33924 matches found
CVE-2026-72996
CVE-2026-72996 is a heap-based buffer overflow in the Windows Biometric Service that allows an authorized, low-privilege attacker to escalate privileges locally. The vulnerability is rated CVSS 3.1 7.8 (HIGH) with the vector CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating low attack comp...
EUVD-2026-73749
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
EUVD-2026-73750
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
CVE-2026-72993
CVE-2026-72993 is a heap-based buffer overflow in Windows Biometric Service that allows an authorized attacker to elevate privileges locally . The vulnerability is rated HIGH (CVSS 3.1: 7.8) with an attack vector of local , low complexity , and low privileges required , with high impact on confid...
CVE-2026-72994
CVE-2026-72994 is a heap-based buffer overflow in the Windows Biometric Service that allows an authorized attacker to elevate privileges locally . The vulnerability requires low privileges and no user interaction , with low attack complexity . The CVSS 3.1 base score is 7.8 (HIGH) , with high imp...
EUVD-2026-73747
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
EUVD-2026-73748
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
EUVD-2026-73746
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
CVE-2026-72990
CVE-2026-72990 is a heap-based buffer overflow in Windows Biometric Service that allows an authorized attacker to achieve local privilege escalation . The vulnerability requires low privileges, no user interaction, and has low attack complexity, yet results in high impact across confidentiality, ...
EUVD-2026-73745
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
CVE-2026-72988
CVE-2026-72988 is a heap-based buffer overflow in Windows Biometric Service that allows an authorized local attacker to elevate privileges. The CVSS 3.1 base score is 7.8 (HIGH) with vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating that exploitation requires low privileges and no user inter...
EUVD-2026-73744
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
CVE-2026-72995
CVE-2026-72995 is a heap-based buffer overflow in Windows Biometric Service that allows a local attacker with low privileges to elevate privileges, leading to high impact on confidentiality, integrity, and availability (CVSS 3.1 score: 7.8 HIGH ). The attack requires local access, has low complex...
EUVD-2026-73737
Heap-based buffer overflow in Windows Volume Shadow Copy allows an unauthorized attacker to elevate privileges with a physical attack...
CVE-2026-72985
A heap-based buffer overflow in Windows Volume Shadow Copy allows an unauthorized attacker with physical access to escalate privileges, potentially compromising confidentiality, integrity, and availability (CVSS 6.8, MEDIUM). The vulnerability requires no prior privileges or user interaction, but...
CVE-2026-72973
Microsoft Office Word is affected by a heap-based buffer overflow that can lead to Remote Code Execution over a network. An unauthorized attacker can execute code with no prior privileges, though user interaction is required (e.g., opening a crafted document). The vulnerability is rated CVSS 8.8 ...
CVE-2026-72972
Microsoft Office Word is affected by a heap-based buffer overflow that allows an unauthorized attacker to achieve remote code execution over a network. The CVSS 3.1 score is 8.8 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, meaning exploitation requires user interaction (e.g., open...
CVE-2026-70203
CVE-2026-70203 is a heap-based buffer overflow in Windows Media Player that allows an unauthorized attacker to execute code over a network . The vulnerability is classified as Remote Code Execution with a CVSS 3.1 score of 8.8 (HIGH) , reflecting a network attack vector, low complexity, no requir...
CVE-2026-69906
Windows Secure Kernel Mode vulnerability (CVE-2026-69906) involves a heap-based buffer overflow that allows an authorized local attacker to elevate privileges . The vulnerability crosses a security boundary (scope changed), resulting in high impact to confidentiality, integrity, and availability....