165965 matches found
CVE-2026-69444
CVE-2026-69444 is a heap-based buffer overflow in Microsoft Windows Speech that allows an authorized attacker to escalate privileges locally. The vulnerability carries a CVSS 3.1 score of 7.8 (HIGH) , with a local attack vector, low complexity, low privileges required, and high impact across conf...
CVE-2026-69438
CVE-2026-69438 is a Remote Code Execution vulnerability in Microsoft JScript caused by an incorrect conversion between numeric types . An unauthorized attacker can exploit this over a network to execute code, with a CVSS 3.1 score of 8.1 (HIGH) — notably, high attack complexity is required but no...
EUVD-2026-73496
Incorrect conversion between numeric types in Microsoft JScript allows an unauthorized attacker to execute code over a network...
CVE-2026-69365
CVE-2026-69365 is an out-of-bounds read in Microsoft Local Security Authority Server (lsasrv) that allows an authorized attacker to escalate privileges over a network. The vulnerability carries a CVSS 3.1 score of 8.0 (High) with a vector of AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H, indicating that ex...
EUVD-2026-73475
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...
CVE-2026-69360
CVE-2026-69360 is a heap-based buffer overflow in Microsoft Office Word that allows an unauthorized attacker to achieve remote code execution over a network. The attack requires user interaction (e.g., opening a malicious document) but no prior authentication. The assigned CVSS v3.1 score is 8.8 ...
EUVD-2026-73476
Out-of-bounds read in Microsoft Local Security Authority Server lsasrv allows an authorized attacker to elevate privileges over a network...
EUVD-2026-73472
Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally...
CVE-2026-69376
CVE-2026-69376 is an out-of-bounds read vulnerability in Microsoft Standard XPS that allows an authorized local attacker to disclose information . The CVSS 3.1 score is 5.5 (Medium) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N, indicating local attack, low complexity, low privileges requi...
CVE-2026-69308
Microsoft Standard XPS is affected by an out-of-bounds read that allows an authorized, local attacker to disclose information . The vulnerability requires low privileges and no user interaction, with a CVSS 3.1 score of 5.5 (MEDIUM) (C:H/I:N/A:N). CISA's SSVC assessment rates exploitation as none...
EUVD-2026-73448
Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally...
EUVD-2026-73445
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network...
CVE-2026-69313
Microsoft Standard XPS is affected by a heap-based buffer overflow that allows an authorized attacker to elevate privileges over a network. The CVSS 3.1 score is 7.1 (HIGH) , with a network attack vector, high complexity, low privileges required, and user interaction required, leading to high imp...
EUVD-2026-73439
Generation of error message containing sensitive information in Microsoft COM for Windows allows an authorized attacker to disclose information locally...
CVE-2026-69294
Microsoft COM for Windows is affected by an information disclosure vulnerability caused by the generation of an error message containing sensitive information. An authorized local attacker can exploit this to disclose information, with no user interaction required. The CVSS 3.1 score is 5.5 (Medi...
CVE-2026-69299
Microsoft COM for Windows is affected by a use-after-free vulnerability that allows an authorized local attacker to achieve privilege escalation. The CVSS 3.1 score is 7.0 (HIGH) , with a local attack vector, high complexity, and low required privileges. No user interaction is needed, and all thr...
EUVD-2026-73434
Use after free in Microsoft COM for Windows allows an authorized attacker to elevate privileges locally...
EUVD-2026-73429
Stack-based buffer overflow in Microsoft Local Security Authority Server lsasrv allows an authorized attacker to elevate privileges locally...
CVE-2026-69269
CVE-2026-69269 is an integer underflow (wrap or wraparound) vulnerability in Microsoft Standard XPS that allows an authorized attacker with local access and low privileges to achieve local privilege escalation with high impact on confidentiality, integrity, and availability (CVSS 3.1: 7.8 HIGH )....