146685 matches found
CVE-2026-62815
CVE-2026-62815 describes a use-after-free in Microsoft QUIC that could allow a remote attacker to execute code over the network. The connected sources confirm the vulnerability type but do not specify affected products, versions, exploit details, or available patches. No remediation steps are pro...
EUVD-2026-56392
Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network...
EUVD-2026-56385
Heap-based buffer overflow in Microsoft Local Security Authority Server lsasrv allows an authorized attacker to execute code over a network...
CVE-2026-62784
Microsoft Local Security Authority Server (lsasrv) is affected by CVE-2026-62784 due to a heap-based buffer overflow that allows an authorized attacker to execute code over the network. CVSS v3.1 score: 8.8 (High) with Network access, Low complexity, Privileges Required: Low, User Interaction: No...
CVE-2026-62784 Microsoft Local Security Authority Server (lsasrv) Remote Code Execution Vulnerability
...
CVE-2026-62779 Windows Schannel Elevation of Privilege Vulnerability
...
CVE-2026-62785 Windows LDAP - Lightweight Directory Access Protocol Remote Code Execution Vulnerability
...
CVE-2026-62755
CVE-2026-62755 affects the Windows DHCP Client. The vulnerability is a stack-based buffer overflow in the DHCP client component, leading to local privilege escalation for an authorized attacker. The CVSS 3.1 vector indicates Local attack, Low attack complexity, Low privileges required, with no us...
CVE-2026-62745 Windows DHCP Server Information Disclosure Vulnerability
...
CVE-2026-62742
CVE-2026-62742 describes an integer underflow in the Windows DHCP Server that enables an unauthenticated attacker on an adjacent network to disclose information. The affected component is the Windows DHCP Server service, and the underlying cause is a wrap/wraparound underflow. The documented impa...
CVE-2026-62740
CVE-2026-62740 describes a vulnerability in the Windows Imaging Component where an uninitialized resource can lead to local information disclosure by an authorized attacker. The issue is reported with a CVSS v3.1 base score of 5.5 (Medium), vector: Local, low attack complexity, and low privileges...
CVE-2026-62740 Windows Imaging Component Information Disclosure Vulnerability
...
CVE-2026-62753 Windows HTTP.sys Elevation of Privilege Vulnerability
...
CVE-2026-62702 Windows Graphics Kernel Denial of Service Vulnerability
...
CVE-2026-61925
CVE-2026-61925 describes an elevation of privilege vulnerability in Windows Installer caused by incorrect authorization checks. An authenticated local attacker can exploit this to gain higher privileges on the host. CVSS v3.1 metrics indicate a HIGH-severity, local attacker, no user interaction, ...
CVE-2026-61356
CVE-2026-61356 : The vulnerability concerns Windows Remote Desktop Services . The issue is described as “Missing authentication for a critical function,” enabling an elevation of privileges attack from a local, authenticated position. The CVSS 3.1 score is reported as 7.8 (HIGH) with local access...
CVE-2026-61361
CVE-2026-61361 is a Use-after-Free vulnerability in the Windows DHCP Client that allows an authorized attacker to execute code locally. Affected: Windows DHCP Client (component of the Windows networking stack). Root cause: use-after-free in the DHCP client process. Impact: high with local access ...
CVE-2026-61361 Windows DHCP Client Remote Code Execution Vulnerability
...