284596 matches found
CVE-2026-69854
CVE-2026-69854 is an improper authentication vulnerability in Spring Cloud Azure that allows an unauthorized attacker to elevate privileges over a network . The CNA (Microsoft) assigned a CVSS 3.1 score of 9.0 (CRITICAL) with a changed scope , reflecting high impact on confidentiality, integrity,...
EUVD-2026-73787
Use after free in SQL Server allows an authorized attacker to elevate privileges locally...
CVE-2026-77485
CVE-2026-77485 is a use-after-free vulnerability in Microsoft SQL Server that allows an authorized attacker to elevate privileges locally . The flaw requires local access and low privileges, with high attack complexity and no user interaction, scoring CVSS 3.1 7.0 (HIGH) with full impact on confi...
EUVD-2026-73786
Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network...
CVE-2026-77487
CVE-2026-77487 is an improper access control vulnerability in Microsoft SQL Server that allows an authorized attacker (low privileges required) to elevate privileges over a network with low complexity and no user interaction. The CVSS 3.1 base score is 8.8 (HIGH) , with high impact to confidentia...
CVE-2026-77483
CVE-2026-77483 affects Microsoft SQL Server and involves a weak authentication mechanism that allows an authorized attacker (low privileges required) to elevate privileges over a network . The CVSS 3.1 score is 8.8 (HIGH) with vectors for network attack, low complexity, no user interaction, and h...
EUVD-2026-73784
Weak authentication in SQL Server allows an authorized attacker to elevate privileges over a network...
EUVD-2026-73783
Insufficient granularity of access control in SQL Server allows an authorized attacker to elevate privileges over a network...
CVE-2026-77480
SQL Server is affected by an elevation of privilege vulnerability caused by insufficient granularity of access control . An authorized attacker with low privileges can exploit the flaw over a network to elevate their access, resulting in high impact to confidentiality, integrity, and availability...
CVE-2026-73028
Microsoft SQL Server is affected by an improper access control vulnerability (CVE-2026-73028) that allows an authorized attacker to elevate privileges over a network . The vulnerability is rated HIGH severity with a CVSS 3.1 base score of 8.8 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H), indicating low ...
EUVD-2026-73782
Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network...
CVE-2026-73012
CVE-2026-73012 is a heap-based buffer overflow in Windows Management Services that allows an authorized (low-privilege) attacker to elevate privileges over a network . The vulnerability is rated CVSS 8.8 (HIGH) with vector AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating low attack complexity and ...
EUVD-2026-73772
Heap-based buffer overflow in Windows Management Services allows an authorized attacker to elevate privileges over a network...
EUVD-2026-73770
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
CVE-2026-73026
CVE-2026-73026 is a heap-based buffer overflow in the Windows Biometric Service that allows an authorized attacker to elevate privileges locally . The vulnerability is rated CVSS 3.1 7.8 (HIGH) , with low complexity, low privileges required, and high impact to confidentiality, integrity, and avai...
CVE-2026-73024
CVE-2026-73024 is a heap-based buffer overflow in the Windows Services for NFS ONCRPC XDR Driver that allows an authorized attacker to perform local privilege escalation . The CVSS v3.1 score is 7.8 (HIGH) with the vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating low attack complexity, low ...
CVE-2026-73007
CVE-2026-73007 is a heap-based buffer overflow in the Windows Biometric Service that allows an authorized attacker to achieve local privilege escalation . The vulnerability requires low privileges, no user interaction, and has low attack complexity, yielding a CVSS 3.1 score of 7.8 (HIGH) with fu...
EUVD-2026-73769
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...