, low privileges, and high attack complexity, with hig...

EUVD-2026-73027

Use after free in Microsoft Install Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69585

CVE-2026-69585 affects the Microsoft Windows Search Component , where an incorrect type conversion or cast allows an authorized attacker to perform local privilege escalation . The vulnerability scores 7.8 (HIGH) under CVSS 3.1, with low attack complexity, low privileges required, no user interac...

EUVD-2026-73021

Incorrect type conversion or cast in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

CVE-2026-69608

CVE-2026-69608 is a local elevation of privilege vulnerability in the Microsoft Windows Search Component , caused by an integer overflow or wraparound . An authorized (low-privilege) attacker can exploit it locally without user interaction to achieve high impact across confidentiality, integrity,...

EUVD-2026-73022

Integer overflow or wraparound in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

EUVD-2026-73017

Missing authorization in Windows Hyper-V allows an authorized attacker to elevate privileges over a network...

CVE-2026-69553

CVE-2026-69553 is a missing authorization vulnerability in Windows Hyper-V that allows an authorized attacker (with low privileges) to elevate privileges over a network . The attack requires user interaction and has high attack complexity , but the impact on confidentiality, integrity, and availa...

CVE-2026-69563

CVE-2026-69563 is a heap-based buffer overflow in the Windows Program Compatibility Assistant Service that allows an authorized attacker to achieve local privilege escalation . The vulnerability carries a CVSS 3.1 score of 7.0 (HIGH) , with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicat...

EUVD-2026-73015

Heap-based buffer overflow in Virtual Hard Disk VHD Miniport Driver allows an authorized attacker to elevate privileges locally...

EUVD-2026-73016

Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69541

A heap-based buffer overflow in the Virtual Hard Disk (VHD) Miniport Driver allows an authorized (low-privilege) attacker to achieve local privilege escalation on an affected system. The vulnerability is scored CVSS 3.1: 7.8 (High) with impact to confidentiality, integrity, and availability all r...