CVE-2026-67638

Microsoft SQL Server is affected by a heap-based buffer overflow that allows an authorized (low-privilege) attacker to execute code over the network, resulting in a Remote Code Execution vulnerability. The CVSS 3.1 score is 8.8 (HIGH) with vector AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, sourced by Mi...

EUVD-2026-73383

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

CVE-2026-67381

A heap-based buffer overflow in Microsoft SQL Server allows an authorized attacker to elevate privileges over a network . The CVSS 3.1 score is 8.8 (HIGH) , with an attack vector of network, low complexity, low privileges required, and no user interaction needed, resulting in high impact to confi...

EUVD-2026-73379

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

EUVD-2026-73380

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-67380

CVE-2026-67380 is a heap-based buffer overflow in Microsoft SQL Server that allows an authorized attacker to achieve remote code execution over a network. The vulnerability is rated CVSS 8.8 (HIGH) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, meaning exploitation requires network access,...

EUVD-2026-73365

Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally...

CVE-2026-85880

CVE-2026-85880 is a heap-based buffer overflow in Windows ALPC (Advanced Local Procedure Call) that enables a locally authorized attacker to escalate privileges with full impact on confidentiality, integrity, and availability (CVSS 7.8 HIGH). CISA added this CVE to the Known Exploited Vulnerabili...

EUVD-2026-73364

Heap-based buffer overflow in Windows Print Spooler Components allows an unauthorized attacker to execute code over a network...

EUVD-2026-73361

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

CVE-2026-83998

A heap-based buffer overflow in Microsoft Remote Desktop Client allows an unauthorized attacker to achieve remote code execution over a network, requiring user interaction but no prior privileges (CVSS 8.8 HIGH ). The CNA is Microsoft ([email protected]), with the advisory published via MSRC ....

EUVD-2026-73360

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

EUVD-2026-73357

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

CVE-2026-83976

CVE-2026-83976 is a heap-based buffer overflow in the Windows Biometric Service that allows an authorized attacker to achieve local privilege escalation . The vulnerability requires low privileges and no user interaction , with an attack vector of local and low complexity , rated CVSS 7.8 (HIGH) ...

EUVD-2026-73356

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

CVE-2026-83975

Windows Biometric Service is affected by a heap-based buffer overflow that allows a locally authenticated attacker with low privileges to escalate to higher privilege. The vulnerability requires no user interaction and has low attack complexity , resulting in a CVSS 3.1 score of 7.8 (HIGH) with h...

CVE-2026-83974

CVE-2026-83974 is a heap-based buffer overflow in the Windows Biometric Service that allows an authorized attacker to achieve local privilege escalation . The CNA (Microsoft) assigns a CVSS 3.1 score of 7.8 (High) with vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, reflecting low attack complexity, ...

CVE-2026-83988

CVE-2026-83988 is a heap-based buffer overflow in the Windows Biometric Service that allows an authorized local attacker to elevate privileges. The vulnerability carries a CVSS 3.1 score of 7.8 (High) with low attack complexity, low privileges required, and no user interaction, resulting in high ...

EUVD-2026-73352

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

CVE-2026-83969

A heap-based buffer overflow in Windows Biometric Service allows an authorized attacker with low privileges to escalate privileges locally, resulting in high impact to confidentiality, integrity, and availability. The CVSS 3.1 score is 7.8 (HIGH) with a local attack vector and no user interaction...