EUVD-2026-73593

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges over a network...

EUVD-2026-73549

Use after free in Windows Shell allows an authorized attacker to elevate privileges locally...

EUVD-2026-73421

Use after free in Windows Win32K allows an authorized attacker to elevate privileges over a network...

EUVD-2026-73320

Improper neutralization of special elements in output used by a downstream component 'injection' in SQL Server allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-69846

An integer overflow or wraparound in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally. The flaw requires high privileges and low attack complexity with no user interaction, but changes scope to affect the full system with high impact on confidentiality, integ...

EUVD-2026-73146

Missing authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-69380

CVE-2026-69380 is a missing authorization vulnerability in Microsoft Exchange Server that allows an authorized attacker to elevate privileges over a network. The CVSS 3.1 score is 8.1 (HIGH) , with high impact to confidentiality and integrity and no availability impact. Attack complexity is low, ...

EUVD-2026-73062

Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges over a network...

EUVD-2026-73049

Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

EUVD-2026-72988

Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally...

EUVD-2026-73219

Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network...

EUVD-2026-73200

Use after free in Windows Kernel allows an authorized attacker to elevate privileges over a network...

EUVD-2026-73168

Permissive cross-domain policy with untrusted domains in Azure Arc allows an unauthorized attacker to elevate privileges over a network...

Microsoft SQL Server Elevation of Privilege Vulnerability

Improper privilege management in SQL Server allows an authorized attacker to elevate privileges over a network...

Windows CD-ROM Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally...

Microsoft COM for Windows Elevation of Privilege Vulnerability

Use after free in Microsoft COM for Windows allows an authorized attacker to elevate privileges locally...

Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability

Use after free in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges over a network...

Windows Enterprise App Management Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Enterprise App Management allows an authorized attacker to elevate privileges over a network...

Windows Print Spooler Components Elevation of Privilege Vulnerability

Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally...

Microsoft SQL Server Elevation of Privilege Vulnerability

Improper neutralization of special elements used in an sql command 'sql injection' in SQL Server allows an authorized attacker to elevate privileges over a network...