CVE-2026-72954

CVE-2026-72954 is a use-after-free vulnerability in Windows Deployment Services (Microsoft) that allows an authorized attacker (low privileges) to achieve remote code execution over a network. The CVSS 3.1 score is 7.5 (HIGH) with vector AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, reflecting high attack...

CVE-2026-72942

CVE-2026-72942 is an out-of-bounds read vulnerability in the Windows Spaceport.sys driver that allows an unauthorized attacker to disclose information over a network. The vulnerability requires user interaction but no prior privileges , with high confidentiality impact and no impact on integrity ...

CVE-2026-69807

Windows PowerShell is affected by a path traversal vulnerability (improper limitation of a pathname to a restricted directory) that allows an authorized attacker to elevate privileges over a network . The vulnerability carries a CVSS 3.1 score of 8.0 (HIGH) , with a vector of AV:N/AC:L/PR:L/UI:R/...

EUVD-2026-73592

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges over a network...

CVE-2026-69714

CVE-2026-69714 is a stack-based buffer overflow in the Windows Device Association Service that allows an authorized attacker to elevate privileges over a network. The vulnerability requires low privileges and user interaction , with a CVSS 3.1 score of 8.0 (HIGH) and impacts of High across Confid...

EUVD-2026-73583

Stack-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges over a network...

EUVD-2026-73567

Stack-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network...

CVE-2026-69619

CVE-2026-69619 is an out-of-bounds read in the Windows exFAT File System that allows an authorized attacker to elevate privileges over a network . The CVSS 3.1 base score is 8.0 (HIGH) with a vector of AV:N/AC:L/PR:L/UI:R, requiring low privileges and user interaction, with high impact on confide...

CVE-2026-69569

CVE-2026-69569 is an untrusted pointer dereference in Windows Print Spooler Components that allows an authorized attacker to cause a denial of service over a network. The CVSS v3.1 score is 5.7 (Medium) , with high availability impact but no confidentiality or integrity impact. Exploitation requi...

EUVD-2026-73539

Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information over a network...

CVE-2026-69591

CVE-2026-69591 is an out-of-bounds read vulnerability in Windows NTFS that allows an authorized attacker to disclose information over a network. The CVSS 3.1 score is 5.7 (Medium) , requiring network access, low privileges, and user interaction, with a high confidentiality impact but no integrity...

EUVD-2026-73524

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network...

EUVD-2026-73477

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Print Spooler Components allows an authorized attacker to elevate privileges over a network...

CVE-2026-69372

CVE-2026-69372 is an out-of-bounds read in Windows Network File System (NFS) that allows an authorized attacker (low privileges) to trigger a denial of service over a network. The attack vector is network-based with low complexity, but user interaction is required . CVSS v3.1 base score is 5.7 (M...

CVE-2026-69342

Windows DHCP Server is affected by an out-of-bounds read vulnerability (CVE-2026-69342) that allows an unauthenticated, remote attacker to cause a denial of service . The CVSS v3.1 score is 7.5 (HIGH) with an attack vector of Network, low complexity, no privileges required, and high availability ...

EUVD-2026-73460

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges over a network...

EUVD-2026-73454

Double free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a network...

CVE-2026-69313

Microsoft Standard XPS is affected by a heap-based buffer overflow that allows an authorized attacker to elevate privileges over a network. The CVSS 3.1 score is 7.1 (HIGH) , with a network attack vector, high complexity, low privileges required, and user interaction required, leading to high imp...

EUVD-2026-73443

Stack-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network...

CVE-2026-69301

A stack-based buffer overflow in the Windows Win32K component allows an authorized attacker to achieve privilege elevation over a network. The CVSS 3.1 score is 8.0 (HIGH) , with low attack complexity, low privileges required, and user interaction required. Exploitation details are not yet public...