20815 matches found
CVE-2026-69629
Microsoft Office Outlook is affected by a heap-based buffer overflow vulnerability that allows an unauthorized attacker to execute code over a network, resulting in Remote Code Execution . The flaw requires user interaction but no prior privileges, yielding a CVSS v3.1 score of 8.8 (HIGH) with hi...
EUVD-2026-73711
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network...
CVE-2026-69442
CVE-2026-69442 is a heap-based buffer overflow in Microsoft Office that allows an unauthorized, remote attacker to execute code over a network, requiring user interaction. The CVSS 3.1 score is 8.8 (HIGH) , with a network attack vector, low complexity, and no privileges required, but user interac...
EUVD-2026-73710
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network...
CVE-2026-69593
A heap-based buffer overflow in the Windows Biometric Service allows an authorized local attacker with low privileges to elevate privileges on the affected system. The vulnerability requires no user interaction and results in High impact across confidentiality, integrity, and availability, yieldi...
EUVD-2026-73705
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
CVE-2026-69564
CVE-2026-69564 is a heap-based buffer overflow in Windows Online Certificate Status Protocol (OCSP) that allows an authorized attacker to elevate privileges locally . The vulnerability carries a CVSS 3.1 score of 7.0 (HIGH) with vector AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a local attac...
EUVD-2026-73704
Heap-based buffer overflow in Windows Online Certificate Status Protocol OCSP allows an authorized attacker to elevate privileges locally...
EUVD-2026-73698
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
EUVD-2026-73697
Heap-based buffer overflow in Windows VOLSNAP.SYS allows an authorized attacker to execute code locally...
EUVD-2026-73689
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
CVE-2026-69352
CVE-2026-69352 is a heap-based buffer overflow in Windows Biometric Service that allows an authorized local attacker to elevate privileges . The vulnerability is rated HIGH (CVSS 7.8) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H , meaning an attacker with low privileges and no user intera...
EUVD-2026-73686
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
CVE-2026-69323
CVE-2026-69323 is a heap-based buffer overflow in Windows Biometric Service that allows an authorized attacker with low privileges to achieve local privilege escalation . The vulnerability requires no user interaction and carries a CVSS 3.1 score of 7.8 (HIGH) with high impact to confidentiality,...
CVE-2026-69334
CVE-2026-69334 is a heap-based buffer overflow in the Windows Volume Manager Extension Driver that allows an unauthorized attacker to execute code over a network. The CVSS 3.1 base score is 8.8 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating network-reachable remote code e...
EUVD-2026-73684
Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network...
EUVD-2026-73679
Heap-based buffer overflow in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally...
CVE-2026-72967
A heap-based buffer overflow in the Windows Network Connection Broker component allows an authorized low-privilege attacker to escalate privileges locally. The vulnerability carries a CVSS 3.1 score of 7.8 (HIGH) with a local attack vector, low complexity, no user interaction, and high impact on ...
CVE-2026-72960
Windows Media Player is affected by a heap-based buffer overflow that allows an unauthorized, remote attacker to achieve code execution over a network . The attack requires user interaction (e.g., opening a crafted media file), but no prior privileges or elevated complexity. The assigned CVSS 3.1...