220098 matches found
CVE-2026-69787
CVE-2026-69787 is a heap-based buffer overflow in the Windows Biometric Service that allows an authorized local attacker to escalate privileges. The assigned CVSS 3.1 score is 7.8 (High) , with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating low attack complexity and low privileges re...
CVE-2026-69476
A heap-based buffer overflow in the Windows Biometric Service allows an authorized attacker to escalate privileges locally. The vulnerability is rated CVSS 7.8 (High) with low complexity and low privileges required, resulting in high impact to confidentiality, integrity, and availability. No spec...
EUVD-2026-73258
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
EUVD-2026-73250
Incorrect authorization in Windows Win32K allows an authorized attacker to elevate privileges locally...
CVE-2026-70283
CVE-2026-70283 affects Windows Win32K , the kernel-mode component handling window management. The root cause is an incorrect authorization flaw that allows a local attacker with low privileges to achieve local privilege escalation , resulting in full compromise of confidentiality, integrity, and ...
EUVD-2026-73246
Integer overflow or wraparound in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally...
CVE-2026-69716
Microsoft Office SharePoint is affected by a SQL injection vulnerability (improper neutralization of special elements in an SQL command) that allows an authorized attacker to escalate privileges over a network. The CVSS 3.1 base score is 8.8 (HIGH) , with network attack vector, low complexity, lo...
EUVD-2026-73152
Improper neutralization of special elements used in an sql command 'sql injection' in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...
CVE-2026-69641
CVE-2026-69641 is a missing authorization vulnerability in Microsoft Exchange Server that allows an authorized attacker to elevate privileges over a network . The CVSS v3.1 base score is 9.1 (Critical) with a scope change, indicating high impact on confidentiality, integrity, and availability onc...
EUVD-2026-73143
Use after free in Graphic Fonts allows an authorized attacker to elevate privileges locally...
EUVD-2026-73144
Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally...
CVE-2026-69576
CVE-2026-69576 is a use-after-free vulnerability in the Microsoft Graphic Fonts component that allows an authorized attacker with low privileges to elevate privileges locally without user interaction. The CNA-assigned CVSS v3.1 score is 7.8 (HIGH) , with high impact across confidentiality, integr...
CVE-2026-69604
CVE-2026-69604 is a heap-based buffer overflow in the Windows Audio Service that allows an authorized local attacker with low privileges to elevate privileges . The vulnerability requires a local attack vector , low privileges , and no user interaction , with a CVSS 3.1 base score of 7.8 (HIGH) a...
EUVD-2026-73141
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
EUVD-2026-73142
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
CVE-2026-69580
A heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to escalate privileges locally. The vulnerability is rated CVSS 3.1 7.8 (HIGH) with a local attack vector, low complexity, and low privileges required, yielding full impact on confidentiality, integrity, and a...
CVE-2026-69589
CVE-2026-69589 is a heap-based buffer overflow in Windows Biometric Service that allows an authorized, low-privilege attacker to achieve local privilege escalation . The vulnerability carries a CVSS v3.1 base score of 7.8 (HIGH) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating low...
CVE-2026-69583
Windows Biometric Service is affected by a heap-based buffer overflow that allows an authorized attacker to achieve local privilege escalation . The vulnerability carries a CVSS 3.1 base score of 7.8 (HIGH) , with local attack vector, low complexity, and low privileges required, resulting in high...