CVE-2026-72962

CVE-2026-72962 is a heap-based buffer overflow in the Windows USB Video Driver that allows an authorized attacker to achieve local privilege escalation . The Microsoft CVSS 3.1 score is 8.2 (HIGH) with vector AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H, indicating a local attack with low complexity, high...

CVE-2026-72946

CVE-2026-72946 is a heap-based buffer overflow in Microsoft's Storage Port Driver that allows an authorized attacker with local access to elevate privileges , achieving high impact on confidentiality, integrity, and availability. The vulnerability requires low privileges and no user interaction (...

EUVD-2026-73110

Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally...

CVE-2026-71343

CVE-2026-71343 affects Windows Remote Access Connection Manager and is caused by a heap-based buffer overflow that allows a local, authorized attacker with low privileges to execute code. The CVSS 3.1 score is 7.8 (HIGH) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating full compro...

EUVD-2026-73099

Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code with a physical attack...

CVE-2026-71348

CVE-2026-71348 is a heap-based buffer overflow in Windows Spaceport.sys , a Windows system driver, that allows an unauthorized attacker with physical access to execute code on the target system. The CNA-assigned CVSS 3.1 score is 6.8 (MEDIUM) with vector AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, refle...

EUVD-2026-73098

Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code with a physical attack...

CVE-2026-71350

CVE-2026-71350 is a heap-based buffer overflow in the Windows Spaceport.sys driver that allows an unauthorized attacker to execute code on the target system. The vulnerability requires a physical attack vector (CVSS 3.1: AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H , base score 6.8 – MEDIUM ), meaning the...

CVE-2026-71339

CVE-2026-71339 is a heap-based buffer overflow in Windows Installer that allows an authorized local attacker to elevate privileges . The CVSS 3.1 score is 6.7 (MEDIUM) with a vector of AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H, indicating that while high privileges are required, the impact on confident...

EUVD-2026-73097

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-71334

CVE-2026-71334 is a heap-based buffer overflow in the Windows NFS Portmapper component that allows an authorized local attacker to elevate privileges. The Microsoft-assigned CVSS 3.1 base score is 7.8 (High) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, reflecting low privilege requiremen...

CVE-2026-70586

CVE-2026-70586 is a heap-based buffer overflow in Windows Paint that allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability requires user interaction (e.g., opening a crafted file) but no prior privileges. Microsoft rates it CVSS 8.8 (HIGH) with high im...

EUVD-2026-73082

Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally...

CVE-2026-70564

A heap-based buffer overflow in Windows Print Spooler Components allows an authorized local attacker to elevate privileges. The flaw requires low privileges and no user interaction, with high impact to confidentiality, integrity, and availability (CVSS 7.8, HIGH ). A reference to the Microsoft Se...

CVE-2026-58600

CVE-2026-58600 is a heap-based buffer overflow in the HEVC Video Extensions component of the Microsoft Windows Codecs Library . An unauthorized attacker with local access can leverage this flaw to elevate privileges , achieving high impact on confidentiality, integrity, and availability (CVSS 3.1...

EUVD-2026-73077

Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to elevate privileges locally...

CVE-2026-70289

CVE-2026-70289 is a heap-based buffer overflow in the Windows Win32 Kernel Subsystem (Win32k) that allows an authorized (low-privilege) attacker to elevate privileges locally . The vulnerability is rated CVSS 7.8 (HIGH) with local attack vector, low complexity, and high impact to confidentiality,...

EUVD-2026-73075

Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally...

EUVD-2026-73068

Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network...

CVE-2026-69860

CVE-2026-69860 is a heap-based buffer overflow in Windows Imaging Component that allows an unauthorized attacker to execute code over a network. The CVSS 3.1 score is 8.8 (HIGH) , with a vector of AV:N/AC:L/PR:N/UI:R, meaning the attack is network-based, requires user interaction , and needs no p...