17218 matches found
EUVD-2026-73707
Use after free in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally...
EUVD-2026-73703
Use after free in Windows Work Folder Service allows an authorized attacker to elevate privileges locally...
CVE-2026-72953
CVE-2026-72953 is a heap-based buffer overflow in the Windows USB Driver that allows an authorized attacker to achieve local privilege escalation . The flaw is rated CVSS 3.1 7.8 (High) with vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating that low-privilege local access is sufficient to co...
CVE-2026-72931
CVE-2026-72931 is a denial-of-service vulnerability in Windows Secure Socket Tunneling Protocol (SSTP) , caused by a missing release of a resource after its effective lifetime . An authorized local attacker with low privileges can trigger the condition, resulting in a high availability impact but...
CVE-2026-69725
CVE-2026-69725 is a double free vulnerability in Windows Hello that allows an authorized attacker with low privileges to achieve local privilege escalation . The flaw is scored CVSS 3.1 7.8 (HIGH) with a local attack vector, low complexity, and high impact to confidentiality, integrity, and avail...
EUVD-2026-73614
Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code locally...
CVE-2026-69713
CVE-2026-69713 is a security feature bypass in Windows Secure Boot caused by a dependency on a vulnerable third-party component . An authorized attacker with high privileges can exploit this vulnerability locally to bypass a security feature, resulting in a high integrity impact but no confidenti...
EUVD-2026-73600
Buffer over-read in Windows Encrypting File System EFS allows an authorized attacker to disclose information locally...
CVE-2026-69794
CVE-2026-69794 is a buffer over-read in Windows Encrypting File System (EFS) that allows an authorized local attacker to disclose information . The flaw resides within the EFS component and results in a confidentiality impact with no integrity or availability impact. The CVSS 3.1 base score is 5....
CVE-2026-69731
CVE-2026-69731 is a heap-based buffer overflow in the HID class driver that allows an authorized attacker to perform a local privilege escalation . The vulnerability carries a CVSS 3.1 score of 7.8 (HIGH) , with a low-complexity attack vector requiring no user interaction. No exploitation details...
CVE-2026-69834
CVE-2026-69834 is a use-after-free vulnerability in Windows ALPC (Advanced Local Procedure Call) that allows an authorized local attacker to elevate privileges . The attack requires local access , high complexity , and low privileges , with no user interaction needed. The CVSS v3.1 base score is ...
EUVD-2026-73556
Out-of-bounds read in Windows Resilient File System ReFS allows an authorized attacker to elevate privileges locally...
CVE-2026-69535
A numeric truncation error in the Windows Spaceport.sys driver allows an authorized local attacker with low privileges to escalate privileges, leading to full compromise of confidentiality, integrity, and availability. The vulnerability is rated CVSS 3.1 7.8 (High) with a local attack vector, low...
EUVD-2026-73521
Numeric truncation error in Windows Kernel allows an authorized attacker to elevate privileges locally...
EUVD-2026-73517
Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally...
EUVD-2026-73479
Missing authorization in Windows SMB Server allows an authorized attacker to disclose information locally...
CVE-2026-69403
CVE-2026-69403 is an information disclosure vulnerability in the Windows SMB Server component, caused by missing authorization that allows an authorized (low-privilege) local attacker to disclose information. The impact is limited to confidentiality with no integrity or availability impact. CNA-a...
CVE-2026-69384
A null pointer dereference in the Virtual Hard Disk (VHD) Miniport Driver allows an unauthorized local attacker to trigger a denial of service . The CVSS 3.1 score is 7.1 (HIGH) with a scope change, reflecting the local attack vector with no privileges required. CISA's SSVC assessment indicates n...