EUVD-2026-73898

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

CVE-2026-83967

CVE-2026-83967 is a heap-based buffer overflow in Windows Biometric Service that allows an authorized local attacker to elevate privileges . The CVSS v3.1 score is 7.8 (HIGH) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a low-complexity local attack requiring low privileges an...

CVE-2026-83954

CVE-2026-83954 is a heap-based buffer overflow in Windows Biometric Service that allows a local, low-privilege attacker to elevate privileges without user interaction. The vulnerability carries a CVSS 3.1 score of 7.8 (HIGH) with full impact to confidentiality, integrity, and availability, indica...

CVE-2026-83971

CVE-2026-83971 is a heap-based buffer overflow in Windows Biometric Service that allows a locally authenticated attacker to elevate privileges . Microsoft rates it CVSS 3.1 7.8 (High) , with local attack vector, low complexity, low privileges required, no user interaction, and high impact on conf...

EUVD-2026-73896

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-73897

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-73894

Use after free in Windows WebClient Service allows an authorized attacker to elevate privileges locally...

CVE-2026-72965

CVE-2026-72965 is a use-after-free vulnerability in the Windows WebClient Service that allows an authorized local attacker to achieve privilege elevation . The CVSS v3.1 score is 7.8 (HIGH) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a local attack requiring low privileges an...

EUVD-2026-73889

Improper link resolution before file access 'link following' in Windows Update Stack allows an authorized attacker to elevate privileges locally...

CVE-2026-81963

Windows Update Stack is affected by an improper link resolution before file access ('link following') flaw that allows an authorized attacker with low privileges to elevate privileges locally , rated CVSS 7.8 HIGH with high impact to confidentiality, integrity, and availability. The vulnerability...

EUVD-2026-73887

Relative path traversal in Power Automate allows an authorized attacker to elevate privileges locally...

CVE-2026-77897

CVE-2026-77897 is a relative path traversal vulnerability in Microsoft Power Automate Desktop that allows an authorized attacker to escalate privileges locally . The vulnerability requires local access with low privileges and has a high attack complexity, as reflected by the CVSS 3.1 score of 7.0...

EUVD-2026-73884

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally...

CVE-2026-83940

CVE-2026-83940 is a use after free vulnerability in the Windows Device Association Service that allows an authorized local attacker to elevate privileges . The CVSS 3.1 base score is 7.0 (HIGH) with a high attack complexity , low privileges required , and high impact across confidentiality, integ...

EUVD-2026-73885

Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally...

CVE-2026-83939

Windows Secure Kernel Mode is affected by an untrusted pointer dereference vulnerability that allows an authorized attacker to perform a local privilege escalation . The CVSS 3.1 score is 8.2 (HIGH) , with a changed scope and high impact to confidentiality, integrity, and availability. The attack...

EUVD-2026-73850

Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally...

CVE-2026-81354

CVE-2026-81354 is a heap-based buffer overflow in Windows Hello that allows an authorized local attacker to elevate privileges. The vulnerability carries a CVSS 3.1 score of 8.2 (HIGH) with a changed scope, impacting confidentiality, integrity, and availability at high levels. Attack requirements...

EUVD-2026-73847

Out-of-bounds read in Windows Remote Desktop Services allows an authorized attacker to elevate privileges over a network...

CVE-2026-80096

CVE-2026-80096 is an out-of-bounds read vulnerability in Windows Remote Desktop Services that allows an authorized attacker to elevate privileges over a network. Microsoft rated it CVSS 3.1: 8.8 (High) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a network-exploitable flaw req...