220508 matches found
EUVD-2026-73705
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
CVE-2026-69564
CVE-2026-69564 is a heap-based buffer overflow in Windows Online Certificate Status Protocol (OCSP) that allows an authorized attacker to elevate privileges locally . The vulnerability carries a CVSS 3.1 score of 7.0 (HIGH) with vector AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a local attac...
EUVD-2026-73704
Heap-based buffer overflow in Windows Online Certificate Status Protocol OCSP allows an authorized attacker to elevate privileges locally...
EUVD-2026-73703
Use after free in Windows Work Folder Service allows an authorized attacker to elevate privileges locally...
CVE-2026-69560
CVE-2026-69560 is a use-after-free vulnerability in the Windows Work Folder Service that allows an authorized local attacker to elevate privileges . The CVSS 3.1 score is 7.0 (HIGH) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, reflecting a high attack complexity and low privileges requir...
CVE-2026-69489
A heap-based buffer overflow in the Windows Biometric Service allows a low-privilege local attacker to escalate privileges. The flaw requires no user interaction and is rated CVSS 7.8 (HIGH) with high impact on confidentiality, integrity, and availability. No specific affected Windows version or ...
EUVD-2026-73699
Out-of-bounds read in Windows USB Mass Storage Class Driver allows an unauthorized attacker to elevate privileges with a physical attack...
CVE-2026-69490
CVE-2026-69490 is an out-of-bounds read vulnerability in the Windows USB Mass Storage Class Driver that allows an unauthorized attacker to elevate privileges via a physical attack . The CVSS 3.1 base score is 6.8 (Medium) , reflecting the physical attack vector requirement (AV:P), low complexity,...
EUVD-2026-73698
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
EUVD-2026-73691
Use after free in Windows Shell allows an authorized attacker to elevate privileges locally...
CVE-2026-69392
CVE-2026-69392 is a use-after-free vulnerability in Windows Shell that allows an authorized attacker to perform local privilege escalation . The CVSS 3.1 score is 7.8 (HIGH) , reflecting a local attack vector with high complexity, low privileges required, no user interaction, and a scope change l...
EUVD-2026-73689
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
CVE-2026-69352
CVE-2026-69352 is a heap-based buffer overflow in Windows Biometric Service that allows an authorized local attacker to elevate privileges . The vulnerability is rated HIGH (CVSS 7.8) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H , meaning an attacker with low privileges and no user intera...
CVE-2026-69298
CVE-2026-69298 is an elevation of privilege vulnerability in the Windows Biometric Service , caused by an integer overflow or wraparound . An attacker with low-level local privileges can exploit this to gain higher system privileges, with high impact on confidentiality, integrity, and availabilit...
CVE-2026-69311
CVE-2026-69311 is a use-after-free vulnerability in Windows Audio Service that allows a locally authenticated attacker to elevate privileges . The flaw requires low privileges , high attack complexity , and no user interaction , but yields high impact across confidentiality, integrity, and availa...
EUVD-2026-73687
Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
EUVD-2026-73688
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally...
EUVD-2026-73686
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
CVE-2026-69323
CVE-2026-69323 is a heap-based buffer overflow in Windows Biometric Service that allows an authorized attacker with low privileges to achieve local privilege escalation . The vulnerability requires no user interaction and carries a CVSS 3.1 score of 7.8 (HIGH) with high impact to confidentiality,...