283887 matches found
EUVD-2026-73038
Time-of-check time-of-use toctou race condition in Windows USB Audio Class driver usbaudio.sys allows an authorized attacker to elevate privileges locally...
CVE-2026-69859
A time-of-check time-of-use (TOCTOU) race condition in the Windows USB Audio Class driver (usbaudio.sys) allows an authorized local attacker to escalate privileges . The vulnerability is scored CVSS 3.1: 7.0 (HIGH) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H , reflecting high impact to c...
CVE-2026-69693
A use-after-free flaw in the Windows Device Association Broker service allows an authorized local attacker to achieve privilege escalation . The vulnerability is rated HIGH (CVSS 3.1: 7.0) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H , indicating that exploitation requires high attack com...
CVE-2026-69790
CVE-2026-69790 is a heap-based buffer overflow in Windows Credential Providers that enables a local, low-privilege attacker to escalate privileges. The vulnerability requires local access with low privileges , no user interaction , and has low attack complexity , resulting in HIGH impact across c...
EUVD-2026-73035
Heap-based buffer overflow in Windows Credential Providers allows an authorized attacker to elevate privileges locally...
EUVD-2026-73032
Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges over a network...
CVE-2026-69689
An out-of-bounds read in the Windows Win32K component allows an authorized attacker to elevate privileges over a network . The CVSS v3.1 score is 8.0 (HIGH) with vector AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H , indicating a network-based attack requiring low privileges and user interaction, with high...
CVE-2026-69645
CVE-2026-69645 is a use-after-free vulnerability in Windows Message Queuing that allows an authorized local attacker to escalate privileges. The flaw resides in the Windows Message Queuing component and results in high impact across confidentiality, integrity, and availability (CVSS 3.1 base scor...
CVE-2026-69648
CVE-2026-69648 is a use after free vulnerability in Windows Notification that allows a low-privilege local attacker to escalate privileges. The CVSS 3.1 score is 7.0 (HIGH) with a local attack vector, high complexity, and no user interaction required, but full impact to confidentiality, integrity...
EUVD-2026-73028
Use after free in Windows Message Queuing allows an authorized attacker to elevate privileges locally...
EUVD-2026-73029
Use after free in Windows Notification allows an authorized attacker to elevate privileges locally...
CVE-2026-69594
CVE-2026-69594 is a heap-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) that allows an authorized local attacker to escalate privileges. The vulnerability is rated CVSS 7.8 (HIGH) , with a local attack vector, low complexity, low privileges required, no user interacti...
EUVD-2026-73026
Heap-based buffer overflow in Microsoft Local Security Authority Server lsasrv allows an authorized attacker to elevate privileges locally...
CVE-2026-69605
CVE-2026-69605 is a use-after-free vulnerability in Microsoft Install Service that allows an authorized attacker to perform a local privilege escalation . The flaw is classified with a CVSS 3.1 base score of 7.0 (HIGH) , requiring local access, low privileges, and high attack complexity, with hig...
EUVD-2026-73027
Use after free in Microsoft Install Service allows an authorized attacker to elevate privileges locally...
CVE-2026-69608
CVE-2026-69608 is a local elevation of privilege vulnerability in the Microsoft Windows Search Component , caused by an integer overflow or wraparound . An authorized (low-privilege) attacker can exploit it locally without user interaction to achieve high impact across confidentiality, integrity,...
CVE-2026-69585
CVE-2026-69585 affects the Microsoft Windows Search Component , where an incorrect type conversion or cast allows an authorized attacker to perform local privilege escalation . The vulnerability scores 7.8 (HIGH) under CVSS 3.1, with low attack complexity, low privileges required, no user interac...
EUVD-2026-73021
Incorrect type conversion or cast in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...