284872 matches found
EUVD-2026-73813
Time-of-check time-of-use toctou race condition in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...
CVE-2026-78457
CVE-2026-78457 is a use-after-free vulnerability in Windows Security Health Service that enables a locally authenticated attacker to achieve privilege escalation . The CVSS 3.1 score is 7.0 (HIGH) , with a local attack vector, high complexity, low privileges required, and no user interaction. Imp...
EUVD-2026-73810
Use after free in Windows Security Health Service allows an authorized attacker to elevate privileges locally...
EUVD-2026-73804
Untrusted pointer dereference in Microsoft Windows SCSI Class System File allows an unauthorized attacker to elevate privileges with a physical attack...
CVE-2026-78451
CVE-2026-78451 is an untrusted pointer dereference in the Microsoft Windows SCSI Class System File that enables an unauthorized attacker to escalate privileges via a physical attack vector (CVSS AV:P). The vulnerability carries a CVSS 3.1 base score of 6.8 (Medium) with high impact to confidentia...
EUVD-2026-73802
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
CVE-2026-78448
CVE-2026-78448 is a heap-based buffer overflow in Windows Biometric Service that allows an authorized attacker to achieve local privilege escalation . The CVSS v3.1 score is 7.8 (HIGH) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, reflecting that a low-privileged local attacker can compro...
CVE-2026-78447
CVE-2026-78447 is a heap-based buffer overflow in the Windows Biometric Service component, which allows an authorized local attacker to achieve privilege escalation . Microsoft rates the vulnerability as HIGH severity with a CVSS v3.1 score of 7.8 (vector: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H), in...
EUVD-2026-73803
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
CVE-2026-77905
CVE-2026-77905 is a use-after-free vulnerability in Windows Management Instrumentation (WMI) that allows an authorized attacker to escalate privileges locally. The flaw carries a CVSS 3.1 score of 7.0 (HIGH) , with a local attack vector, high complexity, low privileges required, and no user inter...
EUVD-2026-73792
Use after free in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally...
EUVD-2026-73791
Improper authentication in Spring Cloud Azure allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-69854
CVE-2026-69854 is an improper authentication vulnerability in Spring Cloud Azure that allows an unauthorized attacker to elevate privileges over a network . The CNA (Microsoft) assigned a CVSS 3.1 score of 9.0 (CRITICAL) with a changed scope , reflecting high impact on confidentiality, integrity,...
EUVD-2026-73787
Use after free in SQL Server allows an authorized attacker to elevate privileges locally...
CVE-2026-77485
CVE-2026-77485 is a use-after-free vulnerability in Microsoft SQL Server that allows an authorized attacker to elevate privileges locally . The flaw requires local access and low privileges, with high attack complexity and no user interaction, scoring CVSS 3.1 7.0 (HIGH) with full impact on confi...
EUVD-2026-73786
Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network...
CVE-2026-77487
CVE-2026-77487 is an improper access control vulnerability in Microsoft SQL Server that allows an authorized attacker (low privileges required) to elevate privileges over a network with low complexity and no user interaction. The CVSS 3.1 base score is 8.8 (HIGH) , with high impact to confidentia...
CVE-2026-77483
CVE-2026-77483 affects Microsoft SQL Server and involves a weak authentication mechanism that allows an authorized attacker (low privileges required) to elevate privileges over a network . The CVSS 3.1 score is 8.8 (HIGH) with vectors for network attack, low complexity, no user interaction, and h...