21136 matches found
EUVD-2026-73903
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
CVE-2026-83973
CVE-2026-83973 is a heap-based buffer overflow in the Windows Biometric Service component, allowing a locally authenticated attacker with low privileges to achieve privilege escalation with high impact to confidentiality, integrity, and availability (CVSS 3.1 score 7.8 – HIGH ). CISA's SSVC asses...
CVE-2026-83981
A heap-based buffer overflow in Windows Biometric Service allows an authorized (low-privilege) local attacker to elevate privileges , with high impact to confidentiality, integrity, and availability (CVSS 3.1 score 7.8 HIGH ). The attack requires local access , low privileges , and no user intera...
EUVD-2026-73899
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
CVE-2026-83970
CVE-2026-83970 is a heap-based buffer overflow in Windows Biometric Service that allows an attacker with local access and low privileges to escalate to higher privileges , resulting in high impact to confidentiality, integrity, and availability (CVSS 3.1: 7.8 HIGH ). No user interaction is requir...
CVE-2026-83972
CVE-2026-83972 is a heap-based buffer overflow in the Windows Biometric Service that allows a locally authenticated attacker to elevate privileges. The vulnerability requires low privileges and no user interaction , with low attack complexity , scoring 7.8 (HIGH) under CVSS 3.1 with high impact t...
EUVD-2026-73898
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
CVE-2026-83967
CVE-2026-83967 is a heap-based buffer overflow in Windows Biometric Service that allows an authorized local attacker to elevate privileges . The CVSS v3.1 score is 7.8 (HIGH) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a low-complexity local attack requiring low privileges an...
CVE-2026-83971
CVE-2026-83971 is a heap-based buffer overflow in Windows Biometric Service that allows a locally authenticated attacker to elevate privileges . Microsoft rates it CVSS 3.1 7.8 (High) , with local attack vector, low complexity, low privileges required, no user interaction, and high impact on conf...
CVE-2026-81948
Microsoft Office Excel is affected by a heap-based buffer overflow that allows an unauthorized local attacker to execute arbitrary code. The vulnerability requires user interaction (e.g., opening a crafted file) but no prior privileges, and results in high impact to confidentiality, integrity, an...
EUVD-2026-73883
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network...
EUVD-2026-73882
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
EUVD-2026-73877
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...
CVE-2026-81952
CVE-2026-81952 is a heap-based buffer overflow in Microsoft Office Word that allows an unauthorized attacker to achieve remote code execution over a network . The CVSS 3.1 score is 8.8 (High) with vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, meaning exploitation requires user interaction (e.g., op...
EUVD-2026-73878
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
EUVD-2026-73875
Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network...
CVE-2026-81951
CVE-2026-81951 is a heap-based buffer overflow in Microsoft Office Excel that allows an unauthorized attacker to execute code locally . The vulnerability is scored CVSS 3.1: 7.8 (HIGH) with a local attack vector , low complexity, no privileges required, and user interaction required (i.e., a vict...
CVE-2026-81955
A heap-based buffer overflow in the Microsoft Windows Graphics Component allows an unauthorized, remote attacker to achieve code execution over a network . The vulnerability requires user interaction but no prior privileges. Microsoft rates it CVSS 8.8 (HIGH) with full impact on confidentiality, ...