EUVD-2026-73795

Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to execute code over a network...

CVE-2026-73017

CVE-2026-73017 is a heap-based buffer overflow in Windows Graphics Kernel that allows a local, authorized attacker to achieve code execution . The vulnerability requires high privileges and high attack complexity , with no user interaction needed. Scope is changed, with high impact on confidentia...

EUVD-2026-73776

Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network...

CVE-2026-73012

CVE-2026-73012 is a heap-based buffer overflow in Windows Management Services that allows an authorized (low-privilege) attacker to elevate privileges over a network . The vulnerability is rated CVSS 8.8 (HIGH) with vector AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating low attack complexity and ...

EUVD-2026-73761

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-73757

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

CVE-2026-72991

CVE-2026-72991 is a heap-based buffer overflow in the Windows Biometric Service that allows a locally authenticated attacker with low privileges to escalate to higher privileges. The vulnerability scores 7.8 (HIGH) under CVSS v3.1, with all three impact dimensions rated High. Attack requires loca...

CVE-2026-72992

A heap-based buffer overflow in the Windows Biometric Service allows an authorized local attacker to elevate privileges, resulting in high impact to confidentiality, integrity, and availability. The vulnerability carries a CVSS 3.1 score of 7.8 (HIGH) with a local attack vector, low complexity, a...

EUVD-2026-73732

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

EUVD-2026-73730

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

EUVD-2026-73726

Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network...

EUVD-2026-73716

Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network...

CVE-2026-69601

CVE-2026-69601 is a heap-based buffer overflow in Microsoft Windows Media Foundation that allows an unauthorized, unprivileged attacker to achieve remote code execution over a network , provided the victim is induced to interact (e.g., open a crafted media file). The assigned CVSS 3.1 score is 8....

CVE-2026-69426

CVE-2026-69426 is a heap-based buffer overflow in the Windows VOLSNAP.SYS driver (part of the Volume Shadow Copy service). An authorized attacker with low privileges can exploit this flaw to achieve local code execution with high impact on confidentiality, integrity, and availability. The vulnera...

EUVD-2026-73685

Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network...

CVE-2026-72957

CVE-2026-72957 is a heap-based buffer overflow in Windows Deployment Services that allows an authorized attacker to achieve local code execution. The vulnerability is rated CVSS 3.1 7.8 (HIGH) with the vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a low-privilege local attacker requires ...

EUVD-2026-73661

Heap-based buffer overflow in Winsock allows an authorized attacker to elevate privileges locally...

EUVD-2026-73658

Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code with a physical attack...

CVE-2026-69786

CVE-2026-69786 is a heap-based buffer overflow in Windows Text Shaping that allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is assigned a CVSS 3.1 score of 8.1 (HIGH) with a vector of AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H, indicating high attack co...

CVE-2026-69845

Windows DHCP Server is affected by a heap-based buffer overflow that allows an unauthorized, remote attacker to achieve code execution over a network without any user interaction or prior privileges. The vulnerability is rated CRITICAL (CVSS 9.8) with high impact to confidentiality, integrity, an...