EUVD-2026-73558

Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally...

CVE-2026-69616

Windows Remote Desktop Services is affected by an out-of-bounds read vulnerability that allows an authorized local attacker to disclose information (CVSS 3.1: 5.5 MEDIUM — local vector, low privileges required, high confidentiality impact, no integrity or availability impact). CISA's SSVC assessm...

EUVD-2026-73557

Out-of-bounds read in Windows Remote Desktop Services allows an authorized attacker to disclose information locally...

CVE-2026-69630

CVE-2026-69630 is an out-of-bounds read vulnerability in the Windows Win32K kernel driver that allows a locally authenticated attacker to escalate privileges . The CVSS v3.1 score is 7.0 (HIGH) with vector AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, reflecting the high complexity and required low-privil...

CVE-2026-69617

CVE-2026-69617 is an out-of-bounds read vulnerability in the Windows Resilient File System (ReFS) component that allows an authorized local attacker to escalate privileges . The CVSS 3.1 score is 7.0 (HIGH) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, reflecting the high complexity and l...

EUVD-2026-73556

Out-of-bounds read in Windows Resilient File System ReFS allows an authorized attacker to elevate privileges locally...

EUVD-2026-73551

Out-of-bounds read in Windows SMB Client allows an authorized attacker to disclose information locally...

CVE-2026-69618

CVE-2026-69618 is an out-of-bounds read in the Windows SMB Client that allows an authorized local attacker to disclose information . The CVSS 3.1 score is 5.5 (MEDIUM) with a local attack vector, low complexity, low privileges required, and high confidentiality impact but no integrity or availabi...

EUVD-2026-73540

Untrusted pointer dereference in Windows Print Spooler Components allows an authorized attacker to deny service over a network...

CVE-2026-69569

CVE-2026-69569 is an untrusted pointer dereference in Windows Print Spooler Components that allows an authorized attacker to cause a denial of service over a network. The CVSS v3.1 score is 5.7 (Medium) , with high availability impact but no confidentiality or integrity impact. Exploitation requi...

EUVD-2026-73539

Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information over a network...

CVE-2026-69591

CVE-2026-69591 is an out-of-bounds read vulnerability in Windows NTFS that allows an authorized attacker to disclose information over a network. The CVSS 3.1 score is 5.7 (Medium) , requiring network access, low privileges, and user interaction, with a high confidentiality impact but no integrity...

CVE-2026-69538

CVE-2026-69538 is an out-of-bounds read vulnerability in the Windows Spaceport.sys driver. An attacker with low local privileges can exploit this to execute code on the target system, leading to high impact on confidentiality, integrity, and availability (CVSS 3.1 score 7.8 – HIGH ). The attack v...

EUVD-2026-73537

Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to execute code locally...

CVE-2026-69497

Windows DHCP Server is vulnerable to a memory leak (missing release of memory after effective lifetime), allowing an authorized attacker with low privileges over the network to cause a denial of service . The CVSS 3.1 score is 6.5 (Medium) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H, ind...

EUVD-2026-73525

Missing release of memory after effective lifetime in Windows DHCP Server allows an authorized attacker to deny service over a network...

EUVD-2026-73523

Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network...

CVE-2026-69493

CVE-2026-69493 is a critical (CVSS 9.8) out-of-bounds read vulnerability in Windows Event Logging Service , as assigned by Microsoft . The flaw allows an unauthorized, network-based attacker to achieve remote code execution without user interaction, with high impact to confidentiality, integrity,...

EUVD-2026-73520

Out-of-bounds read in Windows Image Acquisition allows an authorized attacker to disclose information locally...

CVE-2026-69483

CVE-2026-69483 is an out-of-bounds read vulnerability in Windows Image Acquisition (WIA) that allows an authorized, local attacker to achieve information disclosure with high confidentiality impact . The CVSS 3.1 score is 4.7 (Medium) , with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N, indica...