CVE-2026-69821

CVE-2026-69821 is a local privilege escalation vulnerability in Active Directory Certificate Services (AD CS) caused by improper encoding or escaping of output. An authorized attacker with low privileges can exploit it without user interaction to gain full compromise of confidentiality, integrity...

EUVD-2026-73568

Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...

CVE-2026-69720

CVE-2026-69720 is a heap-based buffer overflow in the Windows MIDI Service Module that allows a locally authenticated attacker with low privileges to escalate privileges. The vulnerability requires local access , low complexity , and no user interaction , with high impact across confidentiality, ...

EUVD-2026-73569

Improper encoding or escaping of output in Active Directory Certificate Services AD CS allows an authorized attacker to elevate privileges locally...

EUVD-2026-73566

Out-of-bounds read in Windows exFAT File System allows an authorized attacker to elevate privileges over a network...

CVE-2026-69619

CVE-2026-69619 is an out-of-bounds read in the Windows exFAT File System that allows an authorized attacker to elevate privileges over a network . The CVSS 3.1 base score is 8.0 (HIGH) with a vector of AV:N/AC:L/PR:L/UI:R, requiring low privileges and user interaction, with high impact on confide...

EUVD-2026-73565

Use after free in Windows Bluetooth Port Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-69817

A use-after-free vulnerability in the Windows Bluetooth Port Driver allows an authorized local attacker to elevate privileges . The Microsoft-assigned CVSS 3.1 score is 7.0 (HIGH) , reflecting a local attack vector with high complexity , low privileges required , and no user interaction , resulti...

CVE-2026-69613

CVE-2026-69613 is a use after free vulnerability in Windows Image Acquisition (WIA) that allows an authorized attacker to perform local privilege escalation . The flaw requires low existing privileges and high attack complexity, with no user interaction needed (CVSS 3.1: 7.0 HIGH , vector AV:L/AC...

EUVD-2026-73560

Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally...

CVE-2026-69610

A buffer over-read in Windows Win32K (the kernel-mode component handling graphical subsystem operations) allows an authorized attacker with low privileges to achieve local privilege escalation . The vulnerability requires local access , has high attack complexity , and does not require user inter...

EUVD-2026-73559

Buffer over-read in Windows Win32K allows an authorized attacker to elevate privileges locally...

EUVD-2026-73558

Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally...

CVE-2026-69630

CVE-2026-69630 is an out-of-bounds read vulnerability in the Windows Win32K kernel driver that allows a locally authenticated attacker to escalate privileges . The CVSS v3.1 score is 7.0 (HIGH) with vector AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, reflecting the high complexity and required low-privil...

EUVD-2026-73555

Use after free in Virtual Hard Disk VHD Miniport Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-69617

CVE-2026-69617 is an out-of-bounds read vulnerability in the Windows Resilient File System (ReFS) component that allows an authorized local attacker to escalate privileges . The CVSS 3.1 score is 7.0 (HIGH) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, reflecting the high complexity and l...

EUVD-2026-73556

Out-of-bounds read in Windows Resilient File System ReFS allows an authorized attacker to elevate privileges locally...

CVE-2026-69611

This is a use-after-free vulnerability in the Virtual Hard Disk (VHD) Miniport Driver on Microsoft platforms. An attacker with low local privileges can exploit it to elevate privileges on the system. The CVSS 3.1 score is 7.0 (HIGH) with high complexity, meaning exploitation requires specific con...

CVE-2026-69602

CVE-2026-69602 is a use after free vulnerability in the Windows PrintWorkflowUserSvc component that allows an authorized attacker to elevate privileges over a network. The CVSS 3.1 base score is 7.1 (HIGH) with vector AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H, indicating a network-based attack with hig...

CVE-2026-69597

CVE-2026-69597 is a use-after-free vulnerability in Windows HTTP.sys that allows an authorized attacker to elevate privileges over a network . The CVSS 3.1 score is 7.1 (HIGH) , with a vector requiring network access , high attack complexity , low privileges , and user interaction , resulting in ...