CVE-2026-69553

CVE-2026-69553 is a missing authorization vulnerability in Windows Hyper-V that allows an authorized attacker (with low privileges) to elevate privileges over a network . The attack requires user interaction and has high attack complexity , but the impact on confidentiality, integrity, and availa...

CVE-2026-69563

CVE-2026-69563 is a heap-based buffer overflow in the Windows Program Compatibility Assistant Service that allows an authorized attacker to achieve local privilege escalation . The vulnerability carries a CVSS 3.1 score of 7.0 (HIGH) , with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicat...

EUVD-2026-73015

Heap-based buffer overflow in Virtual Hard Disk VHD Miniport Driver allows an authorized attacker to elevate privileges locally...

EUVD-2026-73016

Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69541

A heap-based buffer overflow in the Virtual Hard Disk (VHD) Miniport Driver allows an authorized (low-privilege) attacker to achieve local privilege escalation on an affected system. The vulnerability is scored CVSS 3.1: 7.8 (High) with impact to confidentiality, integrity, and availability all r...

CVE-2026-69549

An out-of-bounds read in the Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally . The vulnerability is scored 7.0 (HIGH) by Microsoft with a vector of local attack, high complexity, and low privileges required, yielding high impact across confident...

EUVD-2026-73014

Out-of-bounds read in Virtual Hard Disk VHD Miniport Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-69540

This Use After Free vulnerability affects the Windows Audio Service component and enables a locally authenticated attacker with low privileges to escalate to higher privileges. The CVSS 3.1 base score is 7.0 (High) , with an attack vector of local , high attack complexity, and no user interaction...

CVE-2026-69574

CVE-2026-69574 is a use-after-free vulnerability in the Windows Device Association Service that allows an authorized attacker to achieve local privilege escalation . The CVSS 3.1 base score is 7.0 (HIGH) , with high impact to confidentiality, integrity, and availability, but the attack requires l...

EUVD-2026-73013

Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-73012

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69528

CVE-2026-69528 is a local privilege escalation vulnerability in Windows Shell caused by missing authentication for a critical function . An authorized attacker (with low privileges, no user interaction required) can exploit this to gain full control over confidentiality, integrity, and availabili...

EUVD-2026-73010

Missing authentication for critical function in Windows Shell allows an authorized attacker to elevate privileges locally...

EUVD-2026-73011

Improper neutralization of special elements used in a command 'command injection' in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69534

CVE-2026-69534 is a command injection vulnerability in the Windows Program Compatibility Assistant Service , caused by improper neutralization of special elements used in a command. An authorized attacker can leverage this flaw to achieve local privilege escalation , with a CVSS 3.1 score of 7.8 ...

EUVD-2026-73008

Buffer over-read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-69582

CVE-2026-69582 is a buffer over-read vulnerability in the Windows Volume Manager Extension Driver , identified by Microsoft (CNA). An authorized local attacker with low privileges can exploit this flaw to elevate privileges locally, achieving high impact on confidentiality, integrity, and availab...

CVE-2026-69621

CVE-2026-69621 is a heap-based buffer overflow in the Windows Fax Service that allows an authorized local attacker to elevate privileges , resulting in full compromise of confidentiality, integrity, and availability (CVSS 3.1: 7.0 HIGH , AV:L/AC:H/PR:L). CISA's SSVC assessment indicates no known ...

EUVD-2026-73004

Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69516

CVE-2026-69516 is a use-after-free vulnerability in the Connected Devices Platform Service (Cdpsvc) , a Windows component. An authorized local attacker can exploit this to achieve privilege escalation , with high impact on confidentiality, integrity, and availability (CVSS 3.1: 7.0 HIGH ; vector ...