283974 matches found
EUVD-2026-73477
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Print Spooler Components allows an authorized attacker to elevate privileges over a network...
EUVD-2026-73476
Out-of-bounds read in Microsoft Local Security Authority Server lsasrv allows an authorized attacker to elevate privileges over a network...
CVE-2026-69365
CVE-2026-69365 is an out-of-bounds read in Microsoft Local Security Authority Server (lsasrv) that allows an authorized attacker to escalate privileges over a network. The vulnerability carries a CVSS 3.1 score of 8.0 (High) with a vector of AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H, indicating that ex...
CVE-2026-69357
Windows NDIS (Network Driver Interface Specification) contains a use-after-free vulnerability that allows an authorized attacker to elevate privileges over a network. The flaw requires low privileges , user interaction , and a high-attack-complexity network vector to succeed, resulting in high im...
EUVD-2026-73471
Use after free in Windows NDIS allows an authorized attacker to elevate privileges over a network...
CVE-2026-69350
CVE-2026-69350 is a heap-based buffer overflow in Windows Overlay Filter that allows an authorized attacker to elevate privileges locally . The vulnerability requires high privileges and no user interaction, with a CVSS 3.1 score of 6.7 (MEDIUM) reflecting high impact to confidentiality, integrit...
EUVD-2026-73468
Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges locally...
CVE-2026-69348
CVE-2026-69348 is a heap-based buffer overflow in the Windows Win32K kernel component that allows an authorized, locally-privileged attacker to elevate privileges . The CVSS 3.1 score is 7.8 (HIGH) , with low attack complexity and no user interaction required. CISA's SSVC assessment indicates no ...
CVE-2026-69346
CVE-2026-69346 is a heap-based buffer overflow in Windows Print Spooler Components that allows an authorized attacker to elevate privileges over a network. The flaw carries a CVSS 3.1 score of 8.0 (HIGH) with the vector AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H, meaning exploitation requires low privil...
EUVD-2026-73467
Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally...
EUVD-2026-73466
Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges over a network...
CVE-2026-69340
CVE-2026-69340 is a heap-based buffer overflow in Windows NTFS that allows an authorized, low-privilege attacker to elevate privileges over a network . The vulnerability requires user interaction and carries a high attack complexity, yielding a CVSS 3.1 base score of 7.1 (HIGH) with high impact t...
CVE-2026-69335
CVE-2026-69335 is a use-after-free vulnerability in Windows Win32K that allows an authorized attacker to elevate privileges locally . Microsoft rates it CVSS 3.1: 7.0 (HIGH) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, meaning exploitation requires local access, low privileges, and high ...
EUVD-2026-73461
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally...
EUVD-2026-73462
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network...
EUVD-2026-73460
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges over a network...
CVE-2026-69332
CVE-2026-69332 is an out-of-bounds read in Windows NTFS that allows an authorized, low-privilege attacker to escalate privileges over a network with user interaction. The CVSS 3.1 score is 8.0 (HIGH) with impacts of High across Confidentiality, Integrity, and Availability. No specific affected ve...
CVE-2026-69331
CVE-2026-69331 is a use-after-free vulnerability in Windows Remote Access Connection Manager that allows an authorized local attacker to elevate privileges . The vulnerability is rated HIGH (CVSS 3.1: 7.0) with a local attack vector , high complexity , and low privileges required . No user intera...