21162 matches found
CVE-2026-72953
CVE-2026-72953 is a heap-based buffer overflow in the Windows USB Driver that allows an authorized attacker to achieve local privilege escalation . The flaw is rated CVSS 3.1 7.8 (High) with vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating that low-privilege local access is sufficient to co...
EUVD-2026-73665
Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code over a network...
CVE-2026-72933
CVE-2026-72933 is a heap-based buffer overflow in the Microsoft WDAC (Windows Defender Application Control) OLE DB provider for SQL , allowing an unauthorized remote attacker to achieve code execution over a network . The vulnerability is rated CVSS 3.1 8.8 (HIGH) by Microsoft (CNA), with the vec...
CVE-2026-72927
CVE-2026-72927 is a heap-based buffer overflow in Winsock (the Windows Sockets implementation) that allows an authorized attacker to escalate privileges locally . The CVSS 3.1 score is 6.7 (MEDIUM) with vector AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H, indicating that high privileges are already requir...
CVE-2026-71349
CVE-2026-71349 is a heap-based buffer overflow in the Windows Spaceport.sys driver that allows an unauthorized attacker to execute code via a physical attack. The vulnerability requires no privileges or user interaction, with low attack complexity, but demands physical access to the target system...
CVE-2026-70583
Windows Core Messaging is affected by a heap-based buffer overflow that allows an authorized low-privilege attacker to elevate privileges locally . The vulnerability is rated CVSS 7.8 (HIGH) with full impact on confidentiality, integrity, and availability, requiring only local access with low pri...
EUVD-2026-73657
Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges locally...
EUVD-2026-73655
Heap-based buffer overflow in Windows Credential Guard allows an authorized attacker to elevate privileges locally...
CVE-2026-70578
CVE-2026-70578 is a heap-based buffer overflow in Windows Credential Guard that allows an authorized local attacker to elevate privileges . The Microsoft-assigned CVSS 3.1 score is 7.0 (High) , with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H , indicating local access, high attack complexity,...
EUVD-2026-73650
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
CVE-2026-70573
CVE-2026-70573 is a heap-based buffer overflow in Windows Biometric Service that allows a local attacker with low privileges to achieve privilege escalation . The vulnerability is rated CVSS 3.1: 7.0 (HIGH) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a local attack vector wit...
EUVD-2026-73648
Heap-based buffer overflow in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally...
CVE-2026-70568
This is a heap-based buffer overflow vulnerability in Windows Defender Firewall Service that allows an authorized attacker to achieve local privilege escalation with high impact on confidentiality, integrity, and availability. The CVSS 3.1 score is 7.0 (HIGH) , reflecting a local attack vector wi...
EUVD-2026-73642
Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally...
CVE-2026-58599
CVE-2026-58599 is a heap-based buffer overflow in the HEVC Video Extensions component of the Microsoft Windows Codecs Library , allowing an unauthorized attacker to achieve local code execution . The CVSS 3.1 score is 7.8 (HIGH) with a vector of AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, meaning exploi...
EUVD-2026-73640
Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally...
CVE-2026-69820
Windows Hello is vulnerable to a heap-based buffer overflow that allows an authorized local attacker to escalate privileges . The CVSS 3.1 score is 8.2 (HIGH) with a changed scope and high impact on confidentiality, integrity, and availability. The attack requires high privileges and no user inte...
EUVD-2026-73632
Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network...
CVE-2026-69829
CVE-2026-69829 is a heap-based buffer overflow in Windows Shell that allows an unauthorized attacker to achieve remote code execution over a network . Microsoft's assigned CVSS 3.1 score is 9.8 (CRITICAL) , with an attack vector of Network, low complexity, no privileges required, and no user inte...