EUVD-2026-56651

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-62734 Windows Telephony Service Elevation of Privilege Vulnerability

...

EUVD-2026-56642

Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally...

CVE-2026-62733

CVE-2026-62733 is an out-of-bounds read in Windows Win32K that allows a locally authenticated attacker to elevate privileges. The vulnerability affects Win32K components and yields a Local Privilege Escalation (LPE) with HIGH impact to confidentiality, integrity, and availability (per CVSS 3.1: A...

CVE-2026-62721 Windows User-Mode Power Service (UMPS) Elevation of Privilege Vulnerability

...

EUVD-2026-56637

Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privileges locally...

CVE-2026-62710

CVE-2026-62710 : Heap-based buffer overflow in the Windows Device Association Service allows an authorized attacker to elevate privileges locally. This entry is supported by multiple sources: the NVD/NVD-derived description confirms a local, privilege-escalation flaw with high impact (confidentia...

CVE-2026-62710 Windows Device Association Service Elevation of Privilege Vulnerability

...

CVE-2026-62708 Windows Kernel Elevation of Privilege Vulnerability

...

CVE-2026-62698 Microsoft Digest Authentication Elevation of Privilege Vulnerability

...

CVE-2026-61358 Windows Accessibility Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability

...

EUVD-2026-56612

No cwe for this issue in AMD Zen allows an authorized attacker to disclose information locally...

CVE-2026-59122

CVE-2026-59122 describes a race condition in Windows Telephony Service caused by concurrent access to a shared resource with improper synchronization. This allows an authorized attacker with local access and low privileges to elevate privileges (CVSS v3.1: AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H; bas...

CVE-2026-66804

Technical details about CVE-2026-66804 are not publicly available in the provided documents. Monitor for updates from Microsoft and NVD for affected products, vulnerable component, impact, and remediation.

EUVD-2026-56465

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

EUVD-2026-56461

Incomplete cleanup in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally...

CVE-2026-65678 Windows Win32k Elevation of Privilege Vulnerability

...

EUVD-2026-56434

Out-of-bounds read in Windows GDI allows an authorized attacker to disclose information locally...

EUVD-2026-56424

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally...

CVE-2026-62908

CVE-2026-62908: A race condition in the Windows Backup Engine allows local privilege escalation by an authorized attacker. Documented impact: high across confidentiality, integrity, and availability (CVSS 3.1 base score 7.0; LOCAL access; HIGH likelihood of impact). Affected component is the Wind...