CVE-2026-69325

CVE-2026-69325 is a heap-based buffer overflow in Microsoft JScript that allows an unauthorized attacker to achieve remote code execution over a network. The CVSS 3.1 score is 8.1 (High) , with a network attack vector, high complexity, no required privileges or user interaction, and high impact o...

EUVD-2026-73215

Heap-based buffer overflow in Windows USB Audio Class driver usbaudio.sys allows an authorized attacker to elevate privileges locally...

EUVD-2026-73209

Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally...

CVE-2026-68892

CVE-2026-68892 is a heap-based buffer overflow in Microsoft Standard XPS that allows an authorized local attacker to escalate privileges . The vulnerability is rated CVSS 3.1 7.8 (HIGH) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating local attack vector, low complexity, low privi...

EUVD-2026-73207

Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally...

CVE-2026-68890

CVE-2026-68890 is a heap-based buffer overflow in Microsoft Standard XPS that allows an authorized local attacker to escalate privileges . The vulnerability is scored CVSS 3.1: 7.8 (HIGH) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, reflecting low attack complexity, low privileges requir...

EUVD-2026-73208

Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network...

CVE-2026-69271

A heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network with user interaction required . The vulnerability is scored CVSS 3.1: 8.0 (HIGH) with high impact to confidentiality, integrity, and availability. CISA's SSVC assessment indi...

EUVD-2026-73203

Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally...

EUVD-2026-73199

Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally...

CVE-2026-68845

CVE-2026-68845 is a heap-based buffer overflow in the Windows Program Compatibility Assistant Service that allows an authorized attacker to perform local privilege escalation . Microsoft rates it HIGH severity (CVSS 3.1: 7.8) with a local attack vector, low complexity, low privileges required, an...

EUVD-2026-73196

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally...

EUVD-2026-73194

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code with a physical attack...

CVE-2026-68787

A heap-based buffer overflow in Microsoft SQL Server allows an authorized attacker with low privileges to execute code locally. The flaw requires no user interaction and results in high impact to confidentiality, integrity, and availability (CVSS 3.1 base score 7.8 – HIGH , vector AV:L/AC:L/PR:L/...

CVE-2026-68785

Microsoft SQL Server is affected by a heap-based buffer overflow that allows an authorized attacker (high privileges required) to execute code over a network. The CVSS v3.1 score is 4.9 (Medium) , reflecting a network attack vector with low complexity, high privileges required, and no user intera...

EUVD-2026-73189

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

EUVD-2026-73185

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

EUVD-2026-73182

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

EUVD-2026-73175

Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network...

CVE-2026-77482

CVE-2026-77482 is a heap-based buffer overflow in Microsoft SQL Server that allows an unauthorized attacker to achieve remote code execution over a network. The CVSS 3.1 score is 8.8 (High) with vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating low attack complexity but required user interac...