112297 matches found
EUVD-2026-73637
Untrusted pointer dereference in Windows ALPC allows an authorized attacker to elevate privileges locally...
CVE-2026-69874
CVE-2026-69874 is a local privilege escalation vulnerability in Windows ALPC (Advanced Local Procedure Call) caused by an untrusted pointer dereference . An authorized attacker with local high-privilege access can exploit this to elevate privileges further. The vulnerability carries a CVSS 3.1 sc...
EUVD-2026-73618
Untrusted pointer dereference in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-69900
CVE-2026-69900 is an untrusted pointer dereference in the Kernel Streaming WOW Thunk Service Driver (a Windows kernel-mode driver) that allows a locally authenticated attacker to escalate privileges . Microsoft rated it HIGH (CVSS 7.8) with local attack vector, low complexity, low privileges requ...
EUVD-2026-73563
Null pointer dereference in Windows IKE Extension allows an unauthorized attacker to deny service over a network...
CVE-2026-69881
CVE-2026-69881 is a null pointer dereference in the Windows Internet Key Exchange (IKE) Extension that allows an unauthenticated, network-based attacker to trigger a denial of service. The CVSS 3.1 score is 7.5 (HIGH) with vector AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H , meaning the impact is limited...
EUVD-2026-73540
Untrusted pointer dereference in Windows Print Spooler Components allows an authorized attacker to deny service over a network...
CVE-2026-69569
CVE-2026-69569 is an untrusted pointer dereference in Windows Print Spooler Components that allows an authorized attacker to cause a denial of service over a network. The CVSS v3.1 score is 5.7 (Medium) , with high availability impact but no confidentiality or integrity impact. Exploitation requi...
EUVD-2026-73499
Untrusted pointer dereference in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally...
CVE-2026-69475
CVE-2026-69475 is an elevation of privilege vulnerability in Windows Remote Desktop Services , caused by an untrusted pointer dereference . An authorized local attacker with low privileges can exploit this with low complexity and no user interaction to gain high impact across confidentiality, int...
EUVD-2026-73473
Null pointer dereference in Virtual Hard Disk VHD Miniport Driver allows an unauthorized attacker to deny service locally...
CVE-2026-69384
A null pointer dereference in the Virtual Hard Disk (VHD) Miniport Driver allows an unauthorized local attacker to trigger a denial of service . The CVSS 3.1 score is 7.1 (HIGH) with a scope change, reflecting the local attack vector with no privileges required. CISA's SSVC assessment indicates n...
EUVD-2026-73371
Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network...
CVE-2026-62762
CVE-2026-62762 is a null pointer dereference in Windows Active Directory Domain Services that allows an authorized attacker (low privileges required) to cause a denial of service over a network. The CVSS v3.1 score is 6.5 (Medium) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H, reflecting h...
EUVD-2026-73344
Null pointer dereference in Windows SMB Server Network Transport Driver srvnet.sys allows an unauthorized attacker to deny service over a network...
CVE-2026-72949
CVE-2026-72949 is a null pointer dereference in the Windows SMB Server Network Transport Driver (srvnet.sys) that allows an unauthorized, network-based attacker to cause a denial of service . The Microsoft-assigned CVSS 3.1 score is 7.5 (HIGH) , reflecting low attack complexity, no required privi...
EUVD-2026-73325
Untrusted pointer dereference in Windows Hyper-V allows an authorized attacker to execute code locally...
CVE-2026-80083
CVE-2026-80083 is an untrusted pointer dereference in Windows Hyper-V that allows an authorized local attacker to execute code, with changed scope (privilege escape). The CVSS 3.1 score is 8.8 (HIGH) (AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H), reflecting high impact to confidentiality, integrity, and ...
CVE-2026-67378
CVE-2026-67378 is an untrusted pointer dereference in Microsoft SQL Server that allows an unauthorized attacker to achieve remote code execution over a network. The CVSS 3.1 score is 9.0 (Critical) with a high attack complexity, no required privileges, and a changed scope (impact: high across con...