CVE-2026-69328

CVE-2026-69328 is an untrusted search path vulnerability in Windows Storage that allows an authorized attacker to elevate privileges locally . The CVSS 3.1 score is 7.8 (HIGH) with vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating low attack complexity, no user interaction required, and high...

EUVD-2026-73455

Access of resource using incompatible type 'type confusion' in Windows Performance Monitor allows an authorized attacker to elevate privileges locally...

CVE-2026-69324

CVE-2026-69324 is a local privilege elevation vulnerability in Windows Performance Monitor caused by type confusion (access of resource using incompatible type). An authorized attacker with low privileges can exploit this locally without user interaction to gain high impact on confidentiality, in...

CVE-2026-69322

A double free vulnerability in the Microsoft Windows Search Component allows an authorized, network-based attacker to elevate privileges . The CVSS 3.1 score is 8.0 (High) , with a network attack vector, low privileges required, and user interaction required, impacting confidentiality, integrity,...

EUVD-2026-73454

Double free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a network...

CVE-2026-69319

CVE-2026-69319 is a local privilege elevation vulnerability in the Windows USB Video Driver , caused by a race condition — concurrent execution using a shared resource with improper synchronization. An attacker with low local privileges and no user interaction can exploit this under conditions of...

EUVD-2026-73453

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows USB Video Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-69312

CVE-2026-69312 is an out-of-bounds read in Windows NTFS that allows an authorized local attacker to elevate privileges . The flaw resides in the NTFS filesystem component of Windows. The CVSS v3.1 score is 7.8 (HIGH) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a low-complexit...

EUVD-2026-73447

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally...

CVE-2026-69313

Microsoft Standard XPS is affected by a heap-based buffer overflow that allows an authorized attacker to elevate privileges over a network. The CVSS 3.1 score is 7.1 (HIGH) , with a network attack vector, high complexity, low privileges required, and user interaction required, leading to high imp...

EUVD-2026-73445

Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network...

EUVD-2026-73443

Stack-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network...

CVE-2026-69301

A stack-based buffer overflow in the Windows Win32K component allows an authorized attacker to achieve privilege elevation over a network. The CVSS 3.1 score is 8.0 (HIGH) , with low attack complexity, low privileges required, and user interaction required. Exploitation details are not yet public...

EUVD-2026-73440

Use after free in Windows Device Association Broker service allows an authorized attacker to elevate privileges over a network...

CVE-2026-69300

CVE-2026-69300 is a use-after-free vulnerability in the Windows Push Notifications component that allows an authorized attacker to achieve local privilege escalation . The CVSS v3.1 score is 7.0 (HIGH) with vector AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a high-impact but locally exploitab...

CVE-2026-69314

CVE-2026-69314 is a use-after-free vulnerability in the Windows Device Association Broker service that allows an authorized attacker to elevate privileges over a network . The vulnerability carries a CVSS 3.1 score of 7.1 (HIGH) , with an attack vector of Network, High complexity, Low privileges ...

EUVD-2026-73441

Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally...

CVE-2026-69289

CVE-2026-69289 is an elevation of privilege vulnerability in Windows Setup Files Cleanup , caused by improper link resolution before file access ("link following"). An authorized local attacker with low privileges can exploit it without user interaction to gain high impact across confidentiality,...

EUVD-2026-73438

Improper link resolution before file access 'link following' in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally...

CVE-2026-69295

CVE-2026-69295 is an out-of-bounds read in the Windows USB Driver that allows an authorized local attacker to escalate privileges. The flaw yields high impact across confidentiality, integrity, and availability (CVSS 3.1 score 7.8 HIGH , vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H), meaning a low-...