CVE-2026-70342

CVE-2026-70342 affects the Windows Ancillary Function Driver for WinSock (AFD). The vulnerability is a use after free flaw that allows an unauthorized attacker to elevate privileges over a network. The CVSS 3.1 score is 8.1 (HIGH) , with a vector of network-based, high complexity, no privileges r...

EUVD-2026-73070

Use after free in Windows Key Distribution Center allows an authorized attacker to execute code over a network...

EUVD-2026-73069

Use after free in Windows DNS allows an unauthorized attacker to execute code over a network...

CVE-2026-69732

CVE-2026-69732 is a heap-based buffer overflow in Windows Link Layer Topology Discovery Protocol (LLTD) that allows an unauthorized attacker to execute code over a network. The vulnerability carries a CVSS 3.1 score of 8.1 (HIGH) , with high impact on confidentiality, integrity, and availability,...

CVE-2026-69762

CVE-2026-69762 is a stack-based buffer overflow in Windows Win32K that allows an authorized attacker with low privileges to elevate privileges over a network , requiring user interaction. The CVSS 3.1 base score is 8.0 (HIGH) , reflecting high impact to confidentiality, integrity, and availabilit...

EUVD-2026-73052

Stack-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network...

EUVD-2026-73047

Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges over a network...

CVE-2026-69875

CVE-2026-69875 is a heap-based buffer overflow in Windows NTFS that allows an authorized attacker (low privileges, user interaction required) to elevate privileges over a network . The vulnerability carries a CVSS 3.1 score of 8.0 (HIGH) with impacts of High across confidentiality, integrity, and...

EUVD-2026-73041

Untrusted pointer dereference in Windows Group Policy allows an authorized attacker to elevate privileges over a network...

CVE-2026-69628

CVE-2026-69628 is a heap-based buffer overflow in Windows iSCSI that allows an authorized attacker to achieve remote code execution over a network. The Microsoft-assigned CVSS 3.1 score is 8.8 (HIGH) , reflecting a network attack vector, low complexity, low privileges required, no user interactio...

EUVD-2026-73009

Use after free in Active Directory Domain Services allows an unauthorized attacker to execute code over a network...

CVE-2026-69539

CVE-2026-69539 is a use after free vulnerability in Windows Remote Desktop Services that allows an authorized attacker to achieve remote code execution over a network. The CVSS v3.1 base score is 7.5 (HIGH) , with a vector of AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating that exploitation requi...

EUVD-2026-73007

Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network...

EUVD-2026-73002

Heap-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to execute code over a network...

EUVD-2026-73001

Use after free in Windows DNS allows an authorized attacker to execute code over a network...

EUVD-2026-72998

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges over a network...

CVE-2026-69505

An out-of-bounds read in the Windows NTFS component allows an authorized attacker (low privileges required) to elevate privileges over a network, with user interaction required . The CVSS 3.1 score is 8.0 (HIGH) , reflecting high impact on confidentiality, integrity, and availability. No known ex...

CVE-2026-69495

A heap-based buffer overflow in the Windows Event Logging Service allows an unauthorized attacker to achieve remote code execution over a network. The assigned CVSS 3.1 score is 8.8 (HIGH) , with the vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating that exploitation requires user interactio...

EUVD-2026-72994

Heap-based buffer overflow in Windows Compressed Folder allows an unauthorized attacker to execute code over a network...

CVE-2026-69451

Windows Management Instrumentation (WMI) contains a use-after-free vulnerability that allows an authorized attacker to escalate privileges over a network. The CVSS 3.1 score is 7.1 (HIGH) with a vector of AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H, meaning exploitation requires network access , low priv...