28914 matches found
EUVD-2026-72981
Use after free in Windows Management Instrumentation allows an authorized attacker to elevate privileges over a network...
CVE-2026-69458
Windows BitLocker is affected by an out-of-bounds read vulnerability that allows an authorized attacker to elevate privileges over a network . Per the CNA, the attack requires low privileges (i.e., the attacker must already be authenticated) and user interaction . The CVSS 3.1 score is 8.0 (HIGH)...
CVE-2026-69423
A heap-based buffer overflow in the Windows USB Video Driver allows an attacker with low privileges to escalate privileges over a network, requiring user interaction. The vulnerability is rated CVSS 8.0 (HIGH) with high impact to confidentiality, integrity, and availability. No public exploit or ...
EUVD-2026-72964
Heap-based buffer overflow in Volume Manager Driver allows an authorized attacker to elevate privileges over a network...
EUVD-2026-73235
Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges over a network...
CVE-2026-69337
A double free vulnerability in the Windows Registry allows an authorized attacker to elevate privileges over a network . The flaw requires low privileges and user interaction , with high attack complexity , but results in high impact to confidentiality, integrity, and availability (CVSS 3.1 score...
EUVD-2026-73217
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges over a network...
EUVD-2026-73189
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...
CVE-2026-67633
Microsoft SQL Server is affected by an out-of-bounds read vulnerability that allows an authorized attacker (low privileges) to trigger a denial of service over the network. The CNA-assigned CVSS 3.1 score is 6.5 (MEDIUM) , reflecting network attack vector, low complexity, and high availability im...
CVE-2026-67629
CVE-2026-67629 is an out-of-bounds read vulnerability in Microsoft SQL Server that allows an authorized attacker (low privileges) to disclose information over a network . The CVSS 3.1 score is 6.5 (Medium) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N, reflecting high confidentiality impac...
EUVD-2026-73177
Improper limitation of a pathname to a restricted directory 'path traversal' in Windows PowerShell allows an unauthorized attacker to bypass a security feature over a network...
EUVD-2026-73173
Missing authorization in Entra ID allows an authorized attacker to elevate privileges over a network...
CVE-2026-62706
CVE-2026-62706 is an out-of-bounds read in Microsoft Windows Media Foundation that allows an unauthorized attacker to execute code over a network. The CVSS 3.1 score is 8.8 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H , meaning exploitation requires user interaction but no prior au...
Windows HTTP Print Provider Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows HTTP Print Provider allows an unauthorized attacker to execute code over a network...
Microsoft SQL Server Remote Code Execution Vulnerability
Integer overflow or wraparound in SQL Server allows an unauthorized attacker to execute code over a network...
Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability
Use after free in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges over a network...
Microsoft SQL Server Elevation of Privilege Vulnerability
Insufficient granularity of access control in SQL Server allows an authorized attacker to elevate privileges over a network...
Microsoft Office Word Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network...