CVE-2026-72992

A heap-based buffer overflow in the Windows Biometric Service allows an authorized local attacker to elevate privileges, resulting in high impact to confidentiality, integrity, and availability. The vulnerability carries a CVSS 3.1 score of 7.8 (HIGH) with a local attack vector, low complexity, a...

EUVD-2026-73748

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-73745

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-73746

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

CVE-2026-72988

CVE-2026-72988 is a heap-based buffer overflow in Windows Biometric Service that allows an authorized local attacker to elevate privileges. The CVSS 3.1 base score is 7.8 (HIGH) with vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating that exploitation requires low privileges and no user inter...

CVE-2026-72990

CVE-2026-72990 is a heap-based buffer overflow in Windows Biometric Service that allows an authorized attacker to achieve local privilege escalation . The vulnerability requires low privileges, no user interaction, and has low attack complexity, yet results in high impact across confidentiality, ...

CVE-2026-72995

CVE-2026-72995 is a heap-based buffer overflow in Windows Biometric Service that allows a local attacker with low privileges to elevate privileges, leading to high impact on confidentiality, integrity, and availability (CVSS 3.1 score: 7.8 HIGH ). The attack requires local access, has low complex...

EUVD-2026-73744

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

CVE-2026-72985

A heap-based buffer overflow in Windows Volume Shadow Copy allows an unauthorized attacker with physical access to escalate privileges, potentially compromising confidentiality, integrity, and availability (CVSS 6.8, MEDIUM). The vulnerability requires no prior privileges or user interaction, but...

EUVD-2026-73737

Heap-based buffer overflow in Windows Volume Shadow Copy allows an unauthorized attacker to elevate privileges with a physical attack...

EUVD-2026-73725

Heap-based buffer overflow in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally...

CVE-2026-69906

Windows Secure Kernel Mode vulnerability (CVE-2026-69906) involves a heap-based buffer overflow that allows an authorized local attacker to elevate privileges . The vulnerability crosses a security boundary (scope changed), resulting in high impact to confidentiality, integrity, and availability....

EUVD-2026-73723

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-69441

CVE-2026-69441 is a race condition vulnerability in Windows Installer , caused by concurrent execution using a shared resource with improper synchronization . An authorized attacker can exploit this to elevate privileges locally . The vulnerability is rated CVSS 7.0 (HIGH) with a local attack vec...

CVE-2026-69805

CVE-2026-69805 is an elevation of privilege vulnerability in Microsoft .NET , caused by external control of a file name or path . An unauthorized network-based attacker can exploit this to escalate privileges, with high impact on confidentiality, integrity, and availability. The CVSS 3.1 score is...

EUVD-2026-73721

External control of file name or path in .NET allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-69439

Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-69439

A heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network, as reported by Microsoft (CNA: [email protected]). The vulnerability carries a CVSS 3.1 score of 8.8 (HIGH) with the vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicati...

EUVD-2026-73713

Execution with unnecessary privileges in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...

CVE-2026-69464

Microsoft Office SharePoint contains an elevation of privilege vulnerability characterized as execution with unnecessary privileges. An authorized attacker with low privileges can exploit this over a network to escalate their access, with high impact on confidentiality, integrity, and availabilit...