165965 matches found
CVE-2026-69272
A heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network . The CVSS 3.1 score is 7.1 (HIGH) , with an attack vector of network, high complexity , low privileges required , and user interaction required , leading to high impact on co...
EUVD-2026-73420
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network...
EUVD-2026-73419
Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally...
CVE-2026-68891
CVE-2026-68891 is an out-of-bounds read in Microsoft Standard XPS that allows an authorized attacker to disclose information locally. The CVSS v3.1 score is 4.7 (MEDIUM) , reflecting a local attack vector with high complexity and low privileges required, resulting in high confidentiality impact w...
CVE-2026-68889
A heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network. The CNA-assessed CVSS 3.1 score is 7.1 (HIGH) with a vector of AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H, indicating that exploitation requires low privileges, user interaction, an...
EUVD-2026-73418
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network...
EUVD-2026-73417
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally...
CVE-2026-68885
CVE-2026-68885 is a heap-based buffer overflow in Microsoft Standard XPS that allows an authorized local attacker to escalate privileges. The vulnerability carries a CVSS 3.1 base score of 7.8 (HIGH) with the vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, meaning it requires local access with low pr...
EUVD-2026-73414
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally...
EUVD-2026-73411
Use of uninitialized resource in Microsoft Account allows an authorized attacker to disclose information locally...
CVE-2026-68852
Microsoft Account is affected by a use of uninitialized resource vulnerability that allows an authorized attacker with low privileges to locally disclose information (CVSS 3.1: 5.5, MEDIUM). The vulnerability requires local access and no user interaction, with a high impact on confidentiality but...
CVE-2026-68850
This vulnerability is a heap-based buffer overflow in Microsoft Account that allows an attacker with existing low-level access to locally elevate privileges . The CVSS 3.1 score is 7.8 (HIGH) , reflecting a local attack vector with low complexity and low privileges required, resulting in high imp...
EUVD-2026-73410
Heap-based buffer overflow in Microsoft Account allows an authorized attacker to elevate privileges locally...
CVE-2026-68843
CVE-2026-68843 is a use-after-free vulnerability in Microsoft Office Word that allows an authorized attacker to disclose information locally. The flaw resides in Word's handling of memory objects, where freed memory is subsequently accessed, potentially leaking sensitive data to a local user with...
EUVD-2026-73401
Use after free in Microsoft Office Word allows an authorized attacker to disclose information locally...
EUVD-2026-73367
Out-of-bounds read in Microsoft Trace Data Helper allows an authorized attacker to elevate privileges locally...
EUVD-2026-73327
Improper authentication in Microsoft Authenticator allows an unauthorized attacker to elevate privileges locally...
CVE-2026-80097
CVE-2026-80097 is an improper authentication vulnerability in Microsoft Authenticator that allows an unauthorized local attacker to elevate privileges . The CVSS 3.1 score is 8.6 (HIGH) with a vector of AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H, indicating a local attack with low complexity , no prior ...
CVE-2026-78518
CVE-2026-78518 is an out-of-bounds read vulnerability in Microsoft Office Excel that allows an unauthorized attacker to achieve remote code execution over a network. The CVSS 3.1 score is 8.8 (HIGH) , with a network attack vector, low complexity, no privileges required, but user interaction requi...