6164 matches found
CVE-2026-68877
CVE-2026-68877 is a heap-based buffer overflow in Windows Storage Spaces Controller that allows an authorized local attacker (low privileges, no user interaction) to achieve code execution with high impact on confidentiality, integrity, and availability (CVSS 3.1: 7.8 HIGH ). CISA's SSVC assessme...
EUVD-2026-73107
Use after free in Windows Secure Socket Tunneling Protocol SSTP allows an authorized attacker to execute code locally...
CVE-2026-72930
CVE-2026-72930 is a use-after-free vulnerability in Windows Secure Socket Tunneling Protocol (SSTP) that allows an authorized attacker to execute code locally. The CVSS 3.1 score is 7.0 (HIGH) , reflecting a local attack vector with high complexity, low privileges required, no user interaction, a...
CVE-2026-71345
CVE-2026-71345 is an out-of-bounds write vulnerability in the Windows driver Spaceport.sys that allows an authorized low-privilege attacker to achieve local code execution . The vulnerability is rated CVSS 3.1: 7.8 (HIGH) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating that explo...
EUVD-2026-73104
Out-of-bounds write in Windows Spaceport.sys allows an authorized attacker to execute code locally...
CVE-2026-71343
CVE-2026-71343 affects Windows Remote Access Connection Manager and is caused by a heap-based buffer overflow that allows a local, authorized attacker with low privileges to execute code. The CVSS 3.1 score is 7.8 (HIGH) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating full compro...
CVE-2026-70585
CVE-2026-70585 is a use-after-free vulnerability in the Windows Services for NFS ONCRPC XDR Driver . An authorized local attacker with low privileges can exploit it to achieve code execution , with high impact on confidentiality, integrity, and availability (CVSS 3.1 score 7.0 HIGH ; vector AV:L/...
CVE-2026-69479
CVE-2026-69479 is a heap-based buffer overflow in Windows NTFS that allows an unauthorized local attacker to achieve code execution. The Microsoft-assigned CVSS 3.1 score is 8.4 (HIGH) , with a vector of AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, indicating low attack complexity and no privileges or us...
EUVD-2026-72990
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally...
CVE-2026-69347
CVE-2026-69347 is a heap-based buffer overflow in the Windows Fast FAT Driver that allows an unauthorized attacker to achieve local code execution . The vulnerability is rated HIGH (CVSS 3.1: 7.4) with a local attack vector, high complexity, no required privileges, and no user interaction, result...
EUVD-2026-73202
Buffer over-read in Windows NTFS allows an authorized attacker to execute code locally...
CVE-2026-68875
CVE-2026-68875 is a buffer over-read in Windows NTFS that allows an authorized local attacker to achieve code execution . The vulnerability is rated CVSS 3.1 7.8 (High) with a local attack vector, low complexity, low privileges required, and no user interaction needed. No exploitation details or ...
EUVD-2026-73190
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally...
Microsoft Excel Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
Microsoft Excel Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
Windows VOLSNAP.SYS Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows VOLSNAP.SYS allows an authorized attacker to execute code locally...
Windows NTFS Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally...
Windows Hyper-V Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally...