CVE-2026-68852

Microsoft Account is affected by a use of uninitialized resource vulnerability that allows an authorized attacker with low privileges to locally disclose information (CVSS 3.1: 5.5, MEDIUM). The vulnerability requires local access and no user interaction, with a high impact on confidentiality but...

EUVD-2026-73411

Use of uninitialized resource in Microsoft Account allows an authorized attacker to disclose information locally...

EUVD-2026-73412

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally...

CVE-2026-69265

CVE-2026-69265 is an out-of-bounds read vulnerability in Windows NTFS that allows an authorized attacker with low privileges to perform local privilege escalation . The CVSS v3.1 score is 7.8 (High) , with low attack complexity, no user interaction, and high impact across confidentiality, integri...

EUVD-2026-73410

Heap-based buffer overflow in Microsoft Account allows an authorized attacker to elevate privileges locally...

CVE-2026-68850

This vulnerability is a heap-based buffer overflow in Microsoft Account that allows an attacker with existing low-level access to locally elevate privileges . The CVSS 3.1 score is 7.8 (HIGH) , reflecting a local attack vector with low complexity and low privileges required, resulting in high imp...

EUVD-2026-73405

Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally...

CVE-2026-68842

CVE-2026-68842 is an information disclosure vulnerability in the Windows MIDI Service Module , where sensitive system information is exposed to an unauthorized control sphere. An authorized attacker with local access and low privileges can disclose confidential information, with high impact to co...

CVE-2026-68848

CVE-2026-68848 is a heap-based buffer overflow in Windows Print Spooler Components that allows an authorized local attacker to escalate privileges . The vulnerability requires low privileges , has low attack complexity , and needs no user interaction , yielding a CVSS 3.1 score of 7.8 (HIGH) with...

EUVD-2026-73406

Exposure of sensitive system information to an unauthorized control sphere in Windows MIDI Service Module allows an authorized attacker to disclose information locally...

EUVD-2026-73404

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows USB Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-68840

CVE-2026-68840 is a local privilege escalation vulnerability in the Windows USB Driver , caused by a race condition (concurrent execution using a shared resource with improper synchronization). An authorized attacker (low privileges, no user interaction) can exploit it locally with high complexit...

EUVD-2026-73401

Use after free in Microsoft Office Word allows an authorized attacker to disclose information locally...

CVE-2026-68843

CVE-2026-68843 is a use-after-free vulnerability in Microsoft Office Word that allows an authorized attacker to disclose information locally. The flaw resides in Word's handling of memory objects, where freed memory is subsequently accessed, potentially leaking sensitive data to a local user with...

CVE-2026-68831

CVE-2026-68831 is an information disclosure vulnerability in Windows Defender Firewall Service . The issue arises from files or directories accessible to external parties, allowing an authorized attacker with low privileges to disclose information locally (CVSS 3.1 score 5.5 – MEDIUM ; vector AV:...

EUVD-2026-73398

Files or directories accessible to external parties in Windows Defender Firewall Service allows an authorized attacker to disclose information locally...

EUVD-2026-73374

Use after free in Windows VHD miniport driver allows an authorized attacker to elevate privileges locally...

EUVD-2026-73373

Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally...

CVE-2026-56172

CVE-2026-56172 is a use-after-free vulnerability in the Windows VHD miniport driver that allows an authorized local attacker to achieve privilege escalation . The CVSS 3.1 score is 7.8 (High) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating low attack complexity and full impact on...

CVE-2026-62697

CVE-2026-62697 is a use after free vulnerability in Windows Push Notifications that allows an authorized attacker to achieve local privilege escalation . The CVSS 3.1 score is 7.8 (HIGH) with a local attack vector, low complexity, and low privileges required, resulting in high impact to confident...