CVE-2026-70564

A heap-based buffer overflow in Windows Print Spooler Components allows an authorized local attacker to elevate privileges. The flaw requires low privileges and no user interaction, with high impact to confidentiality, integrity, and availability (CVSS 7.8, HIGH ). A reference to the Microsoft Se...

EUVD-2026-73082

Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally...

CVE-2026-58600

CVE-2026-58600 is a heap-based buffer overflow in the HEVC Video Extensions component of the Microsoft Windows Codecs Library . An unauthorized attacker with local access can leverage this flaw to elevate privileges , achieving high impact on confidentiality, integrity, and availability (CVSS 3.1...

EUVD-2026-73077

Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to elevate privileges locally...

CVE-2026-70289

CVE-2026-70289 is a heap-based buffer overflow in the Windows Win32 Kernel Subsystem (Win32k) that allows an authorized (low-privilege) attacker to elevate privileges locally . The vulnerability is rated CVSS 7.8 (HIGH) with local attack vector, low complexity, and high impact to confidentiality,...

EUVD-2026-73075

Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally...

EUVD-2026-73068

Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network...

CVE-2026-69860

CVE-2026-69860 is a heap-based buffer overflow in Windows Imaging Component that allows an unauthorized attacker to execute code over a network. The CVSS 3.1 score is 8.8 (HIGH) , with a vector of AV:N/AC:L/PR:N/UI:R, meaning the attack is network-based, requires user interaction , and needs no p...

CVE-2026-69732

CVE-2026-69732 is a heap-based buffer overflow in Windows Link Layer Topology Discovery Protocol (LLTD) that allows an unauthorized attacker to execute code over a network. The vulnerability carries a CVSS 3.1 score of 8.1 (HIGH) , with high impact on confidentiality, integrity, and availability,...

CVE-2026-69758

A heap-based buffer overflow in the Windows Universal Disk Format File System (UDFS) Driver allows a locally authenticated attacker to elevate privileges . The flaw is rated CVSS 7.8 (High) with full impact to confidentiality, integrity, and availability (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). CIS...

CVE-2026-69772

CVE-2026-69772 is a heap-based buffer overflow in Windows Network File System (NFS) that allows an unauthorized attacker to execute code over a network, achieving full remote code execution. The Microsoft-assigned CVSS 3.1 score is 8.8 (HIGH) with vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indic...

EUVD-2026-73061

Heap-based buffer overflow in Windows Network File System allows an unauthorized attacker to execute code over a network...

EUVD-2026-73057

Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally...

CVE-2026-69691

CVE-2026-69691 is a heap-based buffer overflow in the Windows Spaceport.sys driver that allows an authorized local attacker to elevate privileges . The CVSS 3.1 score is 7.8 (HIGH) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating low attack complexity, low privileges required, and...

CVE-2026-69681

CVE-2026-69681 is a heap-based buffer overflow in the Virtual Hard Disk (VHD) Miniport Driver that allows an authorized attacker to elevate privileges over a network . The CVSS 3.1 score is 8.0 (HIGH) with a vector of AV:N/AC:L/PR:L/UI:R, indicating a network attack with low complexity, low privi...

CVE-2026-69875

CVE-2026-69875 is a heap-based buffer overflow in Windows NTFS that allows an authorized attacker (low privileges, user interaction required) to elevate privileges over a network . The vulnerability carries a CVSS 3.1 score of 8.0 (HIGH) with impacts of High across confidentiality, integrity, and...

CVE-2026-69729

CVE-2026-69729 is a heap-based buffer overflow in Windows Credential Providers that allows an authorized attacker to achieve remote code execution over a network. The vulnerability requires low privileges and no user interaction , with an attack complexity of low and network attack vector, as sco...

EUVD-2026-73037

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally...

EUVD-2026-73035

Heap-based buffer overflow in Windows Credential Providers allows an authorized attacker to elevate privileges locally...

CVE-2026-69790

CVE-2026-69790 is a heap-based buffer overflow in Windows Credential Providers that enables a local, low-privilege attacker to escalate privileges. The vulnerability requires local access with low privileges , no user interaction , and has low attack complexity , resulting in HIGH impact across c...